Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(frontend/deps-dev): bump tailwindcss from 3.4.17 to 4.0.11 in /autogpt_platform/frontend #9588

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 6, 2025

Bumps tailwindcss from 3.4.17 to 4.0.11.

Release notes

Sourced from tailwindcss's releases.

v4.0.11

Fixed

  • Ensure classes containing -- are extracted correctly (#16972)
  • Ensure classes containing numbers followed by dash or underscore are extracted correctly (#16980)
  • Ensure arbitrary container queries are extracted correctly (#16984)
  • Ensure classes ending in [ are extracted in Slim templating language (#16985)
  • Ensure arbitrary variables with data types are extracted correctly (#16986)

v4.0.10

Added

  • Add col-<number> and row-<number> utilities for grid-column and grid-row (#15183)

Fixed

  • Ensure not-* does not remove :is(…) from variants (#16825)
  • Ensure @keyframes are correctly emitted when using a prefix (#16850)
  • Don't swallow @utility declarations when @apply is used in nested rules (#16940)
  • Ensure outline-hidden behaves like outline-none outside of forced colors mode (#16943)
  • Allow !important on CSS variables again (#16873)
  • Vite: Do not crash when encountering an .svg file with # or ? in the filename (#16957)
  • Ensure utilities are properly detected within square brackets (#16306)
  • Ensure utilities are properly detected using Angular's conditional class binding syntax (#16306)
  • Ensure utilities starting with numbers are properly extracted from Slim templates (#16306)
  • Discard arbitrary property candidates that have guaranteed-invalid property names (#16306)

Changed

  • Removed max-w-auto and max-h-auto utilities as they generate invalid CSS (#16917)
  • Replaced the existing candidate extractor with a brand new extractor to improve maintainability, correctness, and performance (#16306)

v4.0.9

Fixed

  • Make JS APIs available to plugins and configs in the Standalone CLI (#15934)
  • Vite: Don't crash when importing a virtual module from JavaScript that ends in .css (#16780)
  • Fix an issue where @reference "…" would sometimes omit keyframe animations (#16774)
  • Ensure z-*! utilities are properly marked as !important (#16795)
  • Read UTF-8 CSS files that start with a byte-order mark (BOM) (#16800)
  • Ensure nested functions in selectors used with JavaScript plugins are not truncated (#16802)

Changed

  • Emit variable fallbacks when using @reference "…" instead of duplicate CSS variable declarations (#16774)

v4.0.8

Added

  • Allow @import with theme(…) options for stylesheets that contain more than just @theme rules (#16514)

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

[4.0.11] - 2025-03-06

Fixed

  • Ensure classes containing -- are extracted correctly (#16972)
  • Ensure classes containing numbers followed by dash or underscore are extracted correctly (#16980)
  • Ensure arbitrary container queries are extracted correctly (#16984)
  • Ensure classes ending in [ are extracted in Slim templating language (#16985)
  • Ensure arbitrary variables with data types are extracted correctly (#16986)

[4.0.10] - 2025-03-05

Added

  • Add col-<number> and row-<number> utilities for grid-column and grid-row (#15183)

Fixed

  • Ensure not-* does not remove :is(…) from variants (#16825)
  • Ensure @keyframes are correctly emitted when using a prefix (#16850)
  • Don't swallow @utility declarations when @apply is used in nested rules (#16940)
  • Ensure outline-hidden behaves like outline-none outside of forced colors mode (#16943)
  • Allow !important on CSS variables again (#16873)
  • Vite: Do not crash when encountering an .svg file with # or ? in the filename (#16957)
  • Ensure utilities are properly detected within square brackets (#16306)
  • Ensure utilities are properly detected using Angular's conditional class binding syntax (#16306)
  • Ensure utilities starting with numbers are properly extracted from Slim templates (#16306)
  • Discard arbitrary property candidates that have guaranteed-invalid property names (#16306)

Changed

  • Removed max-w-auto and max-h-auto utilities as they generate invalid CSS (#16917)
  • Replaced the existing candidate extractor with a brand new extractor to improve maintainability, correctness, and performance (#16306)

[4.0.9] - 2025-02-25

Fixed

  • Make JS APIs available to plugins and configs in the Standalone CLI (#15934)
  • Vite: Don't crash when importing a virtual module from JavaScript that ends in .css (#16780)
  • Fix an issue where @reference "…" would sometimes omit keyframe animations (#16774)
  • Ensure z-*! utilities are properly marked as !important (#16795)
  • Read UTF-8 CSS files that start with a byte-order mark (BOM) (#16800)
  • Ensure nested functions in selectors used with JavaScript plugins are not truncated (#16802)

Changed

  • Emit variable fallbacks when using @reference "…" instead of duplicate CSS variable declarations (#16774)

[4.0.8] - 2025-02-21

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner March 6, 2025 12:41
@dependabot dependabot bot requested review from aarushik93 and removed request for a team March 6, 2025 12:41
@dependabot dependabot bot requested a review from majdyz March 6, 2025 12:41
@dependabot dependabot bot added the javascript Pull requests that update Javascript code label Mar 6, 2025
@dependabot dependabot bot requested review from Bentlybro, kcze, ntindle and Pwuts March 6, 2025 12:41
@github-actions github-actions bot added platform/frontend AutoGPT Platform - Front end platform/backend AutoGPT Platform - Back end size/l labels Mar 6, 2025
Copy link

deepsource-io bot commented Mar 6, 2025

Here's the code health analysis summary for commits 02618e1..f2a371f. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource JavaScript LogoJavaScript✅ SuccessView Check ↗
DeepSource Python LogoPython✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

Copy link

netlify bot commented Mar 6, 2025

Deploy Preview for auto-gpt-docs-dev canceled.

Name Link
🔨 Latest commit f2a371f
🔍 Latest deploy log https://app.netlify.com/sites/auto-gpt-docs-dev/deploys/67d1a0a60c8b1b00080d0b96

@AutoGPT-Agent
Copy link

This PR fails our requirements because it does not have a filled out PR description template. While it's a dependency update PR from Dependabot with good information about the changes, our rules require the PR template to be filled out. The PR title follows the conventional commit format correctly with scope(frontend/deps-dev), but we need the explicit checklist filled in for tracking purposes, even for automated dependency updates.

Copy link

netlify bot commented Mar 6, 2025

Deploy Preview for auto-gpt-docs ready!

Name Link
🔨 Latest commit f2a371f
🔍 Latest deploy log https://app.netlify.com/sites/auto-gpt-docs/deploys/67d1a0a66af57b00089c630d
😎 Deploy Preview https://deploy-preview-9588--auto-gpt-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/autogpt_platform/frontend/dev/tailwindcss-4.0.11 branch from 4569102 to 2910c52 Compare March 6, 2025 22:29
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/autogpt_platform/frontend/dev/tailwindcss-4.0.11 branch from 2910c52 to f2a371f Compare March 12, 2025 14:56
@AutoGPT-Agent
Copy link

This appears to be a major version upgrade (3.x to 4.x) of tailwindcss which generally requires more careful consideration. While the PR follows conventional commit format and is a dependency update that doesn't touch user_id or route protection concerns, major version upgrades can introduce breaking changes. The PR also lacks a filled out PR template with testing steps and change verification which would be especially important for a major version upgrade.

@AutoGPT-Agent
Copy link

This PR violates our rules as it is a major version bump (from TailwindCSS 3.x to 4.x) which is likely to introduce breaking changes. Additionally, there is no description or checklist filled out in the PR template - it only contains the automated dependabot update information. The scope in the PR title (frontend/deps-dev) is present which is good, but overall this PR needs more diligence given it's a major dependency update.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies javascript Pull requests that update Javascript code platform/backend AutoGPT Platform - Back end platform/frontend AutoGPT Platform - Front end size/l
Projects
Status: 🆕 Needs initial review
Status: No status
Development

Successfully merging this pull request may close these issues.

1 participant