Skip to content

build(deps): postcss for GHSA-qx2v-qp2m-jg93#704

Open
yahgwai wants to merge 2 commits into
mainfrom
chore/chris-audit.1
Open

build(deps): postcss for GHSA-qx2v-qp2m-jg93#704
yahgwai wants to merge 2 commits into
mainfrom
chore/chris-audit.1

Conversation

@yahgwai

@yahgwai yahgwai commented Apr 24, 2026

Copy link
Copy Markdown
Contributor

Transitive via vitest>vite>postcss; dev-only, not reachable from our code (no CSS parsing, no HTML emission), but bumps the pipeline to a patched version so audit-ci stays clean.

Transitive via vitest>vite>postcss; dev-only, not reachable from our
code (no CSS parsing, no HTML emission), but bumps the pipeline to a
patched version so audit-ci stays clean.
@yahgwai yahgwai requested a review from douglance April 24, 2026 16:38
@yahgwai yahgwai changed the title build(deps): override postcss to >=8.5.10 for GHSA-qx2v-qp2m-jg93 build(deps): postcss for GHSA-qx2v-qp2m-jg93 Apr 24, 2026
@yahgwai yahgwai enabled auto-merge (squash) April 24, 2026 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant