From 56ece1482c34711ab39359a6936808d4a65a557e Mon Sep 17 00:00:00 2001 From: Ole Kristian Losvik Date: Thu, 6 Aug 2026 00:06:02 +0200 Subject: [PATCH] Deps: Bump postcss from 8.5.20 to 8.5.23 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Rebuilt on current main with a pnpm-resolved lockfile. Dependabot's own resolution floated 13 unrelated entries to versions published inside the `minimumReleaseAge` window (turbo 2.10.8, ws 8.21.2, nanoid 3.3.17, recast 0.23.19, minimatch 10.2.6, …), which `pnpm install` rejects with ERR_PNPM_MINIMUM_RELEASE_AGE_VIOLATION — so CI failed in the install step before running a single test. Dependabot's `cooldown` only gates which *direct* updates it proposes; it has no age awareness when regenerating the lockfile. Letting pnpm resolve instead keeps every transitive at its current, age-compliant version and moves postcss alone: 7 lines instead of a sprawl. pnpm also held postcss at 8.5.23 rather than the available 8.5.25, which is 7 days old and inside the window. The policy working as intended. Co-Authored-By: Claude Opus 5 (1M context) --- package.json | 2 +- pnpm-lock.yaml | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package.json b/package.json index 19afefd..4c20f03 100644 --- a/package.json +++ b/package.json @@ -47,7 +47,7 @@ "@vitest/coverage-v8": "^4.1.10", "eslint": "^10.7.0", "playwright": "^1.61.1", - "postcss": "^8.5.20", + "postcss": "^8.5.23", "prettier": "^3.9.5", "react": "^19.2.8", "react-dom": "^19.2.8", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index aa44a24..1ef71a7 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -67,8 +67,8 @@ importers: specifier: ^1.61.1 version: 1.61.1 postcss: - specifier: ^8.5.20 - version: 8.5.20 + specifier: ^8.5.23 + version: 8.5.23 prettier: specifier: ^3.9.5 version: 3.9.5 @@ -3363,8 +3363,8 @@ packages: resolution: {integrity: sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==} engines: {node: ^10 || ^12 || >=14} - postcss@8.5.20: - resolution: {integrity: sha512-lW616l85ucIQL+FocMmL7pQFPqBmwejrCMg+iPxyImlrANNJG9NHq/RkyCZopDhd8C3LA03PHRJDjkbGu8vvug==} + postcss@8.5.23: + resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==} engines: {node: ^10 || ^12 || >=14} prelude-ls@1.2.1: @@ -5367,7 +5367,7 @@ snapshots: '@alloc/quick-lru': 5.2.0 '@tailwindcss/node': 4.3.3 '@tailwindcss/oxide': 4.3.3 - postcss: 8.5.20 + postcss: 8.5.23 tailwindcss: 4.3.3 '@tailwindcss/vite@4.3.3(vite@8.1.5(@types/node@24.13.3)(esbuild@0.28.1)(jiti@2.7.0)(tsx@4.23.1))': @@ -7368,7 +7368,7 @@ snapshots: picocolors: 1.1.1 source-map-js: 1.2.1 - postcss@8.5.20: + postcss@8.5.23: dependencies: nanoid: 3.3.16 picocolors: 1.1.1 @@ -8019,7 +8019,7 @@ snapshots: dependencies: lightningcss: 1.32.0 picomatch: 4.0.5 - postcss: 8.5.20 + postcss: 8.5.23 rolldown: 1.1.5 tinyglobby: 0.2.17 optionalDependencies: