Bump the all-dependencies group across 2 directories with 4 updates by dependabot[bot] · Pull Request #1959 · csstools/postcss-plugins

dependabot · 2026-11-02T00:05:42Z

Bumps the all-dependencies group with 2 updates in the /e2e directory: postcss and webpack.
Bumps the all-dependencies group with 2 updates in the /sites directory: @babel/core and @babel/preset-env.

Updates postcss from 8.5.29 to 8.5.31

Release notes

Sourced from postcss's releases.

8.5.31

Fix better source map on </style> escaping (by @firefoxic).

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

Changelog

Sourced from postcss's changelog.

8.5.31

Fix better source map on </style> escaping (by @firefoxic).

8.5.30

Fix broken map on </style> escaping (by @Rufflet).

Commits

d190857 Release 8.5.31 version
4ef6d8c Update dependencies
6abd674 Call the builder with every node when the output is escaped (#2175)
f1aca7e Release 8.5.30 version
9d83445 Update dependencies
6c9bc73 Fix invalid source map mapping on escaping before new line (#2169)
1fd8f88 Add missed changes in changelog
See full diff in compare view

Updates webpack from 5.111.1 to 5.112.2

Release notes

Sourced from webpack's releases.

v5.112.2

Patch Changes

Reduce repeated scans when concatenating imported modules. (by @xiaoxiaojx in #22865)

Avoid allocating CSS module sets for single-group chunks. (by @xiaoxiaojx in #22866)

Return the value of every module type loaded with importModule(). (by @alexander-akait in #22869)

v5.112.1

Patch Changes

Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @aryanraj45 in #22699)

Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @aryanraj45 in #22749)

Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @alexander-akait in #22791)

Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @lazerg in #22833)

Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @codeXsidd in #22846)

Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @alexander-akait in #22794)

Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @alexander-akait in #22804)

Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @dependabot in #22811)

Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @alexander-akait in #22733)

Await asynchronous modules that ProvidePlugin injects into ES modules. (by @alexander-akait in #22728)

Keep a resolve that ends after the compiler closed from throwing. (by @alexander-akait in #22795)

Preserve string names passed to SharedWorker constructors. (by @bjohansebas in #22770)

Preserve string contents when extracting source map comments. (by @bjohansebas in #22768)

Scope strict-mode, async and generator block function declarations to their block. (by @alexander-akait in #22800)

Preserve raw dotenv values when reusing cached environment files. (by @Eshiv-Pandey in #22787)

Preserve assigned or patched built-ins, conversions and pattern targets. (by @aryanraj45 in #22761)

Keep globals a globalThis write replaces, and slice on a patched array. (by @alexander-akait in #22862)

Skip HTML script tags for shared chunks that emit no JavaScript. (by @bjohansebas in #22779)

Keep the digits Firefox lays out a minified CSS percentage with. (by @alexander-akait in #22718)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.2

Patch Changes

Reduce repeated scans when concatenating imported modules. (by @xiaoxiaojx in #22865)

Avoid allocating CSS module sets for single-group chunks. (by @xiaoxiaojx in #22866)

Return the value of every module type loaded with importModule(). (by @alexander-akait in #22869)

5.112.1

Patch Changes

Rebuild a lazy barrel in watch when what it defers changes, and keep the imports and re-exports it still runs. (by @aryanraj45 in #22699)

Rebuild under cacheUnaffected a module whose re-export target goes or returns. (by @aryanraj45 in #22749)

Fix "Self-reference dependency has unused export name" for CommonJS namespace re-exports. (by @alexander-akait in #22791)

Fix exportType: "style" CSS modules throwing outside the runtime chunk. (by @lazerg in #22833)

Fix crash when a CSS module with exportType: "style" imports an ignored stylesheet. (by @codeXsidd in #22846)

Keep empty process environment variables that .env files don't define in DotenvPlugin. (by @alexander-akait in #22794)

Rehash an ESM entry chunk when a chunk it imports by file name changes. (by @alexander-akait in #22804)

Handle a NUL inside an HTML CDATA section the way the parsing spec does. (by @dependabot in #22811)

Keep module exports live across chunks, runtimes, HMR and eval, sparing globals. (by @alexander-akait in #22733)

Await asynchronous modules that ProvidePlugin injects into ES modules. (by @alexander-akait in #22728)

Keep a resolve that ends after the compiler closed from throwing. (by @alexander-akait in #22795)

Preserve string names passed to SharedWorker constructors. (by @bjohansebas in #22770)

Preserve string contents when extracting source map comments. (by @bjohansebas in #22768)

Scope strict-mode, async and generator block function declarations to their block. (by @alexander-akait in #22800)

Preserve raw dotenv values when reusing cached environment files. (by @Eshiv-Pandey in #22787)

Preserve assigned or patched built-ins, conversions and pattern targets. (by @aryanraj45 in #22761)

Keep globals a globalThis write replaces, and slice on a patched array. (by @alexander-akait in #22862)

Skip HTML script tags for shared chunks that emit no JavaScript. (by @bjohansebas in #22779)

... (truncated)

Commits

e95a7f2 chore(release): new release (#22867)
6e43fc2 fix: return the value of every module type from importModule() (#22869)
4ffac8d ci: rename the parser job to spec and run CSS, HTML and XML in one leg (#22870)
0c02242 test: split the syntax unit tests into tokenizer, parser and printer (#22825)
660608c perf(css): cut CPU and allocation in the CSS minifier (#22868)
8c3cbd3 perf: avoid allocating unused CSS module sets (#22866)
a1e5f6a perf: avoid duplicate scans in module concatenation (#22865)
759b539 chore(release): new release (#22720)
539f8de fix(minify): keep globals a globalThis write replaces, and slice on a pat...
9668155 ci: run the deep-imports check in the lint job (#22859)
Additional commits viewable in compare view

Updates @babel/core from 7.29.7 to 8.0.9

Release notes

Sourced from @babel/core's releases.

v8.0.9 (2026-10-23)

This release contains no changes. It is needed only to update the repo (which is based on @babel/core's last release) in Node.js's CITGM.

v8.0.8 (2026-10-23)

Thanks @bhushan4work and @webdevelopersrinu for your first PRs!

👓 Spec Compliance

babel-parser

#18366 fix(parser): disallow named specifiers after * as ns (@JLHwung)

#18336 fix(parser): disallow const x followed by linebreak and of (@JLHwung)

#18343 fix(parser): reject delete (x) when createParenthesizedExpressions: true (@JLHwung)

#18276 fix: report expression errors in object literals used as member base (@JLHwung)

#18286 Disallow arrow functions as new callee and await operand (@JLHwung)

#18309 Disallow call expressions as arrow function parameters in sloppy mode (@JLHwung)

#18315 Disallow eval and arguments as class names (@JLHwung)

🐛 Bug Fix

babel-parser

#18392 fix(parser): set phase: null for non-deferred imports with deferredImportEvaluation (#18313) (@bhushan4work)

#18344 fix(parser): ASI between arrow body and /= regex (@JLHwung)

#18342 fix(parser): allow arguments as a label in class (@JLHwung)

#18365 fix(parser): allow ASI between property init and escaped in (@JLHwung)

#18327 fix(parser): register function id in labeled function declaration (@JLHwung)

#18323 Skip HTML-like comments in the parser's character lookahead (@JLHwung)

#18322 Allow ASI after export default from without exportDefaultFrom (@JLHwung)

babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3, babel-runtime

#18186 Fix _arrayWithHoles bypassing custom Symbol.iterator on array-backed Proxies (@webdevelopersrinu)

babel-plugin-transform-typescript, babel-types

#18380 fix(types): visit decorators of TSParameterProperty (@JLHwung)

babel-plugin-transform-block-scoping

#18331 fix: wrap enclosing loop when a nested for head closure captures its bindings (@joellemd)

🏠 Internal

babel-plugin-transform-classes

#18383 Remove internal usage of loose in class transform (@nicolo-ribaudo)

🔬 Output optimization

babel-plugin-transform-spread

#18318 Avoid arrayLikeToArray for spreading literals (@nicolo-ribaudo)

Committers: 7

Babel Bot (@babel-bot)

Bhushan Agrawal (@bhushan4work)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joellemd)

Nicolò Ribaudo (@nicolo-ribaudo)

Srinu desetti (@webdevelopersrinu)

@liuxingbaoyu

... (truncated)

Changelog

Sourced from @babel/core's changelog.

Changelog

Tags:

💥 [Breaking Change]

👓 [Spec Compliance]

🚀 [New Feature]

🐛 [Bug Fix]

📝 [Documentation]

🏠 [Internal]

💅 [Polish]

Note: Gaps between patch versions are faulty, broken or test releases.

This file contains the changelog starting from v8.0.0-alpha.0.

See CHANGELOG - v7.15.0 to v7.28.5 for v7.15.0 to v7.28.5 changes (the last common release between the v8 and v7 release lines was v7.28.5).

See CHANGELOG - v7.0.0 to v7.14.9 for v7.0.0 to v7.14.9 changes.

See CHANGELOG - v7 prereleases for v7.0.0-alpha.1 to v7.0.0-rc.4 changes.

See CHANGELOG - v4, CHANGELOG - v5, and CHANGELOG - v6 for v4.x-v6.x changes.

See CHANGELOG - 6to5 for the pre-4.0.0 version changelog.

See Babylon's CHANGELOG for the Babylon pre-7.0.0-beta.29 version changelog.

See babel-eslint's releases for the changelog before @babel/eslint-parser 7.8.0.

See eslint-plugin-babel's releases for the changelog before @babel/eslint-plugin 7.8.0.

v8.0.10 (2026-10-29)

🐛 Bug Fix

babel-parser

#18420 fix(parser): improve radix literal rounding (@JLHwung)

#18372 fix(parser): allow parenthesized assignment target in arrow initializer (@JLHwung)

#18410 fix(parser): do not record strict mode errors during lookahead (@JLHwung)

#18433 fix(parser): invalid expectOnePlugin usage (@JLHwung)

#18409 fix(parser): handle ASI after let followed by a reserved word on the next line (@JLHwung)

#18406 fix(parser): parser should not crash for import defer {} (@JLHwung)

#18407 fix(parser): record start location in startNodeAt (@JLHwung)

babel-plugin-transform-block-scoping

#18371 fix: closures in for-loop test and update capture wrong binding (@joellemd)

babel-generator

#18418 fix(generator): keep aliases of string-literal module specifiers (@JLHwung)

#18427 Fix missing parentheses around TypeScript assertion targets (@dagemawinegash)

#18324 fix: invalid minified: true output for new expression (@JLHwung)

#18437 fix(generator): preserve type modifier in TSImportEqualsDeclaration (@saiyam-jain-dev)

#18424 Keep parentheses around TSInstantiationExpression operand (@yulman2207)

#18417 fix(generator): do not disallow line break after import source (@JLHwung)

babel-plugin-transform-optional-chaining, babel-traverse

#18422 fix: Scope#push should not push iife param after rest element (@JLHwung)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

... (truncated)

Commits

f9c9445 v8.0.9
1fc0073 v8.0.7
d23b2fd fix(core): createConfigItem allows cb as 2nd arg (#18254)
fd66590 chore: upgrade verkit to v0.5.0 and obug to v3.0.0 (#18248)
9e408d6 v8.0.6
753bedf Remove unused internal exports (#18235)
e80c9ac build: do not emit sourcemap in production build (#18231)
8b01fec Enforce usage of Yarn catalog for reused dependencies (#18236)
0d8ed70 v8.0.5
4cea20d Use built-in glob in Node.js (#18097)
Additional commits viewable in compare view

Updates @babel/preset-env from 7.29.7 to 8.0.7

Release notes

Sourced from @babel/preset-env's releases.

v8.0.7 (2026-10-07)

Thanks @brunoborta, @CINC0S, @hoobnn, and @jpradelle for your first PRs!

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

Committers: 11

Babel Bot (@babel-bot)

Bruno "Borta" Bortagaray (@brunoborta)

CINC05 (@CINC0S)

Huáng Jùnliàng (@JLHwung)

Joelle Mahfoud (@joelle-a-dev)

Julien Pradelle (@jpradelle)

Kevin Deng (@sxzz)

Nicolò Ribaudo (@nicolo-ribaudo)

Samual Norman (@samualtnorman)

@wulu007

hoobnn (@hoobnn)

v8.0.6 (2026-09-18)

Thanks @robhogan for your first PR!

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

... (truncated)

Changelog

Sourced from @babel/preset-env's changelog.

v8.0.7 (2026-10-07)

🐛 Bug Fix

babel-helper-create-regexp-features-plugin, babel-plugin-transform-dotall-regex, babel-plugin-transform-unicode-sets-regex, babel-preset-env

#18295 Bump regexpu-core to 6.5.3 (@JLHwung)

babel-plugin-transform-for-of

#18292 Skip for await in transform-for-of (@brunoborta)

babel-helpers, babel-plugin-transform-async-generator-functions, babel-runtime-corejs3

#18283 Fix asyncIterator helper forwarding .throw() to .return() (@brunoborta)

babel-parser

#18288 fix(parser): allow await as a function expression name inside async arrow (@JLHwung)

babel-helpers, babel-plugin-transform-class-properties, babel-plugin-transform-modules-systemjs, babel-runtime-corejs3

#18284 Guard @@toPrimitive usage in toPrimitive helper (@nicolo-ribaudo)

babel-plugin-transform-block-scoping

#18195 fix: closures in for-loop init capture wrong binding (@joelle-a-dev)

babel-helper-create-class-features-plugin, babel-plugin-transform-private-property-in-object

#18265 Return false for #x in on static private fields before initialization (@hoobnn)

babel-traverse

#18151 Evaluate TypeScript expression wrappers in NodePath#evaluate (@CINC0S)

#18250 fix(traverse): do not evaluate destructured bindings in path.evaluate (@wulu007)

Other

#18257 Fix eslint-parser AST definition of AccessorProperty (@jpradelle)

babel-core

#18254 fix(core): createConfigItem allows cb as 2nd arg (@JLHwung)

🏠 Internal

babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3

#18255 Simplify interopRequireWildcard helper (@nicolo-ribaudo)

v8.0.6 (2026-09-18)

👓 Spec Compliance

babel-helper-validator-identifier, babel-parser

#18237 Update identifier definition to Unicode 18 (@JLHwung)

🐛 Bug Fix

babel-parser

#18240 Fix parsing of arrow function params inside ternaries with Flow (@robhogan)

babel-helper-string-parser, babel-parser

#18239 fix: polish error message for invalid binary 0b19 (@JLHwung)

🏠 Internal

babel-code-frame, babel-core, babel-generator, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-parser, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-regenerator, babel-plugin-transform-typescript, babel-preset-env, babel-traverse, babel-types

#18235 Remove unused internal exports (@nicolo-ribaudo)

babel-parser

#18245 test: test with ts-eslint 8.70.0 (@JLHwung)

babel-core

#18231 build: do not emit sourcemap in production build (@JLHwung)

babel-build-external-helpers, babel-cli, babel-code-frame, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-create-class-features-plugin, babel-helper-globals, babel-helper-string-parser, babel-helper-transform-fixture-test-runner, babel-helper-validator-identifier, babel-node, babel-parser, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-register, babel-runtime-corejs3, babel-traverse

#18236 Enforce usage of Yarn catalog for reused dependencies (@nicolo-ribaudo)

... (truncated)

Commits

1fc0073 v8.0.7
2dd0e6e Bump regexpu-core to 6.5.3 (#18295)
fd66590 chore: upgrade verkit to v0.5.0 and obug to v3.0.0 (#18248)
9e408d6 v8.0.6
753bedf Remove unused internal exports (#18235)
0d8ed70 v8.0.5
4cea20d Use built-in glob in Node.js (#18097)
1eac448 refactor: replace semver with verkit (#18145)
1554d58 chore: Some minor cleanup (#18148)
286c79a Update compat data sources (#18116)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 2 updates in the /e2e directory: [postcss](https://github.com/postcss/postcss) and [webpack](https://github.com/webpack/webpack). Bumps the all-dependencies group with 2 updates in the /sites directory: [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) and [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env). Updates `postcss` from 8.5.29 to 8.5.31 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.29...8.5.31) Updates `webpack` from 5.111.1 to 5.112.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.1...v5.112.2) Updates `@babel/core` from 7.29.7 to 8.0.9 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.9/packages/babel-core) Updates `@babel/preset-env` from 7.29.7 to 8.0.7 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v8.0.7/packages/babel-preset-env) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: webpack dependency-version: 5.112.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: "@babel/core" dependency-version: 8.0.9 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@babel/preset-env" dependency-version: 8.0.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 2, 2026

github-actions Bot added sites/postcss-preset-env e2e labels Nov 2, 2026

Navigation Menu

Repository navigation

Bump the all-dependencies group across 2 directories with 4 updates - #1959

Bump the all-dependencies group across 2 directories with 4 updates#1959
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/e2e/all-dependencies-6dd4b474c3

dependabot Bot commented on behalf of github Nov 2, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 2, 2026

8.5.31

8.5.30

8.5.31

8.5.30

v5.112.2

Patch Changes

v5.112.1

Patch Changes

5.112.2

Patch Changes

5.112.1

Patch Changes

v8.0.9 (2026-10-23)

v8.0.8 (2026-10-23)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 7

Changelog

v8.0.10 (2026-10-29)

🐛 Bug Fix

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

Committers: 11

v8.0.6 (2026-09-18)

👓 Spec Compliance

v8.0.7 (2026-10-07)

🐛 Bug Fix

🏠 Internal

v8.0.6 (2026-09-18)

👓 Spec Compliance

🐛 Bug Fix

🏠 Internal

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants