build(deps-dev): bump postcss from 8.4.39 to 8.5.3 in /web/web #6555

dependabot · 2025-02-27T02:00:48Z

Bumps postcss from 8.4.39 to 8.5.3.

Release notes

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

Commits

22c309d Release 8.5.3 version
a2b594f Update ESLint config
8232ba0 Fix tests
5082831 Fix text
4fdb54b update: parser.js to clarify error message
06006ec AtRule can be empty
755f08f fix typo: them -> then (#2016)
692fcde Release 8.5.2 version
b70e98f Update dependencies
ba587e3 Fix end position of rules with ownSemicon (#2012)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [postcss](https://github.com/postcss/postcss) from 8.4.39 to 8.5.3. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.39...8.5.3) --- updated-dependencies: - dependency-name: postcss dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

LauraXia123

LGTM

…e#6555) Bumps [postcss](https://github.com/postcss/postcss) from 8.4.39 to 8.5.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p> <blockquote> <h2>8.5.3</h2> <ul> <li>Added more details to <code>Unknown word</code> error (by <a href="https://github.com/hiepxanh"><code>@hiepxanh</code></a>).</li> <li>Fixed types (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/catnipan"><code>@catnipan</code></a>).</li> </ul> <h2>8.5.2</h2> <ul> <li>Fixed end position of rules with semicolon (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5.1</h2> <ul> <li>Fixed backwards compatibility for complex cases (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5 “Duke Alloces”</h2>  <p>PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.</p> <p><a href="https://github.com/romainmenke"><code>@romainmenke</code></a> during <a href="https://redirect.github.com/postcss/postcss/issues/1995">his work</a> on <a href="https://stylelint.io">Stylelint</a> added <code>Input#document</code> in additional to <code>Input#css</code>.</p> <pre lang="js"><code>root.source.input.document //=> "<p>Hello</p> // <style> // p { // color: green; // } // </style>" root.source.input.css //=> "p { // color: green; // }" <p></code></pre></p> <h2>Thanks to Sponsors</h2> <p>This release was possible thanks to our community.</p> <p>If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:</p> <ul> <li><a href="https://tidelift.com/"><strong>Tidelift</strong></a> with a Spotify-like subscription model supporting all projects from your lock file.</li> <li>Direct donations at <a href="https://github.com/sponsors/ai"><strong>GitHub Sponsors</strong></a> or <a href="https://opencollective.com/postcss#section-contributors"><strong>Open Collective</strong></a>.</li> </ul> <h2>8.4.49</h2> <ul> <li>Fixed custom syntax without <code>source.offset</code> (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.4.48</h2> <ul> <li>Fixed position calculation in error/warnings methods (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.4.47</h2> <ul> <li>Removed debug code.</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p> <blockquote> <h2>8.5.3</h2> <ul> <li>Added more details to <code>Unknown word</code> error (by <a href="https://github.com/hiepxanh"><code>@hiepxanh</code></a>).</li> <li>Fixed types (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/catnipan"><code>@catnipan</code></a>).</li> </ul> <h2>8.5.2</h2> <ul> <li>Fixed end position of rules with semicolon (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5.1</h2> <ul> <li>Fixed backwards compatibility for complex cases (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.5 “Duke Alloces”</h2> <ul> <li>Added <code>Input#document</code> for sources like CSS-in-JS or HTML (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.4.49</h2> <ul> <li>Fixed custom syntax without <code>source.offset</code> (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.4.48</h2> <ul> <li>Fixed position calculation in error/warnings methods (by <a href="https://github.com/romainmenke"><code>@romainmenke</code></a>).</li> </ul> <h2>8.4.47</h2> <ul> <li>Removed debug code.</li> </ul> <h2>8.4.46</h2> <ul> <li>Fixed <code>Cannot read properties of undefined (reading 'before')</code>.</li> </ul> <h2>8.4.45</h2> <ul> <li>Removed unnecessary fix which could lead to infinite loop.</li> </ul> <h2>8.4.44</h2> <ul> <li>Another way to fix <code>markClean is not a function</code> error.</li> </ul> <h2>8.4.43</h2> <ul> <li>Fixed <code>markClean is not a function</code> error.</li> </ul> <h2>8.4.42</h2> <ul> <li>Fixed CSS syntax error on long minified files (by <a href="https://github.com/varpstar"><code>@varpstar</code></a>).</li> </ul> <h2>8.4.41</h2> <ul> <li>Fixed types (by <a href="https://github.com/nex3"><code>@nex3</code></a> and <a href="https://github.com/querkmachine"><code>@querkmachine</code></a>).</li> <li>Cleaned up RegExps (by <a href="https://github.com/bluwy"><code>@bluwy</code></a>).</li> </ul> <h2>8.4.40</h2> <ul> <li>Moved to getter/setter in nodes types to help Sass team (by <a href="https://github.com/nex3"><code>@nex3</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/postcss/postcss/commit/22c309d32924e1eeb33c80a6a50b7ba8a43a1832"><code>22c309d</code></a> Release 8.5.3 version</li> <li><a href="https://github.com/postcss/postcss/commit/a2b594f7826fc8e0ce2d35adcd205fde04f1134f"><code>a2b594f</code></a> Update ESLint config</li> <li><a href="https://github.com/postcss/postcss/commit/8232ba02575fca41b14c4e2b377adc68880846fa"><code>8232ba0</code></a> Fix tests</li> <li><a href="https://github.com/postcss/postcss/commit/5082831b842eb40f8d298e5e0ab041755a04a58b"><code>5082831</code></a> Fix text</li> <li><a href="https://github.com/postcss/postcss/commit/4fdb54b5ce67e038ed8d1aa79752d6f6072d0736"><code>4fdb54b</code></a> update: parser.js to clarify error message</li> <li><a href="https://github.com/postcss/postcss/commit/06006ecb04cae0ddb62c6a85f15d1068c544d861"><code>06006ec</code></a> AtRule can be empty</li> <li><a href="https://github.com/postcss/postcss/commit/755f08f8dbdbc001906b10db3b262948f8491d82"><code>755f08f</code></a> fix typo: them -> then (<a href="https://redirect.github.com/postcss/postcss/issues/2016">#2016</a>)</li> <li><a href="https://github.com/postcss/postcss/commit/692fcde123dbf51c7b1a178370d3e8c6fe7feeee"><code>692fcde</code></a> Release 8.5.2 version</li> <li><a href="https://github.com/postcss/postcss/commit/b70e98f624537063d3094644b04f41bd2863bb65"><code>b70e98f</code></a> Update dependencies</li> <li><a href="https://github.com/postcss/postcss/commit/ba587e32fd51004d334421013f311017f00e5420"><code>ba587e3</code></a> Fix end position of rules with <code>ownSemicon</code> (<a href="https://redirect.github.com/postcss/postcss/issues/2012">#2012</a>)</li> <li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.4.39...8.5.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.4.39&new-version=8.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 27, 2025

LauraXia123 approved these changes Feb 28, 2025

View reviewed changes

jerryshao merged commit 2980674 into main Feb 28, 2025
25 checks passed

jerryshao deleted the dependabot/npm_and_yarn/web/web/postcss-8.5.3 branch February 28, 2025 07:00

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps-dev): bump postcss from 8.4.39 to 8.5.3 in /web/web #6555

build(deps-dev): bump postcss from 8.4.39 to 8.5.3 in /web/web #6555

dependabot bot commented on behalf of github Feb 27, 2025

LauraXia123 left a comment

build(deps-dev): bump postcss from 8.4.39 to 8.5.3 in /web/web #6555

build(deps-dev): bump postcss from 8.4.39 to 8.5.3 in /web/web #6555

Conversation

dependabot bot commented on behalf of github Feb 27, 2025

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

Thanks to Sponsors

8.4.49

8.4.48

8.4.47

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

LauraXia123 left a comment

Choose a reason for hiding this comment