-
-
Notifications
You must be signed in to change notification settings - Fork 5
build(deps-dev): bump postcss from 8.5.4 to 8.5.6 #279
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.4 to 8.5.6. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.4...8.5.6) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.6 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
Reviewer's GuideThis PR upgrades postcss from 8.5.4 to 8.5.6 by updating its specifier, version entries, and integrity hashes in pnpm-lock.yaml and package.json, adjusts related nested dependencies (autoprefixer, postcss-import/js/load-config/nested), and bumps several @jridgewell mapping sub-dependencies to their latest patch versions. Entity relationship diagram for updated PostCSS and related dependencieserDiagram
PACKAGE_JSON ||--o{ POSTCSS : specifies
PACKAGE_JSON ||--o{ AUTOPREFIXER : specifies
PACKAGE_JSON ||--o{ TAILWINDCSS : specifies
POSTCSS ||--o{ AUTOPREFIXER : dependency
POSTCSS ||--o{ POSTCSS_IMPORT : dependency
POSTCSS ||--o{ POSTCSS_JS : dependency
POSTCSS ||--o{ POSTCSS_LOAD_CONFIG : dependency
POSTCSS ||--o{ POSTCSS_NESTED : dependency
POSTCSS ||--o{ JRIDGEWELL_SOURCE_MAP : dependency
JRIDGEWELL_SOURCE_MAP ||--o{ JRIDGEWELL_GEN_MAPPING : dependency
JRIDGEWELL_GEN_MAPPING ||--o{ JRIDGEWELL_SOURCEMAP_CODEC : dependency
JRIDGEWELL_GEN_MAPPING ||--o{ JRIDGEWELL_TRACE_MAPPING : dependency
JRIDGEWELL_TRACE_MAPPING ||--o{ JRIDGEWELL_SOURCEMAP_CODEC : dependency
PACKAGE_JSON {
string name
string version
string devDependencies
}
POSTCSS {
string version
}
AUTOPREFIXER {
string version
string postcss
}
TAILWINDCSS {
string version
}
POSTCSS_IMPORT {
string version
string postcss
}
POSTCSS_JS {
string version
string postcss
}
POSTCSS_LOAD_CONFIG {
string version
string postcss
}
POSTCSS_NESTED {
string version
string postcss
}
JRIDGEWELL_SOURCE_MAP {
string version
string gen-mapping
string trace-mapping
}
JRIDGEWELL_GEN_MAPPING {
string version
string sourcemap-codec
string trace-mapping
}
JRIDGEWELL_SOURCEMAP_CODEC {
string version
}
JRIDGEWELL_TRACE_MAPPING {
string version
string resolve-uri
string sourcemap-codec
}
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
|
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
|



Bumps postcss from 8.5.4 to 8.5.6.
Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
91d6eb5Release 8.5.6 version65ffc55Update dependenciesecd20ebFix ContainerWithChildren to allow discriminating the node type by comparing ...c181597Release 8.5.5 versionc5523fbUpdate dependencies2e3450crefactor:importshould be listed beforerequire(#2052)4d720bdUpdate EM textYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by Sourcery
Bump PostCSS from v8.5.4 to v8.5.6 in dev dependencies and refresh the lockfile to include updated patch versions
Build: