Skip to content

chore(deps-dev): bump postcss from 8.5.21 to 8.5.23 - #35

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/postcss-8.5.23
Closed

chore(deps-dev): bump postcss from 8.5.21 to 8.5.23#35
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/postcss-8.5.23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss from 8.5.21 to 8.5.23.

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@dependabot
dependabot Bot requested a review from ulises-jeremias as a code owner August 24, 2026 05:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@vercel

vercel Bot commented Aug 24, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
create-awesome-python-app-website Ready Ready Preview Aug 25, 2026 11:31pm

@github-actions

github-actions Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor

MegaLinter analysis: Error

Descriptor Linter Files Fixed Errors Max errors Warnings Elapsed time
✅ ACTION actionlint 5 0 0 0.06s
❌ ACTION zizmor 5 1 0 0.23s
✅ COPYPASTE jscpd yes no no 0.95s
✅ EDITORCONFIG editorconfig-checker 172 0 0 0.55s
❌ JAVASCRIPT eslint 1 1 0 0.45s
✅ JAVASCRIPT standard 1 0 0 1.89s
✅ JSON jsonlint 9 0 0 0.12s
✅ JSON npm-package-json-lint yes no no 0.6s
✅ JSON prettier 9 0 0 0.58s
✅ JSON v8r 9 0 0 13.82s
✅ MARKDOWN markdownlint 9 0 0 0.84s
✅ MARKDOWN markdown-table-formatter 9 0 0 0.28s
✅ REPOSITORY betterleaks yes no no 0.81s
✅ REPOSITORY checkov yes no no 17.31s
✅ REPOSITORY git_diff yes no no 0.02s
✅ REPOSITORY osv-scanner yes no no 1.65s
✅ REPOSITORY secretlint yes no no 2.46s
✅ REPOSITORY trivy yes no no 10.93s
✅ REPOSITORY trufflehog yes no no 3.73s
✅ SPELL cspell 173 0 0 4.28s
❌ TSX eslint 100 1 0 0.54s
⚠️ YAML prettier 13 1 2 0.86s
✅ YAML yamllint 13 0 0 0.99s

Detailed Issues

❌ JAVASCRIPT / eslint - 1 error
Oops! Something went wrong! :(

ESLint: 10.8.0

Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'eslint-plugin-import' imported from eslint.config.mjs
    at Object.getPackageJSONURL (node:internal/modules/package_json_reader:301:9)
    at packageResolve (node:internal/modules/esm/resolve:768:81)
    at moduleResolve (node:internal/modules/esm/resolve:859:18)
    at defaultResolve (node:internal/modules/esm/resolve:992:11)
    at #cachedDefaultResolve (node:internal/modules/esm/loader:704:20)
    at #resolveAndMaybeBlockOnLoaderThread (node:internal/modules/esm/loader:724:38)
    at ModuleLoader.resolveSync (node:internal/modules/esm/loader:762:56)
    at #resolve (node:internal/modules/esm/loader:686:17)
    at ModuleLoader.getOrCreateModuleJob (node:internal/modules/esm/loader:606:35)
    at ModuleJob.syncLink (node:internal/modules/esm/module_job:163:33)


[JAVASCRIPT_ES_ERROR_FLAT_CONFIG_MODULE_NOT_FOUND] ESLint v9+/v10 flat config (`eslint.config.mjs`) uses native ESM resolution, which does not honor `NODE_PATH`. Bare imports like `import js from '@eslint/js'` fail when ESLint runs from MegaLinter's bundled install.
Resolutions:
  - Use `createRequire` in your `eslint.config.mjs` (see the "ESLint v10" section in this linter's documentation above).
  - Or install your project's dependencies and run the project-local ESLint binary:
      JAVASCRIPT_ES_PRE_COMMANDS:
        - command: yarn install --frozen-lockfile --ignore-scripts
          cwd: workspace
          continue_if_failed: false
      JAVASCRIPT_ES_CLI_EXECUTABLE: node_modules/.bin/eslint
❌ TSX / eslint - 1 error
Oops! Something went wrong! :(

ESLint: 10.8.0

Error [ERR_MODULE_NOT_FOUND]: Cannot find package 'eslint-plugin-import' imported from eslint.config.mjs
    at Object.getPackageJSONURL (node:internal/modules/package_json_reader:301:9)
    at packageResolve (node:internal/modules/esm/resolve:768:81)
    at moduleResolve (node:internal/modules/esm/resolve:859:18)
    at defaultResolve (node:internal/modules/esm/resolve:992:11)
    at #cachedDefaultResolve (node:internal/modules/esm/loader:704:20)
    at #resolveAndMaybeBlockOnLoaderThread (node:internal/modules/esm/loader:724:38)
    at ModuleLoader.resolveSync (node:internal/modules/esm/loader:762:56)
    at #resolve (node:internal/modules/esm/loader:686:17)
    at ModuleLoader.getOrCreateModuleJob (node:internal/modules/esm/loader:606:35)
    at ModuleJob.syncLink (node:internal/modules/esm/module_job:163:33)


[TSX_ESLINT_ERROR_FLAT_CONFIG_MODULE_NOT_FOUND] ESLint v9+/v10 flat config (`eslint.config.mjs`) uses native ESM resolution, which does not honor `NODE_PATH`. Bare imports like `import tsPlugin from '@typescript-eslint/eslint-plugin'` fail when ESLint runs from MegaLinter's bundled install.
Resolutions:
  - Use `createRequire` in your `eslint.config.mjs` (see the "ESLint v10" section in this linter's documentation above).
  - Or install your project's dependencies and run the project-local ESLint binary:
      TSX_ESLINT_PRE_COMMANDS:
        - command: yarn install --frozen-lockfile --ignore-scripts
          cwd: workspace
          continue_if_failed: false
      TSX_ESLINT_CLI_EXECUTABLE: node_modules/.bin/eslint
❌ ACTION / zizmor - 1 error
INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'ref-confusion' audit failed on file://.github/workflows/mega-linter.yml

Caused by:
    0: error in 'ref-confusion' audit
    1: couldn't list branches for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)


[ACTION_ZIZMOR_ERROR_GITHUB_API_UNREACHABLE] Zizmor could not access a repository referenced by a `uses:` clause via the GitHub API (missing token, insufficient scope, or cross-repo private access).
To allow zizmor to authenticate with GITHUB_TOKEN (or a PAT with `Contents: read-only`), whitelist the variable in your .mega-linter.yml:
ACTION_ZIZMOR_UNSECURED_ENV_VARIABLES:
  - GITHUB_TOKEN
If the referenced workflow is in a private repo outside the current one, provide a PAT with cross-repo access instead of the default GITHUB_TOKEN, or run zizmor in offline mode.
⚠️ YAML / prettier - 1 error
Checking formatting...
[warn] .github/dependabot.yml
[warn] Code style issues found in the above file. Run Prettier with --write to fix.

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: MARKDOWN_MARKDOWN_LINK_CHECK. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

  • Documentation: Custom Flavors
  • Command: npx mega-linter-runner@10.0.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,EDITORCONFIG_EDITORCONFIG_CHECKER,JAVASCRIPT_ES,JAVASCRIPT_STANDARD,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_BETTERLEAKS,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_TRIVY,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,TSX_ESLINT,YAML_PRETTIER,YAML_YAMLLINT

MegaLinter is provided by OX Security
Show us your support by starring ⭐ the repository

@github-actions

github-actions Bot commented Aug 24, 2026

Copy link
Copy Markdown
Contributor
Fails
🚫 📋 Missing Section - Please include the section: ## Description in your PR description.
🚫 📋 Missing Section - Please include the section: ## Type of Change in your PR description.
🚫 📋 Missing Section - Please include the section: ## How Has This Been Tested? in your PR description.
🚫 📋 Missing Section - Please include the section: ## Checklist in your PR description.
Warnings
⚠️ 📋 Unchecked Checklist Item - Please check the item: My code follows the style guidelines of this project in your PR description.
⚠️ 📋 Unchecked Checklist Item - Please check the item: I have performed a self-review of my code in your PR description.
⚠️ 📋 Unchecked Checklist Item - Please check the item: I have commented my code, particularly in hard-to-understand areas in your PR description.
⚠️ 📋 Unchecked Checklist Item - Please check the item: I have made corresponding changes to the documentation in your PR description.
⚠️ 📋 Unchecked Checklist Item - Please check the item: My changes generate no new warnings in your PR description.
⚠️ 📋 Unchecked Checklist Item - Please check the item: Any dependent changes have been merged and published in downstream modules in your PR description.
⚠️ 📋 Unchecked Checklist Item - Please check the item: I have checked my code and corrected any misspellings in your PR description.
⚠️ 🔒 package.json - Changes were made to package.json.
Messages
📖 Thanks! We ❤️ small PRs!

Generated by 🚫 dangerJS against 17cd8b9

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.21 to 8.5.23.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.21...8.5.23)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/postcss-8.5.23 branch August 26, 2026 02:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants