Skip to content

chore(deps): Bump postcss from 8.5.6 to 8.5.14#3900

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/postcss-8.5.10
Open

chore(deps): Bump postcss from 8.5.6 to 8.5.14#3900
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026 •
edited
Loading

Bumps postcss from 8.5.6 to 8.5.14.

Release notes

Sourced from postcss's releases.

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits
  • 3ec1394 Release 8.5.14 version
  • f2bb827 Update dependencies
  • d75953d Merge pull request #2084 from 43081j/raw-raws-rawing
  • 68bd213 fix: always call raw to retrieve raw values
  • af58cf1 Release 8.5.13 version
  • f227dbd Temporary ignore pnpm 11 config
  • d3abd40 Update dependencies
  • dd06c3e Revert stringifier changes because of the conflict with postcss-scss
  • ae889c8 Try to fix CI
  • e0093e4 Move to pnpm 11
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 24, 2026
@jaclynjessup jaclynjessup moved this to 👀 In review in Canvas Kit Apr 24, 2026
@cypress
Copy link
Copy Markdown

cypress Bot commented Apr 24, 2026 •
edited
Loading

Workday/canvas-kit    Run #10874

Run Properties:  status check passed Passed #10874  •  git commit 1b1793d238 ℹ️: Merge b9935b4aa7109da9763a24c00934044542e2662d into f942653d6e32c211030ea73fddeb...
Project Workday/canvas-kit
Branch Review dependabot/npm_and_yarn/postcss-8.5.10
Run status status check passed Passed #10874
Run duration 02m 29s
Commit git commit 1b1793d238 ℹ️: Merge b9935b4aa7109da9763a24c00934044542e2662d into f942653d6e32c211030ea73fddeb...
Committer dependabot[bot]
View all properties for this run ↗︎
Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 17
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 809
View all changes introduced in this branch ↗︎
UI Coverage  19.57%
  Untested elements 1531  
  Tested elements 370  
Accessibility  99.41%
  Failed rules  5 critical   5 serious   0 moderate   2 minor
  Failed elements 68  

@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.4.38 to 8.5.10 chore(deps): Bump postcss from 8.4.38 to 8.5.12 Apr 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 522e70d to a979f5b Compare April 28, 2026 19:24
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.4.38 to 8.5.12 chore(deps): Bump postcss from 8.5.6 to 8.5.12 Apr 29, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch 2 times, most recently from b51c01f to 9f0a20a Compare April 30, 2026 15:18
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.5.6 to 8.5.12 chore(deps): Bump postcss from 8.5.6 to 8.5.13 May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from 9f0a20a to 91bf933 Compare May 4, 2026 14:46
@dependabot dependabot Bot changed the title chore(deps): Bump postcss from 8.5.6 to 8.5.13 chore(deps): Bump postcss from 8.5.6 to 8.5.14 May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch 2 times, most recently from 5aaddb2 to a22f16b Compare May 5, 2026 21:08
@dependabot
chore(deps): Bump postcss from 8.5.6 to 8.5.14
b9935b4 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.6 to 8.5.14.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.14)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from a22f16b to b9935b4 Compare May 5, 2026 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

Canvas Kit
Status: 👀 In review

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jaclynjessup