Bump the other group across 1 directory with 7 updates by dependabot[bot] · Pull Request #26 · postcss-go/postcss-go.github.io

dependabot · 2026-10-07T03:45:17Z

Bumps the other group with 7 updates in the / directory:

Package	From	To
@postcss-go/core	`0.0.5`	`0.0.6`
autoprefixer	`10.5.4`	`10.6.1`
monaco-editor	`0.56.0`	`0.57.0`
postcss	`8.5.26`	`8.5.28`
source-map-js	`1.2.1`	`1.2.2`
globals	`17.11.0`	`17.13.0`
vitest	`4.1.11`	`5.0.3`

Updates @postcss-go/core from 0.0.5 to 0.0.6

Commits

a4e1aaf Merge pull request #25 from postcss-go/changeset-release/main
228acd3 Version Packages
b14a8f2 Merge pull request #24 from postcss-go/feat/rspack-support
928bb73 support rspack plugin
f2878cd Merge pull request #23 from postcss-go/chore/update-readme
3acd449 update
fae1d48 Merge pull request #21 from postcss-go/fix/go-module-release-git-identity
082cbde Fix Go module release tagging in CI.
1f21e9c Merge pull request #20 from postcss-go/feat/go-api
108ec08 Fix boundary NAPI gocore build after Go module migration.
Additional commits viewable in compare view

Updates autoprefixer from 10.5.4 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

Changelog

Sourced from autoprefixer's changelog.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

Commits

c99614d Release 10.6.1 version
f1d08cb Update dependencies
cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
e1212dc Release 10.6.0 version
dac3c5f Add support for prefixing initial-letter (#1556)
b031690 Release 10.5.6 version
da65c36 Add warning when Autoprefixer can cover CSS for old Safari
604f8d9 Update dependencies
54608ca Fix old WebKit gradients with color hints (#1554)
7e81fff Release 10.5.5 version
Additional commits viewable in compare view

Updates monaco-editor from 0.56.0 to 0.57.0

Release notes

Sourced from monaco-editor's releases.

v0.57.0

Changes:

#5487: Prepare Monaco Editor 0.57.0 release

#5415: Bump uuid and webpack-dev-server in /website

#5476: Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website

#5474: Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel

#5479: Bump actions/deploy-pages from 5.0.0 to 5.0.1 in the github-actions group

#5468: Bump browserslist from 4.28.1 to 4.28.8 in /website

#5475: Bump js-yaml from 4.3.1 to 4.3.2

#5470: Bump fast-uri from 3.1.2 to 3.1.7 in /webpack-plugin

#5469: Bump nanoid from 3.3.11 to 3.3.18 in /webpack-plugin

#5467: Bump fast-uri from 3.1.5 to 3.1.7 in /samples/browser-esm-webpack-typescript-react

#5466: Bump fast-uri from 3.1.2 to 3.1.7 in /samples

#5465: Bump fast-uri from 3.1.4 to 3.1.7 in /website

#5463: Bump postcss-selector-parser from 7.1.0 to 7.1.5 in /website

#5416: Bump @babel/core from 7.17.8 to 7.29.7 in /samples/browser-esm-vite-react

#5438: Bump electron from 39.8.5 to 39.8.10 in /samples

#5460: Bump the github-actions group with 7 updates

#5456: Pin GitHub Actions to full-length commit SHAs

#5450: Bump postcss from 8.5.12 to 8.5.26

#5449: Bump js-yaml from 4.2.0 to 4.3.1

#5439: Bump postcss from 8.5.13 to 8.5.26 in /samples

#5441: Bump postcss from 8.5.15 to 8.5.26 in /samples/browser-esm-vite-react

#5432: Bump undici from 7.28.0 to 7.29.0

#5440: Bump brace-expansion in /website

#5436: Bump fast-uri from 3.1.4 to 3.1.5 in /samples/browser-esm-webpack-typescript-react

#5437: Bump fast-uri from 3.1.2 to 3.1.5

#5413: Bump svgo from 2.8.2 to 2.8.3 in /samples/browser-esm-parcel

#5419: Bump launch-editor from 2.12.0 to 2.14.1 in /website

#5414: Bump fast-uri from 3.1.2 to 3.1.4 in /samples/browser-esm-webpack-typescript-react

#5417: Bump minimatch from 3.1.2 to 3.1.5 in /webpack-plugin

#5420: Bump ws from 8.18.0 to 8.21.1 in /samples

#5418: Bump http-proxy-middleware from 2.0.9 to 2.0.10 in /samples

#5412: Bump fast-uri from 3.1.2 to 3.1.4 in /website

#5411: Bump shell-quote from 1.8.4 to 1.10.0 in /website

#5409: Bump webpack-dev-server from 5.2.5 to 5.2.6 in /samples

#5410: Bump postcss from 8.5.14 to 8.5.23 in /website

#5407: Bump immutable from 5.1.5 to 5.1.9 in /website

#5401: Bump brace-expansion from 1.1.11 to 1.1.16 in /samples

This list of changes was auto generated.

v0.57.0-rc.2

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.57.0]

New Features and APIs

Adds editor.wordWrapIndicator to display an indicator at the wrapping column of soft-wrapped lines.

Adds editor.fullwidthCharacterWidth, with font and twoCells modes for rendering full-width characters.

Adds languages.score to score a language selector against a URI and language.

Exports the editor.DiffEditorViewMode type.

Adds isForAnotherDocument to the inline completion languages.LifetimeSummary type.

Updates

Updates the editor core to VS Code commit 6a598d4a13031703d483d103c1d934a36ad27971, validated in 0.57.0-rc.2.

Updates bundled DOMPurify from 3.4.8 to 3.4.15.

Commits

d618242 Merge pull request #5487 from microsoft/hediet/b/release-0.57.0
ef061ff Prepare Monaco Editor 0.57.0 release
8e9b0f7 Keep editor release version stable across task retries
3f31304 Prepare VS Code native headers before installing dependencies
ebd1312 Use authenticated Foundry Local installer for core builds
176408b Align release build Node version with VS Code 1.139
97d81ca Bump uuid and webpack-dev-server in /website (#5415)
f7c7f4c Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website (#5476)
36f4fe6 Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel (#5474)
f24cd7f Bump actions/deploy-pages in the github-actions group (#5479)
Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Changelog

Sourced from postcss's changelog.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Commits

e544bff Release 8.5.28 version
f8fc252 Typo
5039fd7 Add missed release notes
ae40ca4 Release 8.5.27 version
62b1626 Fix linter
1dba938 Update dependencies
3e82edc Keep non-annotation comments when the processor has no plugins (#2150)
6d23bc3 Fix link
508e997 Add GitHub Sponsors link
e993739 Add CodeRabbit sponsor (#2145)
Additional commits viewable in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

Commits

0a1d334 1.2.2
4c6fa26 Update changelog
cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
See full diff in compare view

Updates globals from 17.11.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

Update globals (2026-10-01) (#354) b007369

sindresorhus/globals@v17.12.0...v17.13.0

v17.12.0

Update globals (2026-09-01) (#353) 50a2119

Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

Commits

ce512bc 17.13.0
b007369 Update globals (2026-10-01) (#354)
16cb1fe Meta tweaks
98008c3 17.12.0
50a2119 Update globals (2026-09-01) (#353)
779a11a Add __webpack_layer__ global (#351)
See full diff in compare view

Updates vitest from 4.1.11 to 5.0.3

Release notes

Sourced from vitest's releases.

v5.0.3

   🐞 Bug Fixes

Isolate result.status between repeats runs - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11218 (5dbeb)

Don't print an interceptor warning in browser mode - by @sheremet-va in vitest-dev/vitest#11377 (15cc0)

Don't retry when test.fails expectedly failed - by @hi-ogawa, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11219 (b2458)

Scope cache key generators to projects - by @ecoyoung in vitest-dev/vitest#11281 and vitest-dev/vitest#11301 (92ba7)

browser:

Delay server listen until tests start running - by @sheremet-va in vitest-dev/vitest#11366 (7d8ed)

Check mock path boundaries - by @saryn17, Ryosei Sato and @sheremet-va in vitest-dev/vitest#11361 and vitest-dev/vitest#11362 (1c388)

Keep config of browser-consumed environments - by @kasperpeulen and Claude in vitest-dev/vitest#11378 (aafc0)

Ignore page crash while cancelling - by @sheremet-va in vitest-dev/vitest#11386 (7c367)

toMatchScreenshot uses wrong reference on retried tests - by @macarie in vitest-dev/vitest#11393 (c22ab)

cache:

Revalidate imports of cached modules - by @sheremet-va in vitest-dev/vitest#11381 (38f98)

deps:

Pin why-is-node-running to 3.2.1 to avoid users running into ERR_PNPM_TRUST_DOWNGRADE - by @AriPerkkio in vitest-dev/vitest#11403 (f6c9a)

expect:

Pass current equality testers to expect.extend asymmetric matchers - by @hi-ogawa, Hiroshi Ogawa and Claude in vitest-dev/vitest#11401 (3e794)

jsdom:

Support Blob on jsdom 30.1 - by @sheremet-va in vitest-dev/vitest#11379 (6c49b)

pool:

Preserve unique pool ids when groupOrder is set - by @mtorp in vitest-dev/vitest#11392 (50312)

ui:

Split-pane handle overlapping iframe - by @macarie in vitest-dev/vitest#11221 (f91db)

vitest:

Remove root temp dir on close - by @abhinav-phi in vitest-dev/vitest#11248 (7c711)

vm:

Do not optimize deps from index.html - by @ezefernandezyf, Hiroshi Ogawa and Codex (GPT-6) in vitest-dev/vitest#11329 and vitest-dev/vitest#11360 (caf28)

Don't reuse scripts across vite environments - by @MO2k4, Martin Oehlert and Claude in vitest-dev/vitest#11395 (346d3)

    View changes on GitHub

v5.0.2

   🐞 Bug Fixes

Bind process in case global is overwritten - by @AriPerkkio in vitest-dev/vitest#11343 (0b792)

detect-async-leaks:

Ignore process.stdio handles - by @AriPerkkio in vitest-dev/vitest#11333 (0fd6b)

expect:

Fix toMatchObject with asymmetric matchers - by @ShreeBohara, Claude Opus 5, @hi-ogawa, Hiroshi Ogawa and Codex (GPT-5) in vitest-dev/vitest#11100 (42523)

jsdom:

Fix Request with Blob body on jsdom 28+ - by @harshit-d3v in vitest-dev/vitest#11295 (d1c3e)

reporter:

agent to respect --silent - by @Raj4478 and @AriPerkkio in vitest-dev/vitest#11271 (5b95e)

reporters:

Handle concurrent createReport calls - by @7rulnik in vitest-dev/vitest#11278 (e8e55)

hanging-process to use ESM entrypoint - by @AriPerkkio in vitest-dev/vitest#11316 (4e91e)

spy:

Fix stack overflow when spying Set.prototype.add - by @fengmk2 in vitest-dev/vitest#11299 (a0a93)

... (truncated)

Commits

33cadea chore: release v5.0.3 (#11409)
346d389 fix(vm): don't reuse scripts across vite environments (#11395)
f6c9a49 fix(deps): pin why-is-node-running to 3.2.1 to avoid users running into `...
062c75d chore: fix standalone docs build, update exports maps (#11394)
caf2887 fix(vm): do not optimize deps from index.html (fix #11329) (#11360)
50312eb fix(pool): preserve unique pool ids when groupOrder is set (#11392)
7c36748 fix(browser): ignore page crash while cancelling (#11386)
92ba7fc fix: scope cache key generators to projects (fix #11281) (#11301)
38f9885 fix(cache): revalidate imports of cached modules (#11381)
b24585f fix: don't retry when test.fails expectedly failed (#11219)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the other group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@postcss-go/core](https://github.com/postcss-go/postcss-go) | `0.0.5` | `0.0.6` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.56.0` | `0.57.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.28` | | [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` | | [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.3` | Updates `@postcss-go/core` from 0.0.5 to 0.0.6 - [Release notes](https://github.com/postcss-go/postcss-go/releases) - [Commits](https://github.com/postcss-go/postcss-go/compare/@postcss-go/[email protected]...@postcss-go/[email protected]) Updates `autoprefixer` from 10.5.4 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.4...10.6.1) Updates `monaco-editor` from 0.56.0 to 0.57.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.56.0...v0.57.0) Updates `postcss` from 8.5.26 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.28) Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) Updates `globals` from 17.11.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.11.0...v17.13.0) Updates `vitest` from 4.1.11 to 5.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.3/packages/vitest) --- updated-dependencies: - dependency-name: "@postcss-go/core" dependency-version: 0.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: monaco-editor dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: postcss dependency-version: 8.5.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other - dependency-name: vitest dependency-version: 5.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-10-21T03:45:22Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026

dependabot Bot closed this Oct 21, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/other-29b69e2462 branch October 21, 2026 03:45

Navigation Menu

Repository navigation

Bump the other group across 1 directory with 7 updates - #26

Bump the other group across 1 directory with 7 updates#26
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/other-29b69e2462

dependabot Bot commented on behalf of github Oct 7, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

v0.57.0

Changes:

v0.57.0-rc.2

[0.57.0]

New Features and APIs

Updates

8.5.28

8.5.27

8.5.28

8.5.27

v1.2.2

1.2.2

v17.13.0

v17.12.0

v5.0.3

🐞 Bug Fixes

View changes on GitHub

v5.0.2

🐞 Bug Fixes

Uh oh!

dependabot Bot commented on behalf of github Oct 21, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 7, 2026 •

edited

Loading