[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: postcss-color-hex-alpha

The new version differs by 14 commits.

• d227b0e 7.0.0
• 289fb36 Update dependencies
• d8c2c81 Update to postcss 8 (Update README.md csstools/postcss-preset-env#15)
• 6725ee3 Update README.md (3.4.0 csstools/postcss-preset-env#14)
• 3c9ca65 6.0.0
• b49e195 5.0.3
• 711d314 Fix clip path with hash in url
• d3fafd2 5.0.2
• f980266 5.0.1
• 9f7f470 5.0.0
• cbe9486 4.0.0
• fd622b8 Use PostCSS 7
• 294cc20 Merge pull request Fixed links csstools/postcss-preset-env#7 from postcss/feature/cssdb-badge
• e299d4d Add CSS Standard Status

See the full diff

Package name: postcss-custom-media

The new version differs by 20 commits.

• 24234a2 8.0.0
• d861c70 Merge pull request Add more docs about autoprefixer csstools/postcss-preset-env#57 from postcss/postcss-8
• 31bd6a6 Support PostCSS 8
• ca22cf6 7.0.8
• 5db224c 7.0.7
• f095211 7.0.6
• 70ee277 Update README.md
• 0929148 7.0.5
• 1d9d913 Polish readme
• 75c2768 7.0.4
• 39a25e0 7.0.3
• 407c33c 7.0.2
• b59e59a 7.0.1
• b780656 7.0.0
• 926f1ef Use PostCSS 7
• 8336b81 Update README.md heading
• d472113 Fix badge
• e2c61ac Merge pull request px fallback for rem values csstools/postcss-preset-env#30 from postcss/feature/cssdb-badge
• 8f03744 Add CSS Standard Status
• 8136745 Change link to specification

See the full diff

Package name: postcss-custom-properties

The new version differs by 49 commits.

• 421253e 11.0.0
• 276957a Support PostCSS 8 (place-content/items issue  csstools/postcss-preset-env#229)
• 8445f78 10.0.0
• 32a21b8 Fix build
• b686923 feat: upgrade postcss-values-parser to version without high risk vulnererability (PostCSS Values Parser warning csstools/postcss-preset-env#228)
• 3d7288c 9.2.0
• ef36467 Fix 'basic:export-scss' test
• 27efa3e Fix/multipart values (Update postcss-initial to v4 csstools/postcss-preset-env#222)
• 4dbb3fc Export to SCSS file (Unknown error from PostCSS plugin. Your current PostCSS version is 8.3.0, but postcss-preset-env uses 7.0.36. csstools/postcss-preset-env#212)
• 6c7addc support for ".pcss" file resolution in importFrom option (Update postcss to 8.3.4 csstools/postcss-preset-env#211)
• 817c42a Added a note on readme (Release updates csstools/postcss-preset-env#214)
• a250907 fix multiple var on a single property ("margin-inline-start" and "padding-inline-start" are lost after compilation csstools/postcss-preset-env#210)
• b898eb2 Update README.md (FR: support for choosing browserslists environments csstools/postcss-preset-env#206)
• 24c108b Allow combined selectors (Conflict with postcss-import plugin? csstools/postcss-preset-env#199)
• d2d1d59 9.1.1
• 44dfb33 Preserve spaces in multi-part values.
• 1e1ef6b 9.1.0
• 3e72084 9.0.2
• 6680f67 9.0.1
• 2d309a8 9.0.0
• 837da49 8.0.11
• ffad7a9 Fix grunt example
• 0e5a66d upgrade to postcss-values-parser@3
• 654d59d 8.0.10

See the full diff

Package name: postcss-custom-selectors

The new version differs by 13 commits.

• 9862be0 6.0.0
• a816049 Update dependencies
• 174c44c Merge pull request postcss-preset-env removes empty quotes csstools/postcss-preset-env#46 from DanielSwensson/fix/support-postcss-8
• 656e5b4 Migrate postcss@8
• cfb004c Update index.js
• babc7aa Fix bug importing from multiple sources
• 4a422f0 5.1.2
• 83292da 5.1.1
• 6380b00 5.1.0
• aadf18c 5.0.0
• 77742dd Use PostCSS 7
• 17d2d63 Merge pull request And Yarn? csstools/postcss-preset-env#35 from postcss/feature/cssdb-badge
• bc926c5 Add CSS Standard Status

See the full diff

Package name: postcss-font-variant

The new version differs by 11 commits.

• 985b34c 5.0.0
• 19d672a Added: compatibility with postcss v8.x
• 0226c44 4.0.1
• ac2f724 Merge pull request Update README.md csstools/postcss-preset-env#15 from arzg/fix-small-caps
• 589ca00 Fix bug where font-variant-caps: small-caps resulted in c2sc feature
• 792a72b Update README.md
• 05817fd Merge pull request Use import * as caniuse instead of import caniuse for compatibility csstools/postcss-preset-env#13 from postcss/Semigradsky-patch-1
• db1aa64 Update README.md
• 9084a34 4.0.0
• ae337a2 Upgrade PostCSS to 7.0.2
• c2666f1 Update README.md heading

See the full diff

Package name: postcss-media-minmax

The new version differs by 8 commits.

• d0fe43c 5.0.0
• c6be784 Merge pull request Adding postcss-flexbugs-fixes for fixing at least some flex bugs with IE 10-11 csstools/postcss-preset-env#27 from Semigradsky/postcss-8
• d526cf3 Support PostCSS 8
• f25abff 4.0.0
• 8a254c6 Update PostCSS
• 9109000 Upgrade to PostCSS 7
• ce59e54 Merge pull request Consider adding animations to demonstrate transformations csstools/postcss-preset-env#20 from postcss/feature/cssdb-badge
• 42ad9ec Add CSS Standard Status

See the full diff

Package name: postcss-selector-not

The new version differs by 17 commits.

• d25312f 5.0.0
• e439a3d Merge pull request Nesting isn't working with postcss-preset-env + postcss-cli csstools/postcss-preset-env#16 from postcss/postcss-8
• 3de1907 Support PostCSS 8
• fefab08 4.0.1
• 20f8897 Merge pull request Doesn't expand css :matches() csstools/postcss-preset-env#17 from michgeek/master
• 8228db1 Add edge case about attribute selectors containing :not
• 64b10ed Merge pull request Update README.md csstools/postcss-preset-env#15 from postcss/Semigradsky-patch-1
• 34ff778 Update README.md
• 64862c8 Update README.md
• 12ed317 4.0.0
• a980515 Ensure escaped colons do not break selector transformations
• 0508237 Upgrade postcss version
• 77c5e7f Update README.md - cssdb stage
• 2a4964b Merge pull request postcss-image-set-polyfill csstools/postcss-preset-env#12 from Nemo64/patch-1
• 52d9119 fixed chore(package): update postcss-font-family-system-ui to version 3.0 csstools/postcss-preset-env#4
• 618e446 Merge pull request 2.2.0 csstools/postcss-preset-env#9 from postcss/feature/cssdb-badge
• d45e8c9 Add CSS Standard Status

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication