build(deps): bump postcss-selector-parser, stylelint and stylelint-config-sass-guidelines in /docs by dependabot[bot] · Pull Request #54 · cicsdev/cics-security-sdv-samples

dependabot · 2026-10-19T06:49:55Z

Bumps postcss-selector-parser to 7.1.6 and updates ancestor dependencies postcss-selector-parser, stylelint and stylelint-config-sass-guidelines. These dependencies need to be updated together.

Updates postcss-selector-parser from 6.1.2 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

fix: don't treat a non-prefix token before | as a namespace (#324 by @spokodev)

fix: preserve whitespace before a * namespace in attribute selectors (#325 by @spokodev)

fix: TypeError on unclosed [, ( and trailing | (#330 by @theRizwan)

7.1.4

fix: tolerate non-node children when serializing selectors

7.1.3

Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2

Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (#316 by @MoOx)

v7.1.1

7.1.1

perf: replace startsWith with strict equality (#308)

fix(types): add walkUniversal declaration (#311)

v7.1.0

7.1.0

feat: insert(Before|After) support multiple new node

v7.0.0

7.0.0

Feat: make insertions during iteration safe (major)

6.1.4

fix: tolerate non-node children when serializing selectors

6.1.3

Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 via backport of (#316 by @MoOx)

Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5 - 2026-08-07

fix: don't treat a non-prefix token before | as a namespace (#324 by @spokodev)

fix: preserve whitespace before a * namespace in attribute selectors (#325 by @spokodev)

fix: TypeError on unclosed [, ( and trailing | (#330 by @theRizwan)

7.1.4 - 2026-06-11

fix: tolerate non-node children when serializing selectors

7.1.3 - 2026-06-11

Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2 - 2026-06-09

Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (#316 by @MoOx)

7.1.1

perf: replace startsWith with strict equality (#308)

fix(types): add walkUniversal declaration (#311)

7.1.0

feat: insert(Before|After) support multiple new node

7.0.0

Feat: make insertions during iteration safe (major)

Commits

4eb3468 7.1.6
62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
e33e9bc 7.1.5
6f4e6c1 fix: TypeError on unclosed [, ( and trailing | (#330)
4d8437f fix: preserve whitespace before a * namespace in attribute selectors (#325)
e2f9029 fix: don't treat a non-prefix token before | as a namespace (#324)
dd50ee1 chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 (#331)
7e3abb2 chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 (#328)
4a7e4e3 7.1.4
e2021c5 fix: tolerate non-node children when serializing selectors
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by moox, a new releaser for postcss-selector-parser since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint from 16.8.1 to 16.26.1

Release notes

Sourced from stylelint's releases.

16.26.1

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@romainmenke).

Fixed: at-rule-no-unknown false positives for @function (#8851) (@jeddy3).

Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@jeddy3).

Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@taearls).

Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@Mouvedia).

16.26.0

It adds 1 feature and fixes 2 bugs.

Added: support for customSyntax with function export (#8834) (@silverwind).

Fixed: custom-property-no-missing-var-function false positives for style query in if() function (#8813) (@sajdakabir).

Fixed: media-feature-range-notation false positives for multiple queries and except: exact-value (#8832) (@jeddy3).

16.25.0

It adds 3 new features, including experimental support for bulk suppressions. It's also our first immutable release, with the package published to npm using trusted publishing and our dependencies updated on a cool down for improved supply chain security.

Added: support for bulk suppressions (#8564) (@ryo-manba).

Added: ignoreAtRules: [] to no-invalid-position-declaration (#8781) (@jrmlt).

Added: rule name to custom messages (#8774) (@jhae-de).

16.24.0

It adds 1 new rule, adds 1 option to a rule and fixes 2 bugs.

Added: rule-nesting-at-rule-required-list rule (#8680) (@sw1tch3roo).

Added: ignoreAtRules: [] to nesting-selector-no-missing-scoping-root (#8743) (@karlhorky).

Fixed: function-no-unknown false positives for contrast-color() and sibling-*() (#8729) (@Mouvedia).

Fixed: selector-pseudo-class-no-unknown false positives for :heading (#8749) (@Mouvedia).

16.23.1

It fixes 7 bugs.

Fixed: no-invalid-position-declaration false positives for embedded styles (#8701) (@sw1tch3roo).

Fixed: property-no-deprecated erroneously autofixing clip (#8699) (@immitsu).

Fixed: property-no-deprecated false positives for -webkit-box-orient: vertical; (#8699) (@immitsu).

Fixed: selector-pseudo-*-no-unknown false positives for some meter pseudo classes/elements (#8708) (@Mouvedia).

Fixed: selector-pseudo-class-no-unknown false positives for :unchecked (#8705) (@Mouvedia).

Fixed: selector-pseudo-element-no-unknown false positives for ::search-text (#8707) (@Mouvedia).

Fixed: selector-type-no-unknown false positives for selectedcontent (#8716) (@Mouvedia).

16.23.0

It adds 5 new rules, 1 option to a rule and fixes 3 bugs. We've turned on the new rules in our standard config.

Added: block-no-redundant-nested-style-rules rule (#8684) (@sw1tch3roo).

Added: media-type-no-deprecated rule (#8668) (@immitsu).

Added: nesting-selector-no-missing-scoping-root rule (#8674) (@sw1tch3roo).

Added: no-invalid-position-declaration rule (#8669) (@sw1tch3roo).

... (truncated)

Changelog

Sourced from stylelint's changelog.

16.26.1 - 2025-11-28

It fixes numerous false positive bugs, including many in the declaration-property-value-no-unknown rule for the latest CSS specifications.

Fixed: *-no-unknown false positives for latest specs by integrating @csstools/css-syntax-patches-for-csstree (#8850) (@romainmenke).

Fixed: at-rule-no-unknown false positives for @function (#8851) (@jeddy3).

Fixed: declaration-property-value-no-unknown false positives for attr(), if() and custom functions (#8853) (@jeddy3).

Fixed: function-url-quotes false positives when URLs require quoting (#8804) (@taearls).

Fixed: selector-pseudo-element-no-unknown false positives for ::scroll-button() (#8856) (@Mouvedia).

16.26.0 - 2025-11-21

It adds 1 feature and fixes 2 bugs.

Added: support for customSyntax with function export (#8834) (@silverwind).

Fixed: custom-property-no-missing-var-function false positives for style query in if() function (#8813) (@sajdakabir).

Fixed: media-feature-range-notation false positives for multiple queries and except: exact-value (#8832) (@jeddy3).

16.25.0 - 2025-10-03

It adds 3 new features, including experimental support for bulk suppressions. It's also our first immutable release, with the package published to npm using trusted publishing and our dependencies updated on a cool down for improved supply chain security.

Added: support for bulk suppressions (#8564) (@ryo-manba).

Added: ignoreAtRules: [] to no-invalid-position-declaration (#8781) (@jrmlt).

Added: rule name to custom messages (#8774) (@jhae-de).

16.24.0 - 2025-09-07

It adds 1 new rule, adds 1 option to a rule and fixes 2 bugs.

Added: rule-nesting-at-rule-required-list rule (#8680) (@sw1tch3roo).

Added: ignoreAtRules: [] to nesting-selector-no-missing-scoping-root (#8743) (@karlhorky).

Fixed: function-no-unknown false positives for contrast-color() and sibling-*() (#8729) (@Mouvedia).

Fixed: selector-pseudo-class-no-unknown false positives for :heading (#8749) (@Mouvedia).

16.23.1 - 2025-08-07

It fixes 7 bugs.

Fixed: no-invalid-position-declaration false positives for embedded styles (#8701) (@sw1tch3roo).

Fixed: property-no-deprecated erroneously autofixing clip (#8699) (@immitsu).

Fixed: property-no-deprecated false positives for -webkit-box-orient: vertical; (#8699) (@immitsu).

Fixed: selector-pseudo-*-no-unknown false positives for some meter pseudo classes/elements (#8708) (@Mouvedia).

Fixed: selector-pseudo-class-no-unknown false positives for :unchecked (#8705) (@Mouvedia).

Fixed: selector-pseudo-element-no-unknown false positives for ::search-text (#8707) (@Mouvedia).

Fixed: selector-type-no-unknown false positives for selectedcontent (#8716) (@Mouvedia).

16.23.0 - 2025-07-29

It adds 5 new rules, 1 option to a rule and fixes 3 bugs. We've turned on the new rules in our standard config.

... (truncated)

Commits

b968143 Release 16.26.1 (#8857)
2b24b9c Fix selector-pseudo-element-no-unknown false positives for `::scroll-button...
f152564 Fix *-no-unknown false positives for latest specs by integrating `@csstools...
431cb53 Fix at-rule-no-unknown false positives for @function (#8851)
119097e Fix declaration-property-value-no-unknown false positives for attr() and ...
4b9c68b Fix function-url-quotes false positives when URLs require quoting (#8804)
8cc4ced Bump rollup from 4.52.5 to 4.53.2 (#8848)
4383feb Bump file-entry-cache from 11.1.0 to 11.1.1 (#8846)
a8a7560 Bump the eslint group with 2 updates (#8845)
947ad33 Fix patch-package warning about mismatched @types/css-tree version (#8844)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Updates stylelint-config-sass-guidelines from 12.0.0 to 13.0.0

Release notes

Sourced from stylelint-config-sass-guidelines's releases.

