Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/postcss-config/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@
"autoprefixer": "^10.4.21",
"postcss": "^8.5.6",
"postcss-combine-duplicated-selectors": "^10.0.3",
"postcss-custom-media": "^11.0.6",
"postcss-custom-media": "^12.0.1",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ESM-only package loaded via CommonJS require() call

Medium Severity

postcss-custom-media v12 dropped CommonJS support and is now ESM-only, but the consuming code in style-engine-postcss-config.ts loads it via require("postcss-custom-media"). This relies on Node.js's require(esm) interop, which was only unflagged in Node 22.12+. Since the project's engine constraint is "22.x", earlier 22.x versions (22.0–22.11) would fail at runtime with a module format error.

Fix in Cursor Fix in Web

"postcss-discard-empty": "^7.0.1"
},
"devDependencies": {
Expand Down
58 changes: 21 additions & 37 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1403,13 +1403,13 @@ __metadata:
languageName: node
linkType: hard

"@csstools/cascade-layer-name-parser@npm:^2.0.5":
version: 2.0.5
resolution: "@csstools/cascade-layer-name-parser@npm:2.0.5"
"@csstools/cascade-layer-name-parser@npm:^3.0.0":
version: 3.0.0
resolution: "@csstools/cascade-layer-name-parser@npm:3.0.0"
peerDependencies:
"@csstools/css-parser-algorithms": ^3.0.5
"@csstools/css-tokenizer": ^3.0.4
checksum: 10c0/b6c73d5c8132f922edc88b9df5272c93c9753945f1e1077b80d03b314076ffe03c2cc9bf6cbc85501ee7c7f27e477263df96997c9125fd2fd0cfe82fe2d7c141
"@csstools/css-parser-algorithms": ^4.0.0
"@csstools/css-tokenizer": ^4.0.0
checksum: 10c0/657b325261dfa567e26b56a1a6a00fcfc877b9e95ce8ae3595ec95c89323fc2123dad7a4ca79bede8dec475ccc41d9d528470b0be01c4f22104f6962f2bfb40c
languageName: node
linkType: hard

Expand Down Expand Up @@ -1443,15 +1443,6 @@ __metadata:
languageName: node
linkType: hard

"@csstools/css-parser-algorithms@npm:^3.0.5":
version: 3.0.5
resolution: "@csstools/css-parser-algorithms@npm:3.0.5"
peerDependencies:
"@csstools/css-tokenizer": ^3.0.4
checksum: 10c0/d9a1c888bd43849ae3437ca39251d5c95d2c8fd6b5ccdb7c45491dfd2c1cbdc3075645e80901d120e4d2c1993db9a5b2d83793b779dbbabcfb132adb142eb7f7
languageName: node
linkType: hard

"@csstools/css-parser-algorithms@npm:^4.0.0":
version: 4.0.0
resolution: "@csstools/css-parser-algorithms@npm:4.0.0"
Expand All @@ -1468,27 +1459,20 @@ __metadata:
languageName: node
linkType: hard

"@csstools/css-tokenizer@npm:^3.0.4":
version: 3.0.4
resolution: "@csstools/css-tokenizer@npm:3.0.4"
checksum: 10c0/3b589f8e9942075a642213b389bab75a2d50d05d203727fcdac6827648a5572674caff07907eff3f9a2389d86a4ee47308fafe4f8588f4a77b7167c588d2559f
languageName: node
linkType: hard

"@csstools/css-tokenizer@npm:^4.0.0":
version: 4.0.0
resolution: "@csstools/css-tokenizer@npm:4.0.0"
checksum: 10c0/669cf3d0f9c8e1ffdf8c9955ad8beba0c8cfe03197fe29a4fcbd9ee6f7a18856cfa42c62670021a75183d9ab37f5d14a866e6a9df753a6c07f59e36797a9ea9f
languageName: node
linkType: hard

"@csstools/media-query-list-parser@npm:^4.0.3":
version: 4.0.3
resolution: "@csstools/media-query-list-parser@npm:4.0.3"
"@csstools/media-query-list-parser@npm:^5.0.0":
version: 5.0.0
resolution: "@csstools/media-query-list-parser@npm:5.0.0"
peerDependencies:
"@csstools/css-parser-algorithms": ^3.0.5
"@csstools/css-tokenizer": ^3.0.4
checksum: 10c0/e29d856d57e9a036694662163179fc061a99579f05e7c3c35438b3e063790ae8a9ee9f1fb4b4693d8fc7672ae0801764fe83762ab7b9df2921fcc6172cfd5584
"@csstools/css-parser-algorithms": ^4.0.0
"@csstools/css-tokenizer": ^4.0.0
checksum: 10c0/dbc22654769eca02c182f3a57be02cd5b8d0b958adc8397e66770b64b0e8fcd32faa93a3f6a99e1457bde11862485de3cd83a31dac7b03925d32f9891b31ccfd
languageName: node
linkType: hard

Expand Down Expand Up @@ -4734,7 +4718,7 @@ __metadata:
eslint: "npm:^10.0.2"
postcss: "npm:^8.5.6"
postcss-combine-duplicated-selectors: "npm:^10.0.3"
postcss-custom-media: "npm:^11.0.6"
postcss-custom-media: "npm:^12.0.1"
postcss-discard-empty: "npm:^7.0.1"
typescript: "npm:^5.9.3"
languageName: unknown
Expand Down Expand Up @@ -12140,17 +12124,17 @@ __metadata:
languageName: node
linkType: hard

"postcss-custom-media@npm:^11.0.6":
version: 11.0.6
resolution: "postcss-custom-media@npm:11.0.6"
"postcss-custom-media@npm:^12.0.1":
version: 12.0.1
resolution: "postcss-custom-media@npm:12.0.1"
dependencies:
"@csstools/cascade-layer-name-parser": "npm:^2.0.5"
"@csstools/css-parser-algorithms": "npm:^3.0.5"
"@csstools/css-tokenizer": "npm:^3.0.4"
"@csstools/media-query-list-parser": "npm:^4.0.3"
"@csstools/cascade-layer-name-parser": "npm:^3.0.0"
"@csstools/css-parser-algorithms": "npm:^4.0.0"
"@csstools/css-tokenizer": "npm:^4.0.0"
"@csstools/media-query-list-parser": "npm:^5.0.0"
peerDependencies:
postcss: ^8.4
checksum: 10c0/62dcb2858fd490d90aab32062621d58892a7b2a54948ee63af81a2cd61807a11815d28d4ef6bc800c5e142ac73098f7e56822c7cc63192eb20d5b16071543a73
checksum: 10c0/93f964613e3d3e73ba86d13386a9ea981bda5f334607a843434ef55cfa3773e3989224c8032b66b03731cc822a19fc110994be2c83cac99f2b06eeb66dac66f2
languageName: node
linkType: hard

Expand Down
Loading