[Security] Bump postcss from 8.2.9 to 8.2.14
Created by: dependabot-preview[bot]
Bumps postcss from 8.2.9 to 8.2.14.
Release notes
Sourced from postcss's releases.
8.2.14
- Removed
source-mapfrom client-side bundle (by@barak007).8.2.13
- Fixed ReDoS vulnerabilities in source map parsing (by
@yetingli).8.2.12
- Fixed
package.jsonexports.8.2.11
- Fixed
DEP0148warning in Node.js 16.- Fixed docs (by
@semiromid).8.2.10
- Fixed ReDoS vulnerabilities in source map parsing.
- Fixed webpack 5 support (by
@barak007).- Fixed docs (by
@roelandmoors).
Changelog
Sourced from postcss's changelog.
8.2.14
- Removed
source-mapfrom client-side bundle (by Barak Igal).8.2.13
- Fixed ReDoS vulnerabilities in source map parsing (by Yeting Li).
8.2.12
- Fixed
package.jsonexports.8.2.11
- Fixed
DEP0148warning in Node.js 16.- Fixed docs (by
@semiromid).8.2.10
- Fixed ReDoS vulnerabilities in source map parsing.
- Fixed webpack 5 support (by Barak Igal).
- Fixed docs (by Roeland Moors).
Commits
-
ff8e52dRelease 8.2.14 version -
12359eaUpdate dependencies -
b158dd5Merge pull request #1571 from barak007/source-map-browser -
de6f33cremove source-map from browser build -
a81cf0dMerge pull request #1570 from oyejorge/main -
6401871add postcss-icon-blender -
030bd25Release 8.2.13 version -
41d3f33Update dependencies -
8484d27Clean up tests -
2b1d04cMerge pull request #1567 from yetingli/main - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language -
@dependabot badge mewill comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot dashboard:
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)