From aac0aad19fdd9b633f6fc584338b676f3dd7b2c1 Mon Sep 17 00:00:00 2001 From: Camille Malonzo Date: Wed, 29 Apr 2026 11:22:39 -0400 Subject: [PATCH] Bump postcss@~8.5.10 to address CVE GHSA-qx2v-qp2m-jg93 --- build-tests/heft-sass-test/package.json | 2 +- .../postcss-8.5.10_2026-04-29-15-22.json | 10 + .../postcss-8.5.10_2026-04-29-15-22.json | 10 + .../config/subspaces/default/pnpm-lock.yaml | 307 ++++++++++-------- .../config/subspaces/default/repo-state.json | 2 +- heft-plugins/heft-sass-plugin/package.json | 2 +- rigs/heft-web-rig/package.json | 2 +- 7 files changed, 195 insertions(+), 140 deletions(-) create mode 100644 common/changes/@rushstack/heft-sass-plugin/postcss-8.5.10_2026-04-29-15-22.json create mode 100644 common/changes/@rushstack/heft-web-rig/postcss-8.5.10_2026-04-29-15-22.json diff --git a/build-tests/heft-sass-test/package.json b/build-tests/heft-sass-test/package.json index 493f5d56b5..02d9fe4395 100644 --- a/build-tests/heft-sass-test/package.json +++ b/build-tests/heft-sass-test/package.json @@ -29,7 +29,7 @@ "eslint": "~9.37.0", "html-webpack-plugin": "~4.5.2", "postcss-loader": "~4.1.0", - "postcss": "~8.4.6", + "postcss": "~8.5.10", "react-dom": "~19.2.3", "react": "~19.2.3", "style-loader": "~2.0.0", diff --git a/common/changes/@rushstack/heft-sass-plugin/postcss-8.5.10_2026-04-29-15-22.json b/common/changes/@rushstack/heft-sass-plugin/postcss-8.5.10_2026-04-29-15-22.json new file mode 100644 index 0000000000..ece71303b3 --- /dev/null +++ b/common/changes/@rushstack/heft-sass-plugin/postcss-8.5.10_2026-04-29-15-22.json @@ -0,0 +1,10 @@ +{ + "changes": [ + { + "packageName": "@rushstack/heft-sass-plugin", + "comment": "Bump postcss@~8.5.10 to address CVE GHSA-qx2v-qp2m-jg93", + "type": "patch" + } + ], + "packageName": "@rushstack/heft-sass-plugin" +} \ No newline at end of file diff --git a/common/changes/@rushstack/heft-web-rig/postcss-8.5.10_2026-04-29-15-22.json b/common/changes/@rushstack/heft-web-rig/postcss-8.5.10_2026-04-29-15-22.json new file mode 100644 index 0000000000..15eb0938e4 --- /dev/null +++ b/common/changes/@rushstack/heft-web-rig/postcss-8.5.10_2026-04-29-15-22.json @@ -0,0 +1,10 @@ +{ + "changes": [ + { + "packageName": "@rushstack/heft-web-rig", + "comment": "Bump postcss@~8.5.10 to address CVE GHSA-qx2v-qp2m-jg93", + "type": "patch" + } + ], + "packageName": "@rushstack/heft-web-rig" +} \ No newline at end of file diff --git a/common/config/subspaces/default/pnpm-lock.yaml b/common/config/subspaces/default/pnpm-lock.yaml index f4932e5626..f040150aa2 100644 --- a/common/config/subspaces/default/pnpm-lock.yaml +++ b/common/config/subspaces/default/pnpm-lock.yaml @@ -2165,7 +2165,7 @@ importers: version: 1.18.8 autoprefixer: specifier: ~10.4.2 - version: 10.4.27(postcss@8.4.49) + version: 10.4.27(postcss@8.5.12) css-loader: specifier: ~5.2.7 version: 5.2.7(webpack@4.47.0) @@ -2179,11 +2179,11 @@ importers: specifier: workspace:* version: link:../../eslint/local-eslint-config postcss: - specifier: ~8.4.6 - version: 8.4.49 + specifier: ~8.5.10 + version: 8.5.12 postcss-loader: specifier: ~4.1.0 - version: 4.1.0(postcss@8.4.49)(webpack@4.47.0) + version: 4.1.0(postcss@8.5.12)(webpack@4.47.0) react: specifier: ~19.2.3 version: 19.2.4 @@ -3403,11 +3403,11 @@ importers: specifier: 1.0.6 version: 1.0.6 postcss: - specifier: ~8.4.6 - version: 8.4.49 + specifier: ~8.5.10 + version: 8.5.12 postcss-modules: specifier: ~6.0.0 - version: 6.0.1(postcss@8.4.49) + version: 6.0.1(postcss@8.5.12) sass-embedded: specifier: ~1.85.1 version: 1.85.1 @@ -4726,7 +4726,7 @@ importers: version: 30.0.0 autoprefixer: specifier: ~10.4.2 - version: 10.4.27(postcss@8.4.49) + version: 10.4.27(postcss@8.5.12) css-loader: specifier: ~6.6.0 version: 6.6.0(webpack@5.105.4) @@ -4746,11 +4746,11 @@ importers: specifier: ~2.5.3 version: 2.5.3(webpack@5.105.4) postcss: - specifier: ~8.4.6 - version: 8.4.49 + specifier: ~8.5.10 + version: 8.5.12 postcss-loader: specifier: ~6.2.1 - version: 6.2.1(postcss@8.4.49)(webpack@5.105.4) + version: 6.2.1(postcss@8.5.12)(webpack@5.105.4) sass: specifier: ~1.49.7 version: 1.49.11 @@ -16472,6 +16472,10 @@ packages: resolution: {integrity: sha512-OCVPnIObs4N29kxTjzLfUryOkvZEq+pf8jTF0lg8E7uETuWHA+v7j3c/xJmiqpX450191LlmZfUKkXxkTry7nA==} engines: {node: ^10 || ^12 || >=14} + postcss@8.5.12: + resolution: {integrity: sha512-W62t/Se6rA0Az3DfCL0AqJwXuKwBeYg6nOaIgzP+xZ7N5BFCI7DYi1qs6ygUYT6rvfi6t9k65UMLJC+PHZpDAA==} + engines: {node: ^10 || ^12 || >=14} + prebuild-install@7.1.3: resolution: {integrity: sha512-8Mf2cbV7x1cXPUILADGI3wuhfqWvtiLA1iclTDbFRZkgRQS0NqsPZphna9V+HyTEadheuPmjaJMsbzKQFOzLug==} engines: {node: '>=10'} @@ -28268,13 +28272,13 @@ snapshots: atomically@1.7.0: {} - autoprefixer@10.4.27(postcss@8.4.49): + autoprefixer@10.4.27(postcss@8.5.12): dependencies: browserslist: 4.28.2 caniuse-lite: 1.0.30001784 fraction.js: 5.3.4 picocolors: 1.1.1 - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 autoprefixer@9.8.8: @@ -29442,9 +29446,9 @@ snapshots: crypto-random-string@2.0.0: {} - css-declaration-sorter@6.4.1(postcss@8.4.49): + css-declaration-sorter@6.4.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 css-loader@3.6.0(webpack@4.47.0): dependencies: @@ -29493,12 +29497,12 @@ snapshots: css-loader@6.11.0(@rspack/core@1.6.8(@swc/helpers@0.5.21))(webpack@5.105.4): dependencies: - icss-utils: 5.1.0(postcss@8.4.49) - postcss: 8.4.49 - postcss-modules-extract-imports: 3.1.0(postcss@8.4.49) - postcss-modules-local-by-default: 4.2.0(postcss@8.4.49) - postcss-modules-scope: 3.2.1(postcss@8.4.49) - postcss-modules-values: 4.0.0(postcss@8.4.49) + icss-utils: 5.1.0(postcss@8.5.12) + postcss: 8.5.12 + postcss-modules-extract-imports: 3.1.0(postcss@8.5.12) + postcss-modules-local-by-default: 4.2.0(postcss@8.5.12) + postcss-modules-scope: 3.2.1(postcss@8.5.12) + postcss-modules-values: 4.0.0(postcss@8.5.12) postcss-value-parser: 4.2.0 semver: 7.7.4 optionalDependencies: @@ -29519,9 +29523,9 @@ snapshots: css-minimizer-webpack-plugin@3.4.1(webpack@5.105.4): dependencies: - cssnano: 5.1.15(postcss@8.4.49) + cssnano: 5.1.15(postcss@8.5.12) jest-worker: 27.5.1 - postcss: 8.4.49 + postcss: 8.5.12 schema-utils: 4.3.3 serialize-javascript: 6.0.2 source-map: 0.6.1 @@ -29554,48 +29558,48 @@ snapshots: cssesc@3.0.0: {} - cssnano-preset-default@5.2.14(postcss@8.4.49): - dependencies: - css-declaration-sorter: 6.4.1(postcss@8.4.49) - cssnano-utils: 3.1.0(postcss@8.4.49) - postcss: 8.4.49 - postcss-calc: 8.2.4(postcss@8.4.49) - postcss-colormin: 5.3.1(postcss@8.4.49) - postcss-convert-values: 5.1.3(postcss@8.4.49) - postcss-discard-comments: 5.1.2(postcss@8.4.49) - postcss-discard-duplicates: 5.1.0(postcss@8.4.49) - postcss-discard-empty: 5.1.1(postcss@8.4.49) - postcss-discard-overridden: 5.1.0(postcss@8.4.49) - postcss-merge-longhand: 5.1.7(postcss@8.4.49) - postcss-merge-rules: 5.1.4(postcss@8.4.49) - postcss-minify-font-values: 5.1.0(postcss@8.4.49) - postcss-minify-gradients: 5.1.1(postcss@8.4.49) - postcss-minify-params: 5.1.4(postcss@8.4.49) - postcss-minify-selectors: 5.2.1(postcss@8.4.49) - postcss-normalize-charset: 5.1.0(postcss@8.4.49) - postcss-normalize-display-values: 5.1.0(postcss@8.4.49) - postcss-normalize-positions: 5.1.1(postcss@8.4.49) - postcss-normalize-repeat-style: 5.1.1(postcss@8.4.49) - postcss-normalize-string: 5.1.0(postcss@8.4.49) - postcss-normalize-timing-functions: 5.1.0(postcss@8.4.49) - postcss-normalize-unicode: 5.1.1(postcss@8.4.49) - postcss-normalize-url: 5.1.0(postcss@8.4.49) - postcss-normalize-whitespace: 5.1.1(postcss@8.4.49) - postcss-ordered-values: 5.1.3(postcss@8.4.49) - postcss-reduce-initial: 5.1.2(postcss@8.4.49) - postcss-reduce-transforms: 5.1.0(postcss@8.4.49) - postcss-svgo: 5.1.0(postcss@8.4.49) - postcss-unique-selectors: 5.1.1(postcss@8.4.49) - - cssnano-utils@3.1.0(postcss@8.4.49): - dependencies: - postcss: 8.4.49 - - cssnano@5.1.15(postcss@8.4.49): - dependencies: - cssnano-preset-default: 5.2.14(postcss@8.4.49) + cssnano-preset-default@5.2.14(postcss@8.5.12): + dependencies: + css-declaration-sorter: 6.4.1(postcss@8.5.12) + cssnano-utils: 3.1.0(postcss@8.5.12) + postcss: 8.5.12 + postcss-calc: 8.2.4(postcss@8.5.12) + postcss-colormin: 5.3.1(postcss@8.5.12) + postcss-convert-values: 5.1.3(postcss@8.5.12) + postcss-discard-comments: 5.1.2(postcss@8.5.12) + postcss-discard-duplicates: 5.1.0(postcss@8.5.12) + postcss-discard-empty: 5.1.1(postcss@8.5.12) + postcss-discard-overridden: 5.1.0(postcss@8.5.12) + postcss-merge-longhand: 5.1.7(postcss@8.5.12) + postcss-merge-rules: 5.1.4(postcss@8.5.12) + postcss-minify-font-values: 5.1.0(postcss@8.5.12) + postcss-minify-gradients: 5.1.1(postcss@8.5.12) + postcss-minify-params: 5.1.4(postcss@8.5.12) + postcss-minify-selectors: 5.2.1(postcss@8.5.12) + postcss-normalize-charset: 5.1.0(postcss@8.5.12) + postcss-normalize-display-values: 5.1.0(postcss@8.5.12) + postcss-normalize-positions: 5.1.1(postcss@8.5.12) + postcss-normalize-repeat-style: 5.1.1(postcss@8.5.12) + postcss-normalize-string: 5.1.0(postcss@8.5.12) + postcss-normalize-timing-functions: 5.1.0(postcss@8.5.12) + postcss-normalize-unicode: 5.1.1(postcss@8.5.12) + postcss-normalize-url: 5.1.0(postcss@8.5.12) + postcss-normalize-whitespace: 5.1.1(postcss@8.5.12) + postcss-ordered-values: 5.1.3(postcss@8.5.12) + postcss-reduce-initial: 5.1.2(postcss@8.5.12) + postcss-reduce-transforms: 5.1.0(postcss@8.5.12) + postcss-svgo: 5.1.0(postcss@8.5.12) + postcss-unique-selectors: 5.1.1(postcss@8.5.12) + + cssnano-utils@3.1.0(postcss@8.5.12): + dependencies: + postcss: 8.5.12 + + cssnano@5.1.15(postcss@8.5.12): + dependencies: + cssnano-preset-default: 5.2.14(postcss@8.5.12) lilconfig: 2.1.0 - postcss: 8.4.49 + postcss: 8.5.12 yaml: 1.10.3 csso@4.2.0: @@ -32294,6 +32298,10 @@ snapshots: dependencies: postcss: 8.4.49 + icss-utils@5.1.0(postcss@8.5.12): + dependencies: + postcss: 8.5.12 + ieee754@1.1.13: {} ieee754@1.2.1: {} @@ -34949,52 +34957,52 @@ snapshots: possible-typed-array-names@1.1.0: {} - postcss-calc@8.2.4(postcss@8.4.49): + postcss-calc@8.2.4(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-selector-parser: 6.1.2 postcss-value-parser: 4.2.0 - postcss-colormin@5.3.1(postcss@8.4.49): + postcss-colormin@5.3.1(postcss@8.5.12): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 colord: 2.9.3 - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-convert-values@5.1.3(postcss@8.4.49): + postcss-convert-values@5.1.3(postcss@8.5.12): dependencies: browserslist: 4.28.2 - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-discard-comments@5.1.2(postcss@8.4.49): + postcss-discard-comments@5.1.2(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 - postcss-discard-duplicates@5.1.0(postcss@8.4.49): + postcss-discard-duplicates@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 - postcss-discard-empty@5.1.1(postcss@8.4.49): + postcss-discard-empty@5.1.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 - postcss-discard-overridden@5.1.0(postcss@8.4.49): + postcss-discard-overridden@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-flexbugs-fixes@4.2.1: dependencies: postcss: 7.0.39 - postcss-loader@4.1.0(postcss@8.4.49)(webpack@4.47.0): + postcss-loader@4.1.0(postcss@8.5.12)(webpack@4.47.0): dependencies: cosmiconfig: 7.1.0 klona: 2.0.6 loader-utils: 2.0.4 - postcss: 8.4.49 + postcss: 8.5.12 schema-utils: 3.3.0 semver: 7.7.4 webpack: 4.47.0 @@ -35009,50 +35017,50 @@ snapshots: semver: 7.7.4 webpack: 4.47.0 - postcss-loader@6.2.1(postcss@8.4.49)(webpack@5.105.4): + postcss-loader@6.2.1(postcss@8.5.12)(webpack@5.105.4): dependencies: cosmiconfig: 7.1.0 klona: 2.0.6 - postcss: 8.4.49 + postcss: 8.5.12 semver: 7.7.4 webpack: 5.105.4 - postcss-merge-longhand@5.1.7(postcss@8.4.49): + postcss-merge-longhand@5.1.7(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - stylehacks: 5.1.1(postcss@8.4.49) + stylehacks: 5.1.1(postcss@8.5.12) - postcss-merge-rules@5.1.4(postcss@8.4.49): + postcss-merge-rules@5.1.4(postcss@8.5.12): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 - cssnano-utils: 3.1.0(postcss@8.4.49) - postcss: 8.4.49 + cssnano-utils: 3.1.0(postcss@8.5.12) + postcss: 8.5.12 postcss-selector-parser: 6.1.2 - postcss-minify-font-values@5.1.0(postcss@8.4.49): + postcss-minify-font-values@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-minify-gradients@5.1.1(postcss@8.4.49): + postcss-minify-gradients@5.1.1(postcss@8.5.12): dependencies: colord: 2.9.3 - cssnano-utils: 3.1.0(postcss@8.4.49) - postcss: 8.4.49 + cssnano-utils: 3.1.0(postcss@8.5.12) + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-minify-params@5.1.4(postcss@8.4.49): + postcss-minify-params@5.1.4(postcss@8.5.12): dependencies: browserslist: 4.28.2 - cssnano-utils: 3.1.0(postcss@8.4.49) - postcss: 8.4.49 + cssnano-utils: 3.1.0(postcss@8.5.12) + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-minify-selectors@5.2.1(postcss@8.4.49): + postcss-minify-selectors@5.2.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-selector-parser: 6.1.2 postcss-modules-extract-imports@2.0.0: @@ -35063,6 +35071,10 @@ snapshots: dependencies: postcss: 8.4.49 + postcss-modules-extract-imports@3.1.0(postcss@8.5.12): + dependencies: + postcss: 8.5.12 + postcss-modules-local-by-default@3.0.3: dependencies: icss-utils: 4.1.1 @@ -35077,6 +35089,13 @@ snapshots: postcss-selector-parser: 7.1.1 postcss-value-parser: 4.2.0 + postcss-modules-local-by-default@4.2.0(postcss@8.5.12): + dependencies: + icss-utils: 5.1.0(postcss@8.5.12) + postcss: 8.5.12 + postcss-selector-parser: 7.1.1 + postcss-value-parser: 4.2.0 + postcss-modules-scope@2.2.0: dependencies: postcss: 7.0.39 @@ -35087,6 +35106,11 @@ snapshots: postcss: 8.4.49 postcss-selector-parser: 7.1.1 + postcss-modules-scope@3.2.1(postcss@8.5.12): + dependencies: + postcss: 8.5.12 + postcss-selector-parser: 7.1.1 + postcss-modules-values@3.0.0: dependencies: icss-utils: 4.1.1 @@ -35097,79 +35121,84 @@ snapshots: icss-utils: 5.1.0(postcss@8.4.49) postcss: 8.4.49 - postcss-modules@6.0.1(postcss@8.4.49): + postcss-modules-values@4.0.0(postcss@8.5.12): + dependencies: + icss-utils: 5.1.0(postcss@8.5.12) + postcss: 8.5.12 + + postcss-modules@6.0.1(postcss@8.5.12): dependencies: generic-names: 4.0.0 - icss-utils: 5.1.0(postcss@8.4.49) + icss-utils: 5.1.0(postcss@8.5.12) lodash.camelcase: 4.3.0 - postcss: 8.4.49 - postcss-modules-extract-imports: 3.1.0(postcss@8.4.49) - postcss-modules-local-by-default: 4.2.0(postcss@8.4.49) - postcss-modules-scope: 3.2.1(postcss@8.4.49) - postcss-modules-values: 4.0.0(postcss@8.4.49) + postcss: 8.5.12 + postcss-modules-extract-imports: 3.1.0(postcss@8.5.12) + postcss-modules-local-by-default: 4.2.0(postcss@8.5.12) + postcss-modules-scope: 3.2.1(postcss@8.5.12) + postcss-modules-values: 4.0.0(postcss@8.5.12) string-hash: 1.1.3 - postcss-normalize-charset@5.1.0(postcss@8.4.49): + postcss-normalize-charset@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 - postcss-normalize-display-values@5.1.0(postcss@8.4.49): + postcss-normalize-display-values@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-positions@5.1.1(postcss@8.4.49): + postcss-normalize-positions@5.1.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-repeat-style@5.1.1(postcss@8.4.49): + postcss-normalize-repeat-style@5.1.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-string@5.1.0(postcss@8.4.49): + postcss-normalize-string@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-timing-functions@5.1.0(postcss@8.4.49): + postcss-normalize-timing-functions@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-unicode@5.1.1(postcss@8.4.49): + postcss-normalize-unicode@5.1.1(postcss@8.5.12): dependencies: browserslist: 4.28.2 - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-url@5.1.0(postcss@8.4.49): + postcss-normalize-url@5.1.0(postcss@8.5.12): dependencies: normalize-url: 6.1.0 - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-normalize-whitespace@5.1.1(postcss@8.4.49): + postcss-normalize-whitespace@5.1.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-ordered-values@5.1.3(postcss@8.4.49): + postcss-ordered-values@5.1.3(postcss@8.5.12): dependencies: - cssnano-utils: 3.1.0(postcss@8.4.49) - postcss: 8.4.49 + cssnano-utils: 3.1.0(postcss@8.5.12) + postcss: 8.5.12 postcss-value-parser: 4.2.0 - postcss-reduce-initial@5.1.2(postcss@8.4.49): + postcss-reduce-initial@5.1.2(postcss@8.5.12): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 - postcss: 8.4.49 + postcss: 8.5.12 - postcss-reduce-transforms@5.1.0(postcss@8.4.49): + postcss-reduce-transforms@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 postcss-selector-parser@6.1.2: @@ -35182,15 +35211,15 @@ snapshots: cssesc: 3.0.0 util-deprecate: 1.0.2 - postcss-svgo@5.1.0(postcss@8.4.49): + postcss-svgo@5.1.0(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-value-parser: 4.2.0 svgo: 2.8.2 - postcss-unique-selectors@5.1.1(postcss@8.4.49): + postcss-unique-selectors@5.1.1(postcss@8.5.12): dependencies: - postcss: 8.4.49 + postcss: 8.5.12 postcss-selector-parser: 6.1.2 postcss-value-parser@4.2.0: {} @@ -35206,6 +35235,12 @@ snapshots: picocolors: 1.1.1 source-map-js: 1.2.1 + postcss@8.5.12: + dependencies: + nanoid: 3.3.11 + picocolors: 1.1.1 + source-map-js: 1.2.1 + prebuild-install@7.1.3: dependencies: detect-libc: 2.1.2 @@ -36922,10 +36957,10 @@ snapshots: dependencies: inline-style-parser: 0.1.1 - stylehacks@5.1.1(postcss@8.4.49): + stylehacks@5.1.1(postcss@8.5.12): dependencies: browserslist: 4.28.2 - postcss: 8.4.49 + postcss: 8.5.12 postcss-selector-parser: 6.1.2 stylis@4.3.6: {} diff --git a/common/config/subspaces/default/repo-state.json b/common/config/subspaces/default/repo-state.json index 695be2b629..cb133b4f40 100644 --- a/common/config/subspaces/default/repo-state.json +++ b/common/config/subspaces/default/repo-state.json @@ -1,5 +1,5 @@ // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush. { - "pnpmShrinkwrapHash": "df8f539a6ad76fccf3d78ef38aef86d6ba08afa0", + "pnpmShrinkwrapHash": "4b6c546d5bd04a43ab40def2f7c3c60948e1dcf7", "preferredVersionsHash": "029c99bd6e65c5e1f25e2848340509811ff9753c" } diff --git a/heft-plugins/heft-sass-plugin/package.json b/heft-plugins/heft-sass-plugin/package.json index 16a20b9682..a8a3114e05 100644 --- a/heft-plugins/heft-sass-plugin/package.json +++ b/heft-plugins/heft-sass-plugin/package.json @@ -48,7 +48,7 @@ "dependencies": { "@rushstack/node-core-library": "workspace:*", "@types/tapable": "1.0.6", - "postcss": "~8.4.6", + "postcss": "~8.5.10", "postcss-modules": "~6.0.0", "sass-embedded": "~1.85.1", "tapable": "1.1.3" diff --git a/rigs/heft-web-rig/package.json b/rigs/heft-web-rig/package.json index e13b394137..0d20cb2c3a 100644 --- a/rigs/heft-web-rig/package.json +++ b/rigs/heft-web-rig/package.json @@ -34,7 +34,7 @@ "jest-environment-jsdom": "~30.3.0", "mini-css-extract-plugin": "~2.5.3", "postcss-loader": "~6.2.1", - "postcss": "~8.4.6", + "postcss": "~8.5.10", "sass-loader": "~12.4.0", "sass": "~1.49.7", "source-map-loader": "~3.0.1",