Skip to content

Merge main into feature.v2 - #2858

Draft
nex3 wants to merge 104 commits into
feature.v2from
merge-2
Draft

Merge main into feature.v2#2858
nex3 wants to merge 104 commits into
feature.v2from
merge-2

Conversation

@nex3

@nex3 nex3 commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

See sass/sass-spec#2167
See sass/sass#4246

[skip sass-embedded]

nex3 and others added 30 commits February 20, 2026 15:45
@nex3
Always convert printed objects to strings in JS (#2741)
c3f8ff0 
This makes browsers match the behavior in Dart and Node, and
specifically fixes a bug where warnings were emitted as `StringBuffer`
objects rather than console messages.
@nex3
Add Logger.defaultLogger to automatically choose whether to use colors (
4bcd256 
#2742)
@dependabot
Bump eslint from 9.39.3 to 10.0.1 in /pkg/sass-parser (#2743)
e86d044 
Bumps [eslint](https://github.com/eslint/eslint) from 9.39.3 to 10.0.1.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.3...v10.0.1)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jathak
Gracefully handle dependency loops in watch mode (#2746)
7fb3c0f 
Fixes #2744
@dependabot
Bump actions/attest-build-provenance from 3 to 4 (#2748)
0a325a4 
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v3...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump postcss from 8.5.6 to 8.5.8 in /pkg/sass-parser (#2752)
00f83f0 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.6 to 8.5.8.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.8)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/download-artifact from 7 to 8 (#2749)
8b85c9a 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/upload-artifact from 6 to 7 (#2747)
43fac1a 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@Goodwine
Update immutable to v5.1.5 (#2753)
e25e71d
@Goodwine
Bump version to 1.98.0 (#2754)
5a81ae3 
- Ran: dart run grinder bump-version-minor
- Updated `analyzer` package to v10.0.1 in pubspec.yaml. This should be no-op, as the github version was supposedly updated to this version in PR #2730
@nex3
[Function Name] Implement changes (#2731)
a604acd 
See sass/sass#4048
@dependabot
Bump EndBug/add-and-commit from 9 to 10 (#2756)
ec85871 
Bumps [EndBug/add-and-commit](https://github.com/endbug/add-and-commit) from 9 to 10.
- [Release notes](https://github.com/endbug/add-and-commit/releases)
- [Commits](EndBug/add-and-commit@v9...v10)

---
updated-dependencies:
- dependency-name: EndBug/add-and-commit
  dependency-version: '10'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nex3
Support the top-level parent selector (#2758)
83c39fe
@dependabot
Bump postcss from 8.5.8 to 8.5.12 in /pkg/sass-parser (#2766)
1447f9b 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.8 to 8.5.12.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.8...8.5.12)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump postcss from 8.5.12 to 8.5.13 in /pkg/sass-parser (#2767)
8e5f718 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.12 to 8.5.13.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.12...8.5.13)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nex3
Deprecate adjacent compound selectors (#2765)
8c1d984 
See #2759
@ntkme
Bump node engine requirement to >=20.19.0 and chokidar requirement to…
5fd18c7 
… ^5.0.0 (#2769)

* Bump node engine requirement to >=20.19.0

* Bump chokidar requirement to ^5.0.0
@dependabot
Bump postcss from 8.5.13 to 8.5.15 in /pkg/sass-parser (#2774)
7674a4c 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.13 to 8.5.15.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.13...8.5.15)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@ntkme
Migrate from bufbuild/buf-setup-action to bufbuild/buf-action (#2773)
c7e9947
@nex3
Load import-only files through package.json exports (#2772)
63b9922 
See sass/sass#4224
@dependabot @Goodwine @jathak
Bump typescript from 5.9.3 to 6.0.3 in /pkg/sass-parser (#2763)
c598545 
* Bump typescript from 5.9.3 to 6.0.3 in /pkg/sass-parser

Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3.
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* add explicit typings in tsconfig.json

* add resolvePackageJsonExports:false to force tsc to load all typings beyond the 'types' field in package.json for postcss

* Update ts-jest

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos <goodwine@google.com>
Co-authored-by: Jennifer Thakar <jathak@google.com>
@ntkme @nex3
Only humanize urls that have a scheme (#2778)
23dd109 
Co-authored-by: Natalie Weizenbaum <nweiz@google.com>
@dependabot
Bump actions/checkout from 6 to 7 (#2784)
04c0f2e 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/checkout from 6 to 7 in /.github/util/initialize (#2785)
b5697ee 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nex3
Reformat sass-parser with updated Prettier (#2794)
bd6fcf8
@nex3
Add zizmor and fix findings (#2792)
044dae8
@matthewbjones @nex3
Fix --watch not recompiling files modified via atomic save (#2791)
8abfa4d 
Co-authored-by: Natalie Weizenbaum <nweiz@google.com>
@dependabot
Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#2793)
fbb1fe0 
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.6 to 0.5.7.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@5f14fd0...192e21d)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@nex3
Use the latest lints package (#2789)
ab4026d
@dependabot @nex3
Bump analyzer from 10.2.0 to 13.3.0 (#2795)
66f9d41 
* Bump analyzer from 10.2.0 to 13.3.0

Bumps [analyzer](https://github.com/dart-lang/sdk/tree/main/pkg) from 10.2.0 to 13.3.0.
- [Changelog](https://github.com/dart-lang/sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/dart-lang/sdk/commits/HEAD/pkg)

---
updated-dependencies:
- dependency-name: analyzer
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update analyzer usage

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Natalie Weizenbaum <nweiz@google.com>
nex3 and others added 15 commits September 3, 2026 23:17
@nex3
Don't add extra newlines to StyleRule.selector (#2853)
b7c8f27 
This was causing a crash when mapping errors in the selector back to
the original text.

Closes #2848
@nex3
Merge commit '3d28f6a83ff8c16e7b1980f6a4e46d62f1505fce^' into merge-2
c2517f9
@nex3
Merge commit 'd676118ace4b6b196383f26cf5ffda4f9c61b239' into merge-2
f49793d
@nex3
Merge commit '0971ea94' into merge-2
ef42a6e
@nex3
Merge commit 'f3bd86afe8f164180b46702bd8af53ffd6e43d5b' into merge-2
ce94e8b
@dependabot
Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3
fc69ee0 
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@3dc1ecc...70fb788)

---
updated-dependencies:
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Merge pull request #2855 from sass/dependabot/github_actions/zizmorco…
3438f2d 
…re/zizmor-action-0.6.3

Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3
@dependabot
Bump dart-lang/setup-dart from 1.8.0 to 1.8.1
5d74adb 
Bumps [dart-lang/setup-dart](https://github.com/dart-lang/setup-dart) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/dart-lang/setup-dart/releases)
- [Changelog](https://github.com/dart-lang/setup-dart/blob/main/CHANGELOG.md)
- [Commits](dart-lang/setup-dart@7654d45...6afc89d)

---
updated-dependencies:
- dependency-name: dart-lang/setup-dart
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Merge pull request #2856 from sass/dependabot/github_actions/dart-lan…
3018c0d 
…g/setup-dart-1.8.1

Bump dart-lang/setup-dart from 1.8.0 to 1.8.1
@dependabot
Bump dart-lang/setup-dart in /.github/util/initialize
f5263e2 
Bumps [dart-lang/setup-dart](https://github.com/dart-lang/setup-dart) from 1.7.2 to 1.8.1.
- [Release notes](https://github.com/dart-lang/setup-dart/releases)
- [Changelog](https://github.com/dart-lang/setup-dart/blob/main/CHANGELOG.md)
- [Commits](dart-lang/setup-dart@65eb853...6afc89d)

---
updated-dependencies:
- dependency-name: dart-lang/setup-dart
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Merge pull request #2857 from sass/dependabot/github_actions/dot-gith…
f19baab 
…ub/util/initialize/dart-lang/setup-dart-1.8.1

Bump dart-lang/setup-dart from 1.7.2 to 1.8.1 in /.github/util/initialize
@nex3
Avoid duplicating loud comments that appear before @use (#2854)
71a127d 
Closes #2851
Closes #2852
@nex3
Use the primary constructor feature
67fed29
@nex3
Use new Dart core library APIs
05b04ee
@nex3
Use the dot shorthand feature
cca2e7e
@nex3
nex3 changed the base branch from main to feature.v2 September 9, 2026 02:21
github-advanced-security[bot]
github-advanced-security Bot found potential problems Sep 9, 2026
View reviewed changes
Comment thread .github/util/initialize/action.yml Fixed
@nex3
nex3 force-pushed the merge-2 branch 3 times, most recently from d84b0d8 to 89d3359 Compare September 10, 2026 01:03
@nex3 nex3 mentioned this pull request Sep 12, 2026
Draft
@nex3
nex3 requested a review from jathak September 14, 2026 18:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jathak jathak Awaiting requested review from jathak
1 more reviewer
@github-advanced-security github-advanced-security[bot] github-advanced-security[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@nex3 @github-advanced-security @jathak @Goodwine @ntkme @matthewbjones @stygian-ash