Bump the all-dependencies group with 5 updates

[dependabot]

Bumps the all-dependencies group with 5 updates:

Package	From	To
@mdn/browser-compat-data	7.3.16	8.0.0
postcss	8.5.14	8.5.15
semver	7.8.0	7.8.1
stylelint	17.11.1	17.12.0
web-features	3.27.0	3.29.0

Updates @mdn/browser-compat-data from 7.3.16 to 8.0.0

Release notes

Sourced from @​mdn/browser-compat-data's releases.

v8.0.0

Breaking changes

This release introduces two breaking changes in the TypeScript definitions. The shape of the published data.json has not changed.

Summary: The published TypeScript definitions (types.d.ts) now fully match the actual shape of the published data.json. Two existing types are now stricter.

1. source_file is now required on CompatStatement (#29041)

Previously, the CompatStatement.source_file property was optional in the TypeScript definitions, even though it is always present in published data.json releases (it is generated at build time).

Now, source_file is typed as required, matching the actual shape of the data.

Impact: You may need to remove checks for a missing source_file (e.g. if (compat.source_file)).

2. BrowserStatement.upstream is narrowed to UpstreamBrowserName (#29041)

Previously, the BrowserStatement.upstream property was typed as BrowserName, allowing any of the 17 known browser keys.

Now, upstream is typed as the new UpstreamBrowserName, a subset of BrowserName containing only the browsers that other browsers actually derive from: "chrome" | "chrome_android" | "firefox" | "safari" | "safari_ios".

Impact: You may need to widen the type when passing upstream into functions expecting a full BrowserName, or switch on the narrower set.

Statistics

• 2 contributors have changed 91 files with 1,681 additions and 784 deletions in 1 commit (v7.3.17...v8.0.0)
• 19,752 total features
• 1,250 total contributors
• 5,671 total stargazers

v7.3.17

Additions

• api.Element.getAnimations.options_parameter (#29728)
• api.Element.getAnimations.options_parameter.pseudoElement_option (#29728)
• browsers.firefox_android.releases.154 (#29712)
• browsers.firefox.releases.154 (#29712)
• mathml.elements.a (#29706)
• mathml.elements.a.href (#29706)

Statistics

• 9 contributors have changed 21 files with 260 additions and 73 deletions in 14 commits (next...v7.3.17)
• 19,752 total features
• 1,250 total contributors
• 5,671 total stargazers

Changelog

Sourced from @​mdn/browser-compat-data's changelog.

v8.0.0

May 22, 2026

Breaking changes

This release introduces two breaking changes in the TypeScript definitions. The shape of the published data.json has not changed.

Summary: The published TypeScript definitions (types.d.ts) now fully match the actual shape of the published data.json. Two existing types are now stricter.

1. source_file is now required on CompatStatement (#29041)

Previously, the CompatStatement.source_file property was optional in the TypeScript definitions, even though it is always present in published data.json releases (it is generated at build time).

Now, source_file is typed as required, matching the actual shape of the data.

Impact: You may need to remove checks for a missing source_file (e.g. if (compat.source_file)).

2. BrowserStatement.upstream is narrowed to UpstreamBrowserName (#29041)

Previously, the BrowserStatement.upstream property was typed as BrowserName, allowing any of the 17 known browser keys.

Now, upstream is typed as the new UpstreamBrowserName, a subset of BrowserName containing only the browsers that other browsers actually derive from: "chrome" | "chrome_android" | "firefox" | "safari" | "safari_ios".

Impact: You may need to widen the type when passing upstream into functions expecting a full BrowserName, or switch on the narrower set.

Statistics

• 2 contributors have changed 91 files with 1,681 additions and 784 deletions in 1 commit (v7.3.17...v8.0.0)
• 19,752 total features
• 1,250 total contributors
• 5,671 total stargazers

Older Versions

• v7.x
• v6.x
• v5.x
• v4.x
• v3.x
• v2.x
• v1.x
• v0.x

Commits

• d256a4f Release v8.0.0 (#29732)
• abb8617 feat(schemas)!: separate public from internal schema (#29041)
• c3e4c25 Release v7.3.17 (#29693)
• 08d5df8 ci(issue-regex-labeler): revert dot escaping (#29705)
• d87be35 Safari TP takes transforms into account for anchor positioning (#29731)
• 6d105f4 Firefox 152 adds Element.getAnimations() pseudoElement option (#29728)
• 178c9d2 Firefox 152 adds RTCEncoded*Frame receiveTime (#29727)
• d043715 Firefox 152 adds Notification.maxActions + NotificationEvent.action (#29726)
• 4def08c Update browser releases (#29712)
• b76aa14 Edge's privacy preserving ads API never shipped (#29723)
• Additional commits viewable in compare view

Updates postcss from 8.5.14 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

• Fixed declaration parsing performance (by @​homanp).

Changelog

Sourced from postcss's changelog.

8.5.15

• Fixed declaration parsing performance (by @​homanp).

Commits

• eae46db Release 8.5.15 version
• 79508ff Update CI actions
• b128e21 Speed up declaration parsing by avoiding creating new array on each token
• 9825dca Fix code format
• 55789c8 Update dependencies
• 84fbbe9 Install older pnpm action for old Node.js
• 9f860bd Revert pnpm action for old Node.js
• 0877198 Update CI actions
• b2d1a33 Fix linter warnings
• 0700dac Merge pull request #2088 from rootvector2/add-oss-fuzz-harness
• Additional commits viewable in compare view

Updates semver from 7.8.0 to 7.8.1

Release notes

Sourced from semver's releases.

v7.8.1

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (#867) (@​puneetdixit200, Puneet Dixit)

Changelog

Sourced from semver's changelog.

7.8.1 (2026-05-21)

Bug Fixes

• 17aa702 #869 strip build metadata before comparator trimming (#869) (@​owlstronaut)
• 5f3ca13 #867 handle prerelease bounds in subset (#867) (@​puneetdixit200, Puneet Dixit)

Commits

• 7641608 chore: release 7.8.1 (#868)
• 17aa702 fix: strip build metadata before comparator trimming (#869)
• 5f3ca13 fix: handle prerelease bounds in subset (#867)
• See full diff in compare view

Updates stylelint from 17.11.1 to 17.12.0

Release notes

Sourced from stylelint's releases.

17.12.0

It fixes 3 bugs, including a false negative one.

• Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
• Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

Changelog

Sourced from stylelint's changelog.

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

• Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
• Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

Commits

• 5830fba Release 17.12.0 (#9304)
• 49ed06f Bump file-entry-cache from 11.1.2 to 11.1.3 (#9302)
• d120212 Bump lint-staged from 16.4.0 to 17.0.4 (#9301)
• d332784 Bump the jest group with 2 updates (#9300)
• d2d4a53 Fix declaration-property-value-no-unknown false negatives for custom proper...
• 05088f1 Fix block-no-empty reported range when using comments (#9294)
• 757bbcb Fix Yarn PnP system test with Node.js v24.15.0 (#9295)
• b06204e Fix value-keyword-layout-mappings false positives for caption-side (#9293)
• See full diff in compare view

Updates web-features from 3.27.0 to 3.29.0

Release notes

Sourced from web-features's releases.

v3.29.0

What's New

• 3 features: ad-selection, protected-audience, reporting-crashes-storage
• 5 status changes:
  • Baseline newly available: container-style-queries
  • Baseline widely available: lh, rlh, user-activation, webauthn-public-key-easy

What's Changed

• Add crash report storage feature by @​ddbeck in web-platform-dx/web-features#3816
• webauthn-public-key-easy: pin status to common algorithm by @​ddbeck in web-platform-dx/web-features#4020
• Add more compat keys to setinterval and settimeout by @​ddbeck in web-platform-dx/web-features#4061
• Add protected-audience and ad-selection features by @​ddbeck in web-platform-dx/web-features#2635
• Revise fetch-request-streams compat keys and description by @​ddbeck in web-platform-dx/web-features#4055
• Bump @​mdn/browser-compat-data from 7.3.16 to 7.3.17 by @​dependabot[bot] in web-platform-dx/web-features#4066

Full Changelog: web-platform-dx/web-features@v3.28.0...v3.29.0

Subscribe to the Upcoming changes announcements thread for news about upcoming releases, such as breaking changes or major features.

v3.28.0

What's New

• 2 features: meta-refresh, text-fit
• 4 status changes:
  • Baseline newly available: baseline-shift, open-pseudo, toggleevent-source, wasm-branch-hinting

What's Changed

• Simplify the names of two CSS function features by @​ddbeck in web-platform-dx/web-features#4031
• Add meta refresh feature by @​ddbeck in web-platform-dx/web-features#4038
• Add text-fit CSS property feature by @​ddbeck in web-platform-dx/web-features#4037
• anchor-positioning: add more compat keys by @​ddbeck in web-platform-dx/web-features#4019
• Bump @​mdn/browser-compat-data from 7.3.15 to 7.3.16 by @​dependabot[bot] in web-platform-dx/web-features#4050

Full Changelog: web-platform-dx/web-features@v3.27.0...v3.28.0

Subscribe to the Upcoming changes announcements thread for news about upcoming releases, such as breaking changes or major features.

Commits

• 00520db Increment minor version to v3.29.0 (#4068)
• 8d644e3 Bump the types-node group across 2 directories with 1 update (#4056)
• 311b055 Increment minor version to v3.28.0 (#4053)
• 2e602b0 Bump the types-node group across 2 directories with 1 update (#4040)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[netlify]

✅ Deploy Preview for cssdb ready!

Name	Link
🔨 Latest commit	51c5f9e
🔍 Latest deploy log	https://app.netlify.com/projects/cssdb/deploys/6a1cbe1cd176940008d2df84
😎 Deploy Preview	https://deploy-preview-513--cssdb.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.