Skip to content

Bump postcss from 8.5.8 to 8.5.12 in /servers/lib#1597

Open
dependabot[bot] wants to merge 1 commit into
feature/distributed-demofrom
dependabot/npm_and_yarn/servers/lib/postcss-8.5.10
Open

Bump postcss from 8.5.8 to 8.5.12 in /servers/lib#1597
dependabot[bot] wants to merge 1 commit into
feature/distributed-demofrom
dependabot/npm_and_yarn/servers/lib/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps postcss from 8.5.8 to 8.5.12.

Release notes

Sourced from postcss's releases.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Changelog

Sourced from postcss's changelog.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Commits
  • 9bc81c4 Release 8.5.12 version
  • 85c4d7d Another try to fix coverage
  • 94484ca Try to fix coverage
  • c64b748 Load only .map source maps
  • aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
  • 233fb26 Mention original author of the solution
  • 2502f75 Release 8.5.11 version
  • 5ca1901 Speed up parsing many nested brackets
  • 42b5337 Update dependencies
  • 7e36e15 Cache node.raws locally in Stringifier hot methods
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 24, 2026
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 24, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.98%. Comparing base (a46842b) to head (46f27a1).

Additional details and impacted files
@@                     Coverage Diff                      @@
##           feature/distributed-demo    #1597      +/-   ##
============================================================
- Coverage                     96.30%   95.98%   -0.33%     
============================================================
  Files                           147      183      +36     
  Lines                          4817     5523     +706     
  Branches                        813      832      +19     
============================================================
+ Hits                           4639     5301     +662     
- Misses                          176      220      +44     
  Partials                          2        2              

see 36 files with indirect coverage changes

Components Coverage Δ
Website 96.30% <ø> (ø)
Lib Microservice 79.28% <ø> (∅)
dtaas-Services ∅ <ø> (∅)
dtaas-CLI 96.98% <ø> (∅)
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.8 to 8.5.12.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.8...8.5.12)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump postcss from 8.5.8 to 8.5.10 in /servers/lib Bump postcss from 8.5.8 to 8.5.12 in /servers/lib Apr 30, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/servers/lib/postcss-8.5.10 branch from 64ce60e to 46f27a1 Compare April 30, 2026 12:57
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants