Bump the npm_and_yarn group across 1 directory with 3 updates #1

dependabot · 2025-01-21T20:54:40Z

Bumps the npm_and_yarn group with 3 updates in the / directory: postcss, vite and vitest.

Updates postcss from 8.4.24 to 8.5.1

Release notes

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

... (truncated)

Commits

7b02c75 Release 8.5.1 version
4c15339 Update dependencies
7efe91e Improve backwards compat for Input#document (#2000)
6873270 Release 8.5 version
4223bb9 Fix 80 columns limit
80e2401 Add Input#document (#1996)
6f86879 Update dependencies
85cbbec Fix pnpm version on CI
76caa57 Update dependencies
46ff246 Move to pnpm 10
Additional commits viewable in compare view

Updates vite from 2.9.16 to 6.0.11

Release notes

Sourced from vite's releases.

v6.0.11

Please refer to CHANGELOG.md for details.

v6.0.10

Please refer to CHANGELOG.md for details.

v6.0.9

This version contains a breaking change due to security fixes. See GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v6.0.8

Please refer to CHANGELOG.md for details.

v6.0.7

Please refer to CHANGELOG.md for details.

v6.0.6

Please refer to CHANGELOG.md for details.

v6.0.5

Please refer to CHANGELOG.md for details.

v6.0.4

Please refer to CHANGELOG.md for details.

v6.0.3

Please refer to CHANGELOG.md for details.

v6.0.2

Please refer to CHANGELOG.md for details.

create-vite@6.0.1

Please refer to CHANGELOG.md for details.

v6.0.1

Please refer to CHANGELOG.md for details.

create-vite@6.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@6.0.0

Please refer to CHANGELOG.md for details.

v6.0.0

Please refer to CHANGELOG.md for details.

v6.0.0-beta.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

6.0.11 (2025-01-21)

fix: preview.allowedHosts with specific values was not respected (#19246) (aeb3ec8), closes #19246

fix: allow CORS from loopback addresses by default (#19249) (3d03899), closes #19249

6.0.10 (2025-01-20)

fix: try parse server.origin URL (#19241) (2495022), closes #19241

6.0.9 (2025-01-20)

fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (bd896fb)

fix!: default server.cors: false to disallow fetching from untrusted origins (b09572a)

fix: verify token for HMR WebSocket connection (029dcd6)

6.0.8 (2025-01-20)

fix: avoid SSR HMR for HTML files (#19193) (3bd55bc), closes #19193

fix: build time display 7m 60s (#19108) (cf0d2c8), closes #19108

fix: don't resolve URL starting with double slash (#19059) (35942cd), closes #19059

fix: ensure server.close() only called once (#19204) (db81c2d), closes #19204

fix: resolve.conditions in ResolvedConfig was defaultServerConditions (#19174) (ad75c56), closes #19174

fix: tree shake stringified JSON imports (#19189) (f2aed62), closes #19189

fix: use shared sigterm callback (#19203) (47039f4), closes #19203

fix(deps): update all non-major dependencies (#19098) (8639538), closes #19098

fix(optimizer): use correct default install state path for yarn PnP (#19119) (e690d8b), closes #19119

fix(types): improve ESBuildOptions.include / exclude type to allow readonly (string | RegExp)[] (ea53e70), closes #19146

chore(deps): update dependency pathe to v2 (#19139) (71506f0), closes #19139

6.0.7 (2025-01-02)

fix: fix minify when builder.sharedPlugins: true (#19025) (f7b1964), closes #19025

fix: skip the plugin if it has been called before with the same id and importer (#19016) (b178c90), closes #19016

fix(html): error while removing vite-ignore attribute for inline script (#19062) (a492253), closes #19062

fix(ssr): fix semicolon injection by ssr transform (#19097) (1c102d5), closes #19097

perf: skip globbing for static path in warmup (#19107) (677508b), closes #19107

feat(css): show lightningcss warnings (#19076) (b07c036), closes #19076

6.0.6 (2024-12-26)

... (truncated)

Commits

a0ed405 release: v6.0.11
3d03899 fix: allow CORS from loopback addresses by default (#19249)
aeb3ec8 fix: preview.allowedHosts with specific values was not respected (#19246)
9654348 release: v6.0.10
2495022 fix: try parse server.origin URL (#19241)
a55f8ba release: v6.0.9
bd896fb fix!: check host header to prevent DNS rebinding attacks and introduce `serve...
029dcd6 fix: verify token for HMR WebSocket connection
b09572a fix!: default server.cors: false to disallow fetching from untrusted origins
c0f72a6 release: v6.0.8
Additional commits viewable in compare view

Updates vitest from 0.16.0 to 3.0.3

Release notes

Sourced from vitest's releases.

v3.0.3

   🐞 Bug Fixes

browser:

Don't throw a validation error if v8 coverage is used with filtered instances - by @sheremet-va in vitest-dev/vitest#7306 (fa463)

Don't fail when running --browser.headless if the browser projest is part of the workspace - by @sheremet-va in vitest-dev/vitest#7311 (e43a8)

   🏎 Performance

reporters: Update summary only when needed - by @AriPerkkio in vitest-dev/vitest#7291 (7f36b)

    View changes on GitHub

v3.0.2

   🐞 Bug Fixes

Don't await an empty timeout after every test - by @sheremet-va in vitest-dev/vitest#7281 (ef1aa)

expect: Fix expect().resolves/rejects chain typings - by @hi-ogawa in vitest-dev/vitest#7273 (fa415)

    View changes on GitHub

v3.0.1

   🐞 Bug Fixes

Revert "fix: re-apply default conditions if using vite 6 or later (vitest-dev/vitest#7071)" - by @sheremet-va in vitest-dev/vitest#7071 and vitest-dev/vitest#7271 (755ec)

deps: Update all non-major dependencies - by @sheremet-va in vitest-dev/vitest#7147 (537fa)

    View changes on GitHub

v3.0.0

Vitest 3 is here! There are a few breaking changes, but we expect the migration to be smooth. This release page lists all changes made to the project during the beta. For the migration guide, please refer to the documentation.

   🚨 Breaking Changes

spy.mockReset changes - by @Lordfirespeed in vitest-dev/vitest#6426 (db7a8)

Pass down context to test hooks - by @sheremet-va in vitest-dev/vitest#7034 (82c2e)

Support Vite 6 - by @sheremet-va in vitest-dev/vitest#7026 (7abe8)

coverage: Always exclude test files - by @AriPerkkio in vitest-dev/vitest#7254 (b5268)

deps: Update fake-timers to v14.0.0 - by @xxzefgh and @hi-ogawa in vitest-dev/vitest#7097 (c98b4)

expect: Check more properties for error equality - by @hi-ogawa and @sheremet-va in vitest-dev/vitest#5876 (10023)

runner: Support describe(..., { shuffle: boolean }) and inherit from parent suite - by @hi-ogawa in vitest-dev/vitest#6670 (aa1da)

snapshot: Reset snapshot state for retry and repeats - by @hi-ogawa in vitest-dev/vitest#6817 (e8ce9)

spy: SpyOn reuses mock if method is already spyed on - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#6464 (b3e43)

vitest: Don't expose default toFake config - by @sheremet-va in vitest-dev/vitest#6288 (e3144)

   🚀 Features

Support inline diff options and support printBasicPrototype - by @hi-ogawa, @sheremet-va and Michał Grzegorzewski in vitest-dev/vitest#6740 (39186)

Allow a custom note when calling ctx.skip() dynamically - by @sheremet-va in vitest-dev/vitest#6805 (697c3)

Allow inline workspace configuration - by @sheremet-va in vitest-dev/vitest#6923 (562e1)

... (truncated)

Commits

33ab8a2 chore: release v3.0.3
e43a8f5 fix(browser): don't fail when running --browser.headless if the browser proje...
fa4634b fix(browser): don't throw a validation error if v8 coverage is used with filt...
7f36b6f perf(reporters): update summary only when needed (#7291)
f17918a chore: release v3.0.2
56c5018 chore: release v3.0.1
755ecdf Revert "fix: re-apply default conditions if using vite 6 or later (#7071)" (#...
537fa5e fix(deps): update all non-major dependencies (#7147)
01600e0 chore: release v3.0.0
84287fc fix: re-apply default conditions if using vite 6 or later (#7071)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by vitestbot, a new releaser for vitest since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 3 updates in the / directory: [postcss](https://github.com/postcss/postcss), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest). Updates `postcss` from 8.4.24 to 8.5.1 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.4.24...8.5.1) Updates `vite` from 2.9.16 to 6.0.11 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.0.11/packages/vite) Updates `vitest` from 0.16.0 to 3.0.3 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v3.0.3/packages/vitest) --- updated-dependencies: - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vitest dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 21, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 3 updates #1

Bump the npm_and_yarn group across 1 directory with 3 updates #1

Uh oh!

dependabot bot commented on behalf of github Jan 21, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the npm_and_yarn group across 1 directory with 3 updates #1

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 3 updates #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 21, 2025

8.5.1

8.5 “Duke Alloces”

Thanks to Sponsors

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.5.1

8.5 “Duke Alloces”

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

v6.0.11

v6.0.10

v6.0.9

v6.0.8

v6.0.7

v6.0.6

v6.0.5

v6.0.4

v6.0.3

v6.0.2

create-vite@6.0.1

v6.0.1

create-vite@6.0.0

plugin-legacy@6.0.0

v6.0.0

v6.0.0-beta.10

6.0.11 (2025-01-21)

6.0.10 (2025-01-20)

6.0.9 (2025-01-20)

6.0.8 (2025-01-20)

6.0.7 (2025-01-02)

6.0.6 (2024-12-26)

v3.0.3

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v3.0.2

🐞 Bug Fixes

View changes on GitHub

v3.0.1

🐞 Bug Fixes

View changes on GitHub

v3.0.0

🚨 Breaking Changes

🚀 Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant