Skip to content

Bump postcss and next - #18

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-09870eb53c
Open

Bump postcss and next#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-09870eb53c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss to 8.5.23 and updates ancestor dependency next. These dependencies need to be updated together.

Updates postcss from 8.4.31 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates next from 15.5.22 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.16

Misc Changes

  • Unify how a response's shell and full payloads are written: #96878
  • Convert per-segment prefetches to NavigationFlightResponse format: #96877
  • Unify how server responses are written into the client cache: #96876
  • Convert tree prefetches to NavigationFlightResponse format: #96788
  • Revert i18n localization change for dynamic Pages API routes (#94905): #97327
  • fix(next/image): skip 0-byte entries when initializing disk LRU cache: #94068
  • Update authentication diagram URL: #97320
  • Add a script for adopting fork pull requests: #97252
  • Migrate napi-rs bindings from v2 to v3: #95412
  • Upgrade React from 11eddecd-20260805 to 22e4f993-20260811: #97249
  • Add RDC compression rollout controls: #97247
  • [testmode] Fix infinite recursion in testmode passthrough fetch: #96525

Credits

Huge thanks to @​acdlite, @​gaojude, @​hammadxcm, @​marcoshernanz, @​eps1lon, @​jimmyhmiller, @​gnoff, and @​lazerg for helping!

v16.3.1-canary.15

Misc Changes

  • test: fix 'ouput' typo in parseIdsFromCliOutput: #97266

... (truncated)

Commits
  • 3d32eb8 v16.3.1
  • 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
  • 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
  • 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
  • 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
  • f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
  • 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
  • 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
  • 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
  • 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026
@dependabot
dependabot Bot requested review from a team, Aswin-coder and Aswinmcw as code owners August 14, 2026 10:07
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 14, 2026 10:07
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Aug 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-09870eb53c branch from 295ce0d to 21d2dd6 Compare August 14, 2026 10:12
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.23 and updates ancestor dependency [next](https://github.com/vercel/next.js). These dependencies need to be updated together.


Updates `postcss` from 8.4.31 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.31...8.5.23)

Updates `next` from 15.5.22 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.22...v16.3.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.1
  dependency-type: direct:production
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-09870eb53c branch from 21d2dd6 to e07ba1b Compare August 14, 2026 10:53
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 14, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
shiptrack e07ba1b Commit Preview URL

Branch Preview URL
Aug 14 2026, 10:58 AM

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 14, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
❌ Deployment failed
View logs
shiptrack-poller e07ba1b Aug 14 2026, 10:59 AM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant