Skip to content

chore(deps): Bump postcss from 8.5.6 to 8.5.15#3900

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/postcss-8.5.10
Open

chore(deps): Bump postcss from 8.5.6 to 8.5.15#3900
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps postcss from 8.5.6 to 8.5.15.

Release notes

Sourced from postcss's releases.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits
  • eae46db Release 8.5.15 version
  • 79508ff Update CI actions
  • b128e21 Speed up declaration parsing by avoiding creating new array on each token
  • 9825dca Fix code format
  • 55789c8 Update dependencies
  • 84fbbe9 Install older pnpm action for old Node.js
  • 9f860bd Revert pnpm action for old Node.js
  • 0877198 Update CI actions
  • b2d1a33 Fix linter warnings
  • 0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 24, 2026
@jaclynjessup jaclynjessup moved this to 👀 In review in Canvas Kit Apr 24, 2026
@cypress
Copy link
Copy Markdown

cypress Bot commented Apr 24, 2026

Workday/canvas-kit    Run #10913

Run Properties:  status check passed Passed #10913  •  git commit 6010b31b9f ℹ️: Merge 9bcf65badbe078ca616a2a63fe9d780880c10ed2 into 7633fbb415cd6f549265955cd80e...
Project Workday/canvas-kit
Branch Review dependabot/npm_and_yarn/postcss-8.5.10
Run status status check passed Passed #10913
Run duration 02m 22s
Commit git commit 6010b31b9f ℹ️: Merge 9bcf65badbe078ca616a2a63fe9d780880c10ed2 into 7633fbb415cd6f549265955cd80e...
Committer dependabot[bot]
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 17
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 809
View all changes introduced in this branch ↗︎
UI Coverage  19.59%
  Untested elements 1533  
  Tested elements 371  
Accessibility  99.41%
  Failed rules  5 critical   5 serious   0 moderate   2 minor
  Failed elements 68  

@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.4.38 to 8.5.10 chore(deps): Bump postcss from 8.4.38 to 8.5.12 Apr 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 522e70d to a979f5b Compare April 28, 2026 19:24
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.4.38 to 8.5.12 chore(deps): Bump postcss from 8.5.6 to 8.5.12 Apr 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch 2 times, most recently from b51c01f to 9f0a20a Compare April 30, 2026 15:18
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.5.6 to 8.5.12 chore(deps): Bump postcss from 8.5.6 to 8.5.13 May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 9f0a20a to 91bf933 Compare May 4, 2026 14:46
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.5.6 to 8.5.13 chore(deps): Bump postcss from 8.5.6 to 8.5.14 May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch 3 times, most recently from a22f16b to b9935b4 Compare May 5, 2026 21:15
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.5.6 to 8.5.14 chore(deps): Bump postcss from 8.5.6 to 8.5.15 May 21, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch 2 times, most recently from 710f7a1 to 9889de6 Compare May 21, 2026 18:14
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.6 to 8.5.15.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.15)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 9889de6 to 9bcf65b Compare May 21, 2026 19:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Status: 👀 In review

Development

Successfully merging this pull request may close these issues.

1 participant