chore(deps): update devdependencies-non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/estree (source)	1.0.5 → 1.0.9
@types/yargs (source)	17.0.32 → 17.0.35
autoprefixer	10.4.19 → 10.5.4
dotenv	16.4.5 → 16.6.1
postcss (source)	8.4.38 → 8.5.26
tailwindcss (source)	3.4.3 → 3.4.19

---

Release Notes

postcss/autoprefixer (autoprefixer)

v10.5.4

Compare Source

• Fixed prefixed rule duplication (by @​xianjianlf2).

v10.5.3

Compare Source

• Fixed brackets and gradient parser (@​alanturing881).

v10.5.2

Compare Source

• Moved -webkit-fill-available before -moz-available, so Firefox
  will use -webkit- version which is closer to stretch.

v10.5.1

Compare Source

• Fixed grid-area span reset for overriding areas (by @​puneetdixit200).

v10.5.0

Compare Source

• Added mask-position-x and mask-position-y support (by @​toporek).

v10.4.27

Compare Source

• Removed development key from package.json.

v10.4.26

Compare Source

• Reduced package size.

v10.4.25

Compare Source

• Fixed broken gradients on CSS Custom Properties (by @​serger777).

v10.4.24

Compare Source

• Made Autoprefixer a little faster (by @​Cherry).

v10.4.23

Compare Source

• Reduced dependencies (by @​hyperz111).

v10.4.22

Compare Source

• Fixed stretch prefixes on new Can I Use database.
• Updated fraction.js.

v10.4.21

Compare Source

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

v10.4.20

Compare Source

• Fixed fit-content prefix for Firefox.

motdotla/dotenv (dotenv)

v16.6.1

Compare Source

Changed

• Default quiet to true – hiding the runtime log message (#​874)
• NOTICE: 17.0.0 will be released with quiet defaulting to false. Use config({ quiet: true }) to suppress.
• And check out the new dotenvx. As coding workflows evolve and agents increasingly handle secrets, encrypted .env files offer a much safer way to deploy both agents and code together with secure secrets. Simply switch require('dotenv').config() for require('@dotenvx/dotenvx').config().

v16.6.0

Compare Source

Added

• Default log helpful message [dotenv@16.6.0] injecting env (1) from .env (#​870)
• Use { quiet: true } to suppress
• Aligns dotenv more closely with dotenvx.

v16.5.0

Compare Source

Added

• 🎉 Added new sponsor Graphite - the AI developer productivity platform helping teams on GitHub ship higher quality software, faster.

[!TIP]
Become a sponsor

The dotenvx README is viewed thousands of times DAILY on GitHub and NPM.
Sponsoring dotenv is a great way to get in front of developers and give back to the developer community at the same time.

Changed

• Remove _log method. Use _debug #​862

v16.4.7

Compare Source

Changed

• Ignore .tap folder when publishing. (oops, sorry about that everyone. - @​motdotla) #​848

v16.4.6

Compare Source

Changed

• Clean up stale dev dependencies #​847
• Various README updates clarifying usage and alternative solutions using dotenvx

postcss/postcss (postcss)

v8.5.26

Compare Source

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

v8.5.25

Compare Source

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

v8.5.24

Compare Source

• Preserve the BOM after the processing (by @​hdimer).

v8.5.23

Compare Source

• Do not load source map without opts.from for security reasons.

v8.5.22

Compare Source

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

v8.5.21

Compare Source

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

v8.5.20

Compare Source

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

v8.5.19

Compare Source

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

v8.5.18

Compare Source

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

v8.5.17

Compare Source

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

v8.5.16

Compare Source

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

v8.5.15

Compare Source

• Fixed declaration parsing performance (by @​homanp).

v8.5.14

Compare Source

• Fixed custom syntax regression (by @​43081j).

v8.5.13

Compare Source

• Fixed postcss-scss commend regression.

v8.5.12

Compare Source

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

v8.5.11

Compare Source

• Fixed nested brackets parsing performance (by @​offset).

v8.5.10

Compare Source

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

v8.5.9

Compare Source

• Speed up source map encoding paring in case of the error.

v8.5.8

Compare Source

• Fixed Processor#version.

v8.5.7

Compare Source

• Improved source map annotation cleaning performance (by CodeAnt AI).

v8.5.6

Compare Source

• Fixed ContainerWithChildren type discriminating (by @​Goodwine).

v8.5.5

Compare Source

• Fixed package.json→exports compatibility with some tools (by @​JounQin).

v8.5.4

Compare Source

• Fixed Parcel compatibility issue (by @​git-sumitchaudhary).

v8.5.3

Compare Source

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

v8.5.2

Compare Source

• Fixed end position of rules with semicolon (by @​romainmenke).

v8.5.1

Compare Source

• Fixed declaration parsing performance (by @​homanp).

v8.5.0: 8.5 “Duke Alloces”

Compare Source

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations at GitHub Sponsors or Open Collective.

v8.4.49

Compare Source

• Fixed custom syntax without source.offset (by @​romainmenke).

v8.4.48

Compare Source

• Fixed position calculation in error/warnings methods (by @​romainmenke).

v8.4.47

Compare Source

• Removed debug code.

v8.4.46

Compare Source

• Fixed Cannot read properties of undefined (reading 'before').

v8.4.45

Compare Source

• Removed unnecessary fix which could lead to infinite loop.

v8.4.44

Compare Source

• Another way to fix markClean is not a function error.

v8.4.43

Compare Source

• Fixed markClean is not a function error.

v8.4.42

Compare Source

• Fixed CSS syntax error on long minified files (by @​varpstar).

v8.4.41

Compare Source

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

v8.4.40

Compare Source

• Moved to getter/setter in nodes types to help Sass team (by @​nex3).

v8.4.39

Compare Source

• Fixed CssSyntaxError types (by @​romainmenke).

tailwindlabs/tailwindcss (tailwindcss)

v3.4.19

Compare Source

Fixed

• Don’t break sibling-*() functions when used inside calc(…) (#​19335)

v3.4.18

Compare Source

Fixed

• Improve support for raw supports-[…] queries in arbitrary values (#​13605)
• Fix require.cache error when loaded through a TypeScript file in Node 22.18+ (#​18665)
• Support import.meta.resolve(…) in configs for new enough Node.js versions (#​18938)
• Allow using newer versions of postcss-load-config for better ESM and TypeScript PostCSS config support with the CLI (#​18938)
• Remove irrelevant utility rules when matching important classes (#​19030)

v3.4.17

Compare Source

Fixed

• Work around Node v22.12+ issue (#​15421)

v3.4.16

Compare Source

Fixed

• Ensure the TypeScript types for PluginsConfig allow undefined values (#​14668)

v3.4.15

Compare Source

• Bump versions for security vulnerabilities (#​14697)
• Ensure the TypeScript types for the boxShadow theme configuration allows arrays (#​14856)
• Set fallback for opacity variables to ensure setting colors with the selection:* variant works in Chrome 131 (#​15003)

v3.4.14

Compare Source

Fixed

• Don't set display: none on elements that use hidden="until-found" (#​14625)

v3.4.13

Compare Source

Fixed

• Improve source glob verification performance (#​14481)

v3.4.12

Compare Source

Fixed

• Ensure using @apply with utilities that use @defaults works with rules defined in the base layer when using optimizeUniversalDefaults (#​14427)

v3.4.11

Compare Source

Fixed

• Allow anchor-size(…) in arbitrary values (#​14393)

v3.4.10

Compare Source

Fixed

• Bump versions of plugins in the Standalone CLI (#​14185)

v3.4.9

Compare Source

Fixed

• No longer warns when broad glob patterns are detecting vendor folders

v3.4.8

Compare Source

Fixed

• Fix minification when using nested CSS (#​14105)
• Warn when broad glob patterns are used in the content configuration (#​14140)

v3.4.7

Compare Source

Fixed

• Fix class detection in Slim templates with attached attributes and ID (#​14019)
• Ensure attribute values in data-* and aria-* modifiers are always quoted in the generated CSS (#​14037)

v3.4.6

Compare Source

Fixed

• Fix detection of some utilities in Slim/Pug templates (#​14006)

Changed

• Loosen :is() wrapping rules when using an important selector (#​13900)

v3.4.5

Compare Source

Fixed

• Disable automatic var() injection for anchor properties (#​13826)
• Use no value instead of blur(0px) for backdrop-blur-none and blur-none utilities (#​13830)
• Add .mts and .cts config file detection (#​13940)
• Don't generate utilities like px-1 unnecessarily when using utilities like px-1.5 (#​13959)
• Always generate -webkit-backdrop-filter for backdrop-* utilities (#​13997)

v3.4.4

Compare Source

Fixed

• Make it possible to use multiple <alpha-value> placeholders in a single color definition (#​13740)
• Don't prefix classes in arbitrary values of has-*, group-has-*, and peer-has-* variants (#​13770)
• Support negative values for {col,row}-{start,end} utilities (#​13781)
• Update embedded browserslist database (#​13792)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "every 2 weeks on Monday before 7am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for geo-explorer ready!

Name	Link
🔨 Latest commit	6dcf140
🔍 Latest deploy log	https://app.netlify.com/projects/geo-explorer/deploys/6a9f12e9e431b40008311d25
😎 Deploy Preview	https://deploy-preview-25--geo-explorer.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.