Bump the other group across 1 directory with 8 updates by dependabot[bot] · Pull Request #27 · postcss-go/postcss-go.github.io

dependabot · 2026-10-21T03:45:45Z

Bumps the other group with 8 updates in the / directory:

Package	From	To
@postcss-go/core	`0.0.5`	`0.0.6`
autoprefixer	`10.5.4`	`10.6.1`
monaco-editor	`0.56.0`	`0.57.0`
postcss	`8.5.26`	`8.5.30`
postcss-nested	`8.0.1`	`9.0.0`
source-map-js	`1.2.1`	`1.2.2`
globals	`17.11.0`	`17.13.0`
vitest	`4.1.11`	`5.0.5`

Updates @postcss-go/core from 0.0.5 to 0.0.6

Commits

a4e1aaf Merge pull request #25 from postcss-go/changeset-release/main
228acd3 Version Packages
b14a8f2 Merge pull request #24 from postcss-go/feat/rspack-support
928bb73 support rspack plugin
f2878cd Merge pull request #23 from postcss-go/chore/update-readme
3acd449 update
fae1d48 Merge pull request #21 from postcss-go/fix/go-module-release-git-identity
082cbde Fix Go module release tagging in CI.
1f21e9c Merge pull request #20 from postcss-go/feat/go-api
108ec08 Fix boundary NAPI gocore build after Go module migration.
Additional commits viewable in compare view

Updates autoprefixer from 10.5.4 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

Changelog

Sourced from autoprefixer's changelog.

10.6.1

Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

Added initial-letter support (by @thomasmattheussen).

10.5.6

Fixed producing wrong old -webkit- gradients (by @ryanchou1994).

10.5.5

Fixed resolution media query parsing performance (by @NotAFlightRisk).

Commits

c99614d Release 10.6.1 version
f1d08cb Update dependencies
cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
e1212dc Release 10.6.0 version
dac3c5f Add support for prefixing initial-letter (#1556)
b031690 Release 10.5.6 version
da65c36 Add warning when Autoprefixer can cover CSS for old Safari
604f8d9 Update dependencies
54608ca Fix old WebKit gradients with color hints (#1554)
7e81fff Release 10.5.5 version
Additional commits viewable in compare view

Updates monaco-editor from 0.56.0 to 0.57.0

Release notes

Sourced from monaco-editor's releases.

v0.57.0

Changes:

#5487: Prepare Monaco Editor 0.57.0 release

#5415: Bump uuid and webpack-dev-server in /website

#5476: Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website

#5474: Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel

#5479: Bump actions/deploy-pages from 5.0.0 to 5.0.1 in the github-actions group

#5468: Bump browserslist from 4.28.1 to 4.28.8 in /website

#5475: Bump js-yaml from 4.3.1 to 4.3.2

#5470: Bump fast-uri from 3.1.2 to 3.1.7 in /webpack-plugin

#5469: Bump nanoid from 3.3.11 to 3.3.18 in /webpack-plugin

#5467: Bump fast-uri from 3.1.5 to 3.1.7 in /samples/browser-esm-webpack-typescript-react

#5466: Bump fast-uri from 3.1.2 to 3.1.7 in /samples

#5465: Bump fast-uri from 3.1.4 to 3.1.7 in /website

#5463: Bump postcss-selector-parser from 7.1.0 to 7.1.5 in /website

#5416: Bump @babel/core from 7.17.8 to 7.29.7 in /samples/browser-esm-vite-react

#5438: Bump electron from 39.8.5 to 39.8.10 in /samples

#5460: Bump the github-actions group with 7 updates

#5456: Pin GitHub Actions to full-length commit SHAs

#5450: Bump postcss from 8.5.12 to 8.5.26

#5449: Bump js-yaml from 4.2.0 to 4.3.1

#5439: Bump postcss from 8.5.13 to 8.5.26 in /samples

#5441: Bump postcss from 8.5.15 to 8.5.26 in /samples/browser-esm-vite-react

#5432: Bump undici from 7.28.0 to 7.29.0

#5440: Bump brace-expansion in /website

#5436: Bump fast-uri from 3.1.4 to 3.1.5 in /samples/browser-esm-webpack-typescript-react

#5437: Bump fast-uri from 3.1.2 to 3.1.5

#5413: Bump svgo from 2.8.2 to 2.8.3 in /samples/browser-esm-parcel

#5419: Bump launch-editor from 2.12.0 to 2.14.1 in /website

#5414: Bump fast-uri from 3.1.2 to 3.1.4 in /samples/browser-esm-webpack-typescript-react

#5417: Bump minimatch from 3.1.2 to 3.1.5 in /webpack-plugin

#5420: Bump ws from 8.18.0 to 8.21.1 in /samples

#5418: Bump http-proxy-middleware from 2.0.9 to 2.0.10 in /samples

#5412: Bump fast-uri from 3.1.2 to 3.1.4 in /website

#5411: Bump shell-quote from 1.8.4 to 1.10.0 in /website

#5409: Bump webpack-dev-server from 5.2.5 to 5.2.6 in /samples

#5410: Bump postcss from 8.5.14 to 8.5.23 in /website

#5407: Bump immutable from 5.1.5 to 5.1.9 in /website

#5401: Bump brace-expansion from 1.1.11 to 1.1.16 in /samples

This list of changes was auto generated.

v0.57.0-rc.2

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.57.0]

New Features and APIs

Adds editor.wordWrapIndicator to display an indicator at the wrapping column of soft-wrapped lines.

Adds editor.fullwidthCharacterWidth, with font and twoCells modes for rendering full-width characters.

Adds languages.score to score a language selector against a URI and language.

Exports the editor.DiffEditorViewMode type.

Adds isForAnotherDocument to the inline completion languages.LifetimeSummary type.

Updates

Updates the editor core to VS Code commit 6a598d4a13031703d483d103c1d934a36ad27971, validated in 0.57.0-rc.2.

Updates bundled DOMPurify from 3.4.8 to 3.4.15.

Commits

d618242 Merge pull request #5487 from microsoft/hediet/b/release-0.57.0
ef061ff Prepare Monaco Editor 0.57.0 release
8e9b0f7 Keep editor release version stable across task retries
3f31304 Prepare VS Code native headers before installing dependencies
ebd1312 Use authenticated Foundry Local installer for core builds
176408b Align release build Node version with VS Code 1.139
97d81ca Bump uuid and webpack-dev-server in /website (#5415)
f7c7f4c Bump baseline-browser-mapping from 2.9.19 to 2.11.21 in /website (#5476)
36f4fe6 Bump svgo from 2.8.3 to 2.8.4 in /samples/browser-esm-parcel (#5474)
f24cd7f Bump actions/deploy-pages in the github-actions group (#5479)
Additional commits viewable in compare view

Updates postcss from 8.5.26 to 8.5.30

Release notes

Sourced from postcss's releases.

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Changelog

Sourced from postcss's changelog.

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

8.5.29

Improved </style> escaping (by @choudhryfrompak).

Fixed comments support in list.comma() and list.space() (by @00200200).

Fixed semicolon and custom property (by @wahidrizka).

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

Commits

f1aca7e Release 8.5.30 version
9d83445 Update dependencies
6c9bc73 Fix invalid source map mapping on escaping before new line (#2169)
1fd8f88 Add missed changes in changelog
a7a1f34 Release 8.5.29 version
b55a36d Update dependencies
7647a81 Escape </style> in output of non-Root nodes (#2163)
7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
ebffa97 Add postcss-smooth-corners plugin
57d6401 Speed up source map cleaning
Additional commits viewable in compare view

Updates postcss-nested from 8.0.1 to 9.0.0

Release notes

Sourced from postcss-nested's releases.

9.0.0

Fixed compatibility with Sass nested and CSS nesting (by @wahidrizka). See #176 and #179.

Changelog

Sourced from postcss-nested's changelog.

9.0.0

Fixed compatibility with Sass nested and CSS nesting (by @wahidrizka). See #176 and #179.

Commits

90af828 Release 9.0.0 version
98eb47a Update dependencies
7370297 Keep all parent selectors inside :not() (#179)
4690ff0 Call formatter
0faabcd Update dependencies
a930945 Simplify types
6d7b96b Move to pnpm 12
3f3cf1b Combine every & with each parent selector (#176)
88f217b Fix custom at-rule names inherited from Object.prototype (#175)
See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @xfournet

Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

Reported by @waydeshi in #76. A fix was also proposed by @aniebiet in #78.

Commits

0a1d334 1.2.2
4c6fa26 Update changelog
cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
See full diff in compare view

Updates globals from 17.11.0 to 17.13.0

Release notes

Sourced from globals's releases.

v17.13.0

Update globals (2026-10-01) (#354) b007369

sindresorhus/globals@v17.12.0...v17.13.0

v17.12.0

Update globals (2026-09-01) (#353) 50a2119

Add __webpack_layer__ global (#351) 779a11a

sindresorhus/globals@v17.11.0...v17.12.0

Commits

ce512bc 17.13.0
b007369 Update globals (2026-10-01) (#354)
16cb1fe Meta tweaks
98008c3 17.12.0
50a2119 Update globals (2026-09-01) (#353)
779a11a Add __webpack_layer__ global (#351)
See full diff in compare view

Updates vitest from 4.1.11 to 5.0.5

Release notes

Sourced from vitest's releases.

v5.0.5

   🐞 Bug Fixes

Keep vite default fs.deny with api token file - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11578 (28dc1)

Handle quoted file names in --changed - by @sheremet-va in vitest-dev/vitest#11583 (14921)

Add data to the import.meta.hot stub - by @sheremet-va in vitest-dev/vitest#11590 (3a828)

Set skip in skipIf, ignore undefined options - by @sheremet-va in vitest-dev/vitest#11591 (d523a)

Skip builtin loading in async leak detector - by @sheremet-va in vitest-dev/vitest#11598 (fe86a)

Keep the import frame in native loader errors - by @sheremet-va in vitest-dev/vitest#11599 (9697b)

Run hook cleanups when a later hook fails - by @sheremet-va in vitest-dev/vitest#11605 (6c5a4)

Release mocks of finished test files - by @sheremet-va in vitest-dev/vitest#11607 (e9c3d)

Abort all running tests on cancel - by @sheremet-va in vitest-dev/vitest#11606 (6621a)

browser:

Ignore synthetic pagehide events - by @sheremet-va in vitest-dev/vitest#11582 (ca081)

Run plugin buildStart on server creation - by @sheremet-va in vitest-dev/vitest#11593 (ea611)

Drop late connections of closed sessions - by @sheremet-va in vitest-dev/vitest#11600 (f161e)

Wait 30s for the browser to close - by @sheremet-va in vitest-dev/vitest#11601 (6498b)

Run global setup once with instances - by @sheremet-va in vitest-dev/vitest#11596 (8dd67)

reporter:

End reason &[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39);failed&[#39](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/39); on worker crash - by @AriPerkkio in vitest-dev/vitest#11568 (6ae8e)

    View changes on GitHub

v5.0.4

   🚀 Features

experimental:

Tag cache directories with CACHEDIR.TAG - by @lifeiscontent in vitest-dev/vitest#11461 (a8ea3)

Support test.ui.theme option - by @sheremet-va in vitest-dev/vitest#11499 (1da66)

Highlight selector multiple matches in trace view - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11489 (5abba)

Print how many tests were affected and a total when running --changed - by @sheremet-va in vitest-dev/vitest#11424 (a2336)

Add an option to cache dependencies instead of statically parsing them - by @sheremet-va in vitest-dev/vitest#11515 (c0601)

Add fit and zoom controls to trace viewer - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11490 (f5dd9)

   🐞 Bug Fixes

Fail the run on git and location filter errors - by @sheremet-va in vitest-dev/vitest#11430 (30d03)

Enable fsModuleCache by default - by @sheremet-va in vitest-dev/vitest#11435 (ad208)

Track project files and mocks with --changed - by @sheremet-va in vitest-dev/vitest#11432 (b0f2b)

Refactor caching, fix : in project and change the shape of results cache - by @sheremet-va in vitest-dev/vitest#11453 (9673c)

Keep full $ string values when taskTitleValueFormatTruncate is 0 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11485 (4f7e1)

Resolve node builtins in client environments - by @sheremet-va in vitest-dev/vitest#11417 (56b31)

Fix module graph builtin externals after #11421 - by @hi-ogawa, Hiroshi Ogawa and Claude Opus 5.5 in vitest-dev/vitest#11491 and vitest-dev/vitest#11421 (008e1)

Wrap module mocks during in-source testing - by @sheremet-va in vitest-dev/vitest#11505 (36d19)

Handle line endings in snapshot - by @sheremet-va in vitest-dev/vitest#11522 (4c468)

Respect root in projects - by @sheremet-va in vitest-dev/vitest#11521 (26642)

Resolve mocks in directories with spaces - by @sheremet-va in vitest-dev/vitest#11539 (caaef)

api:

Publish the api token atomically - by @umairnawaz333 in vitest-dev/vitest#11323 (6f990)

browser:

... (truncated)

Commits

7a825db chore: release v5.0.5 (#11609)
6621a72 fix: abort all running tests on cancel (#11606)
e9c3d72 fix: release mocks of finished test files (#11607)
8dd67c2 fix(browser): run global setup once with instances (#11596)
6c5a447 fix: run hook cleanups when a later hook fails (#11605)
9697b38 fix: keep the import frame in native loader errors (#11599)
6498b66 fix(browser): wait 30s for the browser to close (#11601)
f161e6d fix(browser): drop late connections of closed sessions (#11600)
fe86a64 fix: skip builtin loading in async leak detector (#11598)
6ae8e89 fix(reporter): end reason 'failed' on worker crash (#11568)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the other group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@postcss-go/core](https://github.com/postcss-go/postcss-go) | `0.0.5` | `0.0.6` | | [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.4` | `10.6.1` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.56.0` | `0.57.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.26` | `8.5.30` | | [postcss-nested](https://github.com/postcss/postcss-nested) | `8.0.1` | `9.0.0` | | [source-map-js](https://github.com/7rulnik/source-map-js) | `1.2.1` | `1.2.2` | | [globals](https://github.com/sindresorhus/globals) | `17.11.0` | `17.13.0` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.5` | Updates `@postcss-go/core` from 0.0.5 to 0.0.6 - [Release notes](https://github.com/postcss-go/postcss-go/releases) - [Commits](https://github.com/postcss-go/postcss-go/compare/@postcss-go/[email protected]...@postcss-go/[email protected]) Updates `autoprefixer` from 10.5.4 to 10.6.1 - [Release notes](https://github.com/postcss/autoprefixer/releases) - [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md) - [Commits](postcss/autoprefixer@10.5.4...10.6.1) Updates `monaco-editor` from 0.56.0 to 0.57.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.56.0...v0.57.0) Updates `postcss` from 8.5.26 to 8.5.30 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.26...8.5.30) Updates `postcss-nested` from 8.0.1 to 9.0.0 - [Release notes](https://github.com/postcss/postcss-nested/releases) - [Changelog](https://github.com/postcss/postcss-nested/blob/main/CHANGELOG.md) - [Commits](postcss/postcss-nested@8.0.1...9.0.0) Updates `source-map-js` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/7rulnik/source-map-js/releases) - [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md) - [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2) Updates `globals` from 17.11.0 to 17.13.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.11.0...v17.13.0) Updates `vitest` from 4.1.11 to 5.0.5 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest) --- updated-dependencies: - dependency-name: "@postcss-go/core" dependency-version: 0.0.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: autoprefixer dependency-version: 10.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: monaco-editor dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other - dependency-name: postcss dependency-version: 8.5.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: postcss-nested dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: other - dependency-name: source-map-js dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other - dependency-name: globals dependency-version: 17.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other - dependency-name: vitest dependency-version: 5.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: other ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 21, 2026

Navigation Menu

Repository navigation

Bump the other group across 1 directory with 8 updates - #27

Bump the other group across 1 directory with 8 updates#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/other-6efcca8244

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.6.1

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

v0.57.0

Changes:

v0.57.0-rc.2

[0.57.0]

New Features and APIs

Updates

8.5.30

8.5.29

8.5.28

8.5.27

8.5.30

8.5.29

8.5.28

8.5.27

9.0.0

9.0.0

v1.2.2

1.2.2

v17.13.0

v17.12.0

v5.0.5

🐞 Bug Fixes

View changes on GitHub

v5.0.4

🚀 Features

🐞 Bug Fixes

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 21, 2026 •

edited

Loading