Skip to content

Bump postcss and oc-template-es6-compiler in /packages/oc/src/components/oc-client#1485

Merged
ricardo-devis-agullo merged 3 commits into
masterfrom
dependabot/npm_and_yarn/packages/oc/src/components/oc-client/multi-c21e490bdf
Jun 13, 2026
Merged

Bump postcss and oc-template-es6-compiler in /packages/oc/src/components/oc-client#1485
ricardo-devis-agullo merged 3 commits into
masterfrom
dependabot/npm_and_yarn/packages/oc/src/components/oc-client/multi-c21e490bdf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 13, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss to 8.5.15 and updates ancestor dependency oc-template-es6-compiler. These dependencies need to be updated together.

Updates postcss from 5.2.18 to 8.5.15

Release notes

Sourced from postcss's releases.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

  • Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

  • Fixed package.jsonexports compatibility with some tools (by @​JounQin).

8.5.4

8.5.3

... (truncated)

Commits

Updates oc-template-es6-compiler from 1.2.1 to 8.0.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 13, 2026
@ricardo-devis-agullo

Copy link
Copy Markdown
Collaborator

@copilot resolve the merge conflicts in this pull request

@dependabot @github

dependabot Bot commented on behalf of github Jun 13, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@ricardo-devis-agullo

Copy link
Copy Markdown
Collaborator

@copilot resolve the merge conflicts in this pull request

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.15 and updates ancestor dependency [oc-template-es6-compiler](https://github.com/opencomponents/vite-templates). These dependencies need to be updated together.


Updates `postcss` from 5.2.18 to 8.5.15
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/commits/8.5.15)

Updates `oc-template-es6-compiler` from 1.2.1 to 8.0.0
- [Commits](https://github.com/opencomponents/vite-templates/commits)

---
updated-dependencies:
- dependency-name: oc-template-es6-compiler
  dependency-version: 8.0.0
  dependency-type: direct:development
- dependency-name: postcss
  dependency-version: 8.5.15
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/packages/oc/src/components/oc-client/multi-c21e490bdf branch from ae8b1d9 to 52bfe0a Compare June 13, 2026 14:23

Copilot AI commented Jun 13, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in commit b184ed87. The only conflict was in package-lock.json for picomatch — master had bumped it from 2.3.1 to 2.3.2 as a security fix, while this PR had already upgraded it to 4.0.4 as part of the oc-template-es6-compiler upgrade. Kept the 4.0.4 version since it's newer and supersedes the 2.3.2 security patch.

@ricardo-devis-agullo

Copy link
Copy Markdown
Collaborator

@copilot resolve the merge conflicts in this pull request

Copilot AI commented Jun 13, 2026

Copy link
Copy Markdown
Contributor

@copilot resolve the merge conflicts in this pull request

Merge conflicts resolved in commit 6f55fc9a. Master's latest commit (Bump webpack and oc-template-es6-compiler) added libc fields to 13 @rollup platform-specific packages in package-lock.json — those have been merged in.

@ricardo-devis-agullo ricardo-devis-agullo merged commit 1c48168 into master Jun 13, 2026
3 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/packages/oc/src/components/oc-client/multi-c21e490bdf branch June 13, 2026 15:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants