From f2e7de3d24389486e86e9479ae3ad8a83ccad7a2 Mon Sep 17 00:00:00 2001 From: Toby Hede Date: Tue, 18 Aug 2026 09:09:54 +1000 Subject: [PATCH] fix(deps): patch postcss to 8.5.23 --- pnpm-lock.yaml | 52 ++++++++++++++++++++++----------------------- pnpm-workspace.yaml | 3 ++- 2 files changed, 28 insertions(+), 27 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index a0bb3f0f9..74a4241f9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -51,7 +51,7 @@ overrides: next@<15.5.18: ~15.5.18 lodash@<4.18.0: ^4.18.0 js-cookie@<3.0.7: ^3.0.7 - postcss@<8.5.10: ^8.5.10 + postcss@<8.5.23: ^8.5.23 vite@>=7.0.0 <7.3.5: ~7.3.5 esbuild@>=0.27.3 <0.28.1: ^0.28.1 js-yaml@<3.15.0: 3.15.0 @@ -254,7 +254,7 @@ importers: version: 7.2.0 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) tsx: specifier: catalog:repo version: 4.23.0 @@ -304,7 +304,7 @@ importers: version: 8.22.0 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) typescript: specifier: catalog:repo version: 5.9.3 @@ -329,7 +329,7 @@ importers: version: 15.5.21(react-dom@19.2.3(react@19.2.3))(react@19.2.3) tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) typescript: specifier: catalog:repo version: 5.9.3 @@ -465,7 +465,7 @@ importers: version: 3.4.9 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) tsx: specifier: catalog:repo version: 4.23.0 @@ -524,7 +524,7 @@ importers: version: 3.4.9 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) typescript: specifier: catalog:repo version: 5.9.3 @@ -573,7 +573,7 @@ importers: version: 3.4.9 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) typescript: specifier: catalog:repo version: 5.9.3 @@ -619,7 +619,7 @@ importers: version: 3.4.9 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) typescript: specifier: catalog:repo version: 5.9.3 @@ -678,7 +678,7 @@ importers: version: 8.20.0 tsup: specifier: catalog:repo - version: 8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) + version: 8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0) tsx: specifier: catalog:repo version: 4.23.0 @@ -2769,8 +2769,8 @@ packages: resolution: {integrity: sha512-Tz09sEL2EEuv5fFowm419c1+a/jSMiBjI9gHxVLrVdbUkkNUUfjsVYs9pVZu5oCon/kmRh9TfLEObFtkVxmY0w==} engines: {node: '>=8.0.0'} - nanoid@3.3.12: - resolution: {integrity: sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==} + nanoid@3.3.18: + resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==} engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true @@ -2977,7 +2977,7 @@ packages: engines: {node: '>= 18'} peerDependencies: jiti: '>=1.21.0' - postcss: ^8.5.10 + postcss: ^8.5.23 tsx: ^4.8.1 yaml: ^2.4.2 peerDependenciesMeta: @@ -2990,8 +2990,8 @@ packages: yaml: optional: true - postcss@8.5.14: - resolution: {integrity: sha512-SoSL4+OSEtR99LHFZQiJLkT59C5B1amGO1NzTwj7TT1qCUgUO6hxOvzkOYxD+vMrXBM3XJIKzokoERdqQq/Zmg==} + postcss@8.5.26: + resolution: {integrity: sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==} engines: {node: ^10 || ^12 || >=14} postgres-array@2.0.0: @@ -3350,7 +3350,7 @@ packages: peerDependencies: '@microsoft/api-extractor': ^7.36.0 '@swc/core': ^1 - postcss: ^8.5.10 + postcss: ^8.5.23 typescript: '>=4.5.0' peerDependenciesMeta: '@microsoft/api-extractor': @@ -5402,7 +5402,7 @@ snapshots: lru.min: 1.1.4 optional: true - nanoid@3.3.12: {} + nanoid@3.3.18: {} negotiator@1.0.0: {} @@ -5411,7 +5411,7 @@ snapshots: '@next/env': 15.5.21 '@swc/helpers': 0.5.15 caniuse-lite: 1.0.30001760 - postcss: 8.5.14 + postcss: 8.5.26 react: 19.2.3 react-dom: 19.2.3(react@19.2.3) styled-jsx: 5.1.6(react@19.2.3) @@ -5570,18 +5570,18 @@ snapshots: pluralize@8.0.0: {} - postcss-load-config@6.0.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(yaml@2.9.0): + postcss-load-config@6.0.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(yaml@2.9.0): dependencies: lilconfig: 3.1.3 optionalDependencies: jiti: 2.7.0 - postcss: 8.5.14 + postcss: 8.5.26 tsx: 4.23.0 yaml: 2.9.0 - postcss@8.5.14: + postcss@8.5.26: dependencies: - nanoid: 3.3.12 + nanoid: 3.3.18 picocolors: 1.1.1 source-map-js: 1.2.1 @@ -5956,7 +5956,7 @@ snapshots: tslib@2.8.1: {} - tsup@8.5.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0): + tsup@8.5.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(typescript@5.9.3)(yaml@2.9.0): dependencies: bundle-require: 5.1.0(esbuild@0.28.1) cac: 6.7.14 @@ -5967,7 +5967,7 @@ snapshots: fix-dts-default-cjs-exports: 1.0.1 joycon: 3.1.1 picocolors: 1.1.1 - postcss-load-config: 6.0.1(jiti@2.7.0)(postcss@8.5.14)(tsx@4.23.0)(yaml@2.9.0) + postcss-load-config: 6.0.1(jiti@2.7.0)(postcss@8.5.26)(tsx@4.23.0)(yaml@2.9.0) resolve-from: 5.0.0 rollup: 4.60.4 source-map: 0.7.6 @@ -5976,7 +5976,7 @@ snapshots: tinyglobby: 0.2.16 tree-kill: 1.2.2 optionalDependencies: - postcss: 8.5.14 + postcss: 8.5.26 typescript: 5.9.3 transitivePeerDependencies: - jiti @@ -6077,7 +6077,7 @@ snapshots: esbuild: 0.28.1 fdir: 6.5.0(picomatch@4.0.4) picomatch: 4.0.4 - postcss: 8.5.14 + postcss: 8.5.26 rollup: 4.60.4 tinyglobby: 0.2.16 optionalDependencies: @@ -6094,7 +6094,7 @@ snapshots: esbuild: 0.28.1 fdir: 6.5.0(picomatch@4.0.4) picomatch: 4.0.4 - postcss: 8.5.14 + postcss: 8.5.26 rollup: 4.60.4 tinyglobby: 0.2.16 optionalDependencies: diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index b2a6b0312..e5371efcd 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -58,7 +58,8 @@ overrides: # #133 GHSA-qjx8-664m-686j — js-cookie attribute injection 'js-cookie@<3.0.7': '^3.0.7' # #102 GHSA-qx2v-qp2m-jg93 — postcss XSS via unescaped - 'postcss@<8.5.10': '^8.5.10' + # CVE-2026-69153 — bumped floor to 8.5.23, the next patched release. + 'postcss@<8.5.23': '^8.5.23' # #145 GHSA-fx2h-pf6j-xcff, #146 GHSA-v6wh-96g9-6wx3 — vite dev server (Windows) 'vite@>=7.0.0 <7.3.5': '~7.3.5' # #142 GHSA-g7r4-m6w7-qqqr — esbuild dev server. 0.28.1 is the FIRST patched