cssnano, a modular PostCSS-based minifier, has released version 7.1.0, building upon the already established 7.0.7. The core functionality remains consistent, providing developers with a robust tool for optimizing CSS code for production. Notably, both versions share the same core dependencies like lilconfig for configuration loading and aim for the same unpacked size, suggesting minimal changes to the core module itself.
Key improvements appear in the updated dependencies. Version 7.1.0 updates cssnano-preset-default to 7.0.8 from 7.0.7, and postcss to version ^8.5.6 from ^8.5.3 respectively. The update to postcss is significant, pulling in potentially newer features, bug fixes, and performance enhancements from the popular PostCSS ecosystem especially for contributors. Also note, that cssnano specifies peerDependencies of PostCSS as ^8.4.32 on both version, and this mean that the library is compatible with any PostCSS version equal or greater than 8.4.32.
Developers considering an upgrade should assess their PostCSS pipeline for compatibility with the newer postcss version. The update most likely brings subtle refinements and bug fixes, rather than groundbreaking features, a typical maintenance release ensuring compatibility and reliability in modern CSS workflows.The release dates clearly display that it is something scheduled in the future, and this is something to be aware if you are using those versions right now.
The are not vulnerabilities for the version 7.1.0 of the package cssnano