Skip to content

Bump postcss-selector-parser, stylelint and stylelint-config-standard-scss in /assets - #478

Merged
lewisgoddard merged 3 commits into
masterfrom
dependabot/npm_and_yarn/assets/multi-ca4d9d31ec
Oct 16, 2026
Merged

Bump postcss-selector-parser, stylelint and stylelint-config-standard-scss in /assets#478
lewisgoddard merged 3 commits into
masterfrom
dependabot/npm_and_yarn/assets/multi-ca4d9d31ec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps postcss-selector-parser to 7.1.6 and updates ancestor dependencies postcss-selector-parser, stylelint and stylelint-config-standard-scss. These dependencies need to be updated together.

Updates postcss-selector-parser from 6.0.13 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4

  • fix: tolerate non-node children when serializing selectors

7.1.3

  • Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2

v7.1.1

7.1.1

  • perf: replace startsWith with strict equality (#308)
  • fix(types): add walkUniversal declaration (#311)

v7.1.0

7.1.0

  • feat: insert(Before|After) support multiple new node

v7.0.0

7.0.0

  • Feat: make insertions during iteration safe (major)

6.1.4

  • fix: tolerate non-node children when serializing selectors

6.1.3

v6.1.2

6.1.2

  • Fixed: erroneous trailing combinators in pseudos

v6.1.1

6.1.1

  • Fixed: improve typings of constructor helpers (#292)

v6.1.0

... (truncated)

Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5 - 2026-08-07

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4 - 2026-06-11

  • fix: tolerate non-node children when serializing selectors

7.1.3 - 2026-06-11

  • Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2 - 2026-06-09

7.1.1

  • perf: replace startsWith with strict equality (#308)
  • fix(types): add walkUniversal declaration (#311)

7.1.0

  • feat: insert(Before|After) support multiple new node

7.0.0

  • Feat: make insertions during iteration safe (major)

6.1.2

  • Fixed: erroneous trailing combinators in pseudos

6.1.1

  • Fixed: improve typings of constructor helpers (#292)

6.1.0

  • Feature: add sourceIndex to Selector nodes (#290)

6.0.16

... (truncated)

Commits
  • 4eb3468 7.1.6
  • 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
  • e33e9bc 7.1.5
  • 6f4e6c1 fix: TypeError on unclosed [, ( and trailing | (#330)
  • 4d8437f fix: preserve whitespace before a * namespace in attribute selectors (#325)
  • e2f9029 fix: don't treat a non-prefix token before | as a namespace (#324)
  • dd50ee1 chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 (#331)
  • 7e3abb2 chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 (#328)
  • 4a7e4e3 7.1.4
  • e2021c5 fix: tolerate non-node children when serializing selectors
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by moox, a new releaser for postcss-selector-parser since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates stylelint from 15.10.2 to 17.16.0

Release notes

Sourced from stylelint's releases.

17.16.0

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

  • Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

17.15.0

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

  • Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
  • Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
  • Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
  • Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
  • Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).

17.14.1

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0

It fixes 3 bugs, including a false negative one.

  • Fixed: performance of getting module paths (#9354) (@​jeddy3).
  • Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
  • Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

  • Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
  • Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.16.0 - 2026-10-01

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

  • Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

17.15.0 - 2026-09-04

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

  • Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
  • Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
  • Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
  • Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
  • Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).

17.14.1 - 2026-07-20

It fixes 4 bugs.

  • Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
  • Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
  • Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
  • Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0 - 2026-06-25

It fixes 3 bugs, including a false negative one.

  • Fixed: performance of getting module paths (#9354) (@​jeddy3).
  • Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
  • Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

  • Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
  • Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
  • Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

  • Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
  • Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
  • Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

... (truncated)

Commits
  • bc06c7c Release 17.16.0 (#9551)
  • f4fb76f Set target-branch to v18 in Dependabot config (#9488)
  • 2019478 Fix property-layout-mappings and unit-layout-mappings false negatives for...
  • e875710 Fix value-keyword-layout-mappings false positives for caption-side (#9483)
  • 0547bff Release 17.15.0 (#9484)
  • ac19a3c Fix custom-property-no-missing-var-function false positives for anchor posi...
  • 23947ae Bump @​humanfs/node from 0.16.6 to 0.16.8 (#9480)
  • 53c74f7 Bump fast-uri from 3.1.5 to 3.1.7 (#9481)
  • 26856e6 Bump the jest group across 1 directory with 2 updates (#9476)
  • b90ecd8 Bump browserslist from 4.28.4 to 4.28.8 (#9479)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates stylelint-config-standard-scss from 11.1.0 to 17.0.0

Release notes

Sourced from stylelint-config-standard-scss's releases.

17.0.0

16.0.0

15.0.1

  • Fixed: change minimum supported Node.js version to 20.

15.0.0

14.0.0

13.1.0

  • Changed: scss/dollar-variable-colon-space-after from always to always-single-line to be compatible with the default formatting of Prettier.

13.0.0

12.0.0

Changelog

Sourced from stylelint-config-standard-scss's changelog.

17.0.0

16.0.0

15.0.1

  • Fixed: change minimum supported Node.js version to 20.

15.0.0

14.0.0

13.1.0

  • Changed: scss/dollar-variable-colon-space-after from always to always-single-line to be compatible with the default formatting of Prettier.

13.0.0

12.0.0

Commits

@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file Javascript Pull requests that update Javascript code labels Oct 16, 2026
lewisgoddard
lewisgoddard previously approved these changes Oct 16, 2026
View reviewed changes
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/assets/multi-ca4d9d31ec branch from d67cc68 to 42a9665 Compare October 16, 2026 17:20
@lewisgoddard

lewisgoddard commented Oct 16, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Bump postcss-selector-parser, stylelint and stylelint-config-standard…
115865e 
…-scss

Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) to 7.1.6 and updates ancestor dependencies [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser), [stylelint](https://github.com/stylelint/stylelint) and [stylelint-config-standard-scss](https://github.com/stylelint-scss/stylelint-config-standard-scss). These dependencies need to be updated together.


Updates `postcss-selector-parser` from 6.0.13 to 7.1.6
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@v6.0.13...7.1.6)

Updates `stylelint` from 15.10.2 to 17.16.0
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@15.10.2...17.16.0)

Updates `stylelint-config-standard-scss` from 11.1.0 to 17.0.0
- [Release notes](https://github.com/stylelint-scss/stylelint-config-standard-scss/releases)
- [Changelog](https://github.com/stylelint-scss/stylelint-config-standard-scss/blob/main/CHANGELOG.md)
- [Commits](stylelint-scss/stylelint-config-standard-scss@v11.1.0...v17.0.0)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.6
  dependency-type: indirect
- dependency-name: stylelint
  dependency-version: 17.16.0
  dependency-type: direct:development
- dependency-name: stylelint-config-standard-scss
  dependency-version: 17.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/assets/multi-ca4d9d31ec branch from 42a9665 to 115865e Compare October 16, 2026 17:29
@lewisgoddard
lewisgoddard enabled auto-merge (squash) October 16, 2026 17:32
@lewisgoddard
lewisgoddard merged commit 25b89d7 into master Oct 16, 2026
6 checks passed
@lewisgoddard
lewisgoddard deleted the dependabot/npm_and_yarn/assets/multi-ca4d9d31ec branch October 16, 2026 17:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lewisgoddard lewisgoddard lewisgoddard approved these changes

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file Javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lewisgoddard