Skip to content

Bump postcss from 8.5.6 to 8.5.10#8558

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/postcss-8.5.10
Open

Bump postcss from 8.5.6 to 8.5.10#8558
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps postcss from 8.5.6 to 8.5.10.

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 24, 2026
@dependabot dependabot Bot requested review from a team as code owners April 24, 2026 23:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 24, 2026
tnorling
tnorling previously approved these changes Apr 24, 2026
@tnorling tnorling enabled auto-merge (squash) April 24, 2026 23:36
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from e4510a0 to 1f7472b Compare April 27, 2026 22:05
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch 2 times, most recently from 149f8fb to a09ca61 Compare April 28, 2026 23:00
Copilot AI review requested due to automatic review settings April 29, 2026 18:38
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from a09ca61 to 87eed5b Compare April 29, 2026 18:38
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot April 29, 2026 18:38
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 87eed5b to 71e24ff Compare April 30, 2026 17:02
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot April 30, 2026 17:02
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 71e24ff to 8fac189 Compare May 1, 2026 17:38
@dependabot dependabot Bot review requested due to automatic review settings May 1, 2026 17:38
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 8fac189 to 01e4abd Compare May 4, 2026 21:05
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot May 4, 2026 21:05
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 01e4abd to 98eb779 Compare May 7, 2026 20:58
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot May 7, 2026 20:58
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 98eb779 to 5f5bf00 Compare May 12, 2026 16:53
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.6 to 8.5.10.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.10)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 5f5bf00 to bad465b Compare May 19, 2026 18:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants