Skip to content

chore(deps): bump postcss from 8.5.16 to 8.5.18 in /frontend in the build-tooling group across 1 directory#1204

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/main/build-tooling-f436965d76
Jul 13, 2026
Merged

chore(deps): bump postcss from 8.5.16 to 8.5.18 in /frontend in the build-tooling group across 1 directory#1204
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/main/build-tooling-f436965d76

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the build-tooling group with 1 update in the /frontend directory: postcss.

Updates postcss from 8.5.16 to 8.5.18

Release notes

Sourced from postcss's releases.

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Changelog

Sourced from postcss's changelog.

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Commits

@dependabot dependabot Bot added dependencies Dependency updates (Dependabot) frontend Frontend / Next.js / React labels Jul 13, 2026
@dependabot dependabot Bot requested a review from ericsocrat as a code owner July 13, 2026 04:16
@vercel

vercel Bot commented Jul 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tryvit Ready Ready Preview, Comment Jul 13, 2026 4:42am

@github-actions github-actions Bot enabled auto-merge (squash) July 13, 2026 04:18
@github-actions

Copy link
Copy Markdown

Bundle Size Report

Metric Value
Main baseline 0 KB
This PR 0 KB
Delta +0 KB (+0%)
JS chunks 0
Hard limit 4000 KB

✅ Bundle size is within acceptable limits.

@dependabot dependabot Bot changed the title chore(deps): bump postcss from 8.5.16 to 8.5.18 in /frontend in the build-tooling group chore(deps): bump postcss from 8.5.16 to 8.5.18 in /frontend in the build-tooling group across 1 directory Jul 13, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/build-tooling-f436965d76 branch from ac58320 to 74de862 Compare July 13, 2026 04:23
Bumps the build-tooling group with 1 update in the /frontend directory: [postcss](https://github.com/postcss/postcss).


Updates `postcss` from 8.5.16 to 8.5.18
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.18)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: build-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/build-tooling-f436965d76 branch from 74de862 to 610b164 Compare July 13, 2026 04:29
@github-actions github-actions Bot merged commit 9070d85 into main Jul 13, 2026
14 of 18 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/frontend/main/build-tooling-f436965d76 branch July 13, 2026 04:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates (Dependabot) frontend Frontend / Next.js / React

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant