Update postcss 8.5.10 → 8.5.14 (patch)

[depfu]

Here is everything you need to know about this upgrade. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ postcss (8.5.10 → 8.5.14) · Repo · Changelog

Release Notes

8.5.14

• Fixed custom syntax regression (by @43081j).

8.5.13

• Fixed postcss-scss commend regression.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @offset).

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 21 commits:

• Release 8.5.14 version
• Update dependencies
• Merge pull request #2084 from 43081j/raw-raws-rawing
• fix: always call `raw` to retrieve raw values
• Release 8.5.13 version
• Temporary ignore pnpm 11 config
• Update dependencies
• Revert stringifier changes because of the conflict with postcss-scss
• Try to fix CI
• Move to pnpm 11
• Release 8.5.12 version
• Another try to fix coverage
• Try to fix coverage
• Load only .map source maps
• Avoid throwing JSON parsing errors for non-JSON source maps
• Mention original author of the solution
• Release 8.5.11 version
• Speed up parsing many nested brackets
• Update dependencies
• Cache node.raws locally in Stringifier hot methods
• Bypass MapGenerator for no-source-map stringify in LazyResult

---

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu recreate

Recreates this PR, overwriting any edits that you've made to it

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu cancel merge

Cancels automatic merging of this PR

@​depfu close

Closes this PR and deletes the branch

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)

[greptile-apps]

Confidence Score: 5/5

Safe to merge — routine patch bump with no API changes and a notable security fix.

The change is a minimal patch-version bump of a single devDependency. The lockfile is consistently updated with no stale references. The included releases bring a security patch (arbitrary file read via user-generated CSS), a performance improvement, and two regression fixes — all straightforward to adopt at patch level.

No files require special attention.

_{Reviews (2): Last reviewed commit: "Update postcss to version 8.5.14" | Re-trigger Greptile}

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: f6bb0d4c-94c9-4fef-86d7-c106faf580c8

📥 Commits

Reviewing files that changed from the base of the PR and between 4c634b3 and 79e9e26.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• package.json

🚧 Files skipped from review as they are similar to previous changes (1)

• package.json

---

Walkthrough

This PR updates the PostCSS development dependency in package.json from 8.5.10 to 8.5.14. The change is limited to the devDependencies declaration; no other scripts, configuration, or tooling were modified.

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: updating postcss from version 8.5.10 to 8.5.14 with patch-level specification.
Description check	✅ Passed	The description is directly related to the changeset, providing detailed release notes, commits, and context for the postcss dependency update from 8.5.10 to 8.5.14.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[depfu]

Sorry, but the merge failed with:

At least 1 approving review is required by reviewers with write access.