chore(deps-dev): bump the weekly-node-patches group across 1 directory with 9 updates by dependabot[bot] · Pull Request #300 · rosenpass/rosenpass-website

dependabot · 2026-10-05T02:16:36Z

Bumps the weekly-node-patches group with 9 updates in the / directory:

Package	From	To
postcss	`8.5.26`	`8.5.28`
baseline-browser-mapping	`2.11.18`	`2.11.27`
caniuse-lite	`1.0.30001809`	`1.0.30001814`
electron-to-chromium	`1.5.412`	`1.5.444`
fs-extra	`11.4.0`	`11.4.1`
node-releases	`2.0.53`	`2.0.57`
source-map-js	`1.2.1`	`1.2.2`
update-browserslist-db	`1.3.1`	`1.3.3`
yaml	`2.9.0`	`2.9.1`

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Changelog

Sourced from postcss's changelog.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Commits

e544bff Release 8.5.28 version
f8fc252 Typo
5039fd7 Add missed release notes
ae40ca4 Release 8.5.27 version
62b1626 Fix linter
1dba938 Update dependencies
3e82edc Keep non-annotation comments when the processor has no plugins (#2150)
6d23bc3 Fix link
508e997 Add GitHub Sponsors link
e993739 Add CodeRabbit sponsor (#2145)
Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.11.18 to 2.11.27

Commits

6141d06 Patch to 2.11.27 because browser or feature data changed
e1d166b Browser or feature data changed
42972a7 Updating static site
c1934c6 Patch to 2.11.26 because browser or feature data changed
4873684 Browser or feature data changed
9030798 Updating static site
a5df351 Updating static site
ecc5b54 Updating static site
719bf7a Patch to 2.11.25 because browser or feature data changed
c4f5b49 Browser or feature data changed
Additional commits viewable in compare view

Updates caniuse-lite from 1.0.30001809 to 1.0.30001814

Commits

663dbe9 Update caniuse-db 1.0.30001814
405baf1 Update caniuse-db 1.0.30001813
c890d6a Update caniuse-db 1.0.30001812
b86caab Update caniuse-db 1.0.30001810
See full diff in compare view

Updates electron-to-chromium from 1.5.412 to 1.5.444

Commits

d391884 1.5.444
202b47d generate new version
d330a11 1.5.443
27fc1c4 generate new version
0fa8331 1.5.442
79611e6 generate new version
781c0b2 1.5.441
b891b61 generate new version
934130a 1.5.440
85084e5 generate new version
Additional commits viewable in compare view

Updates fs-extra from 11.4.0 to 11.4.1

Changelog

Sourced from fs-extra's changelog.

11.4.1 / 2026-09-22

Properly handle read errors (e.g. due to permissions) in emptyDir*() (#1080)

Allow renaming with only Unicode normalization difference in the filename (APFS-specific) (#859, #1079)

Commits

1e223d3 11.4.1
8cfd0a0 Remove obsolete docs note
de72292 Treat Unicode-normalization-only renames like case-only renames (#1079)
7e0ce7f Remove broken link (#1083)
00e858c Update GH Actions versions (#1082)
f829cc9 fix: propagate emptyDir directory read errors (#1080)
See full diff in compare view

Updates node-releases from 2.0.53 to 2.0.57

Commits

d29b26a 2.0.57
8607968 feat: Nightly Sync
8f44709 2.0.56
5cfca96 feat: Nightly Sync
e3cb9ed 2.0.55
3a2c5d4 feat: Nightly Sync
2e5bc57 2.0.54
c70766c feat: Nightly Sync
See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

Commits

0a1d334 1.2.2
4c6fa26 Update changelog
cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
See full diff in compare view

Updates update-browserslist-db from 1.3.1 to 1.3.3

Release notes

Sourced from update-browserslist-db's releases.

1.3.3

Fixed pnpm minimumReleaseAge compatibility.

1.3.2

Fixed --version output (by @keshavagr025).

Fixed npm version detection (by @keshavagr025).

Fixed Bun support (by @keshavagr025).

Fixed Deno support on new Deno versions (by @keshavagr025).

Fixed error message on missing package manager (by @keshavagr025).

Fixed pnpm 12 support.

Changelog

Sourced from update-browserslist-db's changelog.

1.3.3

Fixed pnpm minimumReleaseAge compatibility.

1.3.2

Fixed --version output (by @keshavagr025).

Fixed npm version detection (by @keshavagr025).

Fixed Bun support (by @keshavagr025).

Fixed Deno support on new Deno versions (by @keshavagr025).

Fixed error message on missing package manager (by @keshavagr025).

Fixed pnpm 12 support.

Commits

6f17ab5 Release 1.3.3 version
eabca8a Fix on CI
5cddd7b Update dependencies
24c624a Update caniuse-lite to prev. version if the latest violate minimumReleaseAge
eb0bd10 Release 1.3.2 version
e6d8d13 Fix code format
35c9ba7 Make pnpm test more flexible for pnpm version
edcb735 Fix pnpm 12 support
8bb8938 Add test
6895267 Fix error trigger
Additional commits viewable in compare view

Updates yaml from 2.9.0 to 2.9.1

Release notes

Sourced from yaml's releases.

v2.9.1

Limit recursive merge aliases (#685, #713)

Simplify line unfolding during quoted string parsing (#714)

Commits

1440ecd 2.9.1
c699bc5 fix: Simplify line unfolding during quoted string parsing (#714)
d11ce77 fix: Limit recursive merge aliases (#713)
c5f49f4 chore: Update docs-slate
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 9 updates Bumps the weekly-node-patches group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.11.18` | `2.11.27` | | [caniuse-lite](https://github.com/browserslist/caniuse-lite) | `1.0.30001809` | `1.0.30001814` | | [electron-to-chromium](https://github.com/Kilian/electron-to-chromium) | `1.5.412` | `1.5.444` | | [fs-extra](https://github.com/jprichardson/node-fs-extra) | `11.4.0` | `11.4.1` | | [node-releases](https://github.com/chicoxyzzy/node-releases) | `2.0.53` | `2.0.57` | | [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` | | [update-browserslist-db](https://github.com/browserslist/update-db) | `1.3.1` | `1.3.3` | | [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` | Updates `postcss` from 8.5.26 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.28) Updates `baseline-browser-mapping` from 2.11.18 to 2.11.27 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.11.18...v2.11.27) Updates `caniuse-lite` from 1.0.30001809 to 1.0.30001814 - [Commits](browserslist/caniuse-lite@1.0.30001809...1.0.30001814) Updates `electron-to-chromium` from 1.5.412 to 1.5.444 - [Changelog](https://github.com/Kilian/electron-to-chromium/blob/main/CHANGELOG.md) - [Commits](Kilian/electron-to-chromium@v1.5.412...v1.5.444) Updates `fs-extra` from 11.4.0 to 11.4.1 - [Changelog](https://github.com/jprichardson/node-fs-extra/blob/master/CHANGELOG.md) - [Commits](jprichardson/node-fs-extra@11.4.0...11.4.1) Updates `node-releases` from 2.0.53 to 2.0.57 - [Commits](chicoxyzzy/node-releases@v2.0.53...v2.0.57) Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) Updates `update-browserslist-db` from 1.3.1 to 1.3.3 - [Release notes](https://github.com/browserslist/update-db/releases) - [Changelog](https://github.com/browserslist/update-db/blob/main/CHANGELOG.md) - [Commits](browserslist/update-db@1.3.1...1.3.3) Updates `yaml` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/eemeli/yaml/releases) - [Commits](eemeli/yaml@v2.9.0...v2.9.1) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.28 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: baseline-browser-mapping dependency-version: 2.11.27 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: caniuse-lite dependency-version: 1.0.30001814 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: electron-to-chromium dependency-version: 1.5.444 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: fs-extra dependency-version: 11.4.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: node-releases dependency-version: 2.0.57 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: update-browserslist-db dependency-version: 1.3.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches - dependency-name: yaml dependency-version: 2.9.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: weekly-node-patches ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 5, 2026

dependabot Bot requested a review from a team as a code owner October 5, 2026 02:16

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 5, 2026

Navigation Menu

Repository navigation

chore(deps-dev): bump the weekly-node-patches group across 1 directory with 9 updates - #300

chore(deps-dev): bump the weekly-node-patches group across 1 directory with 9 updates#300
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/weekly-node-patches-e13398c327

dependabot Bot commented on behalf of github Oct 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026

8.5.28

8.5.27

8.5.28

8.5.27

11.4.1 / 2026-09-22

v1.2.2

1.2.2

1.3.3

1.3.2

1.3.3

1.3.2

v2.9.1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants