chore(deps): bump postcss and vue-loader in /packages/webpack5 #10772

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

NathanWalker merged 1 commit into main from dependabot/npm_and_yarn/packages/webpack5/multi-46c778355a

Jul 27, 2025

Contributor

dependabot bot commented on behalf of github Jul 27, 2025

Bumps postcss to 8.5.6 and updates ancestor dependency vue-loader. These dependencies need to be updated together.

Updates postcss from 7.0.39 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

... (truncated)

Commits

91d6eb5 Release 8.5.6 version
65ffc55 Update dependencies
ecd20eb Fix ContainerWithChildren to allow discriminating the node type by comparing ...
c181597 Release 8.5.5 version
c5523fb Update dependencies
2e3450c refactor: import should be listed before require (#2052)
4d720bd Update EM text
6cb4a66 Release 8.5.4 version
ec5c1e0 Update dependencies
e85e938 Fix code format
Additional commits viewable in compare view

Updates vue-loader from 15.9.8 to 17.4.2

Release notes

Sourced from vue-loader's releases.

v17.3.1

Bug Fixes

do not skip style post loader for v-bind() in non-scoped CSS (d7071bb), closes #2061

v17.3.0

Bug Fixes

re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

v17.2.2

Bug Fixes

fix: windows path for experiments.css by @h-a-n-a in vuejs/vue-loader#2049

v17.2.1

Features

A new experimentalInlineMatchResource option (webpack 5 only), which leverages webpack 5's inline matchResource feature in the underlying implementation, and works well with the experiments.css feature This also makes vue-loader compatible with Rspack (#2046) (3149f6d).

Note: v17.2.0 was released by accident; it has the same content as v17.1.2, therefore not included in the Releases page.

v17.1.2

Bug Fixes

keep build stable when run in a different path (#2040) (a81dc0f)

properly close the watcher after webpack 4 tests (40b93b9)

v17.1.1

Bug Fixes

support experimental propsDestructure and defineModel options (6269698)

v17.1.0

Bug Fixes

fix: reference project compiler, fixes #2031 by @heywhy in vuejs/vue-loader#2038

fix: do not throw when Rule.layer is used by @nolimitdev in vuejs/vue-loader#2000

Features

support 3.3 imported types hmr (bbd98fc)

Full Changelog: vuejs/vue-loader@v17.0.1...v17.1.0

... (truncated)

Changelog

Sourced from vue-loader's changelog.

17.4.2 (2023-12-30)

Bug Fixes

pass compilerOptions to sfc parse & re-enable AST reuse (d2a2e05)

17.4.1 (2023-12-30)

Bug Fixes

(temporarily) disable template ast reuse (31b03af)

17.4.0 (2023-12-25)

Features

leverage ast reuse in 3.4 (479835f)

17.3.1 (2023-10-31)

Bug Fixes

do not skip style post loader for v-bind() in CSS (d7071bb), closes #2061

17.3.0 (2023-10-07)

Bug Fixes

re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

17.2.2 (2023-06-02)

... (truncated)

Commits

1c0324f v17.4.2
d2a2e05 fix: pass compilerOptions to sfc parse & re-enable AST reuse
071f30d chore: bump to vue 3.4.3
94e778e chore: 17.4.1 changelog
284a333 17.4.1
31b03af fix: (temporarily) disable template ast reuse
50699e6 chore: set compilerOptions in example
59a0570 chore: changelog for 17.4.0
1bce3f8 v17.4.0
f71cb1d chore: update caniuse db
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.


          chore(deps): bump postcss and vue-loader in /packages/webpack5

558cb00

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.6 and updates ancestor dependency [vue-loader](https://github.com/vuejs/vue-loader). These dependencies need to be updated together.


Updates `postcss` from 7.0.39 to 8.5.6
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@7.0.39...8.5.6)

Updates `vue-loader` from 15.9.8 to 17.4.2
- [Release notes](https://github.com/vuejs/vue-loader/releases)
- [Changelog](https://github.com/vuejs/vue-loader/blob/main/CHANGELOG.md)
- [Commits](vuejs/vue-loader@v15.9.8...v17.4.2)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.6
  dependency-type: indirect
- dependency-name: vue-loader
  dependency-version: 17.4.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies JavaScript labels

nx-cloud bot commented Jul 27, 2025 •

edited

Loading

View your CI Pipeline Execution ↗ for commit 558cb00

Command	Status	Duration	Result
`nx test apps-automated -c=android`	✅ Succeeded	4m 20s	View ↗
`nx run-many --target=test --configuration=ci --...`	✅ Succeeded	<1s	View ↗

☁️ Nx Cloud last updated this comment at 2025-07-27 00:48:39 UTC

NathanWalker merged commit 02c7054 into main

4 checks passed

NathanWalker deleted the dependabot/npm_and_yarn/packages/webpack5/multi-46c778355a branch

July 27, 2025 01:17

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies JavaScript