[Snyk] Upgrade postcss from 8.4.5 to 8.4.18

[snyk-bot]

Snyk has created this PR to upgrade postcss from 8.4.5 to 8.4.18.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 13 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-10-12.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-UGLIFYJS-3113873	311/1000 Why? Recently disclosed, CVSS 4.8	No Known Exploit
	Information Exposure SNYK-JS-NANOID-2332193	311/1000 Why? Recently disclosed, CVSS 4.8	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: postcss

• 8.4.18 - 2022-10-12
  
  • Fixed an error on absolute: true with empty sourceContent (by @ KingSora).
• 8.4.17 - 2022-09-30
  
  • Fixed Node.before() unexpected behavior (by @ romainmenke).
  • Added TOC to docs (by @ muddv).
• 8.4.16 - 2022-08-06
  
  • Fixed Root AST migration.
• 8.4.15 - 2022-08-06
  
  • Fixed AST normalization after using custom parser with old PostCSS AST.
• 8.4.14 - 2022-05-18
  
  • Print “old plugin API” warning only if plugin was used (by @ zardoy).
• 8.4.13 - 2022-04-30
  
  • Fixed append() error after using .parent (by @ thecrypticace).
• 8.4.12 - 2022-03-16
  
  • Fixed package.funding to have same value between all PostCSS packages.
• 8.4.11 - 2022-03-15
  
  • Fixed Declaration#raws.value type.
• 8.4.10 - 2022-03-15
  
  • Fixed package.funding URL format.
• 8.4.9 - 2022-03-15
• 8.4.8 - 2022-03-07
• 8.4.7 - 2022-02-24
• 8.4.6 - 2022-02-01
• 8.4.5 - 2021-12-13

from postcss GitHub release notes

Commit messages

Package name: postcss

• d33f272 Release 8.4.18 version
• 75d6556 Update dependencies
• a11d868 Merge pull request Sync Ukrainian working-groups placeholder with English origin nodejs/nodejs.org#1788 from KingSora/main
• a1c0b8b delete package.lock
• 28be739 add toFileUrl function
• edfd3e0 improvement
• 3d0d204 improve test
• 3dac15c absolute sourcemaps have source content
• 767c83e Merge pull request zh-CN：Add missing translation for 'Security' nodejs/nodejs.org#1787 from muddv/architecture-title-fix
• 567b976 Change title
• 17315d9 Merge pull request Remove duplicated semicolon nodejs/nodejs.org#1784 from muddv/doc-pages-title-fix
• 5c81bc8 Delete duplicate title
• 436ea47 Move title
• 87feb3e Merge pull request Fix scrolling issue nodejs/nodejs.org#1783 from muddv/index-link-fix
• d58362e Fix wrong repo link
• b8a8ace Fix wrong repo link
• 10114f9 Merge pull request add spanish translation for "collab summit" nodejs/nodejs.org#1782 from romainmenke/patch-1
• 5ca86e4 fix typo
• 34c0de4 Release 8.4.17 version
• 9454dcc Merge pull request Update Node+JS Interactive banner nodejs/nodejs.org#1781 from romainmenke/fix-issue-1778--practical-snowy-owl-25291b279a
• 7278432 recalculate the insertion index after normalizing a node
• e1538a4 Merge pull request Fix link to rubyeventmachine.com nodejs/nodejs.org#1780 from romainmenke/add-test-for-sorting-nodes--courageous-malayan-civet-f154d4f2bc
• 24c1432 add test for sorting container.nodes
• c047e0a Fix index

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs