Skip to content

chore(deps): Bump postcss from 8.5.6 to 8.5.13 in the npm_and_yarn group across 1 directory#838

Merged
bingenito merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-5f44a83626
May 1, 2026
Merged

chore(deps): Bump postcss from 8.5.6 to 8.5.13 in the npm_and_yarn group across 1 directory#838
bingenito merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-5f44a83626

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: postcss.

Updates postcss from 8.5.6 to 8.5.13

Release notes

Sourced from postcss's releases.

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 29, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 29, 2026 16:30
@dependabot dependabot Bot added javascript Pull requests that update Javascript code dependencies Pull requests that update a dependency file labels Apr 29, 2026
@codecov

codecov Bot commented Apr 29, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.03%. Comparing base (a507684) to head (493fabd).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #838   +/-   ##
=======================================
  Coverage   74.03%   74.03%           
=======================================
  Files          16       16           
  Lines        1510     1510           
  Branches      318      302   -16     
=======================================
  Hits         1118     1118           
  Misses        392      392           
Flag Coverage Δ
unittests 74.03% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-5f44a83626 branch from d910215 to 015ab8d Compare April 30, 2026 10:36
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.5.6 to 8.5.12 in the npm_and_yarn group across 1 directory chore(deps): Bump postcss from 8.5.6 to 8.5.13 in the npm_and_yarn group across 1 directory May 1, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-5f44a83626 branch 2 times, most recently from f7639b4 to 36e67d6 Compare May 1, 2026 11:49
Bumps the npm_and_yarn group with 1 update in the / directory: [postcss](https://github.com/postcss/postcss).


Updates `postcss` from 8.5.6 to 8.5.13
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.13)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/npm_and_yarn-5f44a83626 branch from 36e67d6 to 493fabd Compare May 1, 2026 11:54
@bingenito bingenito merged commit db60e29 into main May 1, 2026
5 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-5f44a83626 branch May 1, 2026 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant