Skip to content

build(deps): bump postcss from 8.5.15 to 8.5.20#1795

Merged
cossssmin merged 1 commit into
masterfrom
dependabot/npm_and_yarn/master/postcss-8.5.20
Jul 20, 2026
Merged

build(deps): bump postcss from 8.5.15 to 8.5.20#1795
cossssmin merged 1 commit into
masterfrom
dependabot/npm_and_yarn/master/postcss-8.5.20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss from 8.5.15 to 8.5.20.

Release notes

Sourced from postcss's releases.

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Changelog

Sourced from postcss's changelog.

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Commits
  • c4ac725 Release 8.5.20 version
  • c30586d Fix missing space when AtRule#params is set after parsing (#2113)
  • 5bfc3b9 Update dependencies
  • 24733fd Move back to latest 11 pnpm
  • 728127c Update pnpm to check that CI is fixed
  • 806fe21 Rebuild nodes from another PostCSS copy in Warning (#2112)
  • 337cb7e Improve CI security
  • 7a8ca2d Remove patch after updating dependency
  • 9543b22 Release 8.5.19 version
  • 3d13bf9 Fix CI on Windows too
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 19, 2026
@socket-security

socket-security Bot commented Jul 19, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpostcss@​8.5.16 ⏵ 8.5.20100 +110081 +194100

View full report

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.15 to 8.5.20.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.20)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/master/postcss-8.5.20 branch from c489fa6 to 08cd2d0 Compare July 20, 2026 15:23
@cossssmin
cossssmin merged commit 3d78841 into master Jul 20, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/master/postcss-8.5.20 branch July 20, 2026 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant