Skip to content

Bump postcss from 8.5.16 to 8.5.29 - #295

Merged
willbreitkreutz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/postcss-8.5.25
Oct 6, 2026
Merged

willbreitkreutz merged 1 commit into
mainfrom
dependabot/npm_and_yarn/postcss-8.5.25

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026 •

Copy link
Copy Markdown
Contributor

Bumps postcss from 8.5.16 to 8.5.29.

Release notes

Sourced from postcss's releases.

8.5.29

8.5.28

  • Fixes types regression.

8.5.27

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.29

8.5.28

  • Fixes types regression.

8.5.27

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

... (truncated)

Commits
  • a7a1f34 Release 8.5.29 version
  • b55a36d Update dependencies
  • 7647a81 Escape </style> in output of non-Root nodes (#2163)
  • 7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
  • ebffa97 Add postcss-smooth-corners plugin
  • 57d6401 Speed up source map cleaning
  • 7e46a03 Speed up parser
  • 7f5c417 Improve </style> protection for the case when beffore nodes have different parts
  • 7ba9051 Fix useless ESLint warning
  • 12b4161 Update dependencies
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 2, 2026
willbreitkreutz
willbreitkreutz previously approved these changes Oct 6, 2026

@willbreitkreutz willbreitkreutz left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved low-impact Dependabot security/version bump.

@willbreitkreutz

Copy link
Copy Markdown
Contributor

@dependabot rebase

@willbreitkreutz

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.16 to 8.5.29.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.29)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump postcss from 8.5.16 to 8.5.25 Bump postcss from 8.5.16 to 8.5.29 Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.25 branch from bb763ec to 8f8561c Compare October 6, 2026 17:32

@willbreitkreutz willbreitkreutz left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved low-impact Dependabot security patch bump after recreation.

@willbreitkreutz
willbreitkreutz merged commit 7f192a2 into main Oct 6, 2026
3 checks passed
@willbreitkreutz
willbreitkreutz deleted the dependabot/npm_and_yarn/postcss-8.5.25 branch October 6, 2026 17:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant