Bump postcss, optimize-css-assets-webpack-plugin, postcss-flexbugs-fixes, postcss-loader, postcss-normalize, postcss-preset-env and resolve-url-loader in /client

[dependabot[bot]]

Bumps postcss, optimize-css-assets-webpack-plugin, postcss-flexbugs-fixes, postcss-loader, postcss-normalize, postcss-preset-env and resolve-url-loader. These dependencies needed to be updated together. Updates postcss from 8.4.19 to 8.4.41

Release notes

Sourced from postcss's releases.

8.4.41

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

8.4.40

• Moved to getter/setter in nodes types to help Sass team (by @​nex3).

8.4.39

• Fixed CssSyntaxError types (by @​romainmenke).

8.4.38

• Fixed endIndex: 0 in errors and warnings (by @​romainmenke).

8.4.37

• Fixed original.column are not numbers error in another case.

8.4.36

• Fixed original.column are not numbers error on broken previous source map.

8.4.35

• Avoid ! in node.parent.nodes type.
• Allow to pass undefined to node adding method to simplify types.

8.4.34

• Fixed AtRule#nodes type (by @​tim-we).
• Cleaned up code (by @​DrKiraDmitry).

8.4.33

• Fixed NoWorkResult behavior difference with normal mode (by @​romainmenke).
• Fixed NoWorkResult usage conditions (by @​ahmdammarr).

8.4.32

• Fixed postcss().process() types (by @​ferreira-tb).

8.4.31

• Fixed \r parsing to fix CVE-2023-44270.

8.4.30

• Improved source map performance (by @​romainmenke).

8.4.29

• Fixed Node#source.offset (by @​idoros).
• Fixed docs (by @​coliff).

8.4.28

• Fixed Root.source.end for better source map (by @​romainmenke).
• Fixed Result.root types when process() has no parser.

8.4.27

• Fixed Container clone methods types.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.41

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

8.4.40

• Moved to getter/setter in nodes types to help Sass team (by @​nex3).

8.4.39

• Fixed CssSyntaxError types (by @​romainmenke).

8.4.38

• Fixed endIndex: 0 in errors and warnings (by @​romainmenke).

8.4.37

• Fixed original.column are not numbers error in another case.

8.4.36

• Fixed original.column are not numbers error on broken previous source map.

8.4.35

• Avoid ! in node.parent.nodes type.
• Allow to pass undefined to node adding method to simplify types.

8.4.34

• Fixed AtRule#nodes type (by Tim Weißenfels).
• Cleaned up code (by Dmitry Kirillov).

8.4.33

• Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).
• Fixed NoWorkResult usage conditions (by @​ahmdammarr).

8.4.32

• Fixed postcss().process() types (by Andrew Ferreira).

8.4.31

• Fixed \r parsing to fix CVE-2023-44270.

8.4.30

• Improved source map performance (by Romain Menke).

8.4.29

• Fixed Node#source.offset (by Ido Rosenthal).
• Fixed docs (by Christian Oliff).

8.4.28

• Fixed Root.source.end for better source map (by Romain Menke).
• Fixed Result.root types when process() has no parser.

8.4.27

• Fixed Container clone methods types.

... (truncated)

Commits

• 57e0211 Release 8.4.41 version
• f27134f Update dependencies
• 146d31c Merge pull request #1952 from nex3/rule-props
• 3707c3b Merge remote-tracking branch 'origin/main' into rule-props
• 9ab3619 Declare Input.toJSON()
• be59ad4 Remove dead website
• 165154b Update dependencies
• 6127a44 Declaration#variable do not have setter
• 536726d Fix type
• 58fa0ef Sort keys
• Additional commits viewable in compare view

Updates optimize-css-assets-webpack-plugin from 5.0.8 to 6.0.1

Commits

• e896b97 6.0.1
• 24ed912 fix: cve in dependencies
• 29c44fb 6.0.0
• 51313e4 feat(deps): upgrade cssnano and postcss major version
• 0784924 Add test to cover issue #52 bug (not yet resolved)
• 14c9344 4.0.2
• See full diff in compare view

Updates postcss-flexbugs-fixes from 4.2.1 to 5.0.2

Release notes

Sourced from postcss-flexbugs-fixes's releases.

5.0.2

What's Changed

• Promote postcss to a production dependency by @​s100 in luisrudge/postcss-flexbugs-fixes#74

New Contributors

• @​s100 made their first contribution in luisrudge/postcss-flexbugs-fixes#74

Full Changelog: https://github.com/luisrudge/postcss-flexbugs-fixes/compare/5.0.0...5.0.2

5.0.0

https://github.com/luisrudge/postcss-flexbugs-fixes/blob/master/CHANGELOG.md

Changelog

Sourced from postcss-flexbugs-fixes's changelog.

5.0.2

• Moving postcss to peer dependencies #74

5.0.1

• Adding postcss as dependency #74

5.0.0

• upgrade to postcss 8 #71

Commits

• See full diff in compare view

Updates postcss-loader from 3.0.0 to 8.1.1

Release notes

Sourced from postcss-loader's releases.

v8.1.1

8.1.1 (2024-02-28)

Bug Fixes

• respect default when loading postcss esm configs (52d8050)

v8.1.0

8.1.0 (2024-01-30)

Features

• add @rspack/core as an optional peer dependency (#679) (512e4c3)

v8.0.0

8.0.0 (2024-01-16)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 18.12.0 (#677) (8dd0315)

v7.3.4

7.3.4 (2023-12-27)

Bug Fixes

• do not crash if pkg.(d|devD)ependencies unset (#667) (8ef0c7e)

v7.3.3

7.3.3 (2023-06-10)

Bug Fixes

• perf: avoid using klona for postcss options (#658) (e754c3f)
• bug with loading configurations after updating cosmiconfig to version 8.2 (684d265)

v7.3.2

7.3.2 (2023-05-28)

Bug Fixes

• use cause to keep original errors and warnings (#655) (e8873f4)

v7.3.1

... (truncated)

Changelog

Sourced from postcss-loader's changelog.

8.1.1 (2024-02-28)

Bug Fixes

• respect default when loading postcss esm configs (52d8050)

8.1.0 (2024-01-30)

Features

• add @rspack/core as an optional peer dependency (#679) (512e4c3)

8.0.0 (2024-01-16)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 18.12.0 (#677) (8dd0315)

7.3.4 (2023-12-27)

Bug Fixes

• do not crash if pkg.(d|devD)ependencies unset (#667) (8ef0c7e)

7.3.3 (2023-06-10)

Bug Fixes

• perf: avoid using klona for postcss options (#658) (e754c3f)
• bug with loading configurations after updating cosmiconfig to version 8.2 (684d265)

7.3.2 (2023-05-28)

Bug Fixes

• use cause to keep original errors and warnings (#655) (e8873f4)

7.3.1 (2023-05-26)

Bug Fixes

• warning and error serialization (65748ec)

... (truncated)

Commits

• d2651fc chore(release): 8.1.1
• 52d8050 fix: respect default when loading postcss esm configs
• fdd5448 ci: fix commitlint check (#683)
• 107b519 chore: update dependencies to latest version (#682)
• 947f29b chore: update dependency-review-action to the latest version (#681)
• df307b5 chore(release): 8.1.0
• 512e4c3 feat: add @rspack/core as an optional peer dependency (#679)
• d53fe9d chore(release): 8.0.0
• 8dd0315 chore!: minimum supported Node.js version is 18.12.0 (#677)
• 754c4a5 chore(release): 7.3.4
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for postcss-loader since your current version.

Updates postcss-normalize from 8.0.1 to 10.0.1

Release notes

Sourced from postcss-normalize's releases.

10.0.0

• Updated PostCSS support to ^8 (major).
• Updated Node support to 12+ (major).

9.0.0 (April 12, 2020)

• Updated: normalize.css to support any version (major)
• Updated: sanitize.css to support any version (major)
• Updated: Node support to 10.0.0 (major).
• Removed: Unused browserslist dependency

Changelog

Sourced from postcss-normalize's changelog.

10.0.1 (September 15, 2021)

• Added: sanitize.css to support 13+ (major).

This version removes support for pages.css yet is released as a patch version to resolve issues in Create React App. This is a betrayal of semantic versioning.

10.0.0 (April 28, 2021)

• Updated: PostCSS support to ^8 (major).
• Updated: Node support to 12+ (major).

9.0.0 (April 12, 2020)

• Updated: normalize.css to support any version (major).
• Updated: sanitize.css to support any version (major).
• Updated: Node support to 10.0.0 (major).
• Removed: Unused browserslist dependency.

Commits

• See full diff in compare view

Updates postcss-preset-env from 6.7.0 to 10.0.0

Changelog

Sourced from postcss-preset-env's changelog.

10.0.0

August 3, 2024

Read more about the specific changes on our wiki

• Updated: Support for Node v18+ (major).
• Updated @csstools/postcss-cascade-layers to 5.0.0 (major)
• Updated @csstools/postcss-font-format-keywords to 4.0.0 (major)
• Updated @csstools/postcss-initial to 2.0.0 (major)
• Updated @csstools/postcss-is-pseudo-class to 5.0.0 (major)
• Updated @csstools/postcss-logical-float-and-clear to 3.0.0 (major)
• Updated @csstools/postcss-logical-overflow to 2.0.0 (major)
• Updated @csstools/postcss-logical-overscroll-behavior to 2.0.0 (major)
• Updated @csstools/postcss-logical-resize to 3.0.0 (major)
• Updated @csstools/postcss-logical-viewport-units to 3.0.0 (major)
• Updated @csstools/postcss-nested-calc to 4.0.0 (major)
• Updated @csstools/postcss-normalize-display-values to 4.0.0 (major)
• Updated @csstools/postcss-progressive-custom-properties to 4.0.0 (major)
• Updated @csstools/postcss-scope-pseudo-class to 4.0.0 (major)
• Updated @csstools/postcss-text-decoration-shorthand to 4.0.0 (major)
• Updated @csstools/postcss-unset-value to 4.0.0 (major)
• Updated css-blank-pseudo to 7.0.0 (major)
• Updated css-has-pseudo to 7.0.0 (major)
• Updated css-prefers-color-scheme to 10.0.0 (major)
• Updated postcss-attribute-case-insensitive to 7.0.0 (major)
• Updated postcss-color-hex-alpha to 10.0.0 (major)
• Updated postcss-color-rebeccapurple to 10.0.0 (major)
• Updated postcss-dir-pseudo-class to 9.0.0 (major)
• Updated postcss-focus-visible to 10.0.0 (major)
• Updated postcss-focus-within to 9.0.0 (major)
• Updated postcss-gap-properties to 6.0.0 (major)
• Updated postcss-image-set-function to 7.0.0 (major)
• Updated postcss-logical to 8.0.0 (major)
• Updated postcss-nesting to 13.0.0 (major)
• Updated postcss-overflow-shorthand to 6.0.0 (major)
• Updated postcss-place to 10.0.0 (major)
• Updated postcss-pseudo-class-any-link to 10.0.0 (major)
• Updated postcss-selector-not to 8.0.0 (major)
• Updated @csstools/postcss-content-alt-text to 2.0.0 (major)
• Updated @csstools/postcss-ic-unit to 4.0.0 (major)
• Updated @csstools/postcss-light-dark-function to 2.0.0 (major)
• Updated postcss-double-position-gradients to 6.0.0 (major)
• Updated @csstools/postcss-exponential-functions to 2.0.0 (major)
• Updated @csstools/postcss-media-minmax to 2.0.0 (major)
• Updated @csstools/postcss-media-queries-aspect-ratio-number-values to 3.0.0 (major)
• Updated @csstools/postcss-stepped-value-functions to 4.0.0 (major)
• Updated @csstools/postcss-trigonometric-functions to 4.0.0 (major)
• Updated postcss-custom-media to 11.0.0 (major)
• Updated postcss-custom-properties to 14.0.0 (major)

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by romainmenke, a new releaser for postcss-preset-env since your current version.

Updates resolve-url-loader from 3.1.4 to 5.0.0

Release notes

Sourced from resolve-url-loader's releases.

5.0.0

Breaking changes

• Require node>=12.
• Support only webpack>=4.
• Update to postcss@^8.
• Remove rework engine (which was deprecated in V4).

Bugfixes

• Fix log messages not correctly normalising absolute paths to posix style on Windows platform
• Fixes to end-to-end tests and test framework.

5.0.0-beta.1

Breaking changes

• Require node>=12.
• Support only webpack>=4.
• Update to postcss@^8.
• Remove rework engine (which was deprecated in V4).

Bugfixes

• Fix log messages not correctly normalising absolute paths to posix style on Windows platform
• Fixes to end-to-end tests and test framework.

5.0.0-alpha.1

Breaking changes

• Require node>=12.
• Support only webpack>=4.
• Update to postcss@^8.
• Remove rework engine (which was deprecated in V4).

Bugfixes

• Fix log messages not correctly normalising absolute paths to posix style on Windows platform

4.0.0

Features

• Better resolution of the original source location - You can more successfully use url() in variables and mixins.
• Dependencies now accept a wider range and explicit dependency on rework and rework-visit has been removed.

Breaking Changes

• The engine option is deprecated which means the old rework engine is deprecated.
• The keepQuery behaviour is now the default, the keepQuery option has been removed.
• The removeCR option defaults to true when executing on Windows OS.
• The absolute option has been removed.
• The join option has changed.

Migrating

See the changlog.

... (truncated)

Changelog

Sourced from resolve-url-loader's changelog.

resolve-url-loader

Version 5

Features

• Update postcss and completely remove rework parser.

Breaking Changes

• Require node@>=12.
• Support webpack@>=4 (no longer tested for earlier versions).
• The engine option has been removed.

Migrating

Remove the engine option if you are using it.

Version 4

Features

• Better resolution of the original source location - You can more successfully use url() in variables and mixins.
• Dependencies now accept a wider range and explicit dependency on rework and rework-visit has been removed.

Breaking Changes

• The engine option is deprecated which means the old rework engine is deprecated.
• The keepQuery behaviour is now the default, the keepQuery option has been removed.
• The removeCR option defaults to true when executing on Windows OS.
• The absolute option has been removed.
• The join option has changed.

Migrating

Remove the engine option if you are using it - the default "postcss" engine is much more reliable. The "rework" engine will still work for now but will be removed in the next major version.

Remove the keepQuery option if you are using it.

Remove the absolute option, webpack should work fine without it. If you have a specific need to rebase url() then you should use a separate loader.

If you use a custom join function then you will need to refactor it to the new API. Refer to the advanced usage documentation.

If you wish to still use engine: "rework" then note that rework and rework-visit packages are now peerDependencies that must be explicitly installed by you.

Version 3

Features

• Use postcss parser by default. This is long overdue as the old rework parser doesn't cope with modern css.

... (truncated)

Commits

• bf01da9 5.0.0
• 78393f6 update branch references to v5
• 6787839 github actions for CI
• 1457038 update changelog and readme
• a01faf9 5.0.0-beta.1
• fb09fae remove the engine option harder, ensure deprecation warning is tested
• 5654fa4 remove the engine option and related tests, use getOptions from loader where ...
• 10f9cdb 5.0.0-alpha.1
• b168dd3 adjust deprecation message for engine option
• 29e142a normalise windows absolute paths to posix format in log messages
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dgraph-io/ratel/network/alerts).

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.