socket-security[bot]
commented
2 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@types/estree@1.0.0 | None | 0 |
25.7 kB | types |
| npm/data-uri-to-buffer@4.0.1 | None | 0 |
10 kB | tootallnate |
| npm/diff@5.1.0 | None | 0 |
390 kB | kpdecker |
| npm/fetch-blob@3.2.0 | None | +2 |
7.67 MB | endless |
| npm/formdata-polyfill@4.0.10 | None | 0 |
32.2 kB | endless |
| npm/is-buffer@2.0.5 | None | 0 |
4.59 kB | feross |
| npm/kleur@4.1.5 | None | 0 |
20.3 kB | lukeed |
| npm/mdast-util-definitions@5.1.1 | None | +5 |
83.4 kB | wooorm |
| npm/mdast-util-to-hast@13.2.0 | None | +9 |
380 kB | wooorm |
| npm/mri@1.2.0 | None | 0 |
13.3 kB | lukeed |
| npm/node-fetch@3.3.0 | network | 0 |
107 kB | node-fetch-bot |
| npm/sade@1.8.1 | None | 0 |
31.5 kB | lukeed |
| npm/unist-builder@3.0.0 | None | 0 |
11.7 kB | wooorm |
| npm/unist-util-generated@2.0.1 | None | 0 |
10.1 kB | wooorm |
| npm/uvu@0.5.6 | None | +1 |
62.5 kB | lukeed |
| npm/vfile-location@4.0.1 | None | +3 |
99 kB | wooorm |
dependabot[bot]
Bumps postcss from 8.4.38 to 8.4.39.
Release notes
Sourced from postcss's releases.
Changelog
Sourced from postcss's changelog.
Commits
e0efb16Release 8.4.39 version48304c5Update dependencies155ac57Merge pull request #1947 from romainmenke/fix-css-syntax-error-type--reliable...1b9b466fix CssSyntaxError type declaration3f4d96eUpdate dependenciesb952be7Update CI actionsb512b29Typof9a9868Move to pnpm 9 and Node.js 2279052c2Merge pull request #1940 from Xvezda/patch-10eedad4Update changed urlsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show