Skip to content

Bump postcss, stylelint-config-recommended-scss, stylelint-scss, @symfony/webpack-encore, stylelint and vue-loader#3708

Closed
dependabot[bot] wants to merge 1 commit into6.2from
dependabot/npm_and_yarn/multi-5dc7773ef9
Closed

Bump postcss, stylelint-config-recommended-scss, stylelint-scss, @symfony/webpack-encore, stylelint and vue-loader#3708
dependabot[bot] wants to merge 1 commit into6.2from
dependabot/npm_and_yarn/multi-5dc7773ef9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 24, 2026

Bumps postcss to 8.5.10 and updates ancestor dependencies postcss, stylelint-config-recommended-scss, stylelint-scss, @symfony/webpack-encore, stylelint and vue-loader. These dependencies need to be updated together.

Updates postcss from 8.4.32 to 8.5.10

Release notes

Sourced from postcss's releases.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
</tr></table>

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

  • Added Input#document for sources like CSS-in-JS or HTML (by @​romainmenke).

8.4.49

... (truncated)

Commits

Updates stylelint-config-recommended-scss from 4.3.0 to 17.0.1

Release notes

Sourced from stylelint-config-recommended-scss's releases.

17.0.1

  • Fixed: false positive for no-invalid-position-declaration inside a mixin (#373).

17.0.0

  • Removed: stylelint less than 17.0.0 from peer dependencies.
  • Changed: updated to stylelint-config-recommended@18.0.0.
  • Changed: updated to stylelint-scss@7.0.0.
  • Changed: module type to ESM.
  • Fixed: disabled no-descending-specificity rule because of false positives due to standard nesting.
  • Fixed: disabled no-duplicate-selectors rule because of false positives due to standard nesting.

16.0.2

  • Removed: stylelint less than 16.24.0 from peer dependencies. Fixes incorrect minimum peer dependency version.

16.0.1

  • Fixed: false positive for nesting-selector-no-missing-scoping-root.

16.0.0

15.0.1

  • Fixed: change minimum supported Node.js version to 20.

15.0.0

14.1.0

  • Changed: replaced deprecated scss/at-import-partial-extension rule with scss/load-partial-extension rule.
  • Changed: updated to stylelint-scss@6.4.0.

14.0.0

13.1.0

  • Changed: replaced deprecated scss/at-import-no-partial-leading-underscore rule with scss/load-no-partial-leading-underscore rule.
  • Changed: updated to stylelint-scss@5.3.0.

13.0.0

... (truncated)

Changelog

Sourced from stylelint-config-recommended-scss's changelog.

17.0.1

  • Fixed: false positive for no-invalid-position-declaration inside a mixin (#373).

17.0.0

  • Removed: stylelint less than 17.0.0 from peer dependencies.
  • Changed: updated to stylelint-config-recommended@18.0.0.
  • Changed: updated to stylelint-scss@7.0.0.
  • Changed: module type to ESM.
  • Fixed: disabled no-descending-specificity rule because of false positives due to standard nesting.
  • Fixed: disabled no-duplicate-selectors rule because of false positives due to standard nesting.

16.0.2

  • Removed: stylelint less than 16.24.0 from peer dependencies. Fixes incorrect minimum peer dependency version.

16.0.1

  • Fixed: false positive for nesting-selector-no-missing-scoping-root.

16.0.0

15.0.1

  • Fixed: change minimum supported Node.js version to 20.

15.0.0

14.1.0

  • Changed: replaced deprecated scss/at-import-partial-extension rule with scss/load-partial-extension rule.
  • Changed: updated to stylelint-scss@6.4.0.

14.0.0

... (truncated)

Commits

Updates stylelint-scss from 3.21.0 to 7.0.0

Release notes

Sourced from stylelint-scss's releases.

7.0.0

  • Removed: support for Node.js less than 20.19.0 (#1221)
  • Removed: deprecated rules (#1220):
    • at-import-no-partial-leading-underscore
    • at-import-partial-extension-blacklist
    • at-import-partial-extension-whitelist
    • at-import-partial-extension
  • Changed: to ES Modules (#931)
  • Added: stylelint@^17.0.0 to peer dependency (#1222)
  • Added: selector-class-pattern rule (#1219)

Full Changelog: stylelint-scss/stylelint-scss@v6.14.0...v7.0.0

6.14.0

  • Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
  • Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
  • Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

  • Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
  • Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
  • Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).
  • Fixed: dollar-variable-colon-space-after prevent TypeError for dynamically created nodes (#1159).
  • Fixed: load-partial-extension add missing link to docs (#1202).
  • Fixed: migrate rules to use autofix callback instead of deprecated context.fix (#1206).
  • Updated: stylelint peer dependency version to ^16.8.2 (required by autofix callback) (#1206).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.1...v6.13.0

6.12.1

  • Fixed: stylelint deprecation warnings by adding endIndex to report objects in multiple rules (#1150).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.0...v6.12.1

6.12.0

  • Added: double-slash-comment-whitespace-inside add autofix and fix incorrect error locations (#1146).
  • Added: declaration-property-value-no-unknown add support for nested properties with shorthand values (#1142).
  • Fixed: operator-no-unspaced don't check Tailwind Directives (#1147).
  • Fixed: at-use-no-redundant-alias fix false negative for single quotes (#1130).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.1...v6.12.0

6.11.1

  • Fixed: no-duplicate-load-rules fix false positive when using @use and @forward for the same stylesheet (#1124).
  • Fixed: declaration-property-value-no-unknown add support for Sass' rgba() function with a hex value (#1123).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.0...v6.11.1

... (truncated)

Changelog

Sourced from stylelint-scss's changelog.

7.0.0

  • Removed: support for Node.js less than 20.19.0 (#1221)
  • Removed: deprecated rules (#1220):
    • at-import-no-partial-leading-underscore
    • at-import-partial-extension-blacklist
    • at-import-partial-extension-whitelist
    • at-import-partial-extension
  • Changed: to ES Modules (#931)
  • Added: stylelint@^17.0.0 to peer dependency (#1222)
  • Added: selector-class-pattern rule (#1219)

Full Changelog: stylelint-scss/stylelint-scss@v6.14.0...v7.0.0

6.14.0

  • Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
  • Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
  • Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

  • Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
  • Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
  • Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).
  • Fixed: dollar-variable-colon-space-after prevent TypeError for dynamically created nodes (#1159).
  • Fixed: load-partial-extension add missing link to docs (#1202).
  • Fixed: migrate rules to use autofix callback instead of deprecated context.fix (#1206).
  • Updated: stylelint peer dependency version to ^16.8.2 (required by autofix callback) (#1206).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.1...v6.13.0

6.12.1

  • Fixed: stylelint deprecation warnings by adding endIndex to report objects in multiple rules (#1150).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.0...v6.12.1

6.12.0

  • Added: double-slash-comment-whitespace-inside add autofix and fix incorrect error locations (#1146).
  • Added: declaration-property-value-no-unknown add support for nested properties with shorthand values (#1142).
  • Fixed: operator-no-unspaced don't check Tailwind Directives (#1147).
  • Fixed: at-use-no-redundant-alias fix false negative for single quotes (#1130).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.1...v6.12.0

6.11.1

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by jeddy3, a new releaser for stylelint-scss since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @symfony/webpack-encore from 1.8.2 to 6.0.0

Release notes

Sourced from @​symfony/webpack-encore's releases.

v5.3.1

What's Changed

Full Changelog: symfony/webpack-encore@v5.3.0...v5.3.1

v5.3.0

What's Changed

New Contributors

Full Changelog: symfony/webpack-encore@v5.2.0...v5.3.0

Peer dependencies update!

Features

Internals

New Contributors

Full Changelog: symfony/webpack-encore@v5.1.0...v5.2.0

5.1: Stimulus Bridge 4

What's Changed

Features

Full Changelog: symfony/webpack-encore@v5.0.1...v5.1.0

v5.0.1

Bug fixes

... (truncated)

Changelog

Sourced from @​symfony/webpack-encore's changelog.

6.0.0

This is a new major version that contains several backwards-compatibility breaks, but for the best!

BC Breaks

  • Remove support of Node.js <22.13.0
  • Remove support of babel-loader@^9.1.3, see possible BC breaks in 10.0.0 release notes
  • Remove support of style-loader@^3.3.0, see possible BC breaks in 4.0.0 release notes
  • Remove support of less-loader@^11.0.0, see possible BC breaks in 12.0.0 release notes
  • Remove support of postcss-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
  • Remove support of stylus-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
  • Remove support of webpack-cli@^5.0.0, see possible BC breaks in 6.0.0 release notes
  • Remove unmaintained file-loader dependency The [N] placeholder (regex capture groups in filename patterns) is no longer supported. If you were using patterns like [1] or [2] in your Encore.copyFiles() filename option, you will need to restructure your file organization or use a different naming strategy.
  • Remove deprecated --https flag and devServerConfig.https option for webpack-dev-server, use --server-type https or configureDevServerOptions() with server: 'https' instead

Features

  • Update @​nuxt/friendly-errors-webpack-plugin to @​kocal/friendly-errors-webpack-plugin, a maintained fork of the original plugin
  • Update webpack from ^5.74.0 to ^5.82.0
  • Update css-minimizer-webpack-plugin to ^8.0.0, see release notes
  • Finish removing Vue 2 support leftovers (JSX code path, vue-jsx feature, version: 2 option, Vue 2 peer dependencies), which was forgotten during v5.0.0

5.3.0

  • Add support for Svelte 5

5.2.0

  • Add support for Webpack CLI ^6.0.0

  • Add support for babel-loader ^10.0.0

  • Add support for style-loader ^4.0.0

If you manually specified the option insert, now it can only be a selector or the path to the module. Follow the style-loader migration guide to upgrade!

5.1.0

Features

5.0.1

... (truncated)

Commits
  • 93016b8 Tagging 6.0.0
  • fb434b5 bug #1401 Follow-up #1400 (fix URLs generation) (Kocal)
  • 3e149b9 Follow-up #1400 (fix URLs generation)
  • 5557f89 feature #1400 Remove deprecated --https flag and devServerConfig.https op...
  • c5d7afa Remove deprecated --https flag and devServerConfig.https option
  • 0c706d2 feature #1399 Remove Vue 2 support leftovers (Kocal)
  • 94619b0 Remove Vue 2 support leftovers
  • b8c997b feature #1398 Remove unmaintained file-loader dependency (Kocal)
  • 1200947 Remove unmaintained file-loader dependency
  • b0542cf minor #1397 Add AGENTS.md (Kocal)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by kocal, a new releaser for @​symfony/webpack-encore since your current version.


Updates stylelint from 13.13.1 to 17.9.0

Release notes

Sourced from stylelint's releases.

17.9.0

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

17.8.0

It adds 3 new rules and 1 configuration property.

17.7.0

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

17.6.0

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

  • Added: support for extending units to languageOptions (#9166) (@​jeddy3).
  • Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
  • Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

17.5.0

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

  • Deprecated: *syntax options from declaration-property-value-no-unknown (#9102) (@​ragini-pandey).
  • Added: ignoreMediaFeatureNameValues: {} to media-feature-name-value-no-unknown (#8976) (@​kovsu).
  • Fixed: node_modules not ignored when using codeFilename in Node.js API (#9130) (@​adalinesimonian).
  • Fixed: Error TS7016 for imported css-tree types (#9133) (@​ragini-pandey).
  • Fixed: declaration-property-value-keyword-no-deprecated false positives for function arguments (#9116) (@​ragini-pandey).
  • Fixed: declaration-property-value-no-unknown false positives for calc-size() containing size keyword (#9105) (@​hriztam).
  • Fixed: no-descending-specificity & no-duplicate-selectors false negatives for equivalent compound selectors (#8977) (@​kovsu).
  • Fixed: no-invalid-position-declaration false positives for @mixin and @scope (#9120) (@​ragini-pandey).
  • Fixed: property-no-unknown false negatives for types (#9117) (@​Mouvedia).

17.4.0

It adds 2 options to the rules and fixes 7 bugs.

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.9.0 - 2026-04-23

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

17.8.0 - 2026-04-15

It adds 3 new rules and 1 configuration property.

17.7.0 - 2026-04-12

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

17.6.0 - 2026-03-26

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

  • Added: support for extending units to languageOptions (#9166) (@​jeddy3).
  • Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
  • Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

17.5.0 - 2026-03-19

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

  • Deprecated: *syntax options from declaration-property-value-no-unknown (#9102) (@​ragini-pandey).
  • Added: ignoreMediaFeatureNameValues: {} to media-feature-name-value-no-unknown (#8976) (@​kovsu).
  • Fixed: node_modules not ignored when using codeFilename in Node.js API (#9130) (@​adalinesimonian).
  • Fixed: Error TS7016 for imported css-tree types (#9133) (@​ragini-pandey).
  • Fixed: declaration-property-value-keyword-no-deprecated false positives for function arguments (#9116) (@​ragini-pandey).
  • Fixed: declaration-property-value-no-unknown false positives for calc-size() containing size keyword (#9105) (@​hriztam).
  • Fixed: no-descending-specificity & no-duplicate-selectors false negatives for equivalent compound selectors (#8977) (@​kovsu).
  • Fixed: no-invalid-position-declaration false positives for @mixin and @scope (#9120) (@​ragini-pandey).
  • Fixed: property-no-unknown false negatives for types (#9117) (@​Mouvedia).

17.4.0 - 2026-02-25

... (truncated)

Commits
  • cee404b Release 17.9.0 (#9242)
  • b0af5ae Bump prettier from 3.8.1 to 3.8.3 (#9240)
  • e2c2c43 Bump eslint-plugin-jest from 29.15.1 to 29.15.2 in the eslint group (#9239)
  • 68d008e Bump @​csstools/css-syntax-patches-for-csstree from 1.1.2 to 1.1.3 in the csst...
  • 5ad7ffb Bump @​csstools/css-calc from 3.1.1 to 3.2.0 in the csstools-parser group (#9237)
  • f16ef5e Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#9235)
  • a0b3c5a Bump actions/github-script from 8.0.0 to 9.0.0 (#9236)
  • fb2efec Add abortSignal option to Node.js API for cancellation support (#9213)
  • 84f2c6b Document Netlify hosting badge (#9218)
  • 5b45245 Add maxWarnings to configuration object (#9181)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version adds postprepare script and modifies prepare script that run during installation. Review the package contents before updating.


Updates vue-loader from 15.11.1 to 17.4.2

Release notes

Sourced from vue-loader's releases.

v17.3.1

Bug Fixes

  • do not skip style post loader for v-bind() in non-scoped CSS (d7071bb), closes #2061

v17.3.0

Bug Fixes

Features

  • skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

v17.2.2

Bug Fixes

v17.2.1

Features

  • A new experimentalInlineMatchResource option (webpack 5 only), which leverages webpack ...

    Description has been truncated

…fony/webpack-encore, stylelint and vue-loader

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.10 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [stylelint-config-recommended-scss](https://github.com/stylelint-scss/stylelint-config-recommended-scss), [stylelint-scss](https://github.com/stylelint-scss/stylelint-scss), [@symfony/webpack-encore](https://github.com/symfony/webpack-encore), [stylelint](https://github.com/stylelint/stylelint) and [vue-loader](https://github.com/vuejs/vue-loader). These dependencies need to be updated together.


Updates `postcss` from 8.4.32 to 8.5.10
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.4.32...8.5.10)

Updates `stylelint-config-recommended-scss` from 4.3.0 to 17.0.1
- [Release notes](https://github.com/stylelint-scss/stylelint-config-recommended-scss/releases)
- [Changelog](https://github.com/stylelint-scss/stylelint-config-recommended-scss/blob/master/CHANGELOG.md)
- [Commits](stylelint-scss/stylelint-config-recommended-scss@4.3.0...v17.0.1)

Updates `stylelint-scss` from 3.21.0 to 7.0.0
- [Release notes](https://github.com/stylelint-scss/stylelint-scss/releases)
- [Changelog](https://github.com/stylelint-scss/stylelint-scss/blob/master/CHANGELOG.md)
- [Commits](stylelint-scss/stylelint-scss@3.21.0...v7.0.0)

Updates `@symfony/webpack-encore` from 1.8.2 to 6.0.0
- [Release notes](https://github.com/symfony/webpack-encore/releases)
- [Changelog](https://github.com/symfony/webpack-encore/blob/main/CHANGELOG.md)
- [Commits](symfony/webpack-encore@v1.8.2...v6.0.0)

Updates `stylelint` from 13.13.1 to 17.9.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@13.13.1...17.9.0)

Updates `vue-loader` from 15.11.1 to 17.4.2
- [Release notes](https://github.com/vuejs/vue-loader/releases)
- [Changelog](https://github.com/vuejs/vue-loader/blob/main/CHANGELOG.md)
- [Commits](vuejs/vue-loader@v15.11.1...v17.4.2)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.10
  dependency-type: indirect
- dependency-name: stylelint-config-recommended-scss
  dependency-version: 17.0.1
  dependency-type: direct:production
- dependency-name: stylelint-scss
  dependency-version: 7.0.0
  dependency-type: direct:production
- dependency-name: "@symfony/webpack-encore"
  dependency-version: 6.0.0
  dependency-type: direct:development
- dependency-name: stylelint
  dependency-version: 17.9.0
  dependency-type: direct:development
- dependency-name: vue-loader
  dependency-version: 17.4.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file 🧹 Chore labels Apr 24, 2026
@bobvandevijver bobvandevijver changed the base branch from 6.1 to 6.2 April 26, 2026 09:44
@bobvandevijver bobvandevijver added this to the Bolt 6.2 milestone Apr 26, 2026
@bobvandevijver
Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 26, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 26, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-5dc7773ef9 branch April 26, 2026 11:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🧹 Chore dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant