Bump css_parser from 1.22.0 to 3.0.0 in the bundler group across 1 directory

[dependabot]

Bumps the bundler group with 1 update in the / directory: css_parser.

Updates css_parser from 1.22.0 to 3.0.0

Changelog

Sourced from css_parser's changelog.

Version 3.0.0

• Harden read_remote_file, use allow_local_network: true and allow_file_uris: true to bypass

Version 2.2.0

• Accept CSS <number> values with an omitted integer part (e.g. .1) inside rgb()/rgba()/hsl()/hsla(). Previously RE_COLOUR_NUMERIC and RE_COLOUR_NUMERIC_ALPHA required at least one digit before the decimal point, which caused colours such as rgba(0,0,0,.1) to be silently dropped during shorthand expansion (background-color from background:, border-*-color from border:).

Version 2.1.0

• Validate ssl when pulling files via https

Version 2.0.0

• Drop ruby <3.2, fix a memory leak

Version v1.21.1

• Prefer !important rules over non-!important rules in the same ruleset
• Minor performance improvements

Version v1.21.0

• Minor performance improvements

Version v1.20.0

• Remove iconv conditional require

Version v1.19.1

• Fix error when parsing values consisting of !important only

Version v1.19.0

• Deprecate load_uri!, load_file! and load_string! positional arguments over keyword argument
• Deprecate add_rule! (positional arguments)and add_rule_with_offsets! for add_rule! (keyword argument)
• RuleSet initialize now takes keyword argument, positional arguments are still supported but deprecated
• Removed OffsetAwareRuleSet, it's a RuleSet with optional attributes filename and offset
• Improved performance of block parsing by using StringScanner
• Improve RuleSet#parse_declarations! performance by using substring search istead of regexps
• Fix error when parsing values consisting of !important only

Version v1.18.0

• Drop Ruby 2.7 compatibility for parity with Premailer #149

Version v1.17.1

• Improve security by using File.read instead of IO.read #149

Version v1.17.0

• Added user_agent as an option to Parser #146

... (truncated)

Commits

• f02be34 v2.3.0
• 87f1486 Merge commit from fork
• e0a1514 refactor: Add BUG guards to internal SSRF/LFI helpers (GHSA-9pmc-p236-855h)
• 7d2ddf0 vuln-fix: Route remote fetches via ssrf_filter; gate file:// (GHSA-9pmc-p236-...
• ba74c3c test: Add failing tests for SSRF and file-URI LFI (GHSA-9pmc-p236-855h)
• cee10f1 v2.2.0
• 920a01b Merge pull request #187 from fukayatsu/fix-rgba-leading-dot-alpha
• 9fc40c6 Accept CSS numbers without a leading zero in rgb/rgba/hsl/hsla
• 300f130 v2.1.0
• 35e689c Merge pull request #186 from premailer/grosser/https
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.