{{ message }}
Repository navigation
chore(deps): bump postcss-selector-parser, postcss-modules-local-by-default, postcss-modules-scope, eslint-plugin-vue, stylelint, stylelint-config-recommended and stylelint-config-standard - #4255
Open
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/multi-17a7128caf
branch
2 times, most recently
from
October 12, 2026 09:44
8c9af79 to
3908826
Compare
…efault, postcss-modules-scope, eslint-plugin-vue, stylelint, stylelint-config-recommended and stylelint-config-standard Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) to 7.1.7 and updates ancestor dependencies [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser), [postcss-modules-local-by-default](https://github.com/css-modules/postcss-modules-local-by-default), [postcss-modules-scope](https://github.com/css-modules/postcss-modules-scope), [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue), [stylelint](https://github.com/stylelint/stylelint), [stylelint-config-recommended](https://github.com/stylelint/stylelint-config-recommended) and [stylelint-config-standard](https://github.com/stylelint/stylelint-config-standard). These dependencies need to be updated together. Updates `postcss-selector-parser` from 7.1.5 to 7.1.7 - [Release notes](https://github.com/postcss/postcss-selector-parser/releases) - [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md) - [Commits](postcss/postcss-selector-parser@7.1.5...7.1.7) Updates `postcss-modules-local-by-default` from 4.0.5 to 4.2.0 - [Release notes](https://github.com/css-modules/postcss-modules-local-by-default/releases) - [Changelog](https://github.com/css-modules/postcss-modules-local-by-default/blob/master/CHANGELOG.md) - [Commits](css-modules/postcss-modules-local-by-default@v4.0.5...v4.2.0) Updates `postcss-modules-scope` from 3.2.0 to 3.2.1 - [Release notes](https://github.com/css-modules/postcss-modules-scope/releases) - [Changelog](https://github.com/css-modules/postcss-modules-scope/blob/master/CHANGELOG.md) - [Commits](css-modules/postcss-modules-scope@v3.2.0...v3.2.1) Updates `eslint-plugin-vue` from 9.33.0 to 10.11.1 - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md) - [Commits](vuejs/eslint-plugin-vue@v9.33.0...v10.11.1) Updates `stylelint` from 15.11.0 to 17.16.0 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@15.11.0...17.16.0) Updates `stylelint-config-recommended` from 13.0.0 to 18.0.0 - [Release notes](https://github.com/stylelint/stylelint-config-recommended/releases) - [Changelog](https://github.com/stylelint/stylelint-config-recommended/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint-config-recommended@13.0.0...18.0.0) Updates `stylelint-config-standard` from 34.0.0 to 40.0.0 - [Release notes](https://github.com/stylelint/stylelint-config-standard/releases) - [Changelog](https://github.com/stylelint/stylelint-config-standard/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint-config-standard@34.0.0...40.0.0) --- updated-dependencies: - dependency-name: eslint-plugin-vue dependency-version: 10.11.1 dependency-type: direct:development - dependency-name: postcss-modules-local-by-default dependency-version: 4.2.0 dependency-type: indirect - dependency-name: postcss-modules-scope dependency-version: 3.2.1 dependency-type: indirect - dependency-name: postcss-selector-parser dependency-version: 7.1.6 dependency-type: indirect - dependency-name: stylelint dependency-version: 17.16.0 dependency-type: direct:development - dependency-name: stylelint-config-recommended dependency-version: 18.0.0 dependency-type: indirect - dependency-name: stylelint-config-standard dependency-version: 40.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/multi-17a7128caf
branch
from
October 20, 2026 22:45
3908826 to
bc086d4
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.

Bumps postcss-selector-parser to 7.1.7 and updates ancestor dependencies postcss-selector-parser, postcss-modules-local-by-default, postcss-modules-scope, eslint-plugin-vue, stylelint, stylelint-config-recommended and stylelint-config-standard. These dependencies need to be updated together.
Updates
postcss-selector-parserfrom 7.1.5 to 7.1.7Release notes
Sourced from postcss-selector-parser's releases.
Changelog
Sourced from postcss-selector-parser's changelog.
Commits
154c2b07.1.7e8dc65fdocs: add CVE-2026-104844 to the 7.1.6 changelog entryd5122b0fix: keep whitespace around the namespace separator in attribute selectors (#...80ab254fix: invalidate stale raw spelling on combinator value assignment (#342)ba353c7fix: set parents for all variadic inserted nodes (#343)8b2d16dConsume whitespace after hexadecimal CSS escapes (#340)8f10b8dfix: lossless mode drops whitespace when a selector ends empty (#337)15c2b45chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#347)4eb34687.1.662b1917fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerabilityUpdates
postcss-modules-local-by-defaultfrom 4.0.5 to 4.2.0Release notes
Sourced from postcss-modules-local-by-default's releases.
Changelog
Sourced from postcss-modules-local-by-default's changelog.
Commits
db195e7chore(release): 4.2.0ba7e8effeat: added support acssmodules-pure-no-checkcomment39a2f78docs: fix (#83)e489ff8chore(release): 4.1.03811927fix: css nesting and pure mode582bd9echore: postcss-selector-parser (#81)9d07eebfeat: add pure ignore comment for CSS Modules (#80)fde62d7feat: addglobalandlocalfor animations (#76)a73b700test: for current pure logic (#74)f1c05a5test: enhanced test cases to prepare for CSS declaration-level processing (#77)Updates
postcss-modules-scopefrom 3.2.0 to 3.2.1Release notes
Sourced from postcss-modules-scope's releases.
Changelog
Sourced from postcss-modules-scope's changelog.
Commits
710d00echore(release): 3.2.1bc9d3bbchore: update lock file (#64)be0c9f8fix: updatepostcss-selector-parser(#63)Updates
eslint-plugin-vuefrom 9.33.0 to 10.11.1Release notes
Sourced from eslint-plugin-vue's releases.
... (truncated)
Changelog
Sourced from eslint-plugin-vue's changelog.
... (truncated)
Commits
ec9c53aVersion Packages (#3139)50ffb7fdocs: explain how to apply the configs to a subset of files (#3122)ad239b4fix(no-unused-properties): ignore props typed asnever(#3113)24cb5bcfix(no-ref-object-reactivity-loss): improve IIFE handling (#3115)ef6f53efix(require-default-prop): don't report ondefineModel(#3138)121030cFormat changelog97c5634Version Packages (#3106)abe8befUpdate resources (#3133)f3a0276Make wording in changeset more consistent87cd113Update resources (#3132)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-vue since your current version.
Updates
stylelintfrom 15.11.0 to 17.16.0Release notes
Sourced from stylelint's releases.
... (truncated)
Changelog
Sourced from stylelint's changelog.
... (truncated)
Commits
bc06c7cRelease 17.16.0 (#9551)f4fb76fSettarget-branchtov18in Dependabot config (#9488)2019478Fixproperty-layout-mappingsandunit-layout-mappingsfalse negatives for...e875710Fixvalue-keyword-layout-mappingsfalse positives forcaption-side(#9483)0547bffRelease 17.15.0 (#9484)ac19a3cFixcustom-property-no-missing-var-functionfalse positives for anchor posi...23947aeBump@humanfs/nodefrom 0.16.6 to 0.16.8 (#9480)53c74f7Bump fast-uri from 3.1.5 to 3.1.7 (#9481)26856e6Bump the jest group across 1 directory with 2 updates (#9476)b90ecd8Bump browserslist from 4.28.4 to 4.28.8 (#9479)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
stylelint-config-recommendedfrom 13.0.0 to 18.0.0Release notes
Sourced from stylelint-config-recommended's releases.
Changelog
Sourced from stylelint-config-recommended's changelog.
Commits
c25f014Release 18.0.0 (#276)71a4da5Prepare 18.0.0 (#271)2b960e0Bump the dev-deps group with 3 updates (#272)ac8f5ebBump stylelint/.github/.github/workflows/call-release.yml from 0.3.1 to 0.5.0...22f4d8dBump stylelint/.github/.github/workflows/call-test.yml from 0.3.1 to 0.5.0 (#...f25904fBump stylelint/.github/.github/workflows/call-release-pr.yml from 0.3.1 to 0....2aeb96bFix vulnerable dependencies vianpm audit fix(#269)6ca240cBump mdast-util-to-hast from 13.1.0 to 13.2.1 (#270)a2c2df9Bump the dev-deps group with 2 updates (#268)a6230c6Bump js-yaml from 4.1.0 to 4.1.1 (#266)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for stylelint-config-recommended since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Updates
stylelint-config-standardfrom 34.0.0 to 40.0.0Release notes
Sourced from stylelint-config-standard's releases.
Changelog
Sourced from stylelint-config-standard's changelog.
Commits
fbbe7b8Release 40.0.0 (#386)e6368f9Prepare 40.0.0 (#381)481e21cBump the dev-deps group with 3 updates (#382)696689dBump stylelint/.github/.github/workflows/call-release-pr.yml from 0.3.1 to 0....5d46c0fBump stylelint/.github/.github/workflows/call-lint.yml from 0.3.1 to 0.5.0 (#...f888c90Bump stylelint/.github/.github/workflows/call-test.yml from 0.3.1 to 0.5.0 (#...066dda1Fix vulnerable dependencies vianpm audit fix(#378)b6e6aecBump js-yaml from 4.1.0 to 4.1.1 (#379)63bb8ddBump mdast-util-to-hast from 13.1.0 to 13.2.1 (#380)0cc790aBump the dev-deps group with 2 updates (#377)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for stylelint-config-standard since your current version.
Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.