chore(deps): bump css-what and svgo

[dependabot]

Bumps css-what and svgo. These dependencies needed to be updated together.
Updates css-what from 4.0.0 to 5.0.1

Release notes

Sourced from css-what's releases.

v5.0.1

Fixes:

• Hand-roll attribute parsing (#503) 4cdaacf
  • Attribute values are slightly more permissive now. Ensures attribute parsing will always be linear.

fb55/css-what@v5.0.0...v5.0.1

v5.0.0

New Features:

• ignoreCase on attributes now respects the s flag, as well as default values as per HTML spec (unless you are in xmlMode).
  • Infer ignoreCase as per HTML spec (#444 by @​fb55) 0f4210c
  • Allow space after attribute selector modifier (#393 by @​Semigradsky) a334fa3
  • Support s identifier in attribute selectors (#387 by @​Semigradsky) 7a41152
• Ignore comments around selectors (#441 by @​fb55) fc91ba1

Bug fixes:

• Incorrect handling elemental selector without a namespace (#394 by @​Semigradsky) 3215f5a

Commits

• e9106aa 5.0.1
• a5b3856 build(deps-dev): bump jest from 26.6.3 to 27.0.1 (#500)
• 4cdaacf fix(parse): Hand-roll attribute parsing (#503)
• 8c5eda2 build(deps-dev): bump @​types/node from 15.3.0 to 15.6.1 (#501)
• 9eb321e build(deps-dev): bump @​typescript-eslint/parser from 4.24.0 to 4.25.0 (#498)
• 9f901b2 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 4.24.0 to 4.25.0 ...
• bc00726 build(deps-dev): bump eslint from 7.26.0 to 7.27.0 (#499)
• 0d6190c build(deps-dev): bump typescript from 4.2.4 to 4.3.2 (#502)
• de68825 build(deps-dev): bump @​typescript-eslint/parser from 4.23.0 to 4.24.0 (#494)
• 2f5bfac build(deps-dev): bump @​typescript-eslint/eslint-plugin (#493)
• Additional commits viewable in compare view

Updates svgo from 2.3.0 to 2.8.0

Release notes

Sourced from svgo's releases.

v2.8.0

If you enjoy SVGO and would like to support our work, consider sponsoring us directly via our OpenCollective.

Join us in our discord

Features and bug fixes

• added --no-color flag for testing purposes but you may find it useful (svg/svgo#1588)
• handle url() in style attributes properly (svg/svgo#1592)
• removeXMLNS plugin now removes xmlns:xlink attribute (svg/svgo#1508)
• load .cjs configuration only with require to fix segfaults in linux (svg/svgo#1605)

Refactorings

• simplified and covered with types svg stringifier (svg/svgo#1593)
• migrated to visitor api and covered with types removeEmptyAttrs plugin (svg/svgo#1594)
• migrated to visitor api and covered with types inlineStyles plugin (svg/svgo#1601)
• migrated to picocolors (svg/svgo#1606)

DX

I found some users are trying to enable plugins which are not part of default preset, for example

{
  name: 'preset-default',
  params: {
    overrides: {
      cleanupListOfValues: true
    }
  }
}

To fix this I made docs more concrete about plugin (svg/svgo@5165ccb) and introduced a warning when true is specified in overrides (svg/svgo@cb7e9be). Please give us feedback if you still have issues.

Thanks to @​IlyaSkriblovsky, @​devongovett, @​matheus1lva, @​omgovich, @​renatorib and @​TrySound

v2.7.0

If you enjoy SVGO and would like to support our work, consider sponsoring us directly via our OpenCollective.

Join us in our discord

ES Modules support

This release adds support for es modules in svgo.config.js when package.json type field is "module". For projects with mixed cjs and esm svgo.config.mjs and svgo.config.cjs are also supported as fallback.

... (truncated)

Commits

• b37d90e 2.8.0
• cb7e9be Add warning about enabling plugins in presets
• 5165ccb Make docs more descriptive
• 72b9722 Refactor inlineStyles (#1601)
• c799503 Load .cjs with require only (#1605)
• 4b4391f Refactor basic cli tests (#1595)
• 2d6deea Remove xmlns:xlink in removeXMLNS plugin (#1508)
• d29cec4 Migrate to picocolors (#1606)
• 4166c32 Migrate to simple yarn cache (#1608)
• 4377ea3 Refactor removeEmptyAttrs (#1594)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.