v13.0.0

Changed

Bumped stylelint from 16.9.0 to 17.1.0

Bumped stylelint-scss from 6.6.0 to 7.0.0

Bumped @stylistic/stylelint-plugin from 3.0.1 to 5.0.1

Updated minimum node version to 20.19.0

Updated "@stylistic/function-parentheses-space-inside": "never" to "@stylistic/function-parentheses-space-inside": "never-single-line" for better support with prettier

v12.1.0

Changed

Bumped @stylistic/stylelint-plugin from 2.1.2 to 3.0.1

Bumped stylelint from 16.6.1 to 16.9.0

Bumped postcss from 8.4.39 to 8.4.45

Bumped stylelint-scss from 6.4.1 to 6.6.0

Changelog

Sourced from stylelint-config-sass-guidelines's changelog.

[13.0.0]

Full list of changes can be viewed here

Changed

Bumped stylelint from 16.9.0 to 17.1.0

Bumped stylelint-scss from 6.6.0 to 7.0.0

Bumped @stylistic/stylelint-plugin from 3.0.1 to 5.0.1

Updated minimum node version to 20.19.0

Updated "@stylistic/function-parentheses-space-inside": "never" to "@stylistic/function-parentheses-space-inside": "never-single-line" for better support with prettier

[12.1.0]

Full list of changes can be viewed here

Changed

Bumped @stylistic/stylelint-plugin from 2.1.2 to 3.0.1

Bumped stylelint from 16.6.1 to 16.9.0

Bumped postcss from 8.4.39 to 8.4.45

Bumped stylelint-scss from 6.4.1 to 6.6.0

Commits

873156e Released version 13.0.0
d9f8a3a Update CHANGELOG.md
3140138 Update package-lock (#373)
1a7ffa2 Update dependencies (#372)
f04c797 Update test expectations (#369)
ea7f5bc Released version 12.1.0
f99bfe8 Update CHANGELOG.md
0f1b73f Bump stylelint-scss from 6.5.1 to 6.6.0 (#356)
45dc7bb Bump postcss from 8.4.44 to 8.4.45 (#355)
3fb8e3e Bump @stylistic/stylelint-plugin from 2.1.2 to 3.0.1 (#350)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

…nfig-sass-guidelines Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) to 7.1.6 and updates ancestor dependencies [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser), [stylelint](https://github.com/stylelint/stylelint) and [stylelint-config-sass-guidelines](https://github.com/bjankord/stylelint-config-sass-guidelines). These dependencies need to be updated together. Updates `postcss-selector-parser` from 6.1.2 to 7.1.6 - [Release notes](https://github.com/postcss/postcss-selector-parser/releases) - [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md) - [Commits](postcss/postcss-selector-parser@v6.1.2...7.1.6) Updates `stylelint` from 16.8.1 to 16.26.1 - [Release notes](https://github.com/stylelint/stylelint/releases) - [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md) - [Commits](stylelint/stylelint@16.8.1...16.26.1) Updates `stylelint-config-sass-guidelines` from 12.0.0 to 13.0.0 - [Release notes](https://github.com/bjankord/stylelint-config-sass-guidelines/releases) - [Changelog](https://github.com/bjankord/stylelint-config-sass-guidelines/blob/main/CHANGELOG.md) - [Commits](bjankord/stylelint-config-sass-guidelines@v12.0.0...v13.0.0) --- updated-dependencies: - dependency-name: postcss-selector-parser dependency-version: 7.1.6 dependency-type: indirect - dependency-name: stylelint dependency-version: 16.26.1 dependency-type: direct:development - dependency-name: stylelint-config-sass-guidelines dependency-version: 13.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026

Navigation Menu

Repository navigation

build(deps): bump postcss-selector-parser, stylelint and stylelint-config-sass-guidelines in /docs - #54

build(deps): bump postcss-selector-parser, stylelint and stylelint-config-sass-guidelines in /docs#54
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/docs/multi-325b20aa5e

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 19, 2026

7.1.6

7.1.5

7.1.4

7.1.3

7.1.2

v7.1.1

7.1.1

v7.1.0

7.1.0

v7.0.0

7.0.0

6.1.4

6.1.3

7.1.6 - 2026-09-03

7.1.5 - 2026-08-07

7.1.4 - 2026-06-11

7.1.3 - 2026-06-11

7.1.2 - 2026-06-09

7.1.1

7.1.0

7.0.0

16.26.1

16.26.0

16.25.0

16.24.0

16.23.1

16.23.0

16.26.1 - 2025-11-28

16.26.0 - 2025-11-21

16.25.0 - 2025-10-03

16.24.0 - 2025-09-07

16.23.1 - 2025-08-07

16.23.0 - 2025-07-29

v13.0.0

Changed

v12.1.0

Changed

[13.0.0]

Changed

[12.1.0]

Changed

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants