Skip to content

Bump postcss and postcss-css-variables#3834

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-727812129a
Open

Bump postcss and postcss-css-variables#3834
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-727812129a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss to 8.5.15 and updates ancestor dependency postcss-css-variables. These dependencies need to be updated together.

Updates postcss from 6.0.23 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

... (truncated)

Commits
  • eae46db Release 8.5.15 version
  • 79508ff Update CI actions
  • b128e21 Speed up declaration parsing by avoiding creating new array on each token
  • 9825dca Fix code format
  • 55789c8 Update dependencies
  • 84fbbe9 Install older pnpm action for old Node.js
  • 9f860bd Revert pnpm action for old Node.js
  • 0877198 Update CI actions
  • b2d1a33 Fix linter warnings
  • 0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
  • Additional commits viewable in compare view

Updates postcss-css-variables from 0.13.0 to 0.19.0

Release notes

Sourced from postcss-css-variables's releases.

postcss-css-variables-v0.14.0

Changelog: https://github.com/MadLittleMods/postcss-css-variables/blob/master/CHANGELOG.md#v0140---2019-11-24

Changelog

Sourced from postcss-css-variables's changelog.

v0.19.0 - 2023-04-12

v0.18.0 - 2021-05-11

  • [breaking] Add basic postcss 8 support (older versions of PostCSS no longer compatible)

v0.17.0 - 2020-04-24

v0.16.0 - 2020-04-24

  • Add ability to pass callback function to options.preserve to determine whether to preserve declaration

v0.15.0 - 2020-04-24

  • Fix algorithm to find balanced var() pairs and nested parenthesis

v0.14.0 - 2019-11-24

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
postcss-css-variables [> 0.13.0]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 12, 2026
@github-actions github-actions Bot changed the title Bump postcss and postcss-css-variables BC-11865 - Bump postcss and postcss-css-variables Jun 12, 2026
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.15 and updates ancestor dependency [postcss-css-variables](https://github.com/MadLittleMods/postcss-css-variables). These dependencies need to be updated together.


Updates `postcss` from 6.0.23 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@6.0.23...8.5.15)

Updates `postcss-css-variables` from 0.13.0 to 0.19.0
- [Release notes](https://github.com/MadLittleMods/postcss-css-variables/releases)
- [Changelog](https://github.com/MadLittleMods/postcss-css-variables/blob/master/CHANGELOG.md)
- [Commits](MadLittleMods/postcss-css-variables@v0.13.0...v0.19.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: indirect
- dependency-name: postcss-css-variables
  dependency-version: 0.19.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title BC-11865 - Bump postcss and postcss-css-variables Bump postcss and postcss-css-variables Jun 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-727812129a branch from c62f7e6 to 53a1079 Compare June 29, 2026 07:49
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

0 participants