Skip to content

Bump the production-dependencies group across 1 directory with 2 updates#1815

Merged
romainmenke merged 4 commits intomainfrom
dependabot/npm_and_yarn/production-dependencies-ce9d680402
Apr 27, 2026
Merged

Bump the production-dependencies group across 1 directory with 2 updates#1815
romainmenke merged 4 commits intomainfrom
dependabot/npm_and_yarn/production-dependencies-ce9d680402

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Bumps the production-dependencies group with 2 updates in the / directory: postcss and autoprefixer.

Updates postcss from 8.5.8 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Commits

Updates autoprefixer from 10.4.27 to 10.5.0

Release notes

Sourced from autoprefixer's releases.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Changelog

Sourced from autoprefixer's changelog.

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates in the / directory: [postcss](https://github.com/postcss/postcss) and [autoprefixer](https://github.com/postcss/autoprefixer).


Updates `postcss` from 8.5.8 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.8...8.5.10)

Updates `autoprefixer` from 10.4.27 to 10.5.0
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.5.0)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: autoprefixer
  dependency-version: 10.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cli common-tools dependencies Pull requests that update a dependency file experimental javascript Pull requests that update Javascript code plugin-packs/postcss-bundler plugin-packs/postcss-preset-env plugins/css-blank-pseudo plugins/css-has-pseudo plugins/css-prefers-color-scheme plugins/media-queries-aspect-ratio-number-values plugins/postcss-media-queries-aspect-ratio-number-values plugins/postcss-alpha-function plugins/postcss-attribute-case-insensitive plugins/postcss-browser-comments plugins/postcss-cascade-layers plugins/postcss-color-function plugins/postcss-color-function-display-p3-linear plugins/postcss-color-functional-notation plugins/postcss-color-hex-alpha plugins/postcss-color-mix-function plugins/postcss-color-mix-variadic-function-args plugins/postcss-color-rebeccapurple plugins/postcss-conditional-values plugins/postcss-content-alt-text plugins/postcss-contrast-color-function plugins/postcss-custom-media plugins/postcss-custom-properties plugins/postcss-custom-selectors plugins/postcss-design-tokens plugins/postcss-dir-pseudo-class plugins/postcss-double-position-gradients plugins/postcss-env-function plugins/postcss-exponential-functions plugins/postcss-extract plugins/postcss-focus-visible plugins/postcss-focus-within plugins/postcss-font-format-keywords plugins/postcss-font-width-property plugins/postcss-gamut-mapping plugins/postcss-gap-properties plugins/postcss-global-data plugins/postcss-gradients-interpolation-method plugins/postcss-hwb-function plugins/postcss-ic-unit plugins/postcss-image-set-function plugins/postcss-initial plugins/postcss-is-pseudo-class plugins/postcss-lab-function plugins/postcss-light-dark-function plugins/postcss-logical plugins/postcss-logical-float-and-clear plugins/postcss-logical-resize plugins/postcss-logical-viewport-units plugins/postcss-media-minmax plugins/postcss-minify plugins/postcss-mixins plugins/postcss-nested-calc plugins/postcss-nesting plugins/postcss-normalize-display-values plugins/postcss-oklab-function plugins/postcss-overflow-shorthand plugins/postcss-place plugins/postcss-position-area-property plugins/postcss-progressive-custom-properties plugins/postcss-property-rule-prelude-list plugins/postcss-pseudo-class-any-link plugins/postcss-random-function plugins/postcss-rebase-url plugins/postcss-relative-color-syntax plugins/postcss-rewrite-url plugins/postcss-scope-pseudo-class plugins/postcss-selector-not plugins/postcss-sign-functions plugins/postcss-slow-plugins plugins/postcss-stepped-value-functions PostCSS Stepped Value Functions plugins/postcss-system-ui-font-family plugins/postcss-text-decoration-shorthand plugins/postcss-trigonometric-functions PostCSS Trigonometric Functions plugins/postcss-unset-value plugins/syntax-descriptor-syntax-production plugins/postcss-syntax-descriptor-syntax-production stylelint-plugin

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant