chore(deps): bump postcss, cssnano and cssnano-preset-advanced by dependabot[bot] · Pull Request #1 · magebitcom/drift

dependabot · 2026-07-09T07:40:44Z

Bumps postcss to 8.5.16 and updates ancestor dependencies postcss, cssnano and cssnano-preset-advanced. These dependencies need to be updated together.

Updates postcss from 7.0.14 to 8.5.16

Release notes

Sourced from postcss's releases.

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

... (truncated)

Commits

92ccc93 Release 8.5.16 version
818bdd6 Update formatting
46e4510 Fix Input#origin() returning incorrect position (#2036)
34942ce Fix tests
d4feed6 Don't clone root-less child nodes in container constructor (#2097)
da323fc Revert version update to fix old Node.js on CI
8863369 Update dependencies
3828982 Preserve node raws when rehydrating a JSON AST (#2100)
d1e80b8 Fix Node#rangeBy() ignoring index 0 (#2091)
b91e4a6 Fix Node.js 26 tests
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates cssnano from 4.1.10 to 8.0.2

Release notes

Sourced from cssnano's releases.

v8.0.2

What's Changed

perf(postcss-unique-selectors): add fast paths for the common cases by @dkryaklin in cssnano/cssnano#1813

perf(postcss-discard-duplicates): bucket rules by selector by @dkryaklin in cssnano/cssnano#1815

perf(postcss-merge-longhand): skip processors with no relevant decls by @dkryaklin in cssnano/cssnano#1814

Include postcss-discard-overridden types in package by @itosa-kazu in cssnano/cssnano#1817

fix: preserve apostrophes in svg data uris by @pupuking723 in cssnano/cssnano#1819

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.1...cssnano@8.0.2

v8.0.1

What's Changed

fix(postcss-minify-selectors): reject :is() fold when divergent middle contains a combinator under a non-empty prefix (closes #1786) by @dkryaklin in cssnano/cssnano#1798

fix(postcss-minify-selectors): tighten :is() fold acceptance to a strict allowlist by @dkryaklin in cssnano/cssnano#1799

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.0...cssnano@8.0.1

v8.0.0

What's Changed

Move declaration sorter to advanced preset by @ludofischer and @Goodwine in cssnano/cssnano#1793

Drop node 20 by @ludofischer in cssnano/cssnano#1794

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.9...cssnano@8.0.0

v7.1.9

Bug Fixes

Reject :is() fold for unknown pseudo-classes with arguments by @dkryaklin in cssnano/cssnano#1791

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.8...cssnano@7.1.9

v7.1.8

What's Changed

fix(postcss-minify-selectors): reject :is() fold for :nth-child(... of S) to preserve cascade by @dkryaklin in cssnano/cssnano#1785

Update postcss and @colordx/core by @ludofischer in cssnano/cssnano#1786

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.7...cssnano@7.1.8

v.7.1.7

This release is idnetical to the previous one, but is being published to ensure that the latest versions of postcss-normalize-repeat-style and postcss-normalize-positions are uploaded to the npm registry.

... (truncated)

Commits

185e1c7 Publish cssnano 8.0.2
2ce8c2d chore: update the postcs peer dependency
99bd9c1 docs: update website dependencies
2ca8d4a chore: update development deps
b245a0b fix: update caniuse-api
3bf3f4d chore: update postcss-selector-parser
7343c87 fix: preserve apostrophes in svg data uris (#1819)
964b9db chore(util): add benchmark + cpuprofile tooling (#1812)
54a8db2 Include postcss-discard-overridden types in package
e0e39ae perf(postcss-merge-longhand): skip processors with no relevant decls
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cssnano since your current version.

Updates cssnano-preset-advanced from 4.0.7 to 8.0.2

Release notes

Sourced from cssnano-preset-advanced's releases.

v8.0.2

What's Changed

perf(postcss-unique-selectors): add fast paths for the common cases by @dkryaklin in cssnano/cssnano#1813

perf(postcss-discard-duplicates): bucket rules by selector by @dkryaklin in cssnano/cssnano#1815

perf(postcss-merge-longhand): skip processors with no relevant decls by @dkryaklin in cssnano/cssnano#1814

Include postcss-discard-overridden types in package by @itosa-kazu in cssnano/cssnano#1817

fix: preserve apostrophes in svg data uris by @pupuking723 in cssnano/cssnano#1819

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.1...cssnano@8.0.2

v8.0.1

What's Changed

fix(postcss-minify-selectors): reject :is() fold when divergent middle contains a combinator under a non-empty prefix (closes #1786) by @dkryaklin in cssnano/cssnano#1798

fix(postcss-minify-selectors): tighten :is() fold acceptance to a strict allowlist by @dkryaklin in cssnano/cssnano#1799

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.0...cssnano@8.0.1

v8.0.0

What's Changed

Move declaration sorter to advanced preset by @ludofischer and @Goodwine in cssnano/cssnano#1793

Drop node 20 by @ludofischer in cssnano/cssnano#1794

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.9...cssnano@8.0.0

v7.1.9

Bug Fixes

Reject :is() fold for unknown pseudo-classes with arguments by @dkryaklin in cssnano/cssnano#1791

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.8...cssnano@7.1.9

v7.1.8

What's Changed

fix(postcss-minify-selectors): reject :is() fold for :nth-child(... of S) to preserve cascade by @dkryaklin in cssnano/cssnano#1785

Update postcss and @colordx/core by @ludofischer in cssnano/cssnano#1786

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.7...cssnano@7.1.8

v.7.1.7

This release is idnetical to the previous one, but is being published to ensure that the latest versions of postcss-normalize-repeat-style and postcss-normalize-positions are uploaded to the npm registry.

... (truncated)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cssnano-preset-advanced since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.16 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [cssnano](https://github.com/cssnano/cssnano) and [cssnano-preset-advanced](https://github.com/cssnano/cssnano). These dependencies need to be updated together. Updates `postcss` from 7.0.14 to 8.5.16 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.14...8.5.16) Updates `cssnano` from 4.1.10 to 8.0.2 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/compare/v4.1.10...cssnano@8.0.2) Updates `cssnano-preset-advanced` from 4.0.7 to 8.0.2 - [Release notes](https://github.com/cssnano/cssnano/releases) - [Commits](https://github.com/cssnano/cssnano/commits/cssnano-preset-advanced@8.0.2) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.16 dependency-type: indirect - dependency-name: cssnano dependency-version: 8.0.2 dependency-type: direct:development - dependency-name: cssnano-preset-advanced dependency-version: 8.0.2 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump postcss, cssnano and cssnano-preset-advanced#1

chore(deps): bump postcss, cssnano and cssnano-preset-advanced#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-b3f8c7ae28

dependabot Bot commented on behalf of github Jul 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 9, 2026

8.5.16

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

8.5.2

8.5.16

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

v8.0.2

What's Changed

v8.0.1

What's Changed

v8.0.0

What's Changed

v7.1.9

Bug Fixes

v7.1.8

What's Changed

v.7.1.7

v8.0.2

What's Changed

v8.0.1

What's Changed

v8.0.0

What's Changed

v7.1.9

Bug Fixes

v7.1.8

What's Changed

v.7.1.7

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants