Bump postcss, stylelint, stylelint-config-standard and stylelint-scss

[dependabot]

Bumps postcss to 8.5.12 and updates ancestor dependencies postcss, stylelint, stylelint-config-standard and stylelint-scss. These dependencies need to be updated together.

Updates postcss from 7.0.36 to 8.5.12

Release notes

Sourced from postcss's releases.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @​offset).

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

• Speed up source map encoding paring in case of the error.

8.5.8

• Fixed Processor#version.

8.5.7

• Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

• Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

• Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

• Fixed Parcel compatibility issue (by @​git-sumitchaudhary).

8.5.3

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
</tr></table> 

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @​offset).

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

• Speed up source map encoding paring in case of the error.

8.5.8

• Fixed Processor#version.

8.5.7

• Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

• Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

• Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

• Fixed Parcel compatibility issue (by @​git-sumitchaudhary).

8.5.3

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

... (truncated)

Commits

• 9bc81c4 Release 8.5.12 version
• 85c4d7d Another try to fix coverage
• 94484ca Try to fix coverage
• c64b748 Load only .map source maps
• aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
• 233fb26 Mention original author of the solution
• 2502f75 Release 8.5.11 version
• 5ca1901 Speed up parsing many nested brackets
• 42b5337 Update dependencies
• 7e36e15 Cache node.raws locally in Stringifier hot methods
• Additional commits viewable in compare view

Updates stylelint from 9.10.1 to 17.9.1

Release notes

Sourced from stylelint's releases.

17.9.1

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

• Fixed: ConfigurationError regression for custom syntaxes (#9245) (@​jeddy3).
• Fixed: MD5 hash algorithm to SHA256 for caching (#9241) (@​rkdfx).
• Fixed: property-no-deprecated autofix for page-break-*: always (#9214) (@​rkdfx).
• Fixed: selector-no-deprecated false positives for ::part() (#9227) (@​SaekiTominaga).

17.9.0

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

• Added: experimental referenceFiles to configuration object (#9179) (@​jeddy3).
• Added: experimental abortSignal option to Node.js API for cancellation support (#9213) (@​adalinesimonian).
• Added: maxWarnings to configuration object (#9181) (@​mrginglymus).

17.8.0

It adds 3 new rules and 1 configuration property.

• Added: languageOptions.directionality configuration property (#8687) (@​sw1tch3roo).
• Added: property-layout-mappings rule (#8687) (@​sw1tch3roo).
• Added: relative-selector-nesting-notation rule (#8730) (@​sw1tch3roo).
• Added: selector-no-deprecated rule (#8694) (@​immitsu).

17.7.0

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

• Fixed: clarity of problem messages (#9199) (@​jeddy3).
• Fixed: --print-config CLI flag to hide internal properties (#9194) (@​ybiquitous).
• Fixed: function-url-quotes false positives when URLs have modifiers (#8702) (@​immitsu).
• Fixed: selector-no-qualifying-type false positives for :has() (#9182) (@​romainmenke).

17.6.0

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

• Added: support for extending units to languageOptions (#9166) (@​jeddy3).
• Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
• Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

17.5.0

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

• Deprecated: *syntax options from declaration-property-value-no-unknown (#9102) (@​ragini-pandey).
• Added: ignoreMediaFeatureNameValues: {} to media-feature-name-value-no-unknown (#8976) (@​kovsu).
• Fixed: node_modules not ignored when using codeFilename in Node.js API (#9130) (@​adalinesimonian).
• Fixed: Error TS7016 for imported css-tree types (#9133) (@​ragini-pandey).
• Fixed: declaration-property-value-keyword-no-deprecated false positives for function arguments (#9116) (@​ragini-pandey).
• Fixed: declaration-property-value-no-unknown false positives for calc-size() containing size keyword (#9105) (@​hriztam).
• Fixed: no-descending-specificity & no-duplicate-selectors false negatives for equivalent compound selectors (#8977) (@​kovsu).
• Fixed: no-invalid-position-declaration false positives for @mixin and @scope (#9120) (@​ragini-pandey).
• Fixed: property-no-unknown false negatives for types (#9117) (@​Mouvedia).

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.9.1 - 2026-04-27

It fixes 4 bugs. We also documented the messageArgs each rule provides to the message configuration property.

• Fixed: ConfigurationError regression for custom syntaxes (#9245) (@​jeddy3).
• Fixed: MD5 hash algorithm to SHA256 for caching (#9241) (@​rkdfx).
• Fixed: property-no-deprecated autofix for page-break-*: always (#9214) (@​rkdfx).
• Fixed: selector-no-deprecated false positives for ::part() (#9227) (@​SaekiTominaga).

17.9.0 - 2026-04-23

It adds 3 new features. Adding the referenceFiles property to your configuration object makes the no-unknown-animations, no-unknown-custom-media and no-unknown-custom-properties rules more useful.

• Added: experimental referenceFiles to configuration object (#9179) (@​jeddy3).
• Added: experimental abortSignal option to Node.js API for cancellation support (#9213) (@​adalinesimonian).
• Added: maxWarnings to configuration object (#9181) (@​mrginglymus).

17.8.0 - 2026-04-15

It adds 3 new rules and 1 configuration property.

• Added: languageOptions.directionality configuration property (#8687) (@​sw1tch3roo).
• Added: property-layout-mappings rule (#8687) (@​sw1tch3roo).
• Added: relative-selector-nesting-notation rule (#8730) (@​sw1tch3roo).
• Added: selector-no-deprecated rule (#8694) (@​immitsu).

17.7.0 - 2026-04-12

It fixes 4 bugs, including clearer problem messages by removing filler words and leading with the problem. We've also released 1.0.0 of create-stylelint to help with first-time Stylelint setup.

• Fixed: clarity of problem messages (#9199) (@​jeddy3).
• Fixed: --print-config CLI flag to hide internal properties (#9194) (@​ybiquitous).
• Fixed: function-url-quotes false positives when URLs have modifiers (#8702) (@​immitsu).
• Fixed: selector-no-qualifying-type false positives for :has() (#9182) (@​romainmenke).

17.6.0 - 2026-03-26

It adds support for extending units in languageOptions, which then apply to rules like declaration-property-value-no-unknown, and fixes 2 bugs.

• Added: support for extending units to languageOptions (#9166) (@​jeddy3).
• Fixed: missing ruleMetadata when linting multiple files with overrides (#9154) (@​kovsu).
• Fixed: custom-property-no-missing-var-function false positives for timeline-scope and animation-timeline (#9164) (@​splincode).

17.5.0 - 2026-03-19

It deprecates two rule options, adds 1 rule option and fixes 7 bugs. We've also released 2.1.0 of our VS Code extension, which adds 8 new requested features, and our first release of the Stylelint Language Server.

• Deprecated: *syntax options from declaration-property-value-no-unknown (#9102) (@​ragini-pandey).
• Added: ignoreMediaFeatureNameValues: {} to media-feature-name-value-no-unknown (#8976) (@​kovsu).
• Fixed: node_modules not ignored when using codeFilename in Node.js API (#9130) (@​adalinesimonian).

... (truncated)

Commits

• 53c8817 Release 17.9.1 (#9248)
• fa75054 Fix property-no-deprecated autofix for page-break-*: always (#9214)
• 02b039e Fix selector-no-deprecated false positives for ::part() (#9227)
• af22bec Document message arguments of rules (#9226)
• 20f6e9d Fix ConfigurationError regression for custom syntaxes (#9245)
• 21a57e8 Fix MD5 hash algorithm to SHA256 for caching (#9241)
• cee404b Release 17.9.0 (#9242)
• b0af5ae Bump prettier from 3.8.1 to 3.8.3 (#9240)
• e2c2c43 Bump eslint-plugin-jest from 29.15.1 to 29.15.2 in the eslint group (#9239)
• 68d008e Bump @​csstools/css-syntax-patches-for-csstree from 1.1.2 to 1.1.3 in the csst...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version adds prepare, postprepare scripts that run during installation. Review the package contents before updating.

Updates stylelint-config-standard from 18.3.0 to 40.0.0

Release notes

Sourced from stylelint-config-standard's releases.

40.0.0

• Removed: stylelint less than 17.0.0 from peer dependencies.
• Removed: support for Node.js less than 20.19.0.
• Changed: updated to stylelint-config-recommended@18.0.0.
• Changed: module type to ESM.

39.0.1

• Fixed: layer-name-pattern false positives for dot notation.

39.0.0

• Removed: stylelint less than 16.23.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@17.0.0.
• Added: block-no-redundant-nested-style-rules rule.

38.0.0

• Removed: stylelint less than 16.18.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@16.0.0.
• Added: color-function-alias-notation: "without-alpha" rule.
• Added: container-name-pattern (kebab-case with optional -- prefix) rule.
• Added: layer-name-pattern (kebab-case) rule.

37.0.0

• Removed: stylelint less than 16.13.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@15.0.0.

36.0.1

• Fixed: missing funding field in package.json.

36.0.0

• Removed: stylelint less than 16.1.0 from peer dependencies.
• Added: lightness-notation: "percentage" rule.

35.0.0

• Removed: stylelint less than 16.0.0 from peer dependencies.
• Removed: Node.js less than 18.12.0 support.
• Changed: updated to stylelint-config-recommended@14.0.0.

34.0.0

• Removed: stylelint less than 15.10.0 from peer dependencies
• Changed: updated to stylelint-config-recommended@13.0.0.

33.0.0

• Removed: stylelint less than 15.5.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@12.0.0.
• Changed: restored declaration-block-single-line-max-declarations removed on 30.0.0.

32.0.0

• Removed: stylelint less than 15.4.0 from peer dependencies.
• Added: media-feature-range-notation: "context" rule

... (truncated)

Changelog

Sourced from stylelint-config-standard's changelog.

40.0.0

• Removed: stylelint less than 17.0.0 from peer dependencies.
• Removed: support for Node.js less than 20.19.0.
• Changed: updated to stylelint-config-recommended@18.0.0.
• Changed: module type to ESM.

39.0.1

• Fixed: layer-name-pattern false positives for dot notation.

39.0.0

• Removed: stylelint less than 16.23.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@17.0.0.
• Added: block-no-redundant-nested-style-rules rule.

38.0.0

• Removed: stylelint less than 16.18.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@16.0.0.
• Added: color-function-alias-notation: "without-alpha" rule.
• Added: container-name-pattern (kebab-case with optional -- prefix) rule.
• Added: layer-name-pattern (kebab-case) rule.

37.0.0

• Removed: stylelint less than 16.13.0 from peer dependencies.
• Changed: updated to stylelint-config-recommended@15.0.0.

36.0.1

• Fixed: missing funding field in package.json.

36.0.0

• Removed: stylelint less than 16.1.0 from peer dependencies.
• Added: lightness-notation: "percentage" rule.

35.0.0

• Removed: stylelint less than 16.0.0 from peer dependencies.
• Removed: Node.js less than 18.12.0 support.
• Changed: updated to stylelint-config-recommended@14.0.0.

34.0.0

• Removed: stylelint less than 15.10.0 from peer dependencies
• Changed: updated to stylelint-config-recommended@13.0.0.

... (truncated)

Commits

• fbbe7b8 Release 40.0.0 (#386)
• e6368f9 Prepare 40.0.0 (#381)
• 481e21c Bump the dev-deps group with 3 updates (#382)
• 696689d Bump stylelint/.github/.github/workflows/call-release-pr.yml from 0.3.1 to 0....
• 5d46c0f Bump stylelint/.github/.github/workflows/call-lint.yml from 0.3.1 to 0.5.0 (#...
• f888c90 Bump stylelint/.github/.github/workflows/call-test.yml from 0.3.1 to 0.5.0 (#...
• 066dda1 Fix vulnerable dependencies via npm audit fix (#378)
• b6e6aec Bump js-yaml from 4.1.0 to 4.1.1 (#379)
• 63bb8dd Bump mdast-util-to-hast from 13.1.0 to 13.2.1 (#380)
• 0cc790a Bump the dev-deps group with 2 updates (#377)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint-config-standard since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates stylelint-scss from 3.20.1 to 7.0.0

Release notes

Sourced from stylelint-scss's releases.

7.0.0

• Removed: support for Node.js less than 20.19.0 (#1221)
• Removed: deprecated rules (#1220):
  • at-import-no-partial-leading-underscore
  • at-import-partial-extension-blacklist
  • at-import-partial-extension-whitelist
  • at-import-partial-extension
• Changed: to ES Modules (#931)
• Added: stylelint@^17.0.0 to peer dependency (#1222)
• Added: selector-class-pattern rule (#1219)

Full Changelog: stylelint-scss/stylelint-scss@v6.14.0...v7.0.0

6.14.0

• Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
• Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
• Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

• Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
• Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
• Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).
• Fixed: dollar-variable-colon-space-after prevent TypeError for dynamically created nodes (#1159).
• Fixed: load-partial-extension add missing link to docs (#1202).
• Fixed: migrate rules to use autofix callback instead of deprecated context.fix (#1206).
• Updated: stylelint peer dependency version to ^16.8.2 (required by autofix callback) (#1206).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.1...v6.13.0

6.12.1

• Fixed: stylelint deprecation warnings by adding endIndex to report objects in multiple rules (#1150).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.0...v6.12.1

6.12.0

• Added: double-slash-comment-whitespace-inside add autofix and fix incorrect error locations (#1146).
• Added: declaration-property-value-no-unknown add support for nested properties with shorthand values (#1142).
• Fixed: operator-no-unspaced don't check Tailwind Directives (#1147).
• Fixed: at-use-no-redundant-alias fix false negative for single quotes (#1130).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.1...v6.12.0

6.11.1

• Fixed: no-duplicate-load-rules fix false positive when using @use and @forward for the same stylesheet (#1124).
• Fixed: declaration-property-value-no-unknown add support for Sass' rgba() function with a hex value (#1123).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.0...v6.11.1

... (truncated)

Changelog

Sourced from stylelint-scss's changelog.

7.0.0

• Removed: support for Node.js less than 20.19.0 (#1221)
• Removed: deprecated rules (#1220):
  • at-import-no-partial-leading-underscore
  • at-import-partial-extension-blacklist
  • at-import-partial-extension-whitelist
  • at-import-partial-extension
• Changed: to ES Modules (#931)
• Added: stylelint@^17.0.0 to peer dependency (#1222)
• Added: selector-class-pattern rule (#1219)

Full Changelog: stylelint-scss/stylelint-scss@v6.14.0...v7.0.0

6.14.0

• Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
• Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
• Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

• Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
• Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
• Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).
• Fixed: dollar-variable-colon-space-after prevent TypeError for dynamically created nodes (#1159).
• Fixed: load-partial-extension add missing link to docs (#1202).
• Fixed: migrate rules to use autofix callback instead of deprecated context.fix (#1206).
• Updated: stylelint peer dependency version to ^16.8.2 (required by autofix callback) (#1206).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.1...v6.13.0

6.12.1

• Fixed: stylelint deprecation warnings by adding endIndex to report objects in multiple rules (#1150).

Full Changelog: stylelint-scss/stylelint-scss@v6.12.0...v6.12.1

6.12.0

• Added: double-slash-comment-whitespace-inside add autofix and fix incorrect error locations (#1146).
• Added: declaration-property-value-no-unknown add support for nested properties with shorthand values (#1142).
• Fixed: operator-no-unspaced don't check Tailwind Directives (#1147).
• Fixed: at-use-no-redundant-alias fix false negative for single quotes (#1130).

Full Changelog: stylelint-scss/stylelint-scss@v6.11.1...v6.12.0

6.11.1

... (truncated)

Commits

• 6a0db05 7.0.0
• 341c28c Merge pull request #1227 from stylelint-scss/v7
• 7e94463 Bump stylelint
• d4f1249 Document 7.0.0 changelog (#1223)
• cd3f43f Remove deprecated rules (#1220)
• e24b0b6 Add selector-class-pattern rule (#1219)
• 7dccb82 Remove support for Node.js 18 (#1221)
• 78ccda6 Add support for Stylelint 17 (#1222)
• e1c86b6 Change module type to ESM (#1224)
• 56b5efb 6.14.0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jeddy3, a new releaser for stylelint-scss since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.