Skip to content

chore(deps-dev): bump postcss from 8.5.8 to 8.5.10#4539

Merged
mergify[bot] merged 2 commits intomasterfrom
dependabot/npm_and_yarn/postcss-8.5.10
May 8, 2026
Merged

chore(deps-dev): bump postcss from 8.5.8 to 8.5.10#4539
mergify[bot] merged 2 commits intomasterfrom
dependabot/npm_and_yarn/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps postcss from 8.5.8 to 8.5.10.

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 6, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 6, 2026 22:00
tjuanitas
tjuanitas previously approved these changes May 6, 2026
Comment thread yarn.lock Outdated
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 39afb0e to 630e8c4 Compare May 7, 2026 01:29
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.8 to 8.5.10.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.8...8.5.10)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 630e8c4 to 16e54f9 Compare May 7, 2026 17:26
reneshen0328
reneshen0328 previously approved these changes May 8, 2026
@reneshen0328 reneshen0328 dismissed stale reviews from tjuanitas and themself via c793321 May 8, 2026 01:55
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented May 8, 2026

Merge Queue Status

  • Entered queue2026-05-08 02:41 UTC · Rule: Automatic strict merge
  • Checks skipped · PR is already up-to-date
  • Merged2026-05-08 02:42 UTC · at c7933214227a4654b181778f904e2e35b357b394 · squash

This pull request spent 15 seconds in the queue, including 2 seconds running CI.

Required conditions to merge

@mergify mergify Bot merged commit 69d3ca2 into master May 8, 2026
10 checks passed
@mergify mergify Bot deleted the dependabot/npm_and_yarn/postcss-8.5.10 branch May 8, 2026 02:42
@mergify mergify Bot removed the queued label May 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code ready-to-merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants