What's Changed
- Bump
fontainepeer dependency by @joetannenbaum in #354 - Pin GitHub Actions to commit SHAs and add Dependabot config by @joetannenbaum in #355
- GitHub Actions hardening by @nunomaduro in #362
- Add Dependabot cooldown of 5 days by @nunomaduro in #363
- Bump github/codeql-action from 3.35.4 to 4.36.0 in the github-actions group across 1 directory by @dependabot[bot] in #358
- Enable Dependabot auto-merge by @nunomaduro in #364
- Bump the github-actions group with 2 updates by @dependabot[bot] in #367
- Bump esbuild from 0.27.4 to 0.28.1 by @dependabot[bot] in #376
- [3.x] Sanitize variable font weight ranges in emitted asset filenames by @naveentehrpariya in #375
- [3.x] Respect the resolved Vite base in generated font CSS URLs by @naveentehrpariya in #372
- [3.x] Use spec-compliant format() keywords for ttf, otf, and eot fonts by @naveentehrpariya in #371
- [3.x] Honor the subsets option for google and bunny providers by @naveentehrpariya in #374
- [3.x] Warn when optimized font fallbacks cannot be generated by @naveentehrpariya in #373
- [3.x] Small fix in v3 upgrade guide by @gdebrauwer in #346
- Bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @dependabot[bot] in #381
- Bump the github-actions group with 3 updates by @dependabot[bot] in #382
New Contributors
- @nunomaduro made their first contribution in #362
- @naveentehrpariya made their first contribution in #375
- @gdebrauwer made their first contribution in #346
Full Changelog: v3.1.0...v3.1.1