Skip to content

Bump postcss and next - #2185

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-4b10dec7ea
Open

Bump postcss and next#2185
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-4b10dec7ea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss to 8.5.23 and updates ancestor dependency next. These dependencies need to be updated together.

Updates postcss from 8.5.16 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Commits

Updates next from 16.2.12 to 16.3.1

Release notes

Sourced from next's releases.

v16.3.1

What's Changed

Full Changelog: vercel/next.js@v16.3.0...v16.3.1

v16.3.1-canary.18

Misc Changes

  • Upgrade React from 22e4f993-20260811 to eb8feb71-20260814: #97382

v16.3.1-canary.17

Misc Changes

  • Turbopack: add imports_wildcard NFT unit test: #97373
  • Turbopack: improve chunk_item_content docs: #97370
  • Turbopack: don't trace embedded WASM loader helpers: #97353
  • test: Reenable i18n-api-support deploy test for Turbopack with adapters: #96898
  • Trace instrumentation startup: #97296
  • Trace route module preparation: #97295
  • Trace route module loading: #97318
  • fix(deps): bump satori and @vercel/og: #97276
  • Scope app-entry export validation to files inside the app directory: #97350
  • Emit whole-app server NFTs when output: 'standalone' is used with an adapter: #97287
  • [test] Cover 'use cache: private' in route handlers: #97349
  • Fix missing Pages runtime in adapter Pages API outputs: #96819
  • docs: align SPA guide reducer example with React conventions: #97341
  • Update blob version.: #97342

Credits

... (truncated)

Commits
  • 3d32eb8 v16.3.1
  • 2b4b1ec [backport] Revert i18n localization change for dynamic Pages API routes (#949...
  • 228df5f [backport] Retain fewer stale cache versions and use a TTL, plus the mtime fa...
  • 16eab3a [backport] Fix: Optimistic routing bugs leading to repeated prefetch loops (#...
  • 75548c9 [backport] Fix Nav Inspector request loop on repeat captures (#97326)
  • f6bd714 [backport] [test] Compile the middleware redirect routes up front in dev (#97...
  • 43c1c60 [16.3] [ci] Use OIDC tokens to read private preview builds (#97258)
  • 9dbb357 [backport] Encode the cache item name built by unstable_cache (#97313)
  • 323a17c [backport] Discard only cache entries that predate a tag revalidation, and re...
  • 6d67f46 [backport] Keep the dev validation worker alive across HMR updates (#97315)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Aug 4, 2026
@github-project-automation github-project-automation Bot moved this to Backlog in LEMS Aug 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from a129ed2 to 09b390b Compare August 14, 2026 15:22
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.23 and updates ancestor dependency [next](https://github.com/vercel/next.js). These dependencies need to be updated together.


Updates `postcss` from 8.5.16 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.23)

Updates `next` from 16.2.12 to 16.3.1
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.2.12...v16.3.1)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 16.3.0
  dependency-type: direct:production
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4b10dec7ea branch from 09b390b to 947eb21 Compare August 14, 2026 21:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update javascript code

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

0 participants