Skip to content

build(deps): bump postcss-selector-parser and stylelint-config-sass-guidelines in /webui - #574

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/webui/multi-f5a65f77e7
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/webui/multi-f5a65f77e7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps postcss-selector-parser to 7.1.6 and updates ancestor dependency stylelint-config-sass-guidelines. These dependencies need to be updated together.

Updates postcss-selector-parser from 7.1.5 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)
Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)
Commits
  • 4eb3468 7.1.6
  • 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
  • See full diff in compare view

Updates stylelint-config-sass-guidelines from 12.1.0 to 13.0.0

Release notes

Sourced from stylelint-config-sass-guidelines's releases.

v13.0.0

Changed

  • Bumped stylelint from 16.9.0 to 17.1.0
  • Bumped stylelint-scss from 6.6.0 to 7.0.0
  • Bumped @​stylistic/stylelint-plugin from 3.0.1 to 5.0.1
  • Updated minimum node version to 20.19.0
  • Updated "@​stylistic/function-parentheses-space-inside": "never" to "@​stylistic/function-parentheses-space-inside": "never-single-line" for better support with prettier
Changelog

Sourced from stylelint-config-sass-guidelines's changelog.

[13.0.0]

Full list of changes can be viewed here

Changed

  • Bumped stylelint from 16.9.0 to 17.1.0
  • Bumped stylelint-scss from 6.6.0 to 7.0.0
  • Bumped @​stylistic/stylelint-plugin from 3.0.1 to 5.0.1
  • Updated minimum node version to 20.19.0
  • Updated "@​stylistic/function-parentheses-space-inside": "never" to "@​stylistic/function-parentheses-space-inside": "never-single-line" for better support with prettier
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 11, 2026
@clarin-bot

clarin-bot commented Oct 11, 2026 •

Copy link
Copy Markdown
Collaborator

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
🔚 Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webui/multi-f5a65f77e7 branch 6 times, most recently from 1560adc to 0a8eac5 Compare October 15, 2026 09:16
…uidelines

Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) to 7.1.6 and updates ancestor dependency [stylelint-config-sass-guidelines](https://github.com/bjankord/stylelint-config-sass-guidelines). These dependencies need to be updated together.


Updates `postcss-selector-parser` from 7.1.5 to 7.1.6
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@7.1.5...7.1.6)

Updates `stylelint-config-sass-guidelines` from 12.1.0 to 13.0.0
- [Release notes](https://github.com/bjankord/stylelint-config-sass-guidelines/releases)
- [Changelog](https://github.com/bjankord/stylelint-config-sass-guidelines/blob/main/CHANGELOG.md)
- [Commits](bjankord/stylelint-config-sass-guidelines@v12.1.0...v13.0.0)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.6
  dependency-type: indirect
- dependency-name: stylelint-config-sass-guidelines
  dependency-version: 13.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webui/multi-f5a65f77e7 branch from 0a8eac5 to a992fcf Compare October 15, 2026 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant