Update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
autoprefixer	10.4.13 -> 10.4.19
cypress (source)	12.12.0 -> 12.17.4
feedparser	==6.0.10 -> ==6.0.11
lxml (source, changelog)	==4.9.2 -> ==4.9.4
pyyaml (source)	==6.0 -> ==6.0.1
requests-cache (changelog)	==0.9.7 -> ==0.9.8
sass	1.57.1 -> 1.77.1
venobox (source)	2.0.4 -> 2.1.8

---

Release Notes

postcss/autoprefixer (autoprefixer)

v10.4.19

Compare Source

• Removed end value has mixed support, consider using flex-end warning
  since end/start now have good support.

v10.4.18

Compare Source

• Fixed removing -webkit-box-orient on -webkit-line-clamp (@​Goodwine).

v10.4.17

Compare Source

• Fixed user-select: contain prefixes.

v10.4.16

Compare Source

• Improved performance (by Romain Menke).
• Fixed docs (by Christian Oliff).

v10.4.15

Compare Source

• Fixed ::backdrop prefixes (by 一丝).
• Fixed docs (by Christian Oliff).

v10.4.14

Compare Source

• Improved startup time and reduced JS bundle size (by Kārlis Gaņģis).

cypress-io/cypress (cypress)

v12.17.4

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-4

v12.17.3

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-3

v12.17.2

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-2

v12.17.1

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-1

v12.17.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-0

v12.16.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-16-0

v12.15.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-15-0

v12.14.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-14-0

v12.13.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-13-0

kurtmckee/feedparser (feedparser)

v6.0.11

Compare Source

===================

• Resolve cgi module deprecation warnings. (#​330)

lxml/lxml (lxml)

v4.9.4

Compare Source

==================

Bugs fixed

• LP#2046398: Inserting/replacing an ancestor into a node's children could loop indefinitely.

• LP#1980767, GH#379: TreeBuilder.close() could fail with a TypeError after
  parsing incorrect input. Original patch by Enrico Minack.

• LP#1522052: A file-system specific test is now optional and should no longer fail
  on systems that don't support it.

Other changes

• Wheels include zlib 1.3, libxml2 2.10.3 and libxslt 1.1.39
  (zlib 1.2.12, libxml2 2.10.3 and libxslt 1.1.37 on Windows).

• Built with Cython 0.29.37.

v4.9.3

Compare Source

==================

Bugs fixed

• lxml.objectify accepted non-decimal numbers like ²²² as integers.

• A memory leak in lxml.html.clean was resolved by switching to Cython 0.29.34+.

• GH#348: URL checking in the HTML cleaner was improved.
  Patch by Tim McCormack.

• GH#371, GH#373: Some regex strings were changed to raw strings to fix Python warnings.
  Patches by Jakub Wilk and Anthony Sottile.

Other changes

• Wheels include zlib 1.2.13, libxml2 2.10.3 and libxslt 1.1.38
  (zlib 1.2.12, libxml2 2.10.3 and libxslt 1.1.37 on Windows).

• Built with Cython 0.29.36 to adapt to changes in Python 3.12.

yaml/pyyaml (pyyaml)

v6.0.1

Compare Source

requests-cache/requests-cache (requests-cache)

v0.9.8

Compare Source

• Fix DeprecationWarning raised by BaseCache.urls
• Reword ambiguous log message for BaseCache.delete

Backport fixes from 1.0:

• For custom serializers, handle using a cattrs converter that doesn't support omit_if_default
• Raise an error for invalid expiration string values (except for headers containing httpdates)

sass/dart-sass (sass)

v1.77.1

Compare Source

• Fix a crash that could come up with importers in certain contexts.

v1.77.0

Compare Source

• Don't throw errors for at-rules in keyframe blocks.

v1.76.0

Compare Source

• Throw errors for misplaced statements in keyframe blocks.

• Mixins and functions whose names begin with -- are now deprecated for
  forwards-compatibility with the in-progress CSS functions and mixins spec.
  This deprecation is named css-function-mixin.

v1.75.0

Compare Source

• Fix a bug in which stylesheet canonicalization could be cached incorrectly
  when custom importers or the Node.js package importer made decisions based on
  the URL of the containing stylesheet.

JS API

• Allow importer to be passed without url in StringOptionsWithImporter.

v1.74.1

Compare Source

• No user-visible changes.

v1.72.0

Compare Source

• Support adjacent /s without whitespace in between when parsing plain CSS
  expressions.

• Allow the Node.js pkg: importer to load Sass stylesheets for package.json
exports field entries without extensions.

• When printing suggestions for variables, use underscores in variable names
  when the original usage used underscores.

JavaScript API

• Properly resolve pkg: imports with the Node.js package importer when
  arguments are passed to the JavaScript process.

v1.71.1

Compare Source

Command-Line Interface

• Ship the musl Linux release with the proper Dart executable.

JavaScript API

• Export the NodePackageImporter class in ESM mode.

• Allow NodePackageImporter to locate a default directory even when the
  entrypoint is an ESM module.

Dart API

• Make passing a null argument to NodePackageImporter() a static error rather
  than just a runtime error.

Embedded Sass

• In the JS Embedded Host, properly install the musl Linux embedded compiler
  when running on musl Linux.

v1.71.0

Compare Source

For more information about pkg: importers, see the
announcement on the Sass blog.

Command-Line Interface

• Add a --pkg-importer flag to enable built-in pkg: importers. Currently
  this only supports the Node.js package resolution algorithm, via
  --pkg-importer=node. For example, @use "pkg:bootstrap" will load
  node_modules/bootstrap/scss/bootstrap.scss.

JavaScript API

• Add a NodePackageImporter importer that can be passed to the importers
  option. This loads files using the pkg: URL scheme according to the Node.js
  package resolution algorithm. For example, @use "pkg:bootstrap" will load
  node_modules/bootstrap/scss/bootstrap.scss. The constructor takes a single
  optional argument, which indicates the base directory to use when locating
  node_modules directories. It defaults to
  path.dirname(require.main.filename).

Dart API

• Add a NodePackageImporter importer that can be passed to the importers
  option. This loads files using the pkg: URL scheme according to the Node.js
  package resolution algorithm. For example, @use "pkg:bootstrap" will load
  node_modules/bootstrap/scss/bootstrap.scss. The constructor takes a single
  argument, which indicates the base directory to use when locating
  node_modules directories.

v1.70.0

Compare Source

JavaScript API

• Add a sass.initCompiler() function that returns a sass.Compiler object
  which supports compile() and compileString() methods with the same API as
  the global Sass object. On the Node.js embedded host, each sass.Compiler
  object uses a single long-lived subprocess, making compiling multiple
  stylesheets much more efficient.

• Add a sass.initAsyncCompiler() function that returns a sass.AsyncCompiler
  object which supports compileAsync() and compileStringAsync() methods with
  the same API as the global Sass object. On the Node.js embedded host, each
  sass.AsynCompiler object uses a single long-lived subprocess, making
  compiling multiple stylesheets much more efficient.

Embedded Sass

• Support the CompileRequest.silent field. This allows compilations with no
  logging to avoid unnecessary request/response cycles.

• The Dart Sass embedded compiler now reports its name as "dart-sass" rather
  than "Dart Sass", to match the JS API's info field.

v1.69.7

Compare Source

Embedded Sass

• In the JS Embedded Host, properly install the x64 Dart Sass executable on
  ARM64 Windows.

v1.69.6

Compare Source

• Produce better output for numbers with complex units in meta.inspect() and
  debugging messages.

• Escape U+007F DELETE when serializing strings.

• When generating CSS error messages to display in-browser, escape all code
  points that aren't in the US-ASCII region. Previously only code points U+0100
  LATIN CAPITAL LETTER A WITH MACRON were escaped.

• Provide official releases for musl LibC and for Android.

• Don't crash when running meta.apply() in asynchronous mode.

JS API

• Fix a bug where certain exceptions could produce SourceSpans that didn't
  follow the documented SourceSpan API.

v1.69.5

Compare Source

JS API

• Compatibility with Node.js 21.0.0.

v1.69.4

Compare Source

• No user-visible changes.

v1.69.3

Compare Source

Embedded Sass

• Fix TypeScript type locations in package.json.

v1.69.2

Compare Source

JS API

• Fix a bug where Sass crashed when running in the browser if there was a global
  variable named process.

v1.69.1

Compare Source

• No user-visible changes.

v1.69.0

Compare Source

• Add a meta.get-mixin() function that returns a mixin as a first-class Sass
  value.

• Add a meta.apply() mixin that includes a mixin value.

• Add a meta.module-mixins() function which returns a map from mixin names in
  a module to the first-class mixins that belong to those names.

• Add a meta.accepts-content() function which returns whether or not a mixin
  value can take a content block.

• Add support for the relative color syntax from CSS Color 5. This syntax
  cannot be used to create Sass color values. It is always emitted as-is in the
  CSS output.

Dart API

• Deprecate Deprecation.calcInterp since it was never actually emitted as a
  deprecation.

Embedded Sass

• Fix a rare race condition where the embedded compiler could freeze when a
  protocol error was immediately followed by another request.

v1.68.0

Compare Source

• Fix the source spans associated with the abs-percent deprecation.

JS API

• Non-filesystem importers can now set the nonCanonicalScheme field, which
  declares that one or more URL schemes (without :) will never be used for
  URLs returned by the canonicalize() method.

• Add a containingUrl field to the canonicalize() and findFileUrl()
  methods of importers, which is set to the canonical URL of the stylesheet that
  contains the current load. For filesystem importers, this is always set; for
  other importers, it's set only if the current load has no URL scheme, or if
  its URL scheme is declared as non-canonical by the importer.

Dart API

• Add AsyncImporter.isNonCanonicalScheme, which importers (async or sync) can
  use to indicate that a certain URL scheme will never be used for URLs returned
  by the canonicalize() method.

• Add AsyncImporter.containingUrl, which is set during calls to the
  canonicalize() method to the canonical URL of the stylesheet that contains
  the current load. This is set only if the current load has no URL scheme, or
  if its URL scheme is declared as non-canonical by the importer.

Embedded Sass

• The CalculationValue.interpolation field is deprecated and will be removed
  in a future version. It will no longer be set by the compiler, and if the host
  sets it it will be treated as equivalent to CalculationValue.string except
  that "(" and ")" will be added to the beginning and end of the string
  values.

• Properly include TypeScript types in the sass-embedded package.

v1.67.0

Compare Source

• All functions defined in CSS Values and Units 4 are now once again parsed as
  calculation objects: round(), mod(), rem(), sin(), cos(), tan(),
  asin(), acos(), atan(), atan2(), pow(), sqrt(), hypot(),
  log(), exp(), abs(), and sign().

  Unlike in 1.65.0, function calls are not locked into being parsed as
  calculations or plain Sass functions at parse-time. This means that
  user-defined functions will take precedence over CSS calculations of the same
  name. Although the function names calc() and clamp() are still forbidden,
  users may continue to freely define functions whose names overlap with other
  CSS calculations (including abs(), min(), max(), and round() whose
  names overlap with global Sass functions).

• Breaking change: As a consequence of the change in calculation parsing
  described above, calculation functions containing interpolation are now parsed
  more strictly than before. However, almost all interpolations that would
  have produced valid CSS will continue to work. The only exception is
  #{$variable}% which is not valid in Sass and is no longer valid in
  calculations. Instead of this, either use $variable directly and ensure it
  already has the % unit, or write ($variable * 1%).

• Potentially breaking bug fix: The importer used to load a given file is no
  longer used to load absolute URLs that appear in that file. This was
  unintented behavior that contradicted the Sass specification. Absolute URLs
  will now correctly be loaded only from the global importer list. This applies
  to the modern JS API, the Dart API, and the embedded protocol.

Embedded Sass

• Substantially improve the embedded compiler's performance when compiling many
  files or files that require many importer or function call round-trips with
  the embedded host.

v1.66.1

Compare Source

JS API

• Fix a bug where Sass compilation could crash in strict mode if passed a
  callback that threw a string, boolean, number, symbol, or bignum.

v1.66.0

Compare Source

• Breaking change: Drop support for the additional CSS calculations defined
  in CSS Values and Units 4. Custom Sass functions whose names overlapped with
  these new CSS functions were being parsed as CSS calculations instead, causing
  an unintentional breaking change outside our normal [compatibility policy] for
  CSS compatibility changes.

  Support will be added again in a future version, but only after Sass has
  emitted a deprecation warning for all functions that will break for at least
  three months prior to the breakage.

v1.65.1

Compare Source

• Update abs-percent deprecatedIn version to 1.65.0.

v1.65.0

Compare Source

• All functions defined in CSS Values and Units 4 are now parsed as calculation
  objects: round(), mod(), rem(), sin(), cos(), tan(), asin(),
  acos(), atan(), atan2(), pow(), sqrt(), hypot(), log(), exp(),
  abs(), and sign().

• Deprecate explicitly passing the % unit to the global abs() function. In
  future releases, this will emit a CSS abs() function to be resolved by the
  browser. This deprecation is named abs-percent.

v1.64.2

Compare Source

• No user-visible changes.

v1.64.1

Compare Source

Embedded Sass

• Fix a bug where a valid SassCalculation.clamp() with less than 3 arguments
  would throw an error.

v1.64.0

Compare Source

• Comments that appear before or between @use and @forward rules are now
  emitted in source order as much as possible, instead of always being emitted
  after the CSS of all module dependencies.

• Fix a bug where an interpolation in a custom property name crashed if the file
  was loaded by a @use nested in an @import.

JavaScript API

• Add a new SassCalculation type that represents the calculation objects added
  in Dart Sass 1.40.0.

• Add Value.assertCalculation(), which returns the value if it's a
  SassCalculation and throws an error otherwise.

• Produce a better error message when an environment that supports some Node.js
  APIs loads the browser entrypoint but attempts to access the filesystem.

Embedded Sass

• Fix a bug where nested relative @imports failed to load when using the
  deprecated functions render or renderSync and those relative imports were
  loaded multiple times across different files.

v1.63.6

Compare Source

JavaScript API

• Fix import sass from 'sass' again after it was broken in the last release.

Embedded Sass

• Fix the exports declaration in package.json.

v1.63.5

Compare Source

JavaScript API

• Fix a bug where loading the package through both CJS require() and ESM
  import could crash on Node.js.

Embedded Sass

• Fix a deadlock when running at high concurrency on 32-bit systems.

• Fix a race condition where the embedded compiler could deadlock or crash if a
  compilation ID was reused immediately after the compilation completed.

v1.63.4

Compare Source

JavaScript API

• Re-enable support for import sass from 'sass' when loading the package from
  an ESM module in Node.js. However, this syntax is now deprecated; ESM users
  should use import * as sass from 'sass' instead.

  On the browser and other ESM-only platforms, only import * as sass from 'sass' is supported.

• Properly export the legacy API values TRUE, FALSE, NULL, and types from
  the ECMAScript module API.

Embedded Sass

• Fix a race condition where closing standard input while requests are in-flight
  could sometimes cause the process to hang rather than shutting down
  gracefully.

• Properly include the root stylesheet's URL in the set of loaded URLs when it
  fails to parse.

v1.63.3

Compare Source

JavaScript API

• Fix loading Sass as an ECMAScript module on Node.js.

v1.63.2

Compare Source

• No user-visible changes.

v1.63.1

Compare Source

• No user-visible changes.

v1.63.0

Compare Source

JavaScript API

• Dart Sass's JS API now supports running in the browser. Further details and
  instructions for use are in the README.

Embedded Sass

• The Dart Sass embedded compiler is now included as part of the primary Dart
  Sass distribution, rather than a separate executable. To use the embedded
  compiler, just run sass --embedded from any Sass executable (other than the
  pure JS executable).

  The Node.js embedded host will still be distributed as the sass-embedded
  package on npm. The only change is that it will now provide direct access to a
  sass executable with the same CLI as the sass package.

• The Dart Sass embedded compiler now uses version 2.0.0 of the Sass embedded
  protocol. See the spec for a full description of the
  protocol, and the changelog for a summary of
  changes since version 1.2.0.

• The Dart Sass embedded compiler now runs multiple simultaneous compilations in
  parallel, rather than serially.

v1.62.1

Compare Source

• Fix a bug where :has(+ &) and related constructs would drop the leading
  combinator.

v1.62.0

Compare Source

• Deprecate the use of multiple !global or !default flags on the same
  variable. This deprecation is named duplicate-var-flags.

• Allow special numbers like var() or calc() in the global functions:
  grayscale(), invert(), saturate(), and opacity(). These are also
  native CSS filter functions. This is in addition to number values which were
  already allowed.

• Fix a cosmetic bug where an outer rule could be duplicated after nesting was
  resolved, instead of re-using a shared rule.

v1.61.0

Compare Source

• Potentially breaking change: Drop support for End-of-Life Node.js 12.

• Fix remaining cases for the performance regression introduced in 1.59.0.

Embedded Sass

• The JS embedded host now loads files from the working directory when using the
  legacy API.

v1.60.0

Compare Source

• Add support for the pi, e, infinity, -infinity, and NaN constants in
  calculations. These will be interpreted as the corresponding numbers.

• Add support for unknown constants in calculations. These will be interpreted
  as unquoted strings.

• Serialize numbers with value infinity, -infinity, and NaN to calc()
  expressions rather than CSS-invalid identifiers. Numbers with complex units
  still can't be serialized.

v1.59.3

Compare Source

• Fix a performance regression introduced in 1.59.0.

• The NPM release of 1.59.0 dropped support for Node 12 without actually
  indicating so in its pubspec. This release temporarily adds back support so
  that the latest Sass version that declares it supports Node 12 actually does
  so. However, Node 12 is now end-of-life, so we will drop support for it
  properly in an upcoming release.

v1.59.2

Compare Source

• No user-visible changes.

v1.59.1

Compare Source

• No user-visible changes.

v1.59.0

Compare Source

Command Line Interface

• Added a new --fatal-deprecation flag that lets you treat a deprecation
  warning as an error. You can pass an individual deprecation ID
  (e.g. slash-div) or you can pass a Dart Sass version to treat all
  deprecations initially emitted in that version or earlier as errors.

• New --future-deprecation flag that lets you opt into warning for use of
  certain features that will be deprecated in the future. At the moment, the
  only option is --future-deprecation=import, which will emit warnings for
  Sass @import rules, which are not yet deprecated, but will be in the future.

Dart API

• New Deprecation enum, which contains the different current and future
  deprecations used by the new CLI flags.

• The compile methods now take in fatalDeprecations and futureDeprecations
  parameters, which work similarly to the CLI flags.

v1.58.3

Compare Source

• No user-visible changes.

v1.58.2

Compare Source

Command Line Interface

• Add a timestamp to messages printed in --watch mode.

• Print better calc()-based suggestions for /-as-division expression that
  contain calculation-incompatible constructs like unary minus.

v1.58.1

Compare Source

• Emit a unitless hue when serializing hsl() colors. The deg unit is
  incompatible with IE, and while that officially falls outside our
  compatibility policy, it's better to lean towards greater compatibility.

v1.58.0

Compare Source

• Remove sourcemap comments from Sass sources. The generated sourcemap comment
  for the compiled CSS output remains unaffected.

• Fix a bug in @extend logic where certain selectors with three or more
  combinators were incorrectly considered superselectors of similar selectors
  with fewer combinators, causing them to be incorrectly trimmed from the
  output.

• Produce a better error message for a number with a leading + or -, a
  decimal point, but no digits.

• Produce a better error message for a nested property whose name starts with
  --.

• Fix a crash when a selector ends in an escaped backslash.

• Add the relative length units from CSS Values 4 and CSS Contain 3 as known
  units to validate bad computation in calc.

Command Line Interface

• The --watch flag will now track loads through calls to meta.load-css() as
  long as their URLs are literal strings without any interpolation.

nicolafranchini/VenoBox (venobox)

v2.1.8

Compare Source

• Fix: Wrong format plugin options jQuery #​195
• Fix: maxWidth does not work correctly due to overwriting width in styles #​193
• Update: Moved DOM initializations to object creation #​196

v2.1.7

Compare Source

• Update: New options initialScale and transitionSpeed #​191

v2.1.6

Compare Source

• Update: use /youtube-nocookie.com/embed/ for all YouTube videos

v2.1.5

Compare Source

• Update: return false after function execution for onPostOpen and onPreClose #​190

v2.1.4

Compare Source

• Fix: Enable Wave preloader

v2.1.3

Compare Source

• Update: Max width proportional to aspect ratio

v2.1.2

Compare Source

• Update: Global fitView option can be set also as data attribute data-fitview to specific links

v2.1.1

Compare Source

• Fix: preload timing sync for gallery navigation

v2.1.0

Compare Source

• Fix: Random flickering during gallery navigation with IOS

v2.0.9

Compare Source

• Fix: Swiping doesn't work on Android devices #​184

v2.0.8

Compare Source

• Fix: overlayClose does not work #​178
• Update: Video Handling - Unknown Extension Types #​174

v2.0.7

Compare Source

• New option: fitView resizes the images to fit within the viewport
• Fix: minimum 3 items to activate infinite gallery

v2.0.6

Compare Source

• Update: composer version

v2.0.5

Compare Source

• New option: focusItem to focus current element on window close
• Update: youtube-nocookie support

---

Configuration

📅 Schedule: Branch creation - "on the first day of january" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[webteam-app]

Demo starting at https://maas-io-814.demos.haus

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 64.59%. Comparing base (1d1b759) to head (ba971d2).
Report is 5 commits behind head on main.

❗ Current head ba971d2 differs from pull request most recent head fdc8412. Consider uploading reports for the commit fdc8412 to get more accurate results

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #814   +/-   ##
=======================================
  Coverage   64.59%   64.59%           
=======================================
  Files           8        8           
  Lines         209      209           
=======================================
  Hits          135      135           
  Misses         74       74           

Flag	Coverage Δ
python	64.59% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.