Skip to content

⬆️ Bump postcss from 7.0.35 to 8.2.10#19

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/postcss-8.2.10
Closed

⬆️ Bump postcss from 7.0.35 to 8.2.10#19
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/postcss-8.2.10

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 28, 2021

Bumps postcss from 7.0.35 to 8.2.10.

Release notes

Sourced from postcss's releases.

8.2.10

8.2.9

8.2.8

8.2.7

8.2.6

  • Fixed Maximum call stack size exceeded in Node#toJSON.
  • Fixed docs (by @​inokawa).

8.2.5

  • Fixed escaped characters handling in list.split (by @​nex3).

8.2.4

8.2.3

8.2.2

8.2.1

  • Fixed Node#toJSON() and postcss.fromJSON() (by @​mischnic).

8.2 “Prince Orobas”

PostCSS 8.2 added a new API to serialize and deserialize CSS AST to JSON.

import { parse, fromJSON } from 'postcss'
let root = parse('a{}', { from: 'input.css' })
let json = root.toJSON()
// save to file, send by network, etc
let root2 = fromJSON(json)

... (truncated)

Changelog

Sourced from postcss's changelog.

8.2.10

  • Fixed ReDoS vulnerabilities in source map parsing.
  • Fixed webpack 5 support (by Barak Igal).
  • Fixed docs (by Roeland Moors).

8.2.9

  • Exported NodeErrorOptions type (by Rouven Weßling).

8.2.8

  • Fixed browser builds in webpack 4 (by Matt Jones).

8.2.7

  • Fixed browser builds in webpack 5 (by Matt Jones).

8.2.6

  • Fixed Maximum call stack size exceeded in Node#toJSON.
  • Fixed docs (by inokawa).

8.2.5

  • Fixed escaped characters handling in list.split (by Natalie Weizenbaum).

8.2.4

  • Added plugin name to postcss.plugin() warning (by Tom Williams).
  • Fixed docs (by Bill Columbia).

8.2.3

  • Fixed JSON.stringify(Node[]) support (by Niklas Mischkulnig).

8.2.2

  • Fixed CSS-in-JS support (by James Garbutt).
  • Fixed plugin types (by Ludovico Fischer).
  • Fixed Result#warn() types.

8.2.1

  • Fixed Node#toJSON() and postcss.fromJSON() (by Niklas Mischkulnig).

8.2 “Prince Orobas”

  • Added Node#toJSON() and postcss.fromJSON() (by Niklas Mischkulnig).

8.1.14

  • Fixed parser performance regression.

8.1.13

  • Fixed broken AST after moving nodes in visitor API.

8.1.12

  • Fixed Autoprefixer regression.

8.1.11

  • Added PostCSS update suggestion on unknown event in plugin.

... (truncated)

Commits
  • 8395d9f Release 8.2.10 version
  • f2baaa7 Update ESLint config
  • b6f3e4d Fix unsafe regexp in getAnnotationURL() too
  • 4bcd727 Merge pull request #1553 from barak007/patch-2
  • 7c2e97a Add covrage ignore on error paths
  • 8c58434 Apply suggestions from code review
  • ff2fd57 add error for sourcePath
  • 8f02bdc disable url based features
  • a54d020 Fix browser bundling with webpack 5
  • 8682b1e Fix unsafe regexp
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 28, 2021
@inception-controller inception-controller bot temporarily deployed to preview-ec768ec885 May 28, 2021 10:49 Inactive
@gomoritz gomoritz added the preview Deploys a preview of the code label May 28, 2021
@inception-controller inception-controller bot temporarily deployed to preview-ec768ec885 May 28, 2021 11:30 Inactive
@gomoritz gomoritz added preview Deploys a preview of the code and removed preview Deploys a preview of the code labels May 28, 2021
@inception-controller inception-controller bot temporarily deployed to preview-ec768ec885 May 28, 2021 11:33 Inactive
@gomoritz gomoritz added preview Deploys a preview of the code and removed preview Deploys a preview of the code labels May 28, 2021
@inception-controller inception-controller bot temporarily deployed to preview-ec768ec885 May 28, 2021 11:40 Inactive
Repository owner deleted a comment from inception-controller bot May 28, 2021
@gomoritz gomoritz added preview Deploys a preview of the code and removed preview Deploys a preview of the code labels May 28, 2021
@inception-controller inception-controller bot temporarily deployed to preview-ec768ec885 May 28, 2021 11:44 Inactive
@gomoritz gomoritz closed this May 28, 2021
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 28, 2021

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/postcss-8.2.10 branch May 28, 2021 11:47
@gomoritz gomoritz restored the dependabot/npm_and_yarn/postcss-8.2.10 branch May 28, 2021 15:46
@gomoritz gomoritz reopened this May 28, 2021
Repository owner deleted a comment from inception-controller bot May 28, 2021
Bumps [postcss](https://github.com/postcss/postcss) from 7.0.35 to 8.2.10.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.35...8.2.10)

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/postcss-8.2.10 branch from b206821 to 2ecf890 Compare May 28, 2021 15:46
@inception-controller inception-controller bot temporarily deployed to preview-ec768ec885 May 28, 2021 15:46 Inactive
@inception-controller
Copy link
Contributor

Deployment failure

Failed to deploy a preview of this pull request.

Error

Build command 'yarn build' finished with invalid exit code 1

Build log

[2021-05-28 15:46:48] [debug] 	Build tasked queued and instantly executed
[2021-05-28 15:46:48] [info] 	Running next build task incxption+spotify-composer@dependabot/npm_and_yarn/postcss-8.2.10
[2021-05-28 15:46:48] [debug] 	Updating deployment state to in_progress
[2021-05-28 15:46:48] [debug] 	Downloading zipball archive from repository
[2021-05-28 15:46:49] [debug] 	Working directory is: */build/incxption+spotify-composer@dependabot_npm_and_yarn_postcss-8.2.10
[2021-05-28 15:46:49] [debug] 	Downloading archive to: */build/incxption+spotify-composer@dependabot_npm_and_yarn_postcss-8.2.10/zipball.zip
[2021-05-28 15:46:53] [debug] 	Extracted repository into: */build/incxption+spotify-composer@dependabot_npm_and_yarn_postcss-8.2.10/incxption-spotify-composer-2ecf890
[2021-05-28 15:46:53] [debug] 	Copying template from */templates/incxption+spotify-composer into */build/incxption+spotify-composer@dependabot_npm_and_yarn_postcss-8.2.10/incxption-spotify-composer-2ecf890
[2021-05-28 15:46:53] [debug] 	Executing 3 build commands with environment: { PREVIEW_ID: 'ec768ec885', REACT_APP_PREVIEW_ID: 'ec768ec885' }
[2021-05-28 15:46:53] [info] 	=== Executing command npm i -g yarn ===
[2021-05-28 15:46:54] [debug] 	> npm i -g yarn - changed 1 package, and audited 2 packages in 1s
[2021-05-28 15:46:54] [debug] 	> npm i -g yarn - found 0 vulnerabilities
[2021-05-28 15:46:54] [info] 	=== Finished command npm i -g yarn ===
[2021-05-28 15:46:54] [info] 	=== Executing command yarn install ===
[2021-05-28 15:46:55] [debug] 	> yarn install - [1/4] Resolving packages...
[2021-05-28 15:46:56] [debug] 	> yarn install - [2/4] Fetching packages...
[2021-05-28 15:46:58] [debug] 	> yarn install - info fsevents@2.3.2: The platform "linux" is incompatible with this module.
[2021-05-28 15:46:58] [debug] 	> yarn install - info "fsevents@2.3.2" is an optional dependency and failed compatibility check. Excluding it from installation.
[2021-05-28 15:46:58] [debug] 	> yarn install - info fsevents@1.2.13: The platform "linux" is incompatible with this module.
[2021-05-28 15:46:58] [debug] 	> yarn install - info "fsevents@1.2.13" is an optional dependency and failed compatibility check. Excluding it from installation.
[2021-05-28 15:46:58] [debug] 	> yarn install - [3/4] Linking dependencies...
[2021-05-28 15:46:58] [warn] 	> yarn install - warning " > craco-esbuild@0.3.2" has unmet peer dependency "@craco/craco@^5.5.0 || ^6.0.0".
[2021-05-28 15:46:58] [warn] 	> yarn install - warning "craco-esbuild > esbuild-jest@0.5.0" has unmet peer dependency "esbuild@>=0.8.50".
[2021-05-28 15:46:58] [warn] 	> yarn install - warning "craco-esbuild > esbuild-loader@2.13.1" has unmet peer dependency "webpack@^4.40.0 || ^5.0.0".
[2021-05-28 15:47:27] [debug] 	> yarn install - [4/4] Building fresh packages...
[2021-05-28 15:47:29] [info] 	=== Finished command yarn install ===
[2021-05-28 15:47:29] [info] 	=== Executing command yarn build ===
[2021-05-28 15:47:30] [debug] 	> yarn build - $ craco build
[2021-05-28 15:47:34] [warn] 	> yarn build - craco:  *** Cannot find ESLint loader (eslint-loader). ***
[2021-05-28 15:47:35] [warn] 	> yarn build - The following changes are being made to your tsconfig.json file:
[2021-05-28 15:47:35] [warn] 	> yarn build -   - compilerOptions.paths must not be set (aliased imports are not supported)
[2021-05-28 15:47:35] [debug] 	> yarn build - Creating an optimized production build...
[2021-05-28 15:48:00] [debug] 	> yarn build - Failed to compile.
[2021-05-28 15:48:00] [debug] 	> yarn build - ./src/styles/index.css
[2021-05-28 15:48:00] [debug] 	> yarn build - Error: PostCSS plugin postcss-purgecss requires PostCSS 8.
[2021-05-28 15:48:00] [debug] 	> yarn build - Migration guide for end-users:
[2021-05-28 15:48:00] [debug] 	> yarn build - https://github.com/postcss/postcss/wiki/PostCSS-8-for-end-users
[2021-05-28 15:48:00] [warn] 	> yarn build - error Command failed with exit code 1.
[2021-05-28 15:48:00] [debug] 	> yarn build - info Visit https://yarnpkg.com/en/docs/cli/run for documentation about this command.
[2021-05-28 15:48:00] [info] 	=== Finished command yarn build with error ===
[2021-05-28 15:48:00] [error] 	Execution failed
[2021-05-28 15:48:00] [error] 	Build command 'yarn build' finished with invalid exit code 1
[2021-05-28 15:48:00] [debug] 	Updating deployment state to failure

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 17, 2022

Superseded by #28.

@dependabot dependabot bot closed this Mar 17, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/postcss-8.2.10 branch March 17, 2022 20:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file preview Deploys a preview of the code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant