Update dependency postcss to v8.5.28 #2

Open
renovate wants to merge 1 commit from renovate/postcss-8.x-lockfile into main
Collaborator

This PR contains the following updates:

Package Change Age Confidence
postcss (source) 8.5.6 → 8.5.28 age confidence

Release Notes

postcss/postcss (postcss)

v8.5.28

Compare Source

  • Fixes types regression.

v8.5.27

Compare Source

v8.5.26

Compare Source

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

v8.5.25

Compare Source

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

v8.5.24

Compare Source

  • Preserve the BOM after the processing (by @​hdimer).

v8.5.23

Compare Source

  • Do not load source map without opts.from for security reasons.

v8.5.22

Compare Source

v8.5.21

Compare Source

v8.5.20

Compare Source

v8.5.19

Compare Source

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

v8.5.18

Compare Source

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

v8.5.17

Compare Source

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

v8.5.16

Compare Source

v8.5.15

Compare Source

  • Fixed declaration parsing performance (by @​homanp).

v8.5.14

Compare Source

v8.5.13

Compare Source

  • Fixed postcss-scss commend regression.

v8.5.12

Compare Source

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

v8.5.11

Compare Source

  • Fixed nested brackets parsing performance (by @​offset).

v8.5.10

Compare Source

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

v8.5.9

Compare Source

  • Speed up source map encoding paring in case of the error.

v8.5.8

Compare Source

  • Fixed Processor#version.

v8.5.7

Compare Source

  • Improved source map annotation cleaning performance (by CodeAnt AI).

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • "after 6am and before 6pm"
  • Automerge
    • "after 10am and before 4pm"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [postcss](https://postcss.org/) ([source](https://github.com/postcss/postcss)) | [`8.5.6` → `8.5.28`](https://renovatebot.com/diffs/npm/postcss/8.5.6/8.5.28) | ![age](https://developer.mend.io/api/mc/badges/age/npm/postcss/8.5.28?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/postcss/8.5.6/8.5.28?slim=true) | --- ### Release Notes <details> <summary>postcss/postcss (postcss)</summary> ### [`v8.5.28`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8528) [Compare Source](https://github.com/postcss/postcss/compare/8.5.27...8.5.28) - Fixes types regression. ### [`v8.5.27`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8527) [Compare Source](https://github.com/postcss/postcss/compare/8.5.26...8.5.27) - Fixed removing any comments starting with `/*#` (by [@&#8203;dylanpulver](https://github.com/dylanpulver)). - Fixed `*` hack before a comment in Custom Properties (by [@&#8203;Jaybhade](https://github.com/Jaybhade)). - Fixed empty values in the middle of `list.comma()` (by [@&#8203;MahinAnowar](https://github.com/MahinAnowar)). - Fixed whitespace-only values in `list.space()` (by [@&#8203;MahinAnowar](https://github.com/MahinAnowar)). - Fixed rule’s end position on space before semicolon (by [@&#8203;maximilliangrand](https://github.com/maximilliangrand)). - Fixed types (by [@&#8203;romainmenke](https://github.com/romainmenke)). - Fixed Chinese text in deprecation warning (by [@&#8203;Jesse205](https://github.com/Jesse205)). ### [`v8.5.26`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8526) [Compare Source](https://github.com/postcss/postcss/compare/8.5.25...8.5.26) - Fixed `list.split()` regression (by [@&#8203;lazerg](https://github.com/lazerg)). - Track symlinks in path protection in source map loading (by [@&#8203;drengir1](https://github.com/drengir1)). ### [`v8.5.25`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8525) [Compare Source](https://github.com/postcss/postcss/compare/8.5.24...8.5.25) - Fixed 8.5.17 visitor regression. - Fixed `list.split()` for non-string values (by [@&#8203;amir-rezaei](https://github.com/amir-rezaei)). ### [`v8.5.24`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8524) [Compare Source](https://github.com/postcss/postcss/compare/8.5.23...8.5.24) - Preserve the BOM after the processing (by [@&#8203;hdimer](https://github.com/hdimer)). ### [`v8.5.23`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8523) [Compare Source](https://github.com/postcss/postcss/compare/8.5.22...8.5.23) - Do not load source map without `opts.from` for security reasons. ### [`v8.5.22`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8522) [Compare Source](https://github.com/postcss/postcss/compare/8.5.21...8.5.22) - Fixed custom property losing semicolon before a comment (by [@&#8203;sarathfrancis90](https://github.com/sarathfrancis90)). ### [`v8.5.21`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8521) [Compare Source](https://github.com/postcss/postcss/compare/8.5.20...8.5.21) - Fixed childless at-rule losing semicolon before comment (by [@&#8203;sarathfrancis90](https://github.com/sarathfrancis90)). - Fixed docs (by [@&#8203;isker](https://github.com/isker)). ### [`v8.5.20`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8520) [Compare Source](https://github.com/postcss/postcss/compare/8.5.19...8.5.20) - Fixed missing space if `AtRule#params` is set after (by [@&#8203;sarathfrancis90](https://github.com/sarathfrancis90)). - Fixed mixing AST error on warnings (by [@&#8203;MahinAnowar](https://github.com/MahinAnowar)). ### [`v8.5.19`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8519) [Compare Source](https://github.com/postcss/postcss/compare/8.5.18...8.5.19) - Fixed cleaning `before` for new nodes inserted to `Root` (by [@&#8203;MahinAnowar](https://github.com/MahinAnowar)). ### [`v8.5.18`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8518) [Compare Source](https://github.com/postcss/postcss/compare/8.5.17...8.5.18) - Restricted loading previous source maps file to the `opts.from` folder for security reasons (use `unsafeMap: true` to disable the check). ### [`v8.5.17`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8517) [Compare Source](https://github.com/postcss/postcss/compare/8.5.16...8.5.17) - Fixed `Maximum call stack size exceeded` error. - Fixed Prototype hijacking for `postcss.fromJSON()`. - Fixed `Input#origin()` for unmapped end position (by [@&#8203;chatman-media](https://github.com/chatman-media)). ### [`v8.5.16`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8516) [Compare Source](https://github.com/postcss/postcss/compare/8.5.15...8.5.16) - Fixed `Input#origin()` position (by [@&#8203;mizdra](https://github.com/mizdra)). - Fixed `raws` after rehydrating a JSON AST (by [@&#8203;sarathfrancis90](https://github.com/sarathfrancis90)). - Fixed putting parent-less node in `nodes` of new node (by [@&#8203;MahinAnowar](https://github.com/MahinAnowar)). - Fixed computing `offset` in `positionBy()` (by [@&#8203;greymoth-jp](https://github.com/greymoth-jp)). - Fixed `rangeBy()` on `index: 0` (by [@&#8203;sarathfrancis90](https://github.com/sarathfrancis90)). ### [`v8.5.15`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8515) [Compare Source](https://github.com/postcss/postcss/compare/8.5.14...8.5.15) - Fixed declaration parsing performance (by [@&#8203;homanp](https://github.com/homanp)). ### [`v8.5.14`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8514) [Compare Source](https://github.com/postcss/postcss/compare/8.5.13...8.5.14) - Fixed custom syntax regression (by [@&#8203;43081j](https://github.com/43081j)). ### [`v8.5.13`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8513) [Compare Source](https://github.com/postcss/postcss/compare/8.5.12...8.5.13) - Fixed `postcss-scss` commend regression. ### [`v8.5.12`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8512) [Compare Source](https://github.com/postcss/postcss/compare/8.5.11...8.5.12) - Fixed reading any file via user-generated CSS. - Added `opts.unsafeMap` to disable checks. ### [`v8.5.11`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8511) [Compare Source](https://github.com/postcss/postcss/compare/8.5.10...8.5.11) - Fixed nested brackets parsing performance (by [@&#8203;offset](https://github.com/offset)). ### [`v8.5.10`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#8510) [Compare Source](https://github.com/postcss/postcss/compare/8.5.9...8.5.10) - Fixed XSS via unescaped `</style>` in non-bundler cases (by [@&#8203;TharVid](https://github.com/TharVid)). ### [`v8.5.9`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#859) [Compare Source](https://github.com/postcss/postcss/compare/8.5.8...8.5.9) - Speed up source map encoding paring in case of the error. ### [`v8.5.8`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#858) [Compare Source](https://github.com/postcss/postcss/compare/8.5.7...8.5.8) - Fixed `Processor#version`. ### [`v8.5.7`](https://github.com/postcss/postcss/blob/HEAD/CHANGELOG.md#857) [Compare Source](https://github.com/postcss/postcss/compare/8.5.6...8.5.7) - Improved source map annotation cleaning performance (by CodeAnt AI). </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - "after 6am and before 6pm" - Automerge - "after 10am and before 4pm" 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zNC4xIiwidXBkYXRlZEluVmVyIjoiNDQuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate force-pushed renovate/postcss-8.x-lockfile from 5daacc559f to a44ea04084 2026-08-28 16:40:23 +02:00 Compare
renovate changed title from Update dependency postcss to v8.5.26 to Update dependency postcss to v8.5.27 2026-09-03 10:24:54 +02:00
renovate force-pushed renovate/postcss-8.x-lockfile from a44ea04084 to 673bf5a35c 2026-09-03 10:24:54 +02:00 Compare
renovate force-pushed renovate/postcss-8.x-lockfile from 673bf5a35c to 4053f06bc5 2026-09-03 17:29:09 +02:00 Compare
renovate changed title from Update dependency postcss to v8.5.27 to Update dependency postcss to v8.5.28 2026-09-03 17:29:11 +02:00
renovate force-pushed renovate/postcss-8.x-lockfile from 4053f06bc5 to 42a7a78e06 2026-09-10 20:04:57 +02:00 Compare
renovate force-pushed renovate/postcss-8.x-lockfile from 42a7a78e06 to 2a514c1776 2026-09-23 14:38:19 +02:00 Compare
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/postcss-8.x-lockfile:renovate/postcss-8.x-lockfile
git switch renovate/postcss-8.x-lockfile

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/postcss-8.x-lockfile
git switch renovate/postcss-8.x-lockfile
git rebase main
git switch main
git merge --ff-only renovate/postcss-8.x-lockfile
git switch renovate/postcss-8.x-lockfile
git rebase main
git switch main
git merge --no-ff renovate/postcss-8.x-lockfile
git switch main
git merge --squash renovate/postcss-8.x-lockfile
git switch main
git merge --ff-only renovate/postcss-8.x-lockfile
git switch main
git merge renovate/postcss-8.x-lockfile
git push origin main
Sign in to join this conversation.
No reviewers
No labels
test
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
TechHome/kuzu.sh!2
No description provided.