Bump css_parser from 1.22.0 to 3.0.0 in /demo

[dependabot]

Bumps css_parser from 1.22.0 to 3.0.0.

Changelog

Sourced from css_parser's changelog.

Version 3.0.0

• Harden read_remote_file, use allow_local_network: true and allow_file_uris: true to bypass

Version 2.2.0

• Accept CSS <number> values with an omitted integer part (e.g. .1) inside rgb()/rgba()/hsl()/hsla(). Previously RE_COLOUR_NUMERIC and RE_COLOUR_NUMERIC_ALPHA required at least one digit before the decimal point, which caused colours such as rgba(0,0,0,.1) to be silently dropped during shorthand expansion (background-color from background:, border-*-color from border:).

Version 2.1.0

• Validate ssl when pulling files via https

Version 2.0.0

• Drop ruby <3.2, fix a memory leak

Version v1.21.1

• Prefer !important rules over non-!important rules in the same ruleset
• Minor performance improvements

Version v1.21.0

• Minor performance improvements

Version v1.20.0

• Remove iconv conditional require

Version v1.19.1

• Fix error when parsing values consisting of !important only

Version v1.19.0

• Deprecate load_uri!, load_file! and load_string! positional arguments over keyword argument
• Deprecate add_rule! (positional arguments)and add_rule_with_offsets! for add_rule! (keyword argument)
• RuleSet initialize now takes keyword argument, positional arguments are still supported but deprecated
• Removed OffsetAwareRuleSet, it's a RuleSet with optional attributes filename and offset
• Improved performance of block parsing by using StringScanner
• Improve RuleSet#parse_declarations! performance by using substring search istead of regexps
• Fix error when parsing values consisting of !important only

Version v1.18.0

• Drop Ruby 2.7 compatibility for parity with Premailer #149

Version v1.17.1

• Improve security by using File.read instead of IO.read #149

Version v1.17.0

• Added user_agent as an option to Parser #146

... (truncated)

Commits

• f02be34 v2.3.0
• 87f1486 Merge commit from fork
• e0a1514 refactor: Add BUG guards to internal SSRF/LFI helpers (GHSA-9pmc-p236-855h)
• 7d2ddf0 vuln-fix: Route remote fetches via ssrf_filter; gate file:// (GHSA-9pmc-p236-...
• ba74c3c test: Add failing tests for SSRF and file-URI LFI (GHSA-9pmc-p236-855h)
• cee10f1 v2.2.0
• 920a01b Merge pull request #187 from fukayatsu/fix-rgba-leading-dot-alpha
• 9fc40c6 Accept CSS numbers without a leading zero in rgb/rgba/hsl/hsla
• 300f130 v2.1.0
• 35e689c Merge pull request #186 from premailer/grosser/https
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3a4c06b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR