Skip to content

Bump postcss from 8.5.9 to 8.5.10#2003

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/postcss-8.5.10
Closed

Bump postcss from 8.5.9 to 8.5.10#2003
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/postcss-8.5.10

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026 •
edited
Loading

Bumps postcss from 8.5.9 to 8.5.10.

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 24, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented Apr 24, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
operation-code Ready Ready Preview, Comment May 8, 2026 10:58am
storybook Ready Ready Preview, Comment May 8, 2026 10:58am

Request Review

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 24, 2026 •
edited
Loading

Coverage Report

Status Category Percentage Covered / Total
🔵 Lines 51.78% 349 / 674
🔵 Statements 52.64% 368 / 699
🔵 Functions 56.16% 164 / 292
🔵 Branches 65.65% 195 / 297
File CoverageNo changed files found.
Generated in workflow #106 for commit d8ef1b8 by the Vitest Coverage Report Action

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 24, 2026 •
edited
Loading

❌ Playwright Tests Failed

The Playwright tests have failed. Please download the test report artifact to see detailed information about the failures:

📊 View test run and download artifact

How to view the report:

  1. Click the link above
  2. Scroll to the bottom to the "Artifacts" section
  3. Download the playwright-report artifact
  4. Extract the zip file and open index.html in your browser

The report includes screenshots, videos, and detailed traces of the failed tests.

@dependabot
Bump postcss from 8.5.9 to 8.5.10
d8ef1b8 
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.9 to 8.5.10.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.9...8.5.10)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.10 branch from fe2acc6 to d8ef1b8 Compare May 8, 2026 10:57
@kylemh kylemh closed this May 8, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 8, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/postcss-8.5.10 branch May 8, 2026 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kylemh