Skip to content
This repository was archived by the owner on Oct 13, 2026. It is now read-only.

fix(deps): update postcss ecosystem (spectrum-two) (major) - #4503

Open
renovate[bot] wants to merge 1 commit into
spectrum-twofrom
renovate/spectrum-two-major-postcss-ecosystem
Open

fix(deps): update postcss ecosystem (spectrum-two) (major)#4503
renovate[bot] wants to merge 1 commit into
spectrum-twofrom
renovate/spectrum-two-major-postcss-ecosystem

Conversation

@renovate

@renovate renovate Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
postcss-import 16.1.1 → 17.0.0 age confidence
postcss-licensing 3.0.0 → 5.0.0 age confidence
postcss-modules 6.0.1 → 9.0.1 age confidence
postcss-preset-env (source) 10.6.1 → 11.5.3 age confidence
postcss-sorting 9.1.0 → 10.0.0 age confidence
postcss-values-parser 6.0.2 → 8.0.0 age confidence

Release Notes

postcss/postcss-import (postcss-import)

v17.0.0

Compare Source

  • BREAKING: Now requires Node v22+ (#​609)
  • BREAKING: Files with the same content, but different paths, will no longer be skipped as duplicates. This should not affect the vast majority of users. (#​601, #​602)

v16.2.0

Compare Source

  • Better whitespace formatting on modern postcss versions (#​605)
  • Better error message when @imports are interleaved with @layers (#​566, #​606)
  • Docs clarification (#​598)
castastrophe/postcss-licensing (postcss-licensing)

v5.0.0

Compare Source

BREAKING CHANGES
  • Upgraded node support from v22 to v24.

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

v4.0.0

Compare Source

BREAKING CHANGES
  • Upgraded node support from v22 to v24.

Co-authored-by: renovate[bot] <29139614+renovate[bot]@​users.noreply.github.com>

css-modules/postcss-modules (postcss-modules)

v9.0.1

Compare Source

Fixed
  • Added a type declaration for postcss-modules/loader so TypeScript users can extend it with declare module without hitting a type error. #​172 by @​sapphi-red

v9.0.0

Compare Source

Breaking
  • Minimum Node.js bumped from 20 to 20.6, the release that stabilized module.register.
Added
  • New postcss-modules/loader subpath — an opt-in Node module-customization hook. Run with node --import postcss-modules/loader app.mjs and JavaScript files can do import styles from "./button.css" to receive the class-name token map as the default export, mirroring css-loader's modules workflow. Options live in postcss-modules.config.{js,cjs,mjs} in cwd, the POSTCSS_MODULES_CONFIG env var, or a "postcss-modules" key in package.json, and accept the same shape as the PostCSS plugin. Aimed at non-bundler use cases (SSR, Node scripts, Jest/Vitest in node mode); bundler users keep using their existing integrations. #​80

v8.3.1

Compare Source

Fixed
  • hashPrefix is now applied when no custom generateScopedName is set. Previously the option was only honoured by generic-names, so the built-in default generator silently ignored it. #​160
  • Empty rules left behind after :global { ... } unwrapping (e.g. a Sass block containing only a multi-line comment) are now removed instead of emitted as orphaned { ... } blocks. #​136

v8.3.0

Compare Source

Added
  • New localsConvention value 'all' — emit the original class name plus the camelCase and dashes-camelCase variants in one pass.
  • New localsConvention value 'none' — emit only the original class name, with no additional aliases.
  • The function form of localsConvention may now return an array of strings. Every entry in the array is added to the locals map and resolves to the same value, which makes it easy to expose a single CSS class under multiple JS-friendly aliases.

Adapted from the unmerged work in #​154 by @​CarbonORM.

v8.1.0

Compare Source

Internal
  • Replaced Babel with swc across the entire toolchain: @swc/cli compiles src/ to build/, @swc/jest transforms test files, and ESLint now uses its default espree parser. Removed five @babel/* devDependencies and the unused @babel/register runtime hook. The published build/*.js keeps the same module.exports = (opts) => ...; module.exports.postcss = true shape, so existing CommonJS consumers are unaffected.
  • Pinned transitive file-type to v22 via overrides to silence @swc/cli's vulnerable dependency chain.

v7.0.0

Compare Source

Breaking
  • Dropped support for Node.js 10, 12, 14, and 15. The minimum supported Node.js version is now 18.
Security
  • Patched 14 Dependabot security alerts in transitive dependencies (form-data, lodash, @babel/core, @babel/plugin-transform-modules-systemjs, uuid, picomatch, flatted, minimatch, qs, js-yaml, nanoid)
  • Bumped jest from 26 to 30 to drop vulnerable node-notifier, sane, and jsdom chains
Internal
  • Regenerated Jest snapshots for the new pretty-format serializer (cosmetic only; emitted CSS and JSON are unchanged)
csstools/postcss-plugins (postcss-preset-env)

v11.5.3

Compare Source

September 13, 2026

v11.5.2

Compare Source

September 6, 2026

v11.5.1

Compare Source

August 31, 2026

v11.5.0

Compare Source

August 25, 2026

v11.4.0

Compare Source

August 15, 2026

v11.3.2

Compare Source

June 28, 2026

v11.3.1

Compare Source

June 14, 2026

v11.3.0

Compare Source

May 13, 2026

v11.2.1

Compare Source

April 12, 2026

v11.2.0

Compare Source

February 21, 2026

v11.1.3

Compare Source

February 6, 2026

v11.1.2

Compare Source

January 25, 2026

v11.1.1

Compare Source

January 15, 2026

v11.1.0

Compare Source

January 14, 2026

v11.0.1

Compare Source

January 14, 2026

v11.0.0

Compare Source

January 14, 2026

  • Updated: Support for Node 20.19.0 or later (major).
  • Removed: commonjs API. In supported Node versions require(esm) will work without needing to make code changes.
hudochenkov/postcss-sorting (postcss-sorting)

v10.0.0

Compare Source

  • Added limited sorting for properties in CSS-in-JS rules containing interpolation. Previosly such rules were ignored, now groups of properties are sorted. See example in the readme.
  • Removed code needed for @stylelint/postcss-css-in-js syntax
shellscape/postcss-values-parser (postcss-values-parser)

v8.0.0

Compare Source

v7.0.1

Compare Source

v7.0.0

Compare Source

7.0.0
Highlights
  • Major rewrite: parser now builds on css-tree for correctness and performance.
  • Package is pure ESM and uses exports; no CommonJS output.
  • Walker helpers are exposed via registerWalkers() and can enable walk* methods like walkWords.
Breaking changes
  • ESM‑only: require('postcss-values-parser') is no longer supported. Use import.
  • Node.js 20.19+ required (per engines).
  • Walker helpers aren’t attached by default. If you relied on root.walkWords(...) in v6, call registerWalkers(Container) once to add the walk* methods.
  • Internal AST is compatible but not identical (migrated to css-tree under the hood). Class names like Word, Numeric, Func, etc., remain.
Migration

  • Replace CommonJS with ESM imports.

  • Register walker helpers before using any walk* APIs:

    import { parse, Container, registerWalkers } from 'postcss-values-parser';
    registerWalkers(Container);

    const root = parse('var(--foo)');
    root.walkWords((word) => {
    if (word.isVariable) console.log(word.value);
    });

  • Review docs for updated node shapes and stringifier behavior.

Commits since v6.0.2
  • 58c3ac0 feat!: use css-tree, rewrite package for ESM (#​149) — Andrew Powell
  • 1d367aa docs: update docs for v7 — shellscape
  • c8b1647 chore: add github workflows — shellscape
  • b19c7eb chore: use nvmrc — shellscape
Merged pull requests
  • #​149 use css-tree, rewrite package for ESM — Andrew Powell

Full Changelog: shellscape/postcss-values-parser@v6.0.2...v7.0.0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file ready-for-review skip_vrt Add to a PR to skip running VRT (but still pass the action) labels Oct 8, 2026
@renovate
renovate Bot requested a review from a team October 8, 2026 03:27
@changeset-bot

changeset-bot Bot commented Oct 8, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 08e2de5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@renovate
renovate Bot force-pushed the renovate/spectrum-two-major-postcss-ecosystem branch from 7bf5459 to 3a82e26 Compare October 12, 2026 07:14
@renovate
renovate Bot force-pushed the renovate/spectrum-two-major-postcss-ecosystem branch from 3a82e26 to 08e2de5 Compare October 13, 2026 14:39

This branch has not been deployed

No deployments
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ready-for-review skip_vrt Add to a PR to skip running VRT (but still pass the action)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants