Skip to content

[stable33] chore(deps): bump postcss to 8.5.26 - #6005

Merged
elzody merged 1 commit into
stable33from
backport/6003/stable33
Aug 28, 2026
Merged

[stable33] chore(deps): bump postcss to 8.5.26#6005
elzody merged 1 commit into
stable33from
backport/6003/stable33

Conversation

@backportbot

@backportbot backportbot Bot commented Aug 28, 2026

Copy link
Copy Markdown

Backport of #6003

Warning, This backport's changes differ from the original and might be incomplete 鈿狅笍

Todo

  • Review and resolve any conflicts
  • Review and verify the backported changes
  • Amend HEAD commit to remove the line stating to skip CI

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.

@backportbot backportbot Bot added the 3. to review Ready to be reviewed label Aug 28, 2026
Updates postcss from 8.5.9 to 8.5.26 to address a high severity
security vulnerability. It was first attempted by dependabot in PR #5953
but that PR also included a vue-loader bump that would require a Vue 3
migration, which is out of scope for now.

Also bumps nanoid from 3.3.11 to 3.3.18, as postcss 8.5.26 raises its
required range to ^3.3.17.

Assisted-by: ClaudeCode:claude-opus-5
Signed-off-by: Elizabeth Danzberger <elizabeth@elzody.dev>
@elzody
elzody force-pushed the backport/6003/stable33 branch from ff8b530 to 646e6d8 Compare August 28, 2026 20:08
@elzody
elzody marked this pull request as ready for review August 28, 2026 20:08
@elzody
elzody requested a review from juliusknorr as a code owner August 28, 2026 20:08
@elzody
elzody merged commit c7e069b into stable33 Aug 28, 2026
46 checks passed
@elzody
elzody deleted the backport/6003/stable33 branch August 28, 2026 20:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Ready to be reviewed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant