Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 12, 2025

Bumps postcss to 8.5.5 and updates ancestor dependencies postcss, autoprefixer, postcss-assets, postcss-cli and postcss-inline-svg. These dependencies need to be updated together.

Updates postcss from 7.0.39 to 8.5.5

Release notes

Sourced from postcss's releases.

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

8.4.49

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

8.4.48

  • Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

  • Removed debug code.

8.4.46

  • Fixed Cannot read properties of undefined (reading 'before').

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.

8.4.44

  • Another way to fix markClean is not a function error.

8.4.43

  • Fixed markClean is not a function error.

8.4.42

  • Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

8.4.40

  • Moved to getter/setter in nodes types to help Sass team (by @​nex3).

... (truncated)

Commits

Updates autoprefixer from 9.8.8 to 10.4.21

Release notes

Sourced from autoprefixer's releases.

10.4.21

10.4.20

  • Fixed fit-content prefix for Firefox.

10.4.19

  • Removed end value has mixed support, consider using flex-end warning since end/start now have good support.

10.4.18

  • Fixed removing -webkit-box-orient on -webkit-line-clamp (@​Goodwine).

10.4.17

  • Fixed user-select: contain prefixes.

10.4.16

10.4.15

10.4.14

  • Improved startup time and reduced JS bundle size (by @​Knagis).

10.4.13

  • Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

10.4.12

  • Fixed support of unit-less zero angle in backgrounds (by @​yisibl).

10.4.11

  • Fixed text-decoration prefixes by moving to MDN data (by @​romainmenke).

10.4.10

  • Fixed unicode-bidi prefixes by moving to MDN data.

10.4.9

  • Fixed css-unicode-bidi issue from latest Can I Use.

10.4.8

  • Do not print color-adjust warning if print-color-adjust also is in rule.

10.4.7

  • Fixed print-color-adjust support in Firefox.

10.4.6

  • Fixed print-color-adjust support.

... (truncated)

Changelog

Sourced from autoprefixer's changelog.

10.4.21

10.4.20

  • Fixed fit-content prefix for Firefox.

10.4.19

  • Removed end value has mixed support, consider using flex-end warning since end/start now have good support.

10.4.18

  • Fixed removing -webkit-box-orient on -webkit-line-clamp (@​Goodwine).

10.4.17

  • Fixed user-select: contain prefixes.

10.4.16

  • Improved performance (by Romain Menke).
  • Fixed docs (by Christian Oliff).

10.4.15

  • Fixed ::backdrop prefixes (by 一丝).
  • Fixed docs (by Christian Oliff).

10.4.14

  • Improved startup time and reduced JS bundle size (by Kārlis Gaņģis).

10.4.13

  • Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

10.4.12

  • Fixed support of unit-less zero angle in backgrounds (by 一丝).

10.4.11

  • Fixed text-decoration prefixes by moving to MDN data (by Romain Menke).

10.4.10

  • Fixed unicode-bidi prefixes by moving to MDN data.

10.4.9

  • Fixed css-unicode-bidi issue from latest Can I Use.

10.4.8

  • Do not print color-adjust warning if print-color-adjust also is in rule.

10.4.7

  • Fixed print-color-adjust support in Firefox.

10.4.6

  • Fixed print-color-adjust support.

... (truncated)

Commits

Updates postcss-assets from 5.0.0 to 6.0.0

Release notes

Sourced from postcss-assets's releases.

6.0.0

Breaking

Under the hook

Changelog

Sourced from postcss-assets's changelog.

6.0.0

Breaking

Under the hook

Commits
  • e56ae79 Merge branch 'release/6.0.0'
  • b820487 Bump the version to 6.0.0
  • 08c5016 Merge pull request #87 from onigoetz/develop
  • 7aa58a0 Update appveyor configuration
  • 40a71aa Update to PostCSS 8
  • 29b1b0f Merge pull request #84 from borodean/feature/ci-update
  • e164624 Migrate the logo to jsDelivr and use the master branch
  • e6fedf8 Update CI and badge URLs
  • 8456393 Merge pull request #78 from UziTech/UziTech-cachebuster-docs
  • 0375617 include cachebuster example input
  • Additional commits viewable in compare view

Updates postcss-cli from 7.1.2 to 11.0.1

Release notes

Sourced from postcss-cli's releases.

8.0.0 / 2020-09-21

  • BREAKING: Support postcss v8 (#344, #349)
  • BREAKING: postcss is now a peerDependency, you must install it seperately (#344, #349)
  • Upgrade dependencies (#340)
Changelog

Sourced from postcss-cli's changelog.

11.0.1 / 2025-03-12

  • Update and minimize dependencies

11.0.0 / 2023-12-05

10.1.0 / 2022-11-29

  • Allow running --watch mode in non-TTY contexts, like Docker (#448)
  • Update dependencies

10.0.0 / 2022-06-29

  • BREAKING: Drop Node 12 support (#438)
  • Add support for ESM config files (#437)

9.1.0 / 2021-12-10

  • Don't write to files if they're unchanged (#320, #417)

9.0.2 / 2021-11-04

  • Switch to picocolors (#409)
  • Remove test files from npm package

9.0.1 / 2021-09-28

  • Actually exit with error when attempting to stdout in watch mode
  • Remove bin/ from files in package.json

9.0.0 / 2021-09-24

  • BREAKING: Require Node.js v12+
  • BREAKING: Must specify full file path, including .js extension, when loading local plugins with --use (#401)
  • BREAKING: Officially remove support for watching postcss config (was already broken in previous releases)
  • Add support for dir-dependency messages (#383, #391)
  • Update deps

8.3.1 / 2020-12-12

  • Ensure paths are not interpreted as numbers (#360)
  • Better errors for incorrect postcss version (#361, #362)

8.3.0 / 2020-11-17

  • Exit on EOF/^D (#358)

... (truncated)

Commits

Updates postcss-inline-svg from 4.1.0 to 6.0.0

Changelog

Sourced from postcss-inline-svg's changelog.

6.0.0

  • Dropped Node.js 10 and 12 support.
  • Fixed security vulnerabilities in dependencies.

5.0.0

  • Migrated to PostCSS 8.
  • Dropped Node.js 8 support.
Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 12, 2025
…nline-svg

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.5 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [autoprefixer](https://github.com/postcss/autoprefixer), [postcss-assets](https://github.com/assetsjs/postcss-assets), [postcss-cli](https://github.com/postcss/postcss-cli) and [postcss-inline-svg](https://github.com/TrySound/postcss-inline-svg). These dependencies need to be updated together.


Updates `postcss` from 7.0.39 to 8.5.5
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.5.5)

Updates `autoprefixer` from 9.8.8 to 10.4.21
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@9.8.8...10.4.21)

Updates `postcss-assets` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/assetsjs/postcss-assets/releases)
- [Changelog](https://github.com/borodean/postcss-assets/blob/main/CHANGELOG.md)
- [Commits](borodean/postcss-assets@5.0.0...6.0.0)

Updates `postcss-cli` from 7.1.2 to 11.0.1
- [Release notes](https://github.com/postcss/postcss-cli/releases)
- [Changelog](https://github.com/postcss/postcss-cli/blob/master/CHANGELOG.md)
- [Commits](postcss/postcss-cli@7.1.2...11.0.1)

Updates `postcss-inline-svg` from 4.1.0 to 6.0.0
- [Changelog](https://github.com/TrySound/postcss-inline-svg/blob/master/CHANGELOG.md)
- [Commits](TrySound/postcss-inline-svg@v4.1.0...v6.0.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.5
  dependency-type: indirect
- dependency-name: autoprefixer
  dependency-version: 10.4.21
  dependency-type: direct:development
- dependency-name: postcss-assets
  dependency-version: 6.0.0
  dependency-type: direct:development
- dependency-name: postcss-cli
  dependency-version: 11.0.1
  dependency-type: direct:development
- dependency-name: postcss-inline-svg
  dependency-version: 6.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/project/sites/autismreviewerni/themes/autismreviewerni_theme/multi-8d4cd17a15 branch from b4262e9 to b0274a1 Compare June 27, 2025 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant