chore(deps-dev): bump postcss from 8.4.31 to 8.5.10 by dependabot[bot] · Pull Request #36041 · microsoft/fluentui

dependabot · 2026-04-24T23:28:31Z

Bumps postcss from 8.4.31 to 8.5.10.

Release notes

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
</tr></table>

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

... (truncated)

Commits

33b9790 Release 8.5.10 version
536c79e Escape </style> in CSS output (#2074)
afa96b2 Update dependencies (#2073)
effe88b Typo (#2072)
3ee79a2 Thread model (#2071)
2e0683d Create incident response docs (#2070)
fe88ac2 Release 8.5.9 version
c551632 Avoid RegExp when we can use simple JS
89a6b74 Move SECURITY.txt for docs folder to keep GitHub page cleaner
6ceb8a4 Create SECURITY.md
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) from 8.4.31 to 8.5.10. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.31...8.5.10) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.10 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2026-04-24T23:36:26Z

📊 Bundle size report

✅ No changes found

github-actions · 2026-04-24T23:43:08Z

Pull request demo site: URL

github-actions · 2026-04-25T00:20:36Z

@@ -259,7 +259,7 @@
    "playwright": "1.55.1",


🕵🏾‍♀️ visual changes to review in the Visual Change Report

vr-tests-react-components/Avatar Converged 2 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-react-components/Avatar Converged.badgeMask - RTL.normal.chromium.png 5 Changed

vr-tests-react-components/Avatar Converged.badgeMask.normal.chromium.png 4 Changed

vr-tests-react-components/Charts-DonutChart 2 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-react-components/Charts-DonutChart.Dynamic - Dark Mode.default.chromium.png 7530 Changed

vr-tests-react-components/Charts-DonutChart.Dynamic.default.chromium.png 5581 Changed

vr-tests-react-components/Menu 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-react-components/Menu.Nested Submenus Small Viewport Flipped.nested menu.chromium.png 775 Changed

vr-tests-react-components/Positioning 2 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-react-components/Positioning.Positioning end.chromium.png 133 Changed

vr-tests-react-components/Positioning.Positioning end.updated 2 times.chromium.png 623 Changed

vr-tests-react-components/ProgressBar converged 3 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-react-components/ProgressBar converged.Indeterminate + thickness - Dark Mode.default.chromium.png 42 Changed

vr-tests-react-components/ProgressBar converged.Indeterminate + thickness - High Contrast.default.chromium.png 67 Changed

vr-tests-react-components/ProgressBar converged.Indeterminate + thickness.default.chromium.png 127 Changed

vr-tests-react-components/TagPicker 4 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-react-components/TagPicker.disabled - Dark Mode.disabled input hover.chromium.png 658 Changed

vr-tests-react-components/TagPicker.disabled - High Contrast.disabled input hover.chromium.png 1319 Changed

vr-tests-react-components/TagPicker.disabled - RTL.disabled input hover.chromium.png 635 Changed

vr-tests-react-components/TagPicker.disabled.disabled input hover.chromium.png 677 Changed

vr-tests-web-components/Accordion 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-web-components/Accordion. - Dark Mode.normal.chromium_1.png 3154 Changed

vr-tests-web-components/Avatar 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-web-components/Avatar. - Dark Mode.normal.chromium_1.png 298 Changed

vr-tests-web-components/MenuList 3 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-web-components/MenuList. - RTL.2nd selected.chromium_3.png 38816 Changed

vr-tests-web-components/MenuList. - RTL.1st selected.chromium_2.png 39384 Changed

vr-tests-web-components/MenuList. - RTL.normal.chromium_1.png 39083 Changed

vr-tests-web-components/TextInput 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests-web-components/TextInput. - Dark Mode.normal.chromium_1.png 288 Changed

vr-tests/Callout 12 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests/Callout.Bottom left edge - RTL.default.chromium.png 2199 Changed

vr-tests/Callout.Bottom center.default.chromium.png 2128 Changed

vr-tests/Callout.Bottom right edge.default.chromium.png 1130 Changed

vr-tests/Callout.Bottom left edge.default.chromium.png 2195 Changed

vr-tests/Callout.Bottom right edge - RTL.default.chromium.png 1124 Changed

vr-tests/Callout.Left bottom edge.default.chromium.png 3182 Changed

vr-tests/Callout.Left center.default.chromium.png 2584 Changed

vr-tests/Callout.Left top edge.default.chromium.png 2183 Changed

vr-tests/Callout.No callout width specified.default.chromium.png 2143 Changed

vr-tests/Callout.Right bottom edge.default.chromium.png 3095 Changed

vr-tests/Callout.Right center.default.chromium.png 2117 Changed

vr-tests/Callout.Top right edge.default.chromium.png 1146 Changed

vr-tests/Coachmark 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests/Coachmark.Collapsed.default.chromium.png 159 Changed

vr-tests/Keytip 2 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests/Keytip.Offset.default.chromium.png 86 Changed

vr-tests/Keytip.Root.default.chromium.png 55 Changed

vr-tests/react-charting-AreaChart 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests/react-charting-AreaChart.Custom Accessibility.default.chromium.png 11 Changed

vr-tests/react-charting-LineChart 1 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests/react-charting-LineChart.Basic.hover.chromium.png 548 Changed

vr-tests/react-charting-MultiStackBarChart 2 screenshots

Image Name Diff(in Pixels) Image Type

vr-tests/react-charting-MultiStackBarChart.Basic_PartToWhole - RTL.default.chromium.png 343 Changed

vr-tests/react-charting-MultiStackBarChart.Basic_Absolute.default.chromium.png 359 Changed

There were 6 duplicate changes discarded. Check the build logs for more information.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 24, 2026

dependabot Bot requested a review from a team as a code owner April 24, 2026 23:28

dependabot Bot added the javascript Pull requests that update Javascript code label Apr 24, 2026

microsoft-github-policy-service Bot added the Area: Build System label Apr 24, 2026

github-actions Bot reviewed Apr 25, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump postcss from 8.4.31 to 8.5.10#36041

chore(deps-dev): bump postcss from 8.4.31 to 8.5.10#36041
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/postcss-8.5.10

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot Apr 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Image Name	Diff(in Pixels)	Image Type
vr-tests-react-components/Avatar Converged.badgeMask - RTL.normal.chromium.png	5	Changed
vr-tests-react-components/Avatar Converged.badgeMask.normal.chromium.png	4	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests-react-components/Charts-DonutChart.Dynamic - Dark Mode.default.chromium.png	7530	Changed
vr-tests-react-components/Charts-DonutChart.Dynamic.default.chromium.png	5581	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests-react-components/Positioning.Positioning end.chromium.png	133	Changed
vr-tests-react-components/Positioning.Positioning end.updated 2 times.chromium.png	623	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests-react-components/ProgressBar converged.Indeterminate + thickness - Dark Mode.default.chromium.png	42	Changed
vr-tests-react-components/ProgressBar converged.Indeterminate + thickness - High Contrast.default.chromium.png	67	Changed
vr-tests-react-components/ProgressBar converged.Indeterminate + thickness.default.chromium.png	127	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests-react-components/TagPicker.disabled - Dark Mode.disabled input hover.chromium.png	658	Changed
vr-tests-react-components/TagPicker.disabled - High Contrast.disabled input hover.chromium.png	1319	Changed
vr-tests-react-components/TagPicker.disabled - RTL.disabled input hover.chromium.png	635	Changed
vr-tests-react-components/TagPicker.disabled.disabled input hover.chromium.png	677	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests-web-components/MenuList. - RTL.2nd selected.chromium_3.png	38816	Changed
vr-tests-web-components/MenuList. - RTL.1st selected.chromium_2.png	39384	Changed
vr-tests-web-components/MenuList. - RTL.normal.chromium_1.png	39083	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests/Callout.Bottom left edge - RTL.default.chromium.png	2199	Changed
vr-tests/Callout.Bottom center.default.chromium.png	2128	Changed
vr-tests/Callout.Bottom right edge.default.chromium.png	1130	Changed
vr-tests/Callout.Bottom left edge.default.chromium.png	2195	Changed
vr-tests/Callout.Bottom right edge - RTL.default.chromium.png	1124	Changed
vr-tests/Callout.Left bottom edge.default.chromium.png	3182	Changed
vr-tests/Callout.Left center.default.chromium.png	2584	Changed
vr-tests/Callout.Left top edge.default.chromium.png	2183	Changed
vr-tests/Callout.No callout width specified.default.chromium.png	2143	Changed
vr-tests/Callout.Right bottom edge.default.chromium.png	3095	Changed
vr-tests/Callout.Right center.default.chromium.png	2117	Changed
vr-tests/Callout.Top right edge.default.chromium.png	1146	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests/Keytip.Offset.default.chromium.png	86	Changed
vr-tests/Keytip.Root.default.chromium.png	55	Changed

Image Name	Diff(in Pixels)	Image Type
vr-tests/react-charting-MultiStackBarChart.Basic_PartToWhole - RTL.default.chromium.png	343	Changed
vr-tests/react-charting-MultiStackBarChart.Basic_Absolute.default.chromium.png	359	Changed

Conversation

dependabot Bot commented on behalf of github Apr 24, 2026

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

8.4.49

Uh oh!

github-actions Bot commented Apr 24, 2026

📊 Bundle size report

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot Apr 25, 2026

Choose a reason for hiding this comment

🕵🏾‍♀️ visual changes to review in the Visual Change Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants