An open index of dependabot pull requests across open source projects.

Bump the npm_and_yarn group across 1 directory with 3 updates

Closed
Number: #1
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 2
Created: June 30, 2025 at 03:07 AM UTC
(11 months ago)
Updated: June 30, 2025 at 03:21 AM UTC
(11 months ago)
Closed: June 30, 2025 at 03:21 AM UTC
(11 months ago)
Time to Close: 14 minutes
Labels:
dependencies javascript
Description:

Bumps the npm_and_yarn group with 3 updates in the / directory: postcss, css-loader and resolve-url-loader.

Updates postcss from 7.0.21 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

8.4.48

  • Fixed position calculation in error/warnings methods (by @​romainmenke).

8.4.47

  • Removed debug code.

8.4.46

  • Fixed Cannot read properties of undefined (reading 'before').

8.4.45

  • Removed unnecessary fix which could lead to infinite loop.

8.4.44

  • Another way to fix markClean is not a function error.

8.4.43

  • Fixed markClean is not a function error.

8.4.42

  • Fixed CSS syntax error on long minified files (by @​varpstar).

8.4.41

... (truncated)

Commits

Updates css-loader from 4.3.0 to 7.1.2

Release notes

Sourced from css-loader's releases.

v7.1.2

7.1.2 (2024-05-22)

Bug Fixes

  • keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

v7.1.1

7.1.1 (2024-04-10)

Bug Fixes

  • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

v7.1.0

7.1.0 (2024-04-08)

Features

  • added the getJSON option to output CSS modules mapping (#1577) (af834b4)

v7.0.0

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

  • The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";

console.log(style.myClass);

After:

import * as style from "./style.css";

console.log(style.myClass);

... (truncated)

Changelog

Sourced from css-loader's changelog.

7.1.2 (2024-05-22)

Bug Fixes

  • keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

7.1.1 (2024-04-10)

Bug Fixes

  • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

7.1.0 (2024-04-08)

Features

  • added the getJSON option to output CSS modules mapping (#1577) (af834b4)

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

  • The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:

import style from "./style.css";

console.log(style.myClass);

After:

import * as style from "./style.css";

console.log(style.myClass);

To restore 6.x behavior, please use:

module.exports = {
</tr></table> 

... (truncated)

Commits

Updates resolve-url-loader from 3.1.2 to 5.0.0

Release notes

Sourced from resolve-url-loader's releases.

5.0.0

Breaking changes

  • Require node>=12.
  • Support only webpack>=4.
  • Update to postcss@^8.
  • Remove rework engine (which was deprecated in V4).

Bugfixes

  • Fix log messages not correctly normalising absolute paths to posix style on Windows platform
  • Fixes to end-to-end tests and test framework.

5.0.0-beta.1

Breaking changes

  • Require node>=12.
  • Support only webpack>=4.
  • Update to postcss@^8.
  • Remove rework engine (which was deprecated in V4).

Bugfixes

  • Fix log messages not correctly normalising absolute paths to posix style on Windows platform
  • Fixes to end-to-end tests and test framework.

5.0.0-alpha.1

Breaking changes

  • Require node>=12.
  • Support only webpack>=4.
  • Update to postcss@^8.
  • Remove rework engine (which was deprecated in V4).

Bugfixes

  • Fix log messages not correctly normalising absolute paths to posix style on Windows platform

4.0.0

Features

  • Better resolution of the original source location - You can more successfully use url() in variables and mixins.
  • Dependencies now accept a wider range and explicit dependency on rework and rework-visit has been removed.

Breaking Changes

  • The engine option is deprecated which means the old rework engine is deprecated.
  • The keepQuery behaviour is now the default, the keepQuery option has been removed.
  • The removeCR option defaults to true when executing on Windows OS.
  • The absolute option has been removed.
  • The join option has changed.

Migrating

See the changlog.

... (truncated)

Changelog

Sourced from resolve-url-loader's changelog.

resolve-url-loader

Version 5

Features

  • Update postcss and completely remove rework parser.

Breaking Changes

  • Require node@>=12.
  • Support webpack@>=4 (no longer tested for earlier versions).
  • The engine option has been removed.

Migrating

Remove the engine option if you are using it.

Version 4

Features

  • Better resolution of the original source location - You can more successfully use url() in variables and mixins.
  • Dependencies now accept a wider range and explicit dependency on rework and rework-visit has been removed.

Breaking Changes

  • The engine option is deprecated which means the old rework engine is deprecated.
  • The keepQuery behaviour is now the default, the keepQuery option has been removed.
  • The removeCR option defaults to true when executing on Windows OS.
  • The absolute option has been removed.
  • The join option has changed.

Migrating

Remove the engine option if you are using it - the default "postcss" engine is much more reliable. The "rework" engine will still work for now but will be removed in the next major version.

Remove the keepQuery option if you are using it.

Remove the absolute option, webpack should work fine without it. If you have a specific need to rebase url() then you should use a separate loader.

If you use a custom join function then you will need to refactor it to the new API. Refer to the advanced usage documentation.

If you wish to still use engine: "rework" then note that rework and rework-visit packages are now peerDependencies that must be explicitly installed by you.

Version 3

Features

  • Use postcss parser by default. This is long overdue as the old rework parser doesn't cope with modern css.

... (truncated)

Commits
  • bf01da9 5.0.0
  • 78393f6 update branch references to v5
  • 6787839 github actions for CI
  • 1457038 update changelog and readme
  • a01faf9 5.0.0-beta.1
  • fb09fae remove the engine option harder, ensure deprecation warning is tested
  • 5654fa4 remove the engine option and related tests, use getOptions from loader where ...
  • 10f9cdb 5.0.0-alpha.1
  • b168dd3 adjust deprecation message for engine option
  • 29e142a normalise windows absolute paths to posix format in log messages
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+30741
Deletions:
-396
Package Dependencies
Package:
postcss
Ecosystem:
npm
Version Change:
7.0.21 → 8.5.6
Update Type:
Major
Package:
css-loader
Ecosystem:
npm
Version Change:
4.3.0 → 7.1.2
Update Type:
Major
Ecosystem:
npm
Version Change:
3.1.2 → 5.0.0
Update Type:
Major
Technical Details
ID: 2439512
UUID: 2627601696
Node ID: PR_kwDOE_2VEM6cngUg
Host: GitHub
Repository: snstgithub/docs
Mergeable: Yes
Merge State: Unstable
Rebaseable: Yes