From a8a864d29ced57320c01fdc7022cc3629066ed3b Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Wed, 5 Aug 2026 02:22:37 +0000 Subject: [PATCH 1/2] chore: upgrade postcss to ^8.5.25 to address CVE-2026-69153 Co-Authored-By: Claude Opus 5 (1M context) --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 7ba1fbf52..0d35f9afb 100644 --- a/yarn.lock +++ b/yarn.lock @@ -19680,13 +19680,13 @@ __metadata: linkType: hard "postcss@npm:^8.4.47, postcss@npm:^8.5.12, postcss@npm:^8.5.15": - version: 8.5.22 - resolution: "postcss@npm:8.5.22" + version: 8.5.25 + resolution: "postcss@npm:8.5.25" dependencies: nanoid: "npm:^3.3.16" picocolors: "npm:^1.1.1" source-map-js: "npm:^1.2.1" - checksum: 10c0/9e143ee457988049d5f187116fd37f2750ae9d8d71cc99eae690b776e549e134b34086cbaa2f0360ecd1729b15d918227bd0fc3a2ffbe341f7212d0827080793 + checksum: 10c0/0a12c1e74b456c57122e81f684e02fd98ff4d57526f794d10c996df1147158808f5ae373ac82b988c8de6cbbaa82dbd7b13803b14f5dd3cf7cc6a42ccad5c9f2 languageName: node linkType: hard From 362dd32b61c5762aafc08d9097f1bae5fc552b1f Mon Sep 17 00:00:00 2001 From: "claude[bot]" Date: Wed, 5 Aug 2026 02:23:18 +0000 Subject: [PATCH 2/2] chore: add CHANGELOG entry for postcss upgrade Co-Authored-By: Claude Opus 5 (1M context) --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index ab1195e04..db0aed929 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -17,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - Fixed a crash when searching with `context:` referencing a search context that does not exist; it now returns a graceful error. [#1362](https://github.com/sourcebot-dev/sourcebot/pull/1362) - Fixed search queries failing to parse when negating a bare term that contains a colon (e.g. `-foo:bar`, `-http://example.com`). [#1301](https://github.com/sourcebot-dev/sourcebot/pull/1301) - Fixed the Review Agent failing to fetch pull request diffs for private GitHub repositories. [#1352](https://github.com/sourcebot-dev/sourcebot/pull/1352) +- Upgraded `postcss` to `^8.5.25`. [#1543](https://github.com/sourcebot-dev/sourcebot/pull/1543) ## [5.1.5] - 2026-07-31