Bump svgo from 2.2.2 to 2.3.1

[dependabot]

Bumps svgo from 2.2.2 to 2.3.1.

Release notes

Sourced from svgo's releases.

v2.3.1

Fixed vulnerability in css-select dependency (svg/svgo#1485)

Thanks to @​ericcornelissen

v2.3.0

Hey, everybody! We have a big release here.

• The new plugin is added for merging style elements into one. See #1381

Before:

<svg>
  <style media="print">
    .st0{ fill:red; padding-top: 1em; padding-right: 1em; padding-bottom: 1em; padding-left: 1em; }
  </style>
  <style>
    .test { background: red; }
  </style>
</svg>

After:

<svg>
  <style>
    @media print{
      .st0{ fill:red; padding-top: 1em; padding-right: 1em; padding-bottom: 1em; padding-left: 1em; }
    }
    .test { background: red; }
  </style>
</svg>

• CLI got new --exclude flag which uses regexps to exclude some files from --folder. See #1409

svgo --folder=svgs --exclude "invalid-icon" "bad-.+"

• Internal AST is migrated to XAST. This spec makes maintaining plugins easier and may be used as interop with other tools like SVGR.

• The new visitor plugin type combines features of "full", "perItem" and "perItemReverse" plugins without loosing simplicity. Eventually only visitor api will be supported. See #1454

Also small fixes

• override default floatPrecision in plugins with globally specified one (svg/svgo@7389bcd)
• fix rendering -0 in path data (svg/svgo@3d4adb6)
• make browser bundle 30% smaller (svg/svgo@2799622)
• simplified convertPathData plugin (svg/svgo@a04b27a and svg/svgo@6165743)

... (truncated)

Commits

• daf2f88 2.3.1
• 25d0f87 Upgrade css-select from ^3.1.2 to ^4.1.3 (#1485)
• 59876d8 Remove unused artifacts
• 68798eb Mark convertStyleToAttrs as disabled in README (#1472)
• 3d79f57 Convert convertPathData to visitor
• 06110b4 Convert mergePaths to visitor
• 368a67b Convert removeHiddenElems to visitor
• 17aaf36 Cleanup collapseGroups tests
• e381ccc 2.3.0
• 09aec37 Implement exclude pattern cli option (#1409)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #59.