Skip to content

Bump postcss, stylelint, stylelint-config-mirego and stylelint-order - #387

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-42509955ec
Open

Bump postcss, stylelint, stylelint-config-mirego and stylelint-order#387
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-42509955ec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss, stylelint, stylelint-config-mirego and stylelint-order. These dependencies needed to be updated together.
Updates postcss from 8.4.31 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates stylelint from 13.13.1 to 17.14.1

Release notes

Sourced from stylelint's releases.

17.14.1

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0

It fixes 3 bugs, including a false negative one.

  • Fixed: performance of getting module paths (#9354) (@​jeddy3).
  • Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
  • Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

17.10.0

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.14.1 - 2026-07-20

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0 - 2026-06-25

It fixes 3 bugs, including a false negative one.

  • Fixed: performance of getting module paths (#9354) (@​jeddy3).
  • Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
  • Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1 - 2026-05-14

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0 - 2026-05-05

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

17.10.0 - 2026-05-03

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

... (truncated)

Commits
  • cd66b03 Release 17.14.1 (#9397)
  • 7c30fc5 Refactor to replace void with undefined in union types (#9395)
  • 57c8d0e Fix rule-empty-line-before false positives for shared-line comments with `e...
  • 226f10a Bump @​vscode/windows-process-tree from 0.7.0 to 0.8.0 (#9392)
  • 13c3c5c Bump globby from 16.2.0 to 16.2.1 (#9393)
  • 6dafcf5 Document unknown-effort contributions (#9391)
  • 54c2bc8 Fix test for Yarn PnP with npm v12 (#9390)
  • 3e7eb56 Fix declaration-block-no-redundant-longhand-properties invalid background...
  • 438196e Bump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...
  • c1e1489 Fix quiet option to suppress report* warning reports (#9387)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates stylelint-config-mirego from 2.0.0 to 2.3.0

Commits

Updates stylelint-order from 4.1.0 to 8.1.1

Release notes

Sourced from stylelint-order's releases.

8.1.1

  • Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

  • Added custom-properties-alphabetical-order rule

8.0.0

  • Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

  • Added support for Stylelint 17

7.0.0

  • Dropped Node.js 18 support
  • Dropped support for Stylelint older than 16.18.0
  • Changed: Ignore properties case for properties-order and properties-alphabetical-order
  • Added support for more properties shorthands
  • Fixed order autofix not applied, when Stylelint disable comments are present
  • Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
  • Fixed properties-order autofix not applied, when Stylelint disable comments are present
  • Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
  • Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

  • Added support for Stylelint 16

6.0.3

  • Fixed sorting inside CSS-in-JS css helper

6.0.2

  • Added Stylelint v15 to peerDependencies

6.0.1

  • Fix regression causing root of CSS or SCSS to report violations

6.0.0

  • Dropped Node.js 12 and 14 support.
  • Added support for postcss-styled-syntax.

5.0.0

  • Breaking change: Dropped Node.js 8 support. Node.js 12 or greater is now required.
  • Breaking change: Dropped support for Stylelint 13 and earlier.
  • Added support for Stylelint 14.
Changelog

Sourced from stylelint-order's changelog.

8.1.1

  • Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

  • Added custom-properties-alphabetical-order rule

8.0.0

  • Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

  • Added support for Stylelint 17

7.0.0

  • Dropped Node.js 18 support
  • Dropped support for Stylelint older than 16.18.0
  • Changed: Ignore properties case for properties-order and properties-alphabetical-order
  • Added support for more properties shorthands
  • Fixed order autofix not applied, when Stylelint disable comments are present
  • Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
  • Fixed properties-order autofix not applied, when Stylelint disable comments are present
  • Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
  • Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

  • Added support for Stylelint 16

6.0.3

  • Fixed sorting inside CSS-in-JS css helper

6.0.2

  • Added Stylelint v15 to peerDependencies

6.0.1

  • Fix regression causing root of CSS or SCSS to report violations

6.0.0

  • Dropped Node.js 12 and 14 support.
  • Added support for postcss-styled-syntax.

5.0.0

  • Breaking change: Dropped Node.js 8 support. Node.js 12 or greater is now required.
  • Breaking change: Dropped support for Stylelint 13 and earlier.
  • Added support for Stylelint 14.
Commits
  • 5e0802a 8.1.1
  • d63b335 Prepare 8.1.1
  • 707f2d9 Change how CSS from the style attribute is detected, when using `postcss-ht...
  • 7db7174 Add custom-properties-alphabetical-order in README (#214)
  • 6d5b26a 8.1.0
  • cfa2267 Prepare 8.1.0
  • 6652d6d Add custom-properties-alphabetical-order rule (#212)
  • cb01afd 8.0.0
  • ff92d6e Update changelog
  • 3b45045 Add limited autofix for properties in rules containing interpolation in CSS-i...
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump postcss, stylelint, stylelint-config-mirego and stylelint-order
7312714 
Bumps [postcss](https://github.com/postcss/postcss), [stylelint](https://github.com/stylelint/stylelint), [stylelint-config-mirego](https://github.com/mirego/stylelint-config-mirego) and [stylelint-order](https://github.com/hudochenkov/stylelint-order). These dependencies needed to be updated together.

Updates `postcss` from 8.4.31 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.31...8.5.23)

Updates `stylelint` from 13.13.1 to 17.14.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@13.13.1...17.14.1)

Updates `stylelint-config-mirego` from 2.0.0 to 2.3.0
- [Commits](mirego/stylelint-config-mirego@v2.0.0...v2.3.0)

Updates `stylelint-order` from 4.1.0 to 8.1.1
- [Release notes](https://github.com/hudochenkov/stylelint-order/releases)
- [Changelog](https://github.com/hudochenkov/stylelint-order/blob/master/CHANGELOG.md)
- [Commits](hudochenkov/stylelint-order@4.1.0...8.1.1)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
- dependency-name: stylelint
  dependency-version: 17.14.1
  dependency-type: direct:development
- dependency-name: stylelint-config-mirego
  dependency-version: 2.3.0
  dependency-type: direct:development
- dependency-name: stylelint-order
  dependency-version: 8.1.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 27, 2026
@dependabot dependabot Bot mentioned this pull request Jul 27, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants