chore(deps): update dependency postcss to v8.4.31 [security] - autoclosed #76
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate-bot
requested review from
xsxm,
ivanmkc,
balajismaniam and
donmccasland
as code owners
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
3d6e5c5
to
0521b71
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
0521b71
to
e9fcdb7
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
e9fcdb7
to
3d56dc9
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
3d56dc9
to
8432239
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
8432239
to
c0d8430
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
c0d8430
to
c6aa895
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
c6aa895
to
9a87a77
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
9a87a77
to
0620b89
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
0620b89
to
aeb7a59
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
aeb7a59
to
5b50f98
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
5b50f98
to
cc75f35
Compare
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
cc75f35
to
dfe541e
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
dfe541e
to
0cccb04
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
0cccb04
to
c84a74a
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
c84a74a
to
30e1d39
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
30e1d39
to
ffcf772
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
ffcf772
to
33b0f20
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
33b0f20
to
f538fbf
Compare
|
/gcbrun |
renovate-bot
changed the title
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
f538fbf
to
662bbfe
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
662bbfe
to
21d0209
Compare
|
/gcbrun |
renovate-bot
changed the title
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
21d0209
to
21b9d9f
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
21b9d9f
to
1414dac
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
1414dac
to
743dd16
Compare
|
/gcbrun |
renovate-bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
8.4.26->8.4.31GitHub Vulnerability Alerts
CVE-2023-44270
An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be
\rdiscrepancies, as demonstrated by@font-face{ font:(\r/*);}in a rule.This vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being originally included in a comment.
Release Notes
postcss/postcss (postcss)
v8.4.31Compare Source
\rparsing to fix CVE-2023-44270.v8.4.30Compare Source
v8.4.29Compare Source
Node#source.offset(by Ido Rosenthal).v8.4.28Compare Source
Root.source.endfor better source map (by Romain Menke).Result.roottypes whenprocess()has no parser.v8.4.27Compare Source
Containerclone methods types.Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.