Skip to content

Bump postcss-selector-parser, postcss-calc, postcss-discard-comments, stylehacks, postcss-merge-rules, postcss-minify-selectors and postcss-unique-selectors - #14546

Merged
diox merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-b125838a19
Oct 12, 2026
Merged

diox merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-b125838a19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss-selector-parser, postcss-calc, postcss-discard-comments, stylehacks, postcss-merge-rules, postcss-minify-selectors and postcss-unique-selectors. These dependencies needed to be updated together.
Updates postcss-selector-parser from 7.1.5 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)
Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)
Commits
  • 4eb3468 7.1.6
  • 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
  • See full diff in compare view

Updates postcss-calc from 10.0.2 to 10.1.1

Release notes

Sourced from postcss-calc's releases.

10.1.1

Bug Fixes

Full Changelog: postcss/postcss-calc@v10.1.0...v10.1.1

10.1.0

Features

  • add support for lh & rlh units (9b6d7a1)

Bug Fixes

Changelog

Sourced from postcss-calc's changelog.

10.1.1 (2025-01-31)

Bug Fixes

10.1.0 (2025-01-07)

Features

  • add support for lh & rlh units (9b6d7a1)

Bug Fixes

Commits

Updates postcss-discard-comments from 7.0.3 to 7.0.8

Release notes

Sourced from postcss-discard-comments's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

v7.0.4

Bug fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-discard-comments since your current version.


Updates stylehacks from 7.0.4 to 7.0.11

Release notes

Sourced from stylehacks's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylehacks since your current version.


Updates postcss-merge-rules from 7.0.4 to 7.0.11

Release notes

Sourced from postcss-merge-rules's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-merge-rules since your current version.


Updates postcss-minify-selectors from 7.0.4 to 7.1.2

Release notes

Sourced from postcss-minify-selectors's releases.

v7.1.2

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.1...cssnano@7.1.2

v71.1.1

Bug Fixes

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.0...cssnano@7.1.1

cssnano@7.1.0

Changes

  • Update to SVGO 4.0
  • Update browserslist

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

Commits
  • 2069407 Publish cssnano 7.1.9
  • fc0c79d fix(postcss-minify-selectors): reject :is() fold for unknown pseudo-classes w...
  • d9fee3b chore: enforce TypeScript isolated modules
  • d6c96c4 chore: update development deps
  • 709f16a docs: update website depenencies
  • ed403db Publish cssnano 7.1.8
  • 7e56dba fix: update postcss
  • d1780fd fix: update @​colordx-core
  • 0005443 chore: add changeset
  • bedd609 fix(postcss-minify-selectors): reject :is() fold for :nth-child(... of S) to ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-minify-selectors since your current version.


Updates postcss-unique-selectors from 7.0.3 to 7.0.7

Release notes

Sourced from postcss-unique-selectors's releases.

cssnano@7.0.7

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6

What's Changed

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5

Bug Fixes

v7.0.4

Bug fixes

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-unique-selectors since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

… stylehacks, postcss-merge-rules, postcss-minify-selectors and postcss-unique-selectors

Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser), [postcss-calc](https://github.com/postcss/postcss-calc), [postcss-discard-comments](https://github.com/cssnano/cssnano), [stylehacks](https://github.com/cssnano/cssnano), [postcss-merge-rules](https://github.com/cssnano/cssnano), [postcss-minify-selectors](https://github.com/cssnano/cssnano) and [postcss-unique-selectors](https://github.com/cssnano/cssnano). These dependencies needed to be updated together.

Updates `postcss-selector-parser` from 7.1.5 to 7.1.6
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@7.1.5...7.1.6)

Updates `postcss-calc` from 10.0.2 to 10.1.1
- [Release notes](https://github.com/postcss/postcss-calc/releases)
- [Changelog](https://github.com/postcss/postcss-calc/blob/master/CHANGELOG.md)
- [Commits](postcss/postcss-calc@v10.0.2...v10.1.1)

Updates `postcss-discard-comments` from 7.0.3 to 7.0.8
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-discard-comments@7.0.3...postcss-discard-comments@7.0.8)

Updates `stylehacks` from 7.0.4 to 7.0.11
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/stylehacks@7.0.4...stylehacks@7.0.11)

Updates `postcss-merge-rules` from 7.0.4 to 7.0.11
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-merge-rules@7.0.4...postcss-merge-rules@7.0.11)

Updates `postcss-minify-selectors` from 7.0.4 to 7.1.2
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-minify-selectors@7.0.4...postcss-minify-selectors@7.1.2)

Updates `postcss-unique-selectors` from 7.0.3 to 7.0.7
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/postcss-unique-selectors@7.0.3...postcss-unique-selectors@7.0.7)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.6
  dependency-type: indirect
- dependency-name: postcss-calc
  dependency-version: 10.1.1
  dependency-type: indirect
- dependency-name: postcss-discard-comments
  dependency-version: 7.0.8
  dependency-type: indirect
- dependency-name: stylehacks
  dependency-version: 7.0.11
  dependency-type: indirect
- dependency-name: postcss-merge-rules
  dependency-version: 7.0.11
  dependency-type: indirect
- dependency-name: postcss-minify-selectors
  dependency-version: 7.1.2
  dependency-type: indirect
- dependency-name: postcss-unique-selectors
  dependency-version: 7.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 8, 2026 13:45
@dependabot
dependabot Bot requested review from diox and removed request for a team October 8, 2026 13:45
@diox
diox merged commit a4e0fb8 into master Oct 12, 2026
14 checks passed
@diox
diox deleted the dependabot/npm_and_yarn/multi-b125838a19 branch October 12, 2026 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant