Skip to content
This repository was archived by the owner on Oct 24, 2024. It is now read-only.

Update dependency postcss to v8.2.10 [SECURITY]#1026

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-postcss-vulnerability
Open

Update dependency postcss to v8.2.10 [SECURITY]#1026
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/npm-postcss-vulnerability

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 21, 2021

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
postcss (source) 8.2.4 -> 8.2.10 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23368

The npm package postcss from 7.0.0 and before versions 7.0.36 and 8.2.10 is vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing.


Release Notes

postcss/postcss

v8.2.10

Compare Source

  • Fixed ReDoS vulnerabilities in source map parsing.
  • Fixed webpack 5 support (by Barak Igal).
  • Fixed docs (by Roeland Moors).

v8.2.9

Compare Source

  • Exported NodeErrorOptions type (by Rouven Weßling).

v8.2.8

Compare Source

  • Fixed browser builds in webpack 4 (by Matt Jones).

v8.2.7

Compare Source

  • Fixed browser builds in webpack 5 (by Matt Jones).

v8.2.6

Compare Source

  • Fixed Maximum call stack size exceeded in Node#toJSON.
  • Fixed docs (by inokawa).

v8.2.5

Compare Source

  • Fixed escaped characters handling in list.split (by Natalie Weizenbaum).

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant