Skip to content

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Jul 1, 2021

Snyk has created this PR to upgrade postcss from 8.3.0 to 8.3.1.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 21 days ago, on 2021-06-09.
Release notes
Package name: postcss
  • 8.3.1 - 2021-06-09
    • Fixed false positives PostCSS does nothing warning on syntax option.
  • 8.3.0 - 2021-05-21

    Duke Murmur seal

    PostCSS 8.3 improved source map parsing performance, added Node#assign() shortcut, and experimental Document node to AST.

    Thanks to Sponsors

    This release was possible thanks to our community.

    Sponsored by Tailwind CSS Sponsored by ThemeIsle

    If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

    Source Map Performance

    Because PostCSS needs synchronous API, we can’t move from the old `source-map 0.6 to 0.7 (many other open-source projects too).

    @ 7rulnik forked source-map 0.6 to source-map-js and back-ported performance improvements from 0.7. In 8.3 we switched from source-map to this source-map-js fork.

    You map see 4x performance improvements in parsing map from processing step before PostCSS (for instance, Sass).

    Document Nodes

    Thanks to @ gucong3000, PostCSS already parse CSS from HTML and JS files (CSS-in-JS templates and objects).

    But his plugin need big updates. @ hudochenkov from stylelint team decided to create new parsers for styles inside CSS-in-JS, HTML, and Markdown.

    He suggested adding new Document node type to PostCSS AST to keep multiple Root nodes inside and JS/HTML/Markdown code blocks between these style blocks.

    const document = htmlParser(
      '<html><style>a{color:black}</style><style>b{z-index:2}</style>'
    )
    document.type          //=> 'document'
    document.nodes.length  //=> 2
    document.nodes[0].type //=> 'root'

    This is an experimental feature. Some aspects of this node could change within minor or patch version releases.

    Node#assign() Shortcut

    The creator of famous postcss-preset-env and many other PostCSS tools, @ jonathantneal suggested a nice shortcut to change multiple properties in the node:

    decl.assign({ prop: 'word-wrap', value: 'break-word' })
from postcss GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants