build(deps): bump postcss, stylelint and stylelint-order in /themes/mainroad by dependabot[bot] · Pull Request #477 · risuorg/risuorg.github.io

dependabot · 2026-05-28T22:16:08Z

Bumps postcss to 8.5.15 and updates ancestor dependencies postcss, stylelint and stylelint-order. These dependencies need to be updated together.

Updates postcss from 8.4.6 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

... (truncated)

Commits

eae46db Release 8.5.15 version
79508ff Update CI actions
b128e21 Speed up declaration parsing by avoiding creating new array on each token
9825dca Fix code format
55789c8 Update dependencies
84fbbe9 Install older pnpm action for old Node.js
9f860bd Revert pnpm action for old Node.js
0877198 Update CI actions
b2d1a33 Fix linter warnings
0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
Additional commits viewable in compare view

Updates stylelint from 13.13.1 to 17.12.0

Release notes

Sourced from stylelint's releases.

17.12.0

It fixes 3 bugs, including a false negative one.

Fixed: block-no-empty reported range when using comments (#9294) (@romainmenke).

Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@romainmenke).

Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@romainmenke).

17.11.1

It fixes 2 bugs.

Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@tuhtah).

Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@pamelalozano16).

17.11.0

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

Added: loader to experimental referenceFiles: {} (#9251) (@romainmenke).

Added: autofixed to the result object (#8771) (@Rob--W).

17.10.0

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

Added: selector-no-invalid rule (#9232) (@jeddy3).

Added: unit-layout-mappings rule (#9229) (@jeddy3).

Added: value-keyword-layout-mappings rule (#9233) (@jeddy3).

Fixed: inconsistent error messages when module is not found (#9260) (@ybiquitous).

Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@jeddy3).

Fixed: property-layout-mappings false positives for @page properties (#9223) (@jeddy3).

Fixed: selector-pseudo-class-no-unknown false positives for nested webkit-scrollbar part (#9259) (@rkdfx).

17.9.1

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

Fixed: ConfigurationError regression for custom syntaxes (#9245) (@jeddy3).

Fixed: MD5 hash algorithm to SHA256 for caching (#9241) (@rkdfx).

Fixed: property-no-deprecated autofix for page-break-*: always (#9214) (@rkdfx).

Fixed: selector-no-deprecated false positives for ::part() (#9227) (@SaekiTominaga).

17.9.0

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

Added: experimental referenceFiles to configuration object (#9179) (@jeddy3).

Added: experimental abortSignal option to Node.js API for cancellation support (#9213) (@adalinesimonian).

Added: maxWarnings to configuration object (#9181) (@mrginglymus).

17.8.0

It adds 3 new rules and 1 configuration property.

Added: languageOptions.directionality configuration property (#8687) (@sw1tch3roo).

Added: property-layout-mappings rule (#8687) (@sw1tch3roo).

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

Fixed: block-no-empty reported range when using comments (#9294) (@romainmenke).

Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@romainmenke).

Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@romainmenke).

17.11.1 - 2026-05-14

It fixes 2 bugs.

Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@tuhtah).

Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@pamelalozano16).

17.11.0 - 2026-05-05

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

Added: loader to experimental referenceFiles: {} (#9251) (@romainmenke).

Added: autofixed to the result object (#8771) (@Rob--W).

17.10.0 - 2026-05-03

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

Added: selector-no-invalid rule (#9232) (@jeddy3).

Added: unit-layout-mappings rule (#9229) (@jeddy3).

Added: value-keyword-layout-mappings rule (#9233) (@jeddy3).

Fixed: inconsistent error messages when module is not found (#9260) (@ybiquitous).

Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@jeddy3).

Fixed: property-layout-mappings false positives for @page properties (#9223) (@jeddy3).

Fixed: selector-pseudo-class-no-unknown false positives for nested webkit-scrollbar part (#9259) (@rkdfx).

17.9.1 - 2026-04-27

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

Fixed: ConfigurationError regression for custom syntaxes (#9245) (@jeddy3).

Fixed: MD5 hash algorithm to SHA256 for caching (#9241) (@rkdfx).

Fixed: property-no-deprecated autofix for page-break-*: always (#9214) (@rkdfx).

Fixed: selector-no-deprecated false positives for ::part() (#9227) (@SaekiTominaga).

17.9.0 - 2026-04-23

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

Added: experimental referenceFiles to configuration object (#9179) (@jeddy3).

Added: experimental abortSignal option to Node.js API for cancellation support (#9213) (@adalinesimonian).

Added: maxWarnings to configuration object (#9181) (@mrginglymus).

... (truncated)

Commits

5830fba Release 17.12.0 (#9304)
49ed06f Bump file-entry-cache from 11.1.2 to 11.1.3 (#9302)
d120212 Bump lint-staged from 16.4.0 to 17.0.4 (#9301)
d332784 Bump the jest group with 2 updates (#9300)
d2d4a53 Fix declaration-property-value-no-unknown false negatives for custom proper...
05088f1 Fix block-no-empty reported range when using comments (#9294)
757bbcb Fix Yarn PnP system test with Node.js v24.15.0 (#9295)
b06204e Fix value-keyword-layout-mappings false positives for caption-side (#9293)
e7a3d19 Release 17.11.1 (#9290)
63c5992 Fix node_modules ignore for codeFilename paths containing a dot-prefixed ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint-order from 4.1.0 to 8.1.1

Release notes

Sourced from stylelint-order's releases.

8.1.1

Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

Added custom-properties-alphabetical-order rule

8.0.0

Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

Added support for Stylelint 17

7.0.0

Dropped Node.js 18 support

Dropped support for Stylelint older than 16.18.0

Changed: Ignore properties case for properties-order and properties-alphabetical-order

Added support for more properties shorthands

Fixed order autofix not applied, when Stylelint disable comments are present

Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present

Fixed properties-order autofix not applied, when Stylelint disable comments are present

Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations

Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

Added support for Stylelint 16

6.0.3

Fixed sorting inside CSS-in-JS css helper

6.0.2

Added Stylelint v15 to peerDependencies

6.0.1

Fix regression causing root of CSS or SCSS to report violations

6.0.0

Dropped Node.js 12 and 14 support.

Added support for postcss-styled-syntax.

5.0.0

Breaking change: Dropped Node.js 8 support. Node.js 12 or greater is now required.

Breaking change: Dropped support for Stylelint 13 and earlier.

Added support for Stylelint 14.

Changelog

Sourced from stylelint-order's changelog.

8.1.1

Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

Added custom-properties-alphabetical-order rule

8.0.0

Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

Added support for Stylelint 17

7.0.0

Dropped Node.js 18 support

Dropped support for Stylelint older than 16.18.0

Changed: Ignore properties case for properties-order and properties-alphabetical-order

Added support for more properties shorthands

Fixed order autofix not applied, when Stylelint disable comments are present

Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present

Fixed properties-order autofix not applied, when Stylelint disable comments are present

Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations

Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

Added support for Stylelint 16

6.0.3

Fixed sorting inside CSS-in-JS css helper

6.0.2

Added Stylelint v15 to peerDependencies

6.0.1

Fix regression causing root of CSS or SCSS to report violations

6.0.0

Dropped Node.js 12 and 14 support.

Added support for postcss-styled-syntax.

5.0.0

Breaking change: Dropped Node.js 8 support. Node.js 12 or greater is now required.

Breaking change: Dropped support for Stylelint 13 and earlier.

Added support for Stylelint 14.

Commits

5e0802a 8.1.1
d63b335 Prepare 8.1.1
707f2d9 Change how CSS from the style attribute is detected, when using `postcss-ht...
7db7174 Add custom-properties-alphabetical-order in README (#214)
6d5b26a 8.1.0
cfa2267 Prepare 8.1.0
6652d6d Add custom-properties-alphabetical-order rule (#212)
cb01afd 8.0.0
ff92d6e Update changelog
3b45045 Add limited autofix for properties in rules containing interpolation in CSS-i...
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.15 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [stylelint](https://github.com/stylelint/stylelint) and [stylelint-order](https://github.com/hudochenkov/stylelint-order). These dependencies need to be updated together. Updates `postcss` from 8.4.6 to 8.5.15 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.6...8.5.15) Updates `stylelint` from 13.13.1 to 17.12.0 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@13.13.1...17.12.0) Updates `stylelint-order` from 4.1.0 to 8.1.1 - [Release notes](https://github.com/hudochenkov/stylelint-order/releases) - [Changelog](https://github.com/hudochenkov/stylelint-order/blob/master/CHANGELOG.md) - [Commits](hudochenkov/stylelint-order@4.1.0...8.1.1) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.15 dependency-type: indirect - dependency-name: stylelint dependency-version: 17.12.0 dependency-type: direct:development - dependency-name: stylelint-order dependency-version: 8.1.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

for more information, see https://pre-commit.ci

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 28, 2026

[pre-commit.ci] auto fixes from pre-commit.com hooks

801e10e

for more information, see https://pre-commit.ci

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump postcss, stylelint and stylelint-order in /themes/mainroad#477

build(deps): bump postcss, stylelint and stylelint-order in /themes/mainroad#477
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/themes/mainroad/multi-4793e0cceb

dependabot Bot commented on behalf of github May 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 28, 2026

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

17.12.0

17.11.1

17.11.0

17.10.0

17.9.1

17.9.0

17.8.0

17.12.0 - 2026-05-20

17.11.1 - 2026-05-14

17.11.0 - 2026-05-05

17.10.0 - 2026-05-03

17.9.1 - 2026-04-27

17.9.0 - 2026-04-23

8.1.1

8.1.0

8.0.0

7.0.1

7.0.0

6.0.4

6.0.3

6.0.2

6.0.1

6.0.0

5.0.0

8.1.1

8.1.0

8.0.0

7.0.1

7.0.0

6.0.4

6.0.3

6.0.2

6.0.1

6.0.0

5.0.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants