Skip to content

Conversation

Antonio-Laguna
Copy link
Contributor

Hi there!

Thanks for the plugin. We use it extensively at 10up!

We've realised that the plugin contains some vulnerabilities that show up on npm audit. I've taken the opportunity to migrate the whole plugin to PostCSS 8 trying to keep as much of how it was as possible so the change is non-invasive.

Only one test had to change given that exceptions can't use numbers but regexes or strings.

I've also updated the package.json to use standard PostCSS 8 plugins support.

Please let me know if there's anything you'd have feedback on!

@Antonio-Laguna
Copy link
Contributor Author

As a bonus track, this will close all of the remaining pull requests from dependabot :)

@dschenk
Copy link
Member

dschenk commented Feb 10, 2022 via email

@dschenk dschenk merged commit 5f95df7 into gridonic:master Feb 14, 2022
@dschenk
Copy link
Member

dschenk commented Feb 14, 2022

Antonio, thanks again for your contribution. I merged it and released version 2.0.0 🎉

@Antonio-Laguna Antonio-Laguna deleted the postcss-8 branch February 14, 2022 14:38
@Antonio-Laguna
Copy link
Contributor Author

@dschenk thanks! Glad it got out!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants