Skip to content

chore(deps-dev): bump postcss from 8.5.10 to 8.5.26 in /specifyweb/frontend/js_src - #8412

Merged
CarolineDenis merged 6 commits into
mainfrom
dependabot/npm_and_yarn/specifyweb/frontend/js_src/postcss-8.5.26
Aug 25, 2026
Merged

chore(deps-dev): bump postcss from 8.5.10 to 8.5.26 in /specifyweb/frontend/js_src#8412
CarolineDenis merged 6 commits into
mainfrom
dependabot/npm_and_yarn/specifyweb/frontend/js_src/postcss-8.5.26

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss from 8.5.10 to 8.5.26.

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.26.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.10...8.5.26)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 10, 2026
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Aug 10, 2026
@github-project-automation github-project-automation Bot moved this to 📋Back Log in General Tester Board Aug 10, 2026
@github-actions

github-actions Bot commented Aug 10, 2026

Copy link
Copy Markdown

Warning

One or more dependencies are approaching or past End-of-Life.
Please plan upgrades accordingly.

STATUS=OK
NODE_VERSION=24
NODE_CYCLE=24
EOL_DATE=2028-04-30
DAYS_REMAINING=614

--- Node.js ---
Version: 24
EOL: 2028-04-30
Status: OK

STATUS=OK
PYTHON_VERSION=3.12
PYTHON_CYCLE=3.12
EOL_DATE=2028-10-31
DAYS_REMAINING=798

--- Python ---
Version: 3.12
EOL: 2028-10-31
Status: OK

STATUS=WARNING
DJANGO_VERSION=4.2
DJANGO_CYCLE=4.2
EOL_DATE=2026-04-07
DAYS_REMAINING=-140

--- Django ---
Version: 4.2
EOL: 2026-04-07
Status: WARNING


g1rly-c0d3r

This comment was marked as outdated.

@g1rly-c0d3r
g1rly-c0d3r requested review from g1rly-c0d3r and removed request for CarolineDenis August 13, 2026 15:46

@g1rly-c0d3r g1rly-c0d3r left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did some general testing, Nothing looks out of place.

@CarolineDenis
CarolineDenis requested a review from a team August 14, 2026 10:40
@g1rly-c0d3r g1rly-c0d3r linked an issue Aug 14, 2026 that may be closed by this pull request
@melton-jason

melton-jason commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

For those wanting to test this on the Test Panel, the name of the branch exceeds the DNS length limit for a single label when combined with most database names, so this will not be accessible.

I've gone ahead and have made a copy of this branch called dependabot-8412-postcss that you can use to test this PR on the test panel.

More information in #8357 (comment)!

@emenslin emenslin left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did some general testing and I didn't run into any issues

Triggered by d2777ab on branch refs/heads/dependabot/npm_and_yarn/specifyweb/frontend/js_src/postcss-8.5.26
@CarolineDenis
CarolineDenis merged commit 37e8bb4 into main Aug 25, 2026
18 of 19 checks passed
@github-project-automation github-project-automation Bot moved this from 📋Back Log to ✅Done in General Tester Board Aug 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

Status: ✅Done

Development

Successfully merging this pull request may close these issues.

Bump postcss version

4 participants