Skip to content

Bump postcss from 8.5.8 to 8.5.16 - #185

Merged
ethangardner merged 1 commit into
developfrom
dependabot/npm_and_yarn/postcss-8.5.16
Jul 9, 2026
Merged

Bump postcss from 8.5.8 to 8.5.16#185
ethangardner merged 1 commit into
developfrom
dependabot/npm_and_yarn/postcss-8.5.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss from 8.5.8 to 8.5.16.

Release notes

Sourced from postcss's releases.

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Changelog

Sourced from postcss's changelog.

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 9, 2026 04:03
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Jul 9, 2026
@ethangardner

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.8 to 8.5.16.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.8...8.5.16)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.16
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.16 branch from 92b5964 to 99acea3 Compare July 9, 2026 04:15
@ethangardner
ethangardner merged commit affe78c into develop Jul 9, 2026
3 checks passed
@github-project-automation github-project-automation Bot moved this from Triage to Fed Final Review in USWDS Core Project Data Jul 9, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/postcss-8.5.16 branch July 9, 2026 04:17
@chandracarney chandracarney moved this from Fed Final Review to Done in USWDS Core Project Data Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants