chore(deps): Bump html-minifier-next from 6.2.11 to 7.0.0

[dependabot]

Bumps html-minifier-next from 6.2.11 to 7.0.0.

Changelog

Sourced from html-minifier-next's changelog.

[7.0.0] - 2026-06-15

Fixed

• Fixed caseSensitive being ignored for HTML content inside SVG foreignObject and MathML annotation-xml—the name normalization function of the surrounding HTML context is now preserved across the namespace transition

Added

• Added warnings for unknown or deprecated options (both in the API and for CLI config files), catching typos as well as options removed or renamed in earlier versions; in the API, these warnings (like the “unknown preset” warning) are routed through a user-provided log hook, falling back to console.warn
• Added the preset option to the public MinifierOptions TypeScript type (the option was documented and supported, but missing from the type)
• Declared the supported Node.js versions (≥22) via the package.json engines field
• Documented the API-only options canCollapseWhitespace, canTrimWhitespace, and log in the README (previously only covered by TypeScript types)

Changed

• BREAKING: Dropped CommonJS support—HMN is now ESM-only
  • Migration: Consumers using require('html-minifier-next') must migrate to import; the "main" field and dist/htmlminifier.cjs are no longer shipped
• BREAKING: Merged removeScriptTypeAttributes and removeStyleLinkTypeAttributes into a single removeDefaultTypeAttributes option
  • Migration: Replace either or both old options with removeDefaultTypeAttributes: true
• BREAKING: Removed an undocumented name option—it was the internal mechanism behind caseSensitive, and user-supplied values are now ignored (with a warning)
• Split the TypeScript options typing into the public MinifierOptions input type and an internal ProcessedOptions type—internal properties no longer appear in the public options type

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	html-minifier-next@​6.2.11 ⏵ 7.0.0	+1			-1

View full report