Skip to content

Bump postcss, css-loader, stylelint and stylelint-webpack-plugin#66

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-0105252793
Open

Bump postcss, css-loader, stylelint and stylelint-webpack-plugin#66
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-0105252793

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown

Bumps postcss to 8.5.15 and updates ancestor dependencies postcss, css-loader, stylelint and stylelint-webpack-plugin. These dependencies need to be updated together.

Updates postcss from 6.0.23 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

... (truncated)

Commits
  • eae46db Release 8.5.15 version
  • 79508ff Update CI actions
  • b128e21 Speed up declaration parsing by avoiding creating new array on each token
  • 9825dca Fix code format
  • 55789c8 Update dependencies
  • 84fbbe9 Install older pnpm action for old Node.js
  • 9f860bd Revert pnpm action for old Node.js
  • 0877198 Update CI actions
  • b2d1a33 Fix linter warnings
  • 0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
  • Additional commits viewable in compare view

Updates css-loader from 2.1.0 to 7.1.4

Release notes

Sourced from css-loader's releases.

v7.1.4

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

v7.1.3

7.1.3 (2026-01-27)

Bug Fixes

v7.1.2

7.1.2 (2024-05-22)

Bug Fixes

  • keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

v7.1.1

7.1.1 (2024-04-10)

Bug Fixes

  • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

v7.1.0

7.1.0 (2024-04-08)

Features

  • added the getJSON option to output CSS modules mapping (#1577) (af834b4)

v7.0.0

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

  • The modules.namedExport option is true by default if you enable the esModule option

... (truncated)

Changelog

Sourced from css-loader's changelog.

7.1.4 (2026-02-16)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1652) (aeddefe)

7.1.3 (2026-01-27)

Bug Fixes

7.1.2 (2024-05-22)

Bug Fixes

  • keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

7.1.1 (2024-04-10)

Bug Fixes

  • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

7.1.0 (2024-04-08)

Features

  • added the getJSON option to output CSS modules mapping (#1577) (af834b4)

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

  • The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";
</tr></table> 

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates stylelint from 8.4.0 to 17.12.0

Release notes

Sourced from stylelint's releases.

17.12.0

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

17.10.0

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

  • Added: selector-no-invalid rule (#9232) (@​jeddy3).
  • Added: unit-layout-mappings rule (#9229) (@​jeddy3).
  • Added: value-keyword-layout-mappings rule (#9233) (@​jeddy3).
  • Fixed: inconsistent error messages when module is not found (#9260) (@​ybiquitous).
  • Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@​jeddy3).
  • Fixed: property-layout-mappings false positives for @page properties (#9223) (@​jeddy3).
  • Fixed: selector-pseudo-class-no-unknown false positives for nested webkit-scrollbar part (#9259) (@​rkdfx).

17.9.1

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

17.9.0

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

17.8.0

It adds 3 new rules and 1 configuration property.

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1 - 2026-05-14

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0 - 2026-05-05

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

17.10.0 - 2026-05-03

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

  • Added: selector-no-invalid rule (#9232) (@​jeddy3).
  • Added: unit-layout-mappings rule (#9229) (@​jeddy3).
  • Added: value-keyword-layout-mappings rule (#9233) (@​jeddy3).
  • Fixed: inconsistent error messages when module is not found (#9260) (@​ybiquitous).
  • Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@​jeddy3).
  • Fixed: property-layout-mappings false positives for @page properties (#9223) (@​jeddy3).
  • Fixed: selector-pseudo-class-no-unknown false positives for nested webkit-scrollbar part (#9259) (@​rkdfx).

17.9.1 - 2026-04-27

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

17.9.0 - 2026-04-23

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

... (truncated)

Commits
  • 5830fba Release 17.12.0 (#9304)
  • 49ed06f Bump file-entry-cache from 11.1.2 to 11.1.3 (#9302)
  • d120212 Bump lint-staged from 16.4.0 to 17.0.4 (#9301)
  • d332784 Bump the jest group with 2 updates (#9300)
  • d2d4a53 Fix declaration-property-value-no-unknown false negatives for custom proper...
  • 05088f1 Fix block-no-empty reported range when using comments (#9294)
  • 757bbcb Fix Yarn PnP system test with Node.js v24.15.0 (#9295)
  • b06204e Fix value-keyword-layout-mappings false positives for caption-side (#9293)
  • e7a3d19 Release 17.11.1 (#9290)
  • 63c5992 Fix node_modules ignore for codeFilename paths containing a dot-prefixed ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates stylelint-webpack-plugin from 0.10.5 to 5.1.0

Release notes

Sourced from stylelint-webpack-plugin's releases.

v5.1.0

5.1.0 (2026-02-04)

Features

v5.0.1

5.0.1 (2024-05-24)

Bug Fixes

v5.0.0

5.0.0 (2024-02-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 18 (#345)

Features

build

  • minimum supported Node.js version is 18 (#345) (1ee4588)

v4.1.1

4.1.1 (2023-04-10)

Performance

  • enable cache by default (#327)

v4.1.0

4.1.0 (2023-02-18)

Features

v4.0.0

4.0.0 (2023-02-02)

... (truncated)

Changelog

Sourced from stylelint-webpack-plugin's changelog.

5.1.0 (2026-02-04)

Bug Fixes

  • fix: remove skipLibCheck

  • fix: upgrade stylelint version

  • fix: npm audit

  • refactor: coverage and dead code

  • ci: add stylelint 17.x

Features

5.0.1 (2024-05-24)

Bug Fixes

5.0.0 (2024-02-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 18 (#345)

Features

build

  • minimum supported Node.js version is 18 (#345) (1ee4588)

4.1.1 (2023-04-10)

Performance

  • enable cache by default (#327)

4.1.0 (2023-02-18)

... (truncated)

Commits
  • ec9f72a chore(release): 5.1.0
  • ac6e4e2 refactor: do not force the use of node 20, it is only mandatory in stylelint ...
  • 27d4787 feat: add stylelint v17 support (#377)
  • 4cc8128 docs: update contributing
  • 3d150ec chore: migrate from contrib (#375)
  • e685b20 chore: update github actions/checkout from v4 to v5 (#374)
  • 0115aea refactor: restore old logic
  • ceea2d6 chore(deps): remove unused
  • 3d7d7d3 chore: migrate to eslint version 9 (#371)
  • 9a062d9 chore: downgrade jest-worker dependency (#370)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ricardogobbosouza, a new releaser for stylelint-webpack-plugin since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.15 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [css-loader](https://github.com/webpack/css-loader), [stylelint](https://github.com/stylelint/stylelint) and [stylelint-webpack-plugin](https://github.com/webpack/stylelint-webpack-plugin). These dependencies need to be updated together.


Updates `postcss` from 6.0.23 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@6.0.23...8.5.15)

Updates `css-loader` from 2.1.0 to 7.1.4
- [Release notes](https://github.com/webpack/css-loader/releases)
- [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/css-loader@v2.1.0...v7.1.4)

Updates `stylelint` from 8.4.0 to 17.12.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@8.4.0...17.12.0)

Updates `stylelint-webpack-plugin` from 0.10.5 to 5.1.0
- [Release notes](https://github.com/webpack/stylelint-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/stylelint-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/stylelint-webpack-plugin@v0.10.5...v5.1.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: indirect
- dependency-name: css-loader
  dependency-version: 7.1.4
  dependency-type: direct:production
- dependency-name: stylelint
  dependency-version: 17.12.0
  dependency-type: direct:development
- dependency-name: stylelint-webpack-plugin
  dependency-version: 5.1.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants