From e6e5826423a0a700a8c544ce2c8cbcdef694160e Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 17:30:15 -0500
Subject: [PATCH] deps: bump postcss from 8.5.19 to 8.5.26 in /docs (#2881)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [postcss](https://github.com/postcss/postcss) from 8.5.19 to
8.5.26.
Release notes
Sourced from postcss's
releases.
8.5.26
- Fixed
list.split() regression (by @lazerg).
- Track symlinks in path protection in source map loading (by
@drengir1).
8.5.25
- Fixed 8.5.17 visitor regression.
- Fixed
list.split() for non-string values (by @amir-rezaei).
8.5.24
- Preserve the BOM after the processing (by
@hdimer).
8.5.23
- Do not load source map without
opts.from for security
reasons.
8.5.22
8.5.21
8.5.20
Changelog
Sourced from postcss's
changelog.
8.5.26
- Fixed
list.split() regression (by @lazerg).
- Track symlinks in path protection in source map loading (by
@drengir1).
8.5.25
- Fixed 8.5.17 visitor regression.
- Fixed
list.split() for non-string values (by @amir-rezaei).
8.5.24
- Preserve the BOM after the processing (by
@hdimer).
8.5.23
- Do not load source map without
opts.from for security
reasons.
8.5.22
8.5.21
8.5.20
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/headroomlabs-ai/headroom/network/alerts).
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
docs/package-lock.json | 16 ++++++++--------
docs/package.json | 2 +-
2 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/docs/package-lock.json b/docs/package-lock.json
index 152001ff3..55bff9b41 100644
--- a/docs/package-lock.json
+++ b/docs/package-lock.json
@@ -35,7 +35,7 @@
"@types/react-dom": "^19.2.3",
"ai": "^6.0.149",
"openai": "^6.47.0",
- "postcss": "^8.5.19",
+ "postcss": "^8.5.26",
"tailwindcss": "^4.2.2",
"typescript": "^5.9.3"
}
@@ -5629,9 +5629,9 @@
"license": "MIT"
},
"node_modules/nanoid": {
- "version": "3.3.15",
- "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.15.tgz",
- "integrity": "sha512-y7Wygv/7mEOvxTuEQDB8StXdMRBWf1kR/tlhAzBRUFkB2jfcLOAxO/SHmOO2zgz1pVgK29/kyupn059/bCHdjA==",
+ "version": "3.3.18",
+ "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+ "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
"funding": [
{
"type": "github",
@@ -5816,9 +5816,9 @@
}
},
"node_modules/postcss": {
- "version": "8.5.19",
- "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.19.tgz",
- "integrity": "sha512-Mz8SaolMd8nB+G13WkORcxQKHZ/NE4xXevtkJHVuG+guo9/wYKlIMTKAqGdEmYOXR2ijPjTYNHssizdaVSUNdQ==",
+ "version": "8.5.26",
+ "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+ "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
"funding": [
{
"type": "opencollective",
@@ -5835,7 +5835,7 @@
],
"license": "MIT",
"dependencies": {
- "nanoid": "^3.3.12",
+ "nanoid": "^3.3.17",
"picocolors": "^1.1.1",
"source-map-js": "^1.2.1"
},
diff --git a/docs/package.json b/docs/package.json
index 6a2171274..21abffaf3 100644
--- a/docs/package.json
+++ b/docs/package.json
@@ -36,7 +36,7 @@
"@types/react-dom": "^19.2.3",
"ai": "^6.0.149",
"openai": "^6.47.0",
- "postcss": "^8.5.19",
+ "postcss": "^8.5.26",
"tailwindcss": "^4.2.2",
"typescript": "^5.9.3"
},