Skip to content

PXG-1351: fix moderate security vulnerability in postcss by upgrading stylelint#151

Merged
hanllo merged 25 commits intomainfrom
PXG-1351-fix-high-security-vulnerabilities-in-design-system-toolkit-2
Apr 16, 2025
Merged

PXG-1351: fix moderate security vulnerability in postcss by upgrading stylelint#151
hanllo merged 25 commits intomainfrom
PXG-1351-fix-high-security-vulnerabilities-in-design-system-toolkit-2

Conversation

@hanllo
Copy link
Copy Markdown
Contributor

@hanllo hanllo commented Apr 15, 2025

  • Fixes last moderate vulnerability according to npm audit:
postcss  <8.4.31
Severity: moderate
PostCSS line return parsing error - https://github.com/advisories/GHSA-7fh5-64p2-3v2j
fix available via `npm audit fix --force`
Will install stylelint-order@6.0.4, which is a breaking change
node_modules/postcss
  autoprefixer  1.0.20131222 - 9.8.8
  Depends on vulnerable versions of postcss
  node_modules/autoprefixer
    stylelint  0.1.0 - 13.13.1
    Depends on vulnerable versions of autoprefixer
    Depends on vulnerable versions of postcss
    Depends on vulnerable versions of postcss-less
    Depends on vulnerable versions of postcss-safe-parser
    Depends on vulnerable versions of postcss-sass
    Depends on vulnerable versions of postcss-scss
    Depends on vulnerable versions of sugarss
    node_modules/stylelint
      stylelint-order  <=4.1.0
      Depends on vulnerable versions of postcss
      Depends on vulnerable versions of postcss-sorting
      Depends on vulnerable versions of stylelint
      node_modules/stylelint-order
      stylelint-scss  0.0.0-alpha.1 || 1.0.0 - 3.21.0
      Depends on vulnerable versions of stylelint
      node_modules/stylelint-scss
  postcss-less  <=3.1.4
  Depends on vulnerable versions of postcss
  node_modules/postcss-less
  postcss-safe-parser  <=4.0.2
  Depends on vulnerable versions of postcss
  node_modules/postcss-safe-parser
  postcss-sass  <=0.4.4
  Depends on vulnerable versions of postcss
  node_modules/postcss-sass
  postcss-scss  <=2.1.1
  Depends on vulnerable versions of postcss
  node_modules/postcss-scss
  postcss-sorting  <=5.0.1
  Depends on vulnerable versions of postcss
  node_modules/postcss-sorting
  sugarss  <=2.0.0
  Depends on vulnerable versions of postcss
  node_modules/sugarss

@netlify
Copy link
Copy Markdown

netlify bot commented Apr 15, 2025

Deploy Preview for ofh-design-system-docs ready!

Name Link
🔨 Latest commit 49f1909
🔍 Latest deploy log https://app.netlify.com/sites/ofh-design-system-docs/deploys/67fe792f30d21800089f9088
😎 Deploy Preview https://deploy-preview-151--ofh-design-system-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@hanllo hanllo changed the title Pxg 1351 fix high security vulnerabilities in design system toolkit 2 PXG-1351: fix moderate security vulnerability in postcss by upgrading stylelint Apr 15, 2025
@hanllo hanllo force-pushed the PXG-1351-fix-high-security-vulnerabilities-in-design-system-toolkit-2 branch from 16d4181 to 49f1909 Compare April 15, 2025 15:20
@hanllo hanllo marked this pull request as ready for review April 15, 2025 15:23
@hanllo hanllo merged commit d010336 into main Apr 16, 2025
5 checks passed
@hanllo hanllo deleted the PXG-1351-fix-high-security-vulnerabilities-in-design-system-toolkit-2 branch April 16, 2025 10:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants