镜像站点 · 本页由第三方 GitHub 只读镜像提供,非 GitHub 官方站点,不接受任何登录或凭据输入。前往 github.com
Skip to content

chore(deps): bump postcss-selector-parser, postcss-modules-local-by-default, postcss-modules-scope, postcss-discard-comments, stylehacks, postcss-merge-rules, postcss-minify-selectors, postcss-unique-selectors and stylelint-scss - #17444

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-e500ffb470

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss-selector-parser, postcss-modules-local-by-default, postcss-modules-scope, postcss-discard-comments, stylehacks, postcss-merge-rules, postcss-minify-selectors, postcss-unique-selectors and stylelint-scss. These dependencies needed to be updated together.
Updates postcss-selector-parser from 7.1.0 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4

  • fix: tolerate non-node children when serializing selectors

7.1.3

  • Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2

v7.1.1

7.1.1

  • perf: replace startsWith with strict equality (#308)
  • fix(types): add walkUniversal declaration (#311)
Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5 - 2026-08-07

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4 - 2026-06-11

  • fix: tolerate non-node children when serializing selectors

7.1.3 - 2026-06-11

  • Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2 - 2026-06-09

7.1.1

  • perf: replace startsWith with strict equality (#308)
  • fix(types): add walkUniversal declaration (#311)
Commits
  • 4eb3468 7.1.6
  • 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
  • e33e9bc 7.1.5
  • 6f4e6c1 fix: TypeError on unclosed [, ( and trailing | (#330)
  • 4d8437f fix: preserve whitespace before a * namespace in attribute selectors (#325)
  • e2f9029 fix: don't treat a non-prefix token before | as a namespace (#324)
  • dd50ee1 chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 (#331)
  • 7e3abb2 chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 (#328)
  • 4a7e4e3 7.1.4
  • e2021c5 fix: tolerate non-node children when serializing selectors
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by moox, a new releaser for postcss-selector-parser since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates postcss-modules-local-by-default from 4.0.5 to 4.2.0

Release notes

Sourced from postcss-modules-local-by-default's releases.

v4.2.0

4.2.0 - 2024-12-11

  • feat: add support a /* cssmodules-pure-no-check */ comment

v4.1.0

4.1.0 - 2024-11-11

  • feat: add global() and local() for animations
  • feat: add pure ignore comment
  • fix: css nesting and pure mode
Changelog

Sourced from postcss-modules-local-by-default's changelog.

4.2.0 - 2024-12-11

  • feat: add support a /* cssmodules-pure-no-check */ comment

4.1.0 - 2024-11-11

  • feat: add global() and local() for animations
  • feat: add pure ignore comment
  • fix: css nesting and pure mode
Commits
  • db195e7 chore(release): 4.2.0
  • ba7e8ef feat: added support a cssmodules-pure-no-check comment
  • 39a2f78 docs: fix (#83)
  • e489ff8 chore(release): 4.1.0
  • 3811927 fix: css nesting and pure mode
  • 582bd9e chore: postcss-selector-parser (#81)
  • 9d07eeb feat: add pure ignore comment for CSS Modules (#80)
  • fde62d7 feat: add global and local for animations (#76)
  • a73b700 test: for current pure logic (#74)
  • f1c05a5 test: enhanced test cases to prepare for CSS declaration-level processing (#77)
  • See full diff in compare view

Updates postcss-modules-scope from 3.2.0 to 3.2.1

Release notes

Sourced from postcss-modules-scope's releases.

v3.2.1

3.2.1

Chore

  • update postcss-selector-parser
Changelog

Sourced from postcss-modules-scope's changelog.

3.2.1

Chore

  • update postcss-selector-parser
Commits

Updates postcss-discard-comments from 7.0.3 to 7.0.8

Release notes

Sourced from postcss-discard-comments's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

v7.0.4

Bug fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-discard-comments since your current version.


Updates stylehacks from 7.0.4 to 7.0.11

Release notes

Sourced from stylehacks's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylehacks since your current version.


Updates postcss-merge-rules from 7.0.4 to 7.0.11

Release notes

Sourced from postcss-merge-rules's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-merge-rules since your current version.


Updates postcss-minify-selectors from 7.0.4 to 7.1.2

Release notes

Sourced from postcss-minify-selectors's releases.

v7.1.2

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.1...cssnano@7.1.2

v71.1.1

Bug Fixes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.0...cssnano@7.1.1

cssnano@7.1.0

Changes

  • Update to SVGO 4.0
  • Update browserslist

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

Commits
  • 2069407 Publish cssnano 7.1.9
  • fc0c79d fix(postcss-minify-selectors): reject :is() fold for unknown pseudo-classes w...
  • d9fee3b chore: enforce TypeScript isolated modules
  • d6c96c4 chore: update development deps
  • 709f16a docs: update website depenencies
  • ed403db Publish cssnano 7.1.8
  • 7e56dba fix: update postcss
  • d1780fd fix: update @​colordx-core
  • 0005443 chore: add changeset
  • bedd609 fix(postcss-minify-selectors): reject :is() fold for :nth-child(... of S) to ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-minify-selectors since your current version.


Updates postcss-unique-selectors from 7.0.3 to 7.0.7

Release notes

Sourced from postcss-unique-selectors's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

v7.0.4

Bug fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-unique-selectors since your current version.


Updates stylelint-scss from 6.0.0 to 6.14.0

Release notes

Sourced from stylelint-scss's releases.

6.14.0

  • Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
  • Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
  • Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

  • Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
  • Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
  • Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).
  • Fixed: dollar-variable-colon-space-after prevent TypeError for dynamically created nodes (#1159).
  • Fixed: load-partial-extension add missing link to docs (#1202).
  • Fixed: migrate rules to use autofix callback instead of deprecated context.fix (#1206).
  • Updated: stylelint peer dependency version to ^16.8.2 (required by autofix callback) (#1206).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.1...v6.13.0

6.12.1

  • Fixed: stylelint deprecation warnings by adding endIndex to report objects in multiple rules (#1150).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.0...v6.12.1

6.12.0

  • Added: double-slash-comment-whitespace-inside add autofix and fix incorrect error locations (#1146).
  • Added: declaration-property-value-no-unknown add support for nested properties with shorthand values (#1142).
  • Fixed: operator-no-unspaced don't check Tailwind Directives (#1147).
  • Fixed: at-use-no-redundant-alias fix false negative for single quotes (#1130).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.1...v6.12.0

6.11.1

  • Fixed: no-duplicate-load-rules fix false positive when using @use and @forward for the same stylesheet (#1124).
  • Fixed: declaration-property-value-no-unknown add support for Sass' rgba() function with a hex value (#1123).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.0...v6.11.1

6.11.0

  • Added: no-duplicate-load-rules rule (#1103).
  • Fixed: declaration-property-value-no-unknown allow functions from explicit namespaces (#1113).

Full Changelog: stylelint-scss/stylelint-scss@v6.10.1...v6.11.0

6.10.1

  • Fixed: declaration-property-value-no-unknown fix trailing whitespace in value parsing (#1089).
  • Fixed: no-global-function-names allow CSS round function (#1097).

Full Changelog: stylelint-scss/stylelint-scss@v6.10.0...v6.10.1

6.10.0

... (truncated)

Changelog

Sourced from stylelint-scss's changelog.

6.14.0

  • Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
  • Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
  • Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

  • Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
  • Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
  • Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).
  • Fixed: dollar-variable-colon-space-after prevent TypeError for dynamically created nodes (#1159).
  • Fixed: load-partial-extension add missing link to docs (#1202).
  • Fixed: migrate rules to use autofix callback instead of deprecated context.fix (#1206).
  • Updated: stylelint peer dependency version to ^16.8.2 (required by autofix callback) (#1206).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.1...v6.13.0

6.12.1

  • Fixed: stylelint deprecation warnings by adding endIndex to report objects in multiple rules (#1150).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.0...v6.12.1

6.12.0

  • Added: double-slash-comment-whitespace-inside add autofix and fix incorrect error locations (#1146).
  • Added: declaration-property-value-no-unknown add support for nested properties with shorthand values (#1142).
  • Fixed: operator-no-unspaced don't check Tailwind Directives (#1147).
  • Fixed: at-use-no-redundant-alias fix false negative for single quotes (#1130).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.1...v6.12.0

6.11.1

  • Fixed: no-duplicate-load-rules fix false positive when using @use and @forward for the same stylesheet (#1124).
  • Fixed: declaration-property-value-no-unknown add support for Sass' rgba() function with a hex value (#1123).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.0...v6.11.1

6.11.0

  • Added: no-duplicate-load-rules rule (#1103).
  • Fixed: declaration-property-value-no-unknown allow functions from explicit namespaces (#1113).

Full Changelog: stylelint-scss/stylelint-scss@v6.10.1...v6.11.0

6.10.1

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…efault, postcss-modules-scope, postcss-discard-comments, stylehacks, postcss-merge-rules, postcss-minify-selectors, postcss-unique-selectors and stylelint-scss

Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser), [postcss-modules-local-by-default](https://github.com/css-modules/postcss-modules-local-by-default), [postcss-modules-scope](https://github.com/css-modules/postcss-modules-scope), [postcss-discard-comments](https://github.com/cssnano/cssnano), [stylehacks](https://github.com/cssnano/cssnano), [postcss-merge-rules](https://github.com/cssnano/cssnano), [postcss-minify-selectors](https://github.com/cssnano/cssnano), [postcss-unique-selectors](https://github.com/cssnano/cssnano) and [stylelint-scss](https://github.com/stylelint-scss/stylelint-scss). These dependencies needed to be updated together.

Updates `postcss-selector-parser` from 7.1.0 to 7.1.6
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@v7.1.0...7.1.6)

Updates `postcss-modules-local-by-default` from 4.0.5 to 4.2.0
- [Release notes](https://github.com/css-modules/postcss-modules-local-by-default/releases)
- [Changelog](https://github.com/css-modules/postcss-modules-local-by-default/blob/master/CHANGELOG.md)
- [Commits](css-modules/postcss-modules-local-by-default@v4.0.5...v4.2.0)

Updates `postcss-modules-scope` from 3.2.0 to 3.2.1
- [Release notes](https://github.com/css-modules/postcss-modules-scope/releases)
- [Changelog](https://github.com/css-modules/postcss-modules-scope/blob/master/CHANGELOG.md)
- [Commits](css-modules/postcss-modules-scope@v3.2.0...v3.2.1)

Updates `postcss-discard-comments` from 7.0.3 to 7.0.8
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-discard-comments@7.0.3...postcss-discard-comments@7.0.8)

Updates `stylehacks` from 7.0.4 to 7.0.11
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/stylehacks@7.0.4...stylehacks@7.0.11)

Updates `postcss-merge-rules` from 7.0.4 to 7.0.11
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-merge-rules@7.0.4...postcss-merge-rules@7.0.11)

Updates `postcss-minify-selectors` from 7.0.4 to 7.1.2
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-minify-selectors@7.0.4...postcss-minify-selectors@7.1.2)

Updates `postcss-unique-selectors` from 7.0.3 to 7.0.7
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-unique-selectors@7.0.3...postcss-unique-selectors@7.0.7)

Updates `stylelint-scss` from 6.0.0 to 6.14.0
- [Release notes](https://github.com/stylelint-scss/stylelint-scss/releases)
- [Changelog](https://github.com/stylelint-scss/stylelint-scss/blob/master/CHANGELOG.md)
- [Commits](stylelint-scss/stylelint-scss@v6.0.0...v6.14.0)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.6
  dependency-type: indirect
- dependency-name: postcss-modules-local-by-default
  dependency-version: 4.2.0
  dependency-type: indirect
- dependency-name: postcss-modules-scope
  dependency-version: 3.2.1
  dependency-type: indirect
- dependency-name: postcss-discard-comments
  dependency-version: 7.0.8
  dependency-type: indirect
- dependency-name: stylehacks
  dependency-version: 7.0.11
  dependency-type: indirect
- dependency-name: postcss-merge-rules
  dependency-version: 7.0.11
  dependency-type: indirect
- dependency-name: postcss-minify-selectors
  dependency-version: 7.1.2
  dependency-type: indirect
- dependency-name: postcss-unique-selectors
  dependency-version: 7.0.7
  dependency-type: indirect
- dependency-name: stylelint-scss
  dependency-version: 6.14.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file Frontend HTML, CSS, JS... client side stuff labels Oct 15, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Frontend HTML, CSS, JS... client side stuff

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants