Skip to content

chore(deps-dev): bump the npm-deps group across 1 directory with 7 updates - #68

Merged
shenxianpeng merged 1 commit into
mainfrom
dependabot/npm_and_yarn/themes/devops-maturity/npm-deps-48203ab1d7
Oct 15, 2026
Merged

chore(deps-dev): bump the npm-deps group across 1 directory with 7 updates#68
shenxianpeng merged 1 commit into
mainfrom
dependabot/npm_and_yarn/themes/devops-maturity/npm-deps-48203ab1d7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-deps group with 7 updates in the /themes/devops-maturity directory:

Package From To
autoprefixer 10.4.27 10.6.1
cssnano 7.1.4 9.8.0
sass 1.98.0 1.105.1
postcss 8.5.25 8.5.30
postcss-cli 11.0.1 12.0.0
webpack 5.105.4 5.111.1
webpack-cli 7.0.2 7.2.3

Updates autoprefixer from 10.4.27 to 10.6.1

Release notes

Sourced from autoprefixer's releases.

10.6.1

  • Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.5.4

10.5.3

10.5.2

  • Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Changelog

Sourced from autoprefixer's changelog.

10.6.1

  • Fixed grid gap set with the row-gap and column-gap longhands (by dualfroz).

10.6.0 “Post tenebras lux”

10.5.6

10.5.5

10.5.4

10.5.3

10.5.2

  • Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).
Commits
  • c99614d Release 10.6.1 version
  • f1d08cb Update dependencies
  • cf1ebcb Fix grid gap inheritance from row-gap and column-gap longhands (#1557)
  • e1212dc Release 10.6.0 version
  • dac3c5f Add support for prefixing initial-letter (#1556)
  • b031690 Release 10.5.6 version
  • da65c36 Add warning when Autoprefixer can cover CSS for old Safari
  • 604f8d9 Update dependencies
  • 54608ca Fix old WebKit gradients with color hints (#1554)
  • 7e81fff Release 10.5.5 version
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.


Updates cssnano from 7.1.4 to 9.8.0

Release notes

Sourced from cssnano's releases.

v9.8.0

Feature Changes

  • feat(postcss-normalize-url): stop rewriting URLs

    The plugin only changes the url() token (unquoting, whitespace, escaping) and keeps the URL byte-identical. It no longer removes dot segments or duplicate slashes, decodes percent-escapes, removes default ports or strips the trailing dot of host names, because these are not equivalent for every server or bundler. It keeps whitespace inside a quoted @namespace URL as well, because the namespace name is an identifier compared character by character rather than a URL that gets fetched.

  • feat(cssnano-preset-default): remove postcss-svgo from the preset

    The presets no longer run postcss-svgo; run it before cssnano or optimize SVG assets with the SVGO cli instead. A svgo option is now ignored. The output changes for CSS with inline SVG data URIs, and for CSS with URLs that postcss-normalize-url used to rewrite (see the postcss-normalize-url changeset).

Patch Changes

  • Always convert between cm and mm, and convert q to cm or mm, since metric units relate by exact decimal factors. q is never the output unit.

v9.7.0

What's Changed

New Features

  • feat(postcss-minify-params): drop a min-* or max-* already implied in another range in the same media query

Patch Changes

  • fix(postcss-merge-rules): merge at-rules separated by unrelated rules

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.6.0...cssnano@9.7.0

v9.6.0

What's Changed

New Features

  • feat(postcss-merge-longhand): merge row-gap/column-gap, overscroll-behavior-x/-y, flex-direction/flex-wrap, column-rule-* and equal overflow-x/-y into their shorthands when every target supports them

Bug Fixes

  • refactor: remove cssesc dependency

  • fix: improve escape handling in selectors

  • fix: update postcss-calc

  • fix: accept the optional leading rounding strategy of round(), such as round(up, 1s, 1s), when postcss-ordered-values orders animations and transitions and when postcss-merge-longhand folds shorthands. The rounding strategy must be separated by a comma, so round(up 1px, 2px) is no longer treated as valid.

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.5.0...cssnano@9.6.0

... (truncated)

Commits
  • 72a19c9 Publish cssnano 9.8.0
  • 2fdb87b chore: correct SVGO case
  • 3e3a689 docs: update normalize-url changeset
  • fbd1855 chore: add extra allocations rule to AGENTS.md
  • 9c53162 docs: rename files
  • 4a2866a feat(cssnano-preset-default): remove svgo from default preset
  • 34d8dee feat(postcss-svgo): add the configFile option to read svgo.config.js
  • 78cc61f feat(postcss-normalize-url): only make url() token syntax changes
  • 51f4bce fix(postcss-convert-values): format disabled time, angle and frequency units
  • 3d32ee0 feat(postcss-convert-values): always perform exact conversions
  • Additional commits viewable in compare view

Updates sass from 1.98.0 to 1.105.1

Release notes

Sourced from sass's releases.

Dart Sass 1.105.1

To install Sass 1.105.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Improve error messages for @extends across different media queries.

See the full changelog for changes in earlier releases.

Dart Sass 1.105.0

To install Sass 1.105.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

  • Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

  • Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

  • Add a SassModule class and a corresponding Value.assertModule() method.

See the full changelog for changes in earlier releases.

Dart Sass 1.104.1

To install Sass 1.104.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

... (truncated)

Changelog

Sourced from sass's changelog.

1.105.1

  • Improve error messages for @extends across different media queries.

1.105.0

  • Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

  • Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

  • Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

  • Add a SassModule class and a corresponding Value.assertModule() method.

1.104.1

  • Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

  • Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

  • Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

  • Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

1.104.0

  • Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

  • The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

... (truncated)

Commits
  • db3c666 Merge pull request #2869 from sass/extend-media-errors
  • 2ac4515 Improve span boundaries for media queries and selectors
  • 706cfbf Fix InterpolationMap._expandInterpolationSpanRight()
  • 792a948 Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (#2870)
  • 61ab702 Improve errors for @extend across media queries
  • 288d4e2 Auto-merge dependabot PRs as the Sass bot account (#2866)
  • 4bf2b92 Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#2865)
  • 850d57e [meta.load] Add support for meta.load() and related features (#2861)
  • 6180be0 Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (#2863)
  • da84fb5 Fix --watch not recompiling sources modified during a compilation (#2850)
  • Additional commits viewable in compare view

Updates postcss from 8.5.25 to 8.5.30

Release notes

Sourced from postcss's releases.

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).

8.5.29

8.5.28

  • Fixes types regression.

8.5.27

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).
Changelog

Sourced from postcss's changelog.

8.5.30

  • Fix broken map on </style> escaping (by @​Rufflet).

8.5.29

8.5.28

  • Fixes types regression.

8.5.27

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).
Commits
  • f1aca7e Release 8.5.30 version
  • 9d83445 Update dependencies
  • 6c9bc73 Fix invalid source map mapping on escaping before new line (#2169)
  • 1fd8f88 Add missed changes in changelog
  • a7a1f34 Release 8.5.29 version
  • b55a36d Update dependencies
  • 7647a81 Escape </style> in output of non-Root nodes (#2163)
  • 7ac9026 Do not split list.comma() and list.space() on separators inside comments (#2162)
  • ebffa97 Add postcss-smooth-corners plugin
  • 57d6401 Speed up source map cleaning
  • Additional commits viewable in compare view

Updates postcss-cli from 11.0.1 to 12.0.0

Changelog

Sourced from postcss-cli's changelog.

12.0.0 / 2026-09-04

  • If using a YAML config, the yaml package must be installed separately (#478)
  • Requires Node.js v22+ (#525)
  • Errors if --config is passed, but no config is found (#467, #522)
  • Now properly exits with an error if invalid options/configuration are passed in watch mode (#527)
  • Upgrade to chokidar v5; which results in slightly different handling of dir-dependency messages in watch mode (#501)
  • Properly watchs all config files if there are multiple config files (#536)
  • Minimized dependencies by removing fs-extra (#510)
  • Internal refactoring
Commits

Updates webpack from 5.105.4 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

... (truncated)

Commits
  • 5a10675 chore(release): new release (#22105)
  • 9c448c4 test: consolidate loose harness files under test/harness (#22163)
  • a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
  • db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
  • d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
  • 39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
  • 0835411 test: move suite drivers into test/templates (#22159)
  • b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
  • a774f10 test: define the webpack major instead of bundling package.json (#22160)
  • 4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
  • Additional commits viewable in compare view

Updates webpack-cli from 7.0.2 to 7.2.3

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.3

Patch Changes

  • fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

  • feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

webpack-cli@7.2.2

Patch Changes

  • perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

  • feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

  • Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

webpack-cli@7.1.0

Minor Changes

  • feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

  • feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

webpack-cli@7.0.3

Patch Changes

  • Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

  • Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

  • Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

Changelog

Sourced from webpack-cli's changelog.

7.2.3

Patch Changes

  • fix: resolve the webpack-dev-server type from its default export, so the types work with both v5 and v6 (by @​bjohansebas in #4834)

  • feat: allow toml@5 as a peer dependency for TOML configuration files (by @​alexander-akait in #4837)

7.2.2

Patch Changes

  • perf: enable the Node.js compile cache (module.enableCompileCache, available on Node.js >= 22.8.0) to speed up CLI startup (by @​bjohansebas in #4818)

7.2.1

Patch Changes

7.2.0

Minor Changes

  • feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @​bjohansebas in #4793)

  • Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @​alexander-akait in #4796)

7.1.0

Minor Changes

  • feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @​alexander-akait in #4779)

  • feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @​alexander-akait in #4777)

7.0.3

Patch Changes

  • Improved CLI startup performance and reduced memory usage. (by @​alexander-akait in #4765)

  • Reduced CLI startup CPU and memory usage by caching schema-derived argument metadata, registering only the options present in the arguments, and reading config directories once during default-config discovery. (by @​alexander-akait in #4760)

  • Replace the fastest-levenshtein dependency with a small in-tree implementation used for command/option "did you mean" suggestions. (by @​alexander-akait in #4762)

Commits
  • 7d40e4e chore(release): new release (#4839)
  • 1f6593a ci: use the input names changesets/action v2 expects (#4838)
  • 99cfc4f build(deps): update dependencies (#4837)
  • 11be634 feat(create-webpack-app): stop asking about HTML and CSS (#4836)
  • a2418aa feat(create-webpack-app): use webpack's native CSS and HTML support in init t...
  • 3664b9d chore: update webpack-dev-server to v6 and test against v5 and v6 (#4834)
  • ce1a219 ci: node 26 (#4763)
  • 0cfc077 chore(deps): bump changesets/action in the dependencies group (#4831)
  • ef262eb chore(deps): bump changesets/action in the dependencies group (#4830)
  • d90f5ab chore: add gitignore to ignore autogenerated build & fix codecov option (#4828)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 03:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026
@netlify

netlify Bot commented Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for devops-maturity-spec ready!

Name Link
🔨 Latest commit 85dc5ef
🔍 Latest deploy log https://app.netlify.com/projects/devops-maturity-spec/deploys/6ad1412997414beac5ffa28f
😎 Deploy Preview https://deploy-preview-68--devops-maturity-spec.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@coderabbitai

coderabbitai Bot commented Oct 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b1ee14f4-a5e9-4961-9411-a794acdeea0a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@shenxianpeng shenxianpeng mentioned this pull request Oct 15, 2026
Merged
@shenxianpeng

shenxianpeng commented Oct 15, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
chore(deps-dev): bump the npm-deps group across 1 directory with 7 up…
85dc5ef 
…dates

Bumps the npm-deps group with 7 updates in the /themes/devops-maturity directory:

| Package | From | To |
| --- | --- | --- |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.4.27` | `10.6.1` |
| [cssnano](https://github.com/cssnano/cssnano) | `7.1.4` | `9.8.0` |
| [sass](https://github.com/sass/dart-sass) | `1.98.0` | `1.105.1` |
| [postcss](https://github.com/postcss/postcss) | `8.5.25` | `8.5.30` |
| [postcss-cli](https://github.com/postcss/postcss-cli) | `11.0.1` | `12.0.0` |
| [webpack](https://github.com/webpack/webpack) | `5.105.4` | `5.111.1` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.0.2` | `7.2.3` |



Updates `autoprefixer` from 10.4.27 to 10.6.1
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.27...10.6.1)

Updates `cssnano` from 7.1.4 to 9.8.0
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@7.1.4...cssnano@9.8.0)

Updates `sass` from 1.98.0 to 1.105.1
- [Release notes](https://github.com/sass/dart-sass/releases)
- [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md)
- [Commits](sass/dart-sass@1.98.0...1.105.1)

Updates `postcss` from 8.5.25 to 8.5.30
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.25...8.5.30)

Updates `postcss-cli` from 11.0.1 to 12.0.0
- [Release notes](https://github.com/postcss/postcss-cli/releases)
- [Changelog](https://github.com/postcss/postcss-cli/blob/master/CHANGELOG.md)
- [Commits](postcss/postcss-cli@11.0.1...12.0.0)

Updates `webpack` from 5.105.4 to 5.111.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.105.4...v5.111.1)

Updates `webpack-cli` from 7.0.2 to 7.2.3
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.0.2...webpack-cli@7.2.3)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-version: 10.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: cssnano
  dependency-version: 9.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: postcss
  dependency-version: 8.5.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
- dependency-name: postcss-cli
  dependency-version: 12.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-deps
- dependency-name: sass
  dependency-version: 1.105.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: webpack
  dependency-version: 5.111.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
- dependency-name: webpack-cli
  dependency-version: 7.2.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the npm-deps group in /themes/devops-maturity with 7 updates chore(deps-dev): bump the npm-deps group across 1 directory with 7 updates Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/themes/devops-maturity/npm-deps-48203ab1d7 branch from 44640e8 to 85dc5ef Compare October 15, 2026 21:09
@shenxianpeng
shenxianpeng merged commit d20d6c1 into main Oct 15, 2026
7 checks passed
@shenxianpeng
shenxianpeng deleted the dependabot/npm_and_yarn/themes/devops-maturity/npm-deps-48203ab1d7 branch October 15, 2026 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@shenxianpeng