Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency postcss to v8.4.41 [security] - abandoned #333

Open
wants to merge 1 commit into
base: update-dependencies
Choose a base branch
from

Conversation

renovate[bot]
Copy link

@renovate renovate bot commented Sep 25, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
postcss (source) 8.4.40 -> 8.4.41 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-44270

An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be \r discrepancies, as demonstrated by @font-face{ font:(\r/*);} in a rule.

This vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being originally included in a comment.


Release Notes

postcss/postcss (postcss)

v8.4.41

Compare Source


Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Madrid, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

relativeci bot commented Sep 25, 2024

#1858 Bundle Size — 1022.29KiB (+0.96%).

00acb79(current) vs d5cc018 master#196(baseline)

Bundle metrics  Change 4 changes Regression 1 regression Improvement 2 improvements
                 Current
#1858
     Baseline
#196
Regression  Initial JS 428.47KiB(+2.33%) 418.73KiB
Improvement  Initial CSS 568.64KiB(~-0.01%) 568.66KiB
Change  Cache Invalidation 41.39% 0%
No change  Chunks 4 4
No change  Assets 9 9
No change  Modules 283 283
No change  Duplicate Modules 0 0
No change  Duplicate Code 0% 0%
Improvement  Packages 40(-2.44%) 41
No change  Duplicate Packages 0 0
Bundle size by type  Change 2 changes Regression 1 regression Improvement 1 improvement
                 Current
#1858
     Baseline
#196
Improvement  CSS 568.64KiB (~-0.01%) 568.66KiB
Regression  JS 428.47KiB (+2.33%) 418.73KiB
No change  IMG 24.78KiB 24.78KiB
No change  HTML 413B 413B

Bundle analysis reportBranch renovate-npm-postcss-vulnerabili...Project dashboard


Generated by RelativeCIDocumentationReport issue

Copy link

relativeci bot commented Sep 25, 2024

monorepo-webapp-2

#1853 Bundle Size — 1022.29KiB (+0.96%).

00acb79(current) vs d5cc018 master#190(baseline)

Bundle metrics  Change 4 changes Regression 1 regression Improvement 2 improvements
                 Current
#1853
     Baseline
#190
Regression  Initial JS 428.47KiB(+2.33%) 418.73KiB
Improvement  Initial CSS 568.64KiB(~-0.01%) 568.66KiB
Change  Cache Invalidation 41.39% 0%
No change  Chunks 4 4
No change  Assets 9 9
No change  Modules 283 283
No change  Duplicate Modules 0 0
No change  Duplicate Code 0% 0%
Improvement  Packages 40(-2.44%) 41
No change  Duplicate Packages 0 0
Bundle size by type  Change 2 changes Regression 1 regression Improvement 1 improvement
                 Current
#1853
     Baseline
#190
Improvement  CSS 568.64KiB (~-0.01%) 568.66KiB
Regression  JS 428.47KiB (+2.33%) 418.73KiB
No change  IMG 24.78KiB 24.78KiB
No change  HTML 413B 413B

Bundle analysis reportBranch renovate-npm-postcss-vulnerabili...Project dashboard


Generated by RelativeCIDocumentationReport issue

Copy link
Author

renovate bot commented Sep 25, 2024

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@renovate renovate bot changed the title chore(deps): update dependency postcss to v8.4.41 [security] chore(deps): update dependency postcss to v8.4.41 [security] - abandoned Sep 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants