Skip to content

Bump postcss and postcss-preset-env - #4238

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-7afb733036
Open

Bump postcss and postcss-preset-env#4238
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-7afb733036

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss and postcss-preset-env. These dependencies needed to be updated together.
Updates postcss from 8.4.39 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates postcss-preset-env from 6.7.0 to 11.4.0

Changelog

Sourced from postcss-preset-env's changelog.

11.4.0

August 15, 2026

11.3.2

June 28, 2026

11.3.1

June 14, 2026

11.3.0

May 13, 2026

11.2.1

April 12, 2026

11.2.0

February 21, 2026

11.1.3

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by romainmenke, a new releaser for postcss-preset-env since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from 2325ac0 to f07475f Compare August 9, 2026 17:58
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from f07475f to 885d4d8 Compare August 9, 2026 18:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from 885d4d8 to adffb33 Compare August 9, 2026 18:10
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from adffb33 to ae6cd87 Compare August 11, 2026 18:32
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from ae6cd87 to 02e47af Compare August 11, 2026 19:59
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from 02e47af to fb750e2 Compare August 12, 2026 23:36
Bumps [postcss](https://github.com/postcss/postcss) and [postcss-preset-env](https://github.com/csstools/postcss-plugins/tree/HEAD/plugin-packs/postcss-preset-env). These dependencies needed to be updated together.

Updates `postcss` from 8.4.39 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.39...8.5.26)

Updates `postcss-preset-env` from 6.7.0 to 11.4.0
- [Changelog](https://github.com/csstools/postcss-plugins/blob/main/plugin-packs/postcss-preset-env/CHANGELOG.md)
- [Commits](https://github.com/csstools/postcss-plugins/commits/HEAD/plugin-packs/postcss-preset-env)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:development
- dependency-name: postcss-preset-env
  dependency-version: 11.3.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7afb733036 branch from fb750e2 to 4a45d48 Compare August 15, 2026 19:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants