Skip to content

chore(deps): update dependency @tailwindcss/postcss to v4.1.12 (main)#13

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile
Open

chore(deps): update dependency @tailwindcss/postcss to v4.1.12 (main)#13
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented May 11, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@tailwindcss/postcss (source) 4.1.114.1.12 age adoption passing confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
High High 7.5 CVE-2026-45623
Medium Medium 6.1 CVE-2026-41305

Unreachable


Release Notes

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.1.12

Compare Source

Fixed
  • Don't consider the global important state in @apply (#​18404)
  • Add missing suggestions for flex-<number> utilities (#​18642)
  • Fix trailing ) from interfering with extraction in Clojure keywords (#​18345)
  • Detect classes inside Elixir charlist, word list, and string sigils (#​18432)
  • Track source locations through @plugin and @config (#​18345)
  • Allow boolean values of process.env.DEBUG in @tailwindcss/node (#​18485)
  • Ignore consecutive semicolons in the CSS parser (#​18532)
  • Center the dropdown icon added to an input with a paired datalist by default (#​18511)
  • Extract candidates in Slang templates (#​18565)
  • Improve error messages when encountering invalid functional utility names (#​18568)
  • Discard CSS AST objects with false or undefined properties (#​18571)
  • Allow users to disable URL rebasing in @tailwindcss/postcss via transformAssetUrls: false (#​18321)
  • Fix false-positive migrations in addEventListener and JavaScript variable names (#​18718)
  • Fix Standalone CLI showing default Bun help when run via symlink on Windows (#​18723)
  • Read from --border-color-* theme keys in divide-* utilities for backwards compatibility (#​18704)
  • Don't scan .hdr and .exr files for classes by default (#​18734)

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label May 11, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch 4 times, most recently from c0c6214 to 7db9334 Compare May 22, 2026 19:24
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch 3 times, most recently from 3bd6491 to 7b691d9 Compare June 6, 2026 00:29
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch from 7b691d9 to b67b18b Compare June 12, 2026 05:23
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch from b67b18b to 3d929f6 Compare June 28, 2026 04:35
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch from 3d929f6 to 1d92903 Compare July 9, 2026 18:06
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency @tailwindcss/postcss to v4.1.12 (main) chore(deps): update dependency @tailwindcss/postcss to v4.1.12 (main) - autoclosed Jul 15, 2026
@mend-for-github-com
mend-for-github-com Bot deleted the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch July 15, 2026 13:26
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency @tailwindcss/postcss to v4.1.12 (main) - autoclosed chore(deps): update dependency @tailwindcss/postcss to v4.1.15 (main) Jul 15, 2026
@mend-for-github-com mend-for-github-com Bot reopened this Jul 15, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch from 1d92903 to 0d1e229 Compare July 15, 2026 19:22
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch from 0d1e229 to 5378bc4 Compare July 23, 2026 07:05
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency @tailwindcss/postcss to v4.1.15 (main) chore(deps): update dependency @tailwindcss/postcss to v4.1.15 (main) - autoclosed Jul 23, 2026
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency @tailwindcss/postcss to v4.1.15 (main) - autoclosed chore(deps): update dependency @tailwindcss/postcss to v4.1.12 (main) Jul 23, 2026
@mend-for-github-com mend-for-github-com Bot reopened this Jul 23, 2026
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/main-tailwindcss-postcss-4.1.x-lockfile branch 2 times, most recently from 5378bc4 to cfb07c1 Compare July 23, 2026 12:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants