build(deps): bump the npm_and_yarn group across 1 directory with 13 updates
Type: Pull Request
State: Open
Association: Unknown
Comments: 1
(2 days ago)
(2 days ago)
dependencies javascript
Bumps the npm_and_yarn group with 12 updates in the / directory:
| Package | From | To |
|---|---|---|
| next | 16.2.6 |
16.2.12 |
| react | 19.2.4 |
19.2.8 |
| @types/react | 19.2.14 |
19.2.18 |
| react-dom | 19.2.4 |
19.2.8 |
| @types/react-dom | 19.2.3 |
19.2.4 |
| @tailwindcss/postcss | 4.2.2 |
4.3.3 |
| @types/node | 25.5.0 |
26.1.2 |
| autoprefixer | 10.4.27 |
10.5.4 |
| eslint | 10.0.3 |
10.8.0 |
| eslint-config-next | 16.2.6 |
16.2.12 |
| postcss | 8.5.14 |
8.5.25 |
| typescript | 5.9.3 |
7.0.2 |
Updates next from 16.2.6 to 16.2.12
Release notes
Sourced from next's releases.
v16.2.12
What's Changed
- Backport/docs fixes 16.2 - July round by
@icyJosephin vercel/next.js#96031- [Backport] Fixes to support TypeScript 7 by
@lukesandbergin vercel/next.js#95831Full Changelog: https://github.com/vercel/next.js/compare/v16.2.11...v16.2.12
v16.2.11
This release contains security fixes for the following advisories:
High:
- Denial of Service in App Router using Server Actions
- Middleware / Proxy bypass in App Router applications using Turbopack and single locale
- Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
- Server-Side Request Forgery in Server Actions on custom servers
Moderate:
- Cache confusion of response bodies for requests with bodies
- Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
- Denial of Service in the Image Optimization API using SVGs
- Unauthenticated disclosure of internal Server Function endpoints
- Unbounded Server Action payload in Edge runtime
v16.2.10
Contains no changes except publishing
@next/swc-wasm-webwhich was accidentally not published since 16.2.4.v16.2.9
Empty release to ensure
next@latestpoints at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.v16.2.8
Release with no changes in an attempt to fix
next@latestpointing at a prerelease version.v16.2.7
[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.
Core Changes
- Backport documentation fixes for v16.2 (#93804)
- [backport] Patch
playwright-coreto resolve_finishedPromiseonrequestFailed(#93920)- [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
- [backport] Fix catch-all
router.querycorruption withbasePath+rewrites(#93917)- [backport] Encode non-ASCII characters in cache tags at construction (#93918)
- [backport] Fix server action forwarding loop with middleware rewrites (#93919)
- [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
- [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
... (truncated)
Commits
2234717v16.2.12957f5ed[Backport] Fixes to support TypeScript 7 (#95831)b56eb16Backport/docs fixes 16.2 - July round (#96031)9beca08v16.2.113c48c7a[16.x] Fix Turbopack middleware matcher with i18n single localeac1eff3[16.x] Improve performance of checking valid MPA form submissions9a4651e[16.x] EnforceserverActions.bodySizeLimitfor Server Actions in Edge runtimeb512063[16.x] Set correct origin for internal redirects in custom serverd303326[16.x] Ensure exotic rewrite param values are properly encoded73b9487[16.x] fix(fetch-cache): key fetch(Request, init) by the effective request- Additional commits viewable in compare view
Updates react from 19.2.4 to 19.2.8
Release notes
Sourced from react's releases.
19.2.8 (July 21st, 2026)
React Server Components
19.2.7 (June 1st, 2026)
React Server Components
- Fixed missing
FormDataentries in Server Actions which regressed in 19.2.6 (#36566 by@unstubbable)19.2.6 (May 6th, 2026)
React Server Components
- Type hardening and performance improvements (#36425 by
@eps1lonand@unstubbable)19.2.5 (April 8th, 2026)
React Server Components
- Add more cycle protections (#36236 by
@eps1lonand@unstubbable)
Changelog
Sourced from react's changelog.
19.2.7 (June 1, 2026)
React Server Components
- Fixed missing
FormDataentries in Server Actions which regressed in 19.2.6 (@unstubbable#36566)19.2.6 (May 6, 2026)
React Server Components
- Type hardening and performance improvements (
@eps1lon,@unstubbable#36425)19.2.5 (March 18, 2026)
React Server Components
- Add more cycle protections (
@eps1lon,@unstubbable#36236)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates @types/react from 19.2.14 to 19.2.18
Commits
- See full diff in compare view
Updates react-dom from 19.2.4 to 19.2.8
Release notes
Sourced from react-dom's releases.
19.2.8 (July 21st, 2026)
React Server Components
19.2.7 (June 1st, 2026)
React Server Components
- Fixed missing
FormDataentries in Server Actions which regressed in 19.2.6 (#36566 by@unstubbable)19.2.6 (May 6th, 2026)
React Server Components
- Type hardening and performance improvements (#36425 by
@eps1lonand@unstubbable)19.2.5 (April 8th, 2026)
React Server Components
- Add more cycle protections (#36236 by
@eps1lonand@unstubbable)
Changelog
Sourced from react-dom's changelog.
19.2.7 (June 1, 2026)
React Server Components
- Fixed missing
FormDataentries in Server Actions which regressed in 19.2.6 (@unstubbable#36566)19.2.6 (May 6, 2026)
React Server Components
- Type hardening and performance improvements (
@eps1lon,@unstubbable#36425)19.2.5 (March 18, 2026)
React Server Components
- Add more cycle protections (
@eps1lon,@unstubbable#36236)
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.
Updates @types/react-dom from 19.2.3 to 19.2.4
Commits
- See full diff in compare view
Updates @tailwindcss/postcss from 4.2.2 to 4.3.3
Release notes
Sourced from @tailwindcss/postcss's releases.
v4.3.3
Fixed
- Support
--watch --poll[=ms]in@tailwindcss/cliwhen filesystem events are unreliable or unavailable (#20297)- Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g.
bg-[#fff]andbg-[#FFF]→bg-white) (#20298)- Prevent Preflight from overriding Firefox's native
iframe:focus-visibleoutline styles (#20292)- Ensure
theme('colors.foo')in JS plugins resolves correctly when both--color-fooand--color-foo-barexist (#20299)- Ensure fractional opacity modifiers work with named shadow sizes like
shadow-sm/12.5,text-shadow-sm/12.5,drop-shadow-sm/12.5, andinset-shadow-sm/12.5(#20302)- Parse selectors like
[data-foo]divas two selectors instead of one (#20303)- Ensure
@tailwindcss/postcssrebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)- Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in
@tailwindcss/browserand Tailwind Play (#20124)- Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like
oklch(#20314)- Ensure
--spacing(0)is optimized to0pxinstead of0so it remains a<length>when used incalc(…)(#20319)- Load
@parcel/watcheronly when needed in@tailwindcss/cli --watchmode, so one-off builds and--watch --pollwork when@parcel/watchercan't be loaded (#20325)- Use explicit platform fonts instead of
system-uiandui-sans-serifso CJK text respects the page'slangattribute on Windows (#20318)- Prevent
@tailwindcss/upgradefrom rewriting ignored files when run from a subdirectory (#20329)- Ensure earlier
@sourcerules pointing to nested files are scanned when later@sourcerules point to files in parent folders (#20335)- Prevent
@tailwindcss/vitefrom triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)v4.3.2
Fixed
- Support bare spacing values for
auto-rows-*andauto-cols-*utilities (e.g.auto-rows-12andauto-cols-16) (#20229)- Prevent
@tailwindcss/cliin--watchmode from crashing on Windows when@sourcepoints to a directory that doesn't exist (#20242)- Prevent
@tailwindcss/vitefrom crashing in Deno v2.8.x whencontext.parentURLis not a valid URL (#20245)- Ensure
@tailwindcss/cliin--watchmode rebuilds when the input CSS file changes in an ignored directory (#20246)- Allow
@variantrules used inaddBase(…)to use custom variants defined later (#20247)- Prevent
@tailwindcss/vitefrom crashing during HMR when scanned files or directories are deleted (#20259)- Generate
font-sizeinstead ofcolordeclarations fortext-[--spacing(…)](#20260)- Prevent
@sourcepatterns from scanning unrelated sibling files and folders (#20263)- Extract class candidates adjacent to Template Toolkit delimiters like
%]…[%in.tt,.tt2, and.txfiles (#20269)- Extract class candidates from conditional Maud syntax like
p.text-black[condition](#20269)- Prevent
@position-tryrules from triggering unknown at-rule warnings when optimizing CSS (#20277)- Support class suggestions for named opacity modifiers from
--opacitytheme values (#20287)- Prevent type errors in
@tailwindcss/postcsswhen used with newer PostCSS patch releases (#20289)v4.3.1
Added
- Add
--silentoption to suppress output in@tailwindcss/cli(#20100)Fixed
- Remove deprecation warnings by using
Module#registerHooksinstead ofModule#registeron Node 26+ (#20028)- Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
- Allow
@applyto be used with CSS mixins (#19427)- Ensure
not-*correctly negates@containerqueries, includingstyle(…)queries (#20059)- Ensure
drop-shadow-*color utilities work with custom shadow values containingcalc(…)(#20080)- Fix 'Sourcemap is likely to be incorrect' warnings when using
@tailwindcss/vite(#20103)- Ensure
@tailwindcss/webpackcan be installed in Rspack projects without requiringwebpackas a peer dependency (#20027)
... (truncated)
Changelog
Sourced from @tailwindcss/postcss's changelog.
[4.3.3] - 2026-07-16
Fixed
- Support
--watch --poll[=ms]in@tailwindcss/cliwhen filesystem events are unreliable or unavailable (#20297)- Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g.
bg-[#fff]andbg-[#FFF]→bg-white) (#20298)- Prevent Preflight from overriding Firefox's native
iframe:focus-visibleoutline styles (#20292)- Ensure
theme('colors.foo')in JS plugins resolves correctly when both--color-fooand--color-foo-barexist (#20299)- Ensure fractional opacity modifiers work with named shadow sizes like
shadow-sm/12.5,text-shadow-sm/12.5,drop-shadow-sm/12.5, andinset-shadow-sm/12.5(#20302)- Parse selectors like
[data-foo]divas two selectors instead of one (#20303)- Ensure
@tailwindcss/postcssrebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)- Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in
@tailwindcss/browserand Tailwind Play (#20124)- Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like
oklch(#20314)- Ensure
--spacing(0)is optimized to0pxinstead of0so it remains a<length>when used incalc(…)(#20319)- Load
@parcel/watcheronly when needed in@tailwindcss/cli --watchmode, so one-off builds and--watch --pollwork when@parcel/watchercan't be loaded (#20325)- Use explicit platform fonts instead of
system-uiandui-sans-serifso CJK text respects the page'slangattribute on Windows (#20318)- Prevent
@tailwindcss/upgradefrom rewriting ignored files when run from a subdirectory (#20329)- Ensure earlier
@sourcerules pointing to nested files are scanned when later@sourcerules point to files in parent folders (#20335)- Prevent
@tailwindcss/vitefrom triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)[4.3.2] - 2026-06-26
Fixed
- Support bare spacing values for
auto-rows-*andauto-cols-*utilities (e.g.auto-rows-12andauto-cols-16) (#20229)- Prevent
@tailwindcss/cliin--watchmode from crashing on Windows when@sourcepoints to a directory that doesn't exist (#20242)- Prevent
@tailwindcss/vitefrom crashing in Deno v2.8.x whencontext.parentURLis not a valid URL (#20245)- Ensure
@tailwindcss/cliin--watchmode rebuilds when the input CSS file changes in an ignored directory (#20246)- Allow
@variantrules used inaddBase(…)to use custom variants defined later (#20247)- Prevent
@tailwindcss/vitefrom crashing during HMR when scanned files or directories are deleted (#20259)- Generate
font-sizeinstead ofcolordeclarations fortext-[--spacing(…)](#20260)- Prevent
@sourcepatterns from scanning unrelated sibling files and folders (#20263)- Extract class candidates adjacent to Template Toolkit delimiters like
%]…[%in.tt,.tt2, and.txfiles (#20269)- Extract class candidates from conditional Maud syntax like
p.text-black[condition](#20269)- Prevent
@position-tryrules from triggering unknown at-rule warnings when optimizing CSS (#20277)- Support class suggestions for named opacity modifiers from
--opacitytheme values (#20287)- Prevent type errors in
@tailwindcss/postcsswhen used with newer PostCSS patch releases (#20289)[4.3.1] - 2026-06-12
Added
- Add
--silentoption to suppress output in@tailwindcss/cli(#20100)Fixed
- Remove deprecation warnings by using
Module#registerHooksinstead ofModule#registeron Node 26+ (#20028)- Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
- Allow
@applyto be used with CSS mixins (#19427)- Ensure
not-*correctly negates@containerqueries, includingstyle(…)queries (#20059)
... (truncated)
Commits
c2b24dd4.3.3 (#20334)e48c5e8Fix weird character rendering on Windows with Japanese locale (#20318)9b0e8afEnsure@tailwindcss/postcssrebuilds when the input CSS changes but its mti...b53fa09fix: exclude iframes from focus-visible auto outline in Preflight (#20292)056a1554.3.2 (#20281)8a14a714.3.1 (#20226)522288cServe ESM type declarations to ESM importers of@tailwindcss/postcss(#20228)8dcdb66Bump dependencies (#20095)588bd734.3.0 (#20023)12eb5aeCleanup noisy test output (#20015)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for @tailwindcss/postcss since your current version.
Updates @types/node from 25.5.0 to 26.1.2
Commits
- See full diff in compare view
Updates @types/react from 19.2.14 to 19.2.18
Commits
- See full diff in compare view
Updates @types/react-dom from 19.2.3 to 19.2.4
Commits
- See full diff in compare view
Updates autoprefixer from 10.4.27 to 10.5.4
Release notes
Sourced from autoprefixer's releases.
10.5.4
- Fixed prefixed rule duplication (by
@xianjianlf2).10.5.3
- Fixed brackets and gradient parser (
@alanturing881).10.5.2
- Moved
-webkit-fill-availablebefore-moz-available, so Firefox will use-webkit-version which is closer tostretch.10.5.1
- Fixed
grid-areaspan reset for overriding areas (by@puneetdixit200).10.5.0 “Each Endeavouring, All Achieving”
- Added
mask-position-xandmask-position-ysupport (by@toporek).
Changelog
Sourced from autoprefixer's changelog.
10.5.4
- Fixed prefixed rule duplication (by
@xianjianlf2).10.5.3
- Fixed brackets and gradient parser (
@alanturing881).10.5.2
- Moved
-webkit-fill-availablebefore-moz-available, so Firefox will use-webkit-version which is closer tostretch.10.5.1
- Fixed
grid-areaspan reset for overriding areas (by@puneetdixit200).10.5.0 “Each Endeavouring, All Achieving”
- Added
mask-position-xandmask-position-ysupport (by@toporek).
Commits
4cad00fRelease 10.5.4 versione62a4b1Update CI configc8f0d0aUpdate dependenciescae3577Move back to latest pnpm 11fd31eb3Fix duplicated prefixed selectors on reformatted CSS (#1552)958d390Release 10.5.3 version21d2adbFix gradient parserf7ddae9Fix bracket parser10ea5e7Update dependencies and remove patchb6e8a2aUpdate Dev Container- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.
Updates eslint from 10.0.3 to 10.8.0
Release notes
Sourced from eslint's releases.
v10.8.0
Features
Bug Fixes
6b8d2f7fix: escape reserved characters in rule id inhtmlformatter (#21129) (Francesco Trotta)9091071fix: preventno-unreachable-loopcrash when all loop types are ignored (#21116) (Pixel)e23fafefix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)20b5ad0fix: quadratic-time regex inprefer-template(#21096) (Milos Djermanovic)8b6f6c0fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)b2c608cfix: NewExpression with parenthesized callee inpreserve-caught-error(#21083) (Francesco Trotta)Documentation
6ddf858docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)784dfbedocs: Clarifyno-eq-nulldescription (#21120) (Park Harin)7ec733adocs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))92bb13fdocs: replace quake link (#21108) (Jung Hyeon Jun)68eb4a5docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)d28f697docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)eccc68ddocs: correct --suppressions-location option description (#21093) (Ga eun Lee)c5963f7docs: Update README (GitHub Actions Bot)Chores
4fbf46dtest: pinwebpackversion to 5.108.4 (#21137) (Francesco Trotta)2d063e2chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)eccbe7btest: add error locations tono-class-assign(#21123) (devoil)e7d1e43ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])e9d66d0ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])ee225b6test: Add error location details tono-eq-nullrule (#21117) (Park Harin)044a627chore: update minimatch to ^10.2.5 (#21107) (김채영)fb09aa8chore: update ecosystem plugins (#21115) (ESLint Bot)5abd878test: add error locations tono-proto(#21114) (Gihyeon Jeong / 정기현)9715887test: Add error location details tono-div-regex(#21110) (Park Harin)a746ec6test: add error locations tono-new-wrappers(#21109) (Gihyeon Jeong / 정기현)8dde645test: add error locations tono-ex-assign(#21102) (devoil)13ab0ectest: add error locations tono-label-var(#21098) (Gihyeon Jeong / 정기현)a99906ftest: Add error location details tono-delete-varrule (#21105) (Park Harin)c47e8dcchore: add missing backticks tolanguages/js/index.js(#21104) (beeen)0174428chore: add missing backticks totranslate-cli-options.js(#21097) (dongkyu lee)3d36589chore: add missing backticks toserialization.js(#21091) (이규환)dcc9312test: add error locations toeqeqeq(#21090) (Ga eun Lee)2710b18ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))5d2f866chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])d584e31chore: fix failing ecosystem test foreslint-plugin-unicorn(#21084) (Francesco Trotta)bf3eda0chore: update ecosystem plugins (#21079) (ESLint Bot)v10.7.0
Features
... (truncated)
Commits
749dfed10.8.04bd0d75Build: changelog update for 10.8.04fbf46dtest: pinwebpackversion to 5.108.4 (#21137)6ddf858docs: fix broken Specify Parser Options anchor link (#21106)784dfbedocs: Clarifyno-eq-nulldescription (#21120)6b8d2f7fix: escape reserved characters in rule id inhtmlformatter (#21129)2d063e2chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)eccbe7btest: add error locations tono-class-assign(#21123)2fee9bbfeat: exportConfigObjectfromeslint/config(#21082)e7d1e43ci: bump actions/setup-go from 6 to 7 (#21118)- Additional commits viewable in compare view
Updates eslint-config-next from 16.2.6 to 16.2.12
Release notes
Sourced from eslint-config-next's releases.
v16.2.12
What's Changed
- Backport/docs fixes 16.2 - July round by
@icyJosephin vercel/next.js#96031- [Backport] Fixes to support TypeScript 7 by
@lukesandbergin vercel/next.js#95831Full Changelog: https://github.com/vercel/next.js/compare/v16.2.11...v16.2.12
v16.2.11
This release contains security fixes for the following advisories:
High:
- Denial of Service in App Router using Server Actions
- Middleware / Proxy bypass in App Router applications using Turbopack and single locale
- Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
- Server-Side Request Forgery in Server Actions on custom servers
Moderate:
- Cache confusion of response bodies for requests with bodies
- Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
- Denial of Service in the Image Optimization API using SVGs
- Unauthenticated disclosure of internal Server Function endpoints
- Unbounded Server Action payload in Edge runtime
v16.2.10
Contains no changes except publishing
@next/swc-wasm-webwhich was accidentally not published since 16.2.4.v16.2.9
Empty release to ensure
next@latestpoints at a stable release. Next.js only allows publishing with Trusted Publishing enabled. In order to fix NPM dist-tags, we have to release a new version. Updating dist-tags is not possible with Trusted Publishing.v16.2.8
Release with no changes in an attempt to fix
next@latestpointing at a prerelease version.v16.2.7
[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.
Core Changes
- Backport documentation fixes for v16.2 (#93804)
- [backport] Patch
playwright-coreto resolve_finishedPromiseonrequestFailed(#93920)- [backport] Fix dev mode hydration failure when page is served from HTTP cache (#93492)
- [backport] Fix catch-all
router.querycorruption withbasePath+rewrites(#93917)- [backport] Encode non-ASCII characters in cache tags at construction (#93918)
- [backport] Fix server action forwarding loop with middleware rewrites (#93919)
- [backport] Turbopack: switch from base40 to base38 hash encoding (#93932)
- [ci] Disable hanging node 24 typescript tests on 16.2 backport branch (#94164)
... (truncated)
Commits
Updates postcss from 8.5.14 to 8.5.25
Release notes
Sourced from postcss's releases.
8.5.25
- Fixed 8.5.17 visitor regression.
- Fixed
list.split()for non-string values (by@amir-rezaei).8.5.24
- Preserve the BOM after the processing (by
@hdimer).8.5.23
- Do not load source map without
opts.fromfor security reasons.8.5.22
- Fixed custom property losing semicolon before a comment (by
@sarathfrancis90).8.5.21
- Fixed childless at-rule losing semicolon before comment (by
@sarathfrancis90).- Fixed docs (by
@isker).8.5.20
- Fixed missing space if
AtRule#paramsis set after (by@sarathfrancis90).- Fixed mixing AST error on warnings (by
@MahinAnowar).8.5.19
- Fixed cleaning
beforefor new nodes inserted toRoot(by@MahinAnowar).8.5.18
- Restricted loading previous source maps file to the
opts.fromfolder for security reasons (useunsafeMap: trueto disable the check).8.5.17
- Fixed
Maximum call stack size exceedederror.- Fixed Prototype hijacking for
postcss.fromJSON().- Fixed
Input#origin()for unmapped end position (by@chatman-media).8.5.16
- Fixed
Input#origin()position (by@mizdra).- Fixed
rawsafter rehydrating a JSON AST (by@sarathfrancis90).- Fixed putting parent-less node in
nodesof new node (by@MahinAnowar).- Fixed computing
offsetinpositionBy()(by@greymoth-jp).- Fixed
rangeBy()onindex: 0(by@sarathfrancis90).8.5.15
- Fixed declaration parsing performance (by
@homanp).
Changelog
Sourced from postcss's changelog.
8.5.25
- Fixed 8.5.17 visitor regression.
- Fixed
list.split()for non-string values (by@amir-rezaei).8.5.24
- Preserve the BOM after the processing (by
@hdimer).8.5.23
- Do not load source map without
opts.fromfor security reasons.8.5.22
- Fixed custom property losing semicolon before a comment (by
@sarathfrancis90).8.5.21
- Fixed childless at-rule losing semicolon before comment (by
@sarathfrancis90).- Fixed doc...
Description has been truncated
Package Dependencies
Security Advisories
Next.js: Server-Side Request Forgery in Server Actions on custom servers
Next.js: Cache confusion of response bodies for requests with bodies
Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
Next.js: Unbounded Server Action payload in Edge runtime
Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
Next.js: Denial of Service in the Image Optimization API using SVGs
Next.js: Unauthenticated disclosure of internal Server Function endpoints
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Next.js: Denial of Service in App Router using Server Actions
Technical Details
| ID: | 16146039 |
| UUID: | 5074468274 |
| Node ID: | PR_kwDOQecBm877P3V5 |
| Host: | GitHub |
| Repository: | AndriGitDev/andri-cli |