[Snyk] Upgrade postcss from 8.4.5 to 8.4.14

[MarcelRaschke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade postcss from 8.4.5 to 8.4.14.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2022-05-18.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Directory Traversal SNYK-JS-MOMENT-2440688	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-2404333	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NANOID-2332193	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: postcss

• 8.4.14 - 2022-05-18
  
  • Print “old plugin API” warning only if plugin was used (by @ zardoy).
• 8.4.13 - 2022-04-30
  
  • Fixed append() error after using .parent (by @ thecrypticace).
• 8.4.12 - 2022-03-16
  
  • Fixed package.funding to have same value between all PostCSS packages.
• 8.4.11 - 2022-03-15
  
  • Fixed Declaration#raws.value type.
• 8.4.10 - 2022-03-15
  
  • Fixed package.funding URL format.
• 8.4.9 - 2022-03-15
  
  • Fixed package.funding (by @ mondeja).
• 8.4.8 - 2022-03-07
  
  • Fixed end position in empty Custom Properties.
• 8.4.7 - 2022-02-24
  
  • Fixed Node#warn() type (by @ ybiquitous).
  • Fixed comment removal in values after ,.
• 8.4.6 - 2022-02-01
• 8.4.5 - 2021-12-13

from postcss GitHub release notes

Commit messages

Package name: postcss

• b7d1836 Release 8.4.14 version
• 57006b4 Update dependencies
• 2a97ab8 Merge pull request Use HTTPS when linking to nodejs.org nodejs/nodejs.org#1744 from zardoy/patch-1
• 6447b55 Merge pull request Update Node.js Everywhere copy from weekly to monthly nodejs/nodejs.org#1747 from ben-lau/main
• e36ed17 Update plugins.md
• 24f2efc Update depedencies
• 9bda624 Try to fix CI
• 7cd8e27 improve warnings count testing
• 2295e28 fix tests
• fc19f1b fix: print deprecation warning only when plugin is used
• 80608c6 Release 8.4.13 version
• b03cf14 Clean up code
• 8a1f6c2 Merge pull request Replace outdated member list in README with link to GitHub team nodejs/nodejs.org#1740 from thecrypticace/fix/normalization-append-error
• 2713d8d Merge pull request Quote doesn't look well nodejs/nodejs.org#1741 from blinpete/main
• 02a026e Update README.md
• 2955628 Fix `append()` failing after mutating nodes through .parent
• e1a055c Update dependencies
• fa73b4c Update Deno CI config
• e5c9298 Use Node.js 18 on Windows
• 3b934bb Update check-dts
• dc03ca1 Update ESLint config
• 88671bc Update Node.js on CI and ESLint config
• 34f6fee Fix TypeDoc
• 92feea6 Update dependecnies

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs