Skip to content

chore(deps): bump postcss from 8.4.38 to 8.5.15 in /portal/v2#4795

Merged
cadenmarchese merged 1 commit into
masterfrom
dependabot/npm_and_yarn/portal/v2/postcss-8.5.10
May 29, 2026
Merged

chore(deps): bump postcss from 8.4.38 to 8.5.15 in /portal/v2#4795
cadenmarchese merged 1 commit into
masterfrom
dependabot/npm_and_yarn/portal/v2/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026 •
edited
Loading

Bumps postcss from 8.4.38 to 8.5.15.

Release notes

Sourced from postcss's releases.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

... (truncated)

Commits
  • eae46db Release 8.5.15 version
  • 79508ff Update CI actions
  • b128e21 Speed up declaration parsing by avoiding creating new array on each token
  • 9825dca Fix code format
  • 55789c8 Update dependencies
  • 84fbbe9 Install older pnpm action for old Node.js
  • 9f860bd Revert pnpm action for old Node.js
  • 0877198 Update CI actions
  • b2d1a33 Fix linter warnings
  • 0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 24, 2026
@dependabot dependabot Bot requested a review from bennerv as a code owner April 24, 2026 15:35
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Apr 24, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 24, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a Azure member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@cadenmarchese cadenmarchese self-assigned this May 27, 2026
@cadenmarchese
Copy link
Copy Markdown
Member

cadenmarchese commented May 27, 2026

/azp run ci

@azure-pipelines
Copy link
Copy Markdown

azure-pipelines Bot commented May 27, 2026

Azure Pipelines successfully started running 1 pipeline(s).

@cadenmarchese
Copy link
Copy Markdown
Member

cadenmarchese commented May 27, 2026

@dependabot rebase

@dependabot
chore(deps): bump postcss from 8.4.38 to 8.5.15 in /portal/v2
5ad20ba 
Bumps [postcss](https://github.com/postcss/postcss) from 8.4.38 to 8.5.15.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.38...8.5.15)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump postcss from 8.4.38 to 8.5.10 in /portal/v2 chore(deps): bump postcss from 8.4.38 to 8.5.15 in /portal/v2 May 27, 2026
Copilot AI review requested due to automatic review settings May 27, 2026 17:12
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/portal/v2/postcss-8.5.10 branch from e4337ef to 5ad20ba Compare May 27, 2026 17:12
Copilot AI reviewed May 27, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@cadenmarchese
Copy link
Copy Markdown
Member

cadenmarchese commented May 27, 2026

/azp run ci

@azure-pipelines
Copy link
Copy Markdown

azure-pipelines Bot commented May 27, 2026

Azure Pipelines successfully started running 1 pipeline(s).

@cadenmarchese
Copy link
Copy Markdown
Member

cadenmarchese commented May 28, 2026

/azp run ci

@azure-pipelines
Copy link
Copy Markdown

azure-pipelines Bot commented May 28, 2026

Commenter does not have sufficient privileges for PR 4795 in repo Azure/ARO-RP

@cadenmarchese
Copy link
Copy Markdown
Member

cadenmarchese commented May 29, 2026

/azp run ci

@azure-pipelines
Copy link
Copy Markdown

azure-pipelines Bot commented May 29, 2026

Azure Pipelines successfully started running 1 pipeline(s).

cadenmarchese
cadenmarchese approved these changes May 29, 2026
View reviewed changes
Copy link
Copy Markdown
Member

@cadenmarchese cadenmarchese left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Merging this one even though we got a MIWI e2e flake (CSP passed), since this is a portal dep unrelated to e2es or cluster creation.

@cadenmarchese cadenmarchese merged commit dca1c37 into master May 29, 2026
28 of 30 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/portal/v2/postcss-8.5.10 branch May 29, 2026 15:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@cadenmarchese cadenmarchese cadenmarchese approved these changes

@bennerv bennerv Awaiting requested review from bennerv bennerv is a code owner

@hawkowl hawkowl Awaiting requested review from hawkowl hawkowl is a code owner

@rogbas rogbas Awaiting requested review from rogbas rogbas is a code owner

@mrWinston mrWinston Awaiting requested review from mrWinston mrWinston is a code owner

@yjst2012 yjst2012 Awaiting requested review from yjst2012 yjst2012 is a code owner

@hlipsig hlipsig Awaiting requested review from hlipsig hlipsig is a code owner

@tiguelu tiguelu Awaiting requested review from tiguelu tiguelu is a code owner

@mociarain mociarain Awaiting requested review from mociarain mociarain is a code owner

@kimorris27 kimorris27 Awaiting requested review from kimorris27 kimorris27 is a code owner

@tsatam tsatam Awaiting requested review from tsatam tsatam is a code owner

@sankur-codes sankur-codes Awaiting requested review from sankur-codes sankur-codes is a code owner

@wanghaoran1988 wanghaoran1988 Awaiting requested review from wanghaoran1988 wanghaoran1988 is a code owner

@alcasim alcasim Awaiting requested review from alcasim alcasim is a code owner

@tuxerrante tuxerrante Awaiting requested review from tuxerrante tuxerrante is a code owner

@ventifus ventifus Awaiting requested review from ventifus ventifus is a code owner

@kevinobriendotca kevinobriendotca Awaiting requested review from kevinobriendotca kevinobriendotca is a code owner

Assignees

@cadenmarchese cadenmarchese

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code needs-ok-to-test

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@cadenmarchese