Skip to content

Bump postcss, rollup-plugin-postcss and typed-css-modules - #29

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-daa38f715b
Open

Bump postcss, rollup-plugin-postcss and typed-css-modules#29
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-daa38f715b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown

Bumps postcss to 8.5.26 and updates ancestor dependencies postcss, rollup-plugin-postcss and typed-css-modules. These dependencies need to be updated together.

Updates postcss from 5.2.18 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates rollup-plugin-postcss from 1.6.2 to 4.0.2

Release notes

Sourced from rollup-plugin-postcss's releases.

v4.0.2

4.0.2 (2021-11-22)

Bug Fixes

v4.0.1

4.0.1 (2021-08-12)

Bug Fixes

v4.0.0

4.0.0 (2020-12-07)

Features

BREAKING CHANGES

  • upgrade postcss to 8.x

Co-authored-by: Edward Elric SASUKE688848@gmail.com Co-authored-by: Ward Peeters ward@coding-tech.com

v3.1.8

3.1.8 (2020-08-30)

Bug Fixes

  • make sourceMaps relative to the CSS output file (#274) (3de028d)

v3.1.7

3.1.7 (2020-08-30)

Bug Fixes

v3.1.6

3.1.6 (2020-08-24)

... (truncated)

Changelog

Sourced from rollup-plugin-postcss's changelog.

Version 2.0.3 (2019-1-31)

Bug fixes

...full changes

Version 2.0.2 (2019-1-31)

Bug fixes

...full changes

Version 2.0.1 (2019-1-26)

Bug fixes

  • don't panic when code-splitting: 63c1a8d

...full changes

Version 2.0.0 (2019-1-23)

Breaking changes

  • Use generateBundle instead of onwrite: 59fb0e9 (#148)

New features

  • Allow custom modules.getJSON function: 5faa7a4 (#132)
  • update postcss-modules to support camelCase option: b201582 (#117)
  • Allow boolean plugins support: 57dac24 (#142)
  • perform minimize after extract is finished: 20aeab4 (#153)
  • watch imported css files: 5596ca9
  • update postcss dependencies: 09c0137
  • support dart-sass: 2ad5ae1

Bug fixes

...full changes

Version 1.6.3 (2018-11-21)

... (truncated)

Commits

Updates typed-css-modules from 0.3.7 to 0.9.1

Release notes

Sourced from typed-css-modules's releases.

v0.9.1

Bug Fix

  • Map the allowArbitraryExtensions cli argument(#291)

v0.9.0

New features

v0.8.1

Bug fixes

  • Glob path on windows ( #241 )

New features

  • Add unlink watch ( #237 )

v0.8.0

New features

  • Allow async postprocessor function (#208)

Bug fixes

  • Empty .d.ts files are now valid TS modules (#142)
  • Upgrade or remove some vulnerable dependencies. (#203, #215)

Breaking change

  • Change supported Node.js version to v18

Misc

  • Sort types for stable diffs (#199)

v0.7.2

Bug Fixed

  • use relativeOutputFilePath instead of outputFilePath ( #180)

v0.7.1

New features

  • add new CLI option --listDifferent #179

v0.7.0

Misc

  • Upgrade some dependencies

... (truncated)

Commits
  • 7720600 0.9.1
  • ad625f1 Merge pull request #291 from jfurfaro/bugfix/arbitrary-extensions-cli
  • 4ea496d chore(deps): lock file maintenance
  • fd8bb84 actually map the allowArbitraryExtensions cli argument
  • 5da4ce8 chore(deps): update dependency ts-jest to v29.1.2
  • 03659d2 0.9.0
  • 87b7e0b Merge pull request #277 from jfurfaro/feature/allow-arbitrary-extensions
  • 995be2a README updates
  • f0a71a9 chore(deps): lock file maintenance
  • ec8b776 fix(deps): update dependency postcss-modules-scope to v3.1.1
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.26 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [rollup-plugin-postcss](https://github.com/egoist/rollup-plugin-postcss) and [typed-css-modules](https://github.com/Quramy/typed-css-modules). These dependencies need to be updated together.


Updates `postcss` from 5.2.18 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/commits/8.5.26)

Updates `rollup-plugin-postcss` from 1.6.2 to 4.0.2
- [Release notes](https://github.com/egoist/rollup-plugin-postcss/releases)
- [Changelog](https://github.com/egoist/rollup-plugin-postcss/blob/master/CHANGELOG-OLD.md)
- [Commits](egoist/rollup-plugin-postcss@v1.6.2...v4.0.2)

Updates `typed-css-modules` from 0.3.7 to 0.9.1
- [Release notes](https://github.com/Quramy/typed-css-modules/releases)
- [Commits](Quramy/typed-css-modules@v0.3.7...v0.9.1)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: indirect
- dependency-name: rollup-plugin-postcss
  dependency-version: 4.0.2
  dependency-type: direct:development
- dependency-name: typed-css-modules
  dependency-version: 0.9.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants