Skip to content

chore(deps): bump postcss-selector-parser and @wordpress/stylelint-config - #82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-589b8e33b9
Open

chore(deps): bump postcss-selector-parser and @wordpress/stylelint-config#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-589b8e33b9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss-selector-parser and @wordpress/stylelint-config. These dependencies needed to be updated together.
Updates postcss-selector-parser from 7.1.4 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)
Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

  • fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5 - 2026-08-07

  • fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
  • fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
  • fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)
Commits
  • 4eb3468 7.1.6
  • 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
  • e33e9bc 7.1.5
  • 6f4e6c1 fix: TypeError on unclosed [, ( and trailing | (#330)
  • 4d8437f fix: preserve whitespace before a * namespace in attribute selectors (#325)
  • e2f9029 fix: don't treat a non-prefix token before | as a namespace (#324)
  • dd50ee1 chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 (#331)
  • 7e3abb2 chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 (#328)
  • See full diff in compare view

Updates @wordpress/stylelint-config from 23.42.0 to 26.1.0

Release notes

Sourced from @​wordpress/stylelint-config's releases.

24.2.0

Changelog

Features

Components

  • UI: Add Meter. (83855)
  • UI: Add Progress with custom color support. (83781)
  • UI: Add SearchableSelectControl. (80979)

Interactivity API

  • Add a data-wp-html directive. (83092)
  • Interactivity API Router: Add reactive navigation lifecycle and initiator API. (83280)

Enhancements

  • Dashboard Widgets: Let a mounted widget declare actions at runtime. (83877)

Block Library

  • Accordion Heading: Add line height support. (83958)
  • Archives: Add minimum height support. (83573)
  • Avatar: Add shadow support. (83929)
  • Avatar: Explain that avatars use the Gravatar service. (83567)
  • Button: Add background image, size, and gradient support. (83950)
  • Button: Only open the link popover on explicit user action. (30166)
  • Buttons: Add minimum width and height support. (83894)
  • Buttons: Add shadow support. (83916)
  • Code: Add minimum width and height support. (83574)
  • Columns: Add minimum width and height support. (83895)
  • Columns: Remove the column count slider. (83262)
  • Comments Pagination: Add border support. (83746)
  • Comments Pagination: Add padding, margin, and block gap support. (83744)
  • Details: Add minimum width support. (83576)
  • Embed: Add minimum width and height support. (83903)
  • Embed: Add padding support. (83963)
  • File: Add minimum width and height support. (83896)
  • File: Add shadow support. (83918)
  • Footnotes: Add minimum width and height support. (83579)
  • Gallery Lightbox: Prevent image click from closing the dialog when navigation is enabled. (78898)
  • Gallery: Add duotone support. (83978)
  • Gallery: Add minimum width and height support. (83897)
  • Gallery: Add Order By controls for static gallery, consolidate controls in settings sidebar. (83438)
  • Gallery: Add shadow support. (83919)
  • Heading: Add minimum width and height support. (83580)
  • Heading: Add text indent support. (83615)
  • Home Link: Add minimum width and height support. (83582)
  • Home Link: Add padding and margin support. (83607)
  • Icon: Add block bindings support to the icon attribute. (80730)
  • Latest Comments: Add border support. (84148)

... (truncated)

Changelog

Sourced from @​wordpress/stylelint-config's changelog.

26.1.0 (2026-10-07)

26.0.0 (2026-09-23)

Breaking Changes

  • Fix the font-weight-notation rule to only accept numeric values and disallow relative weights. (#82778).

Enhancements

  • Enable custom-property-pattern to disallow --_gcd-* and --_wp-* custom properties. Stylelint does not merge this rule, so projects that already set custom-property-pattern will not gain the ban and need to include (?!_(?:gcd|wp)-) in their own pattern if they want it. (#83025, #83075)

25.0.0 (2026-09-10)

Breaking Changes

  • Upgrade the supported Stylelint versions to stylelint ^17.14.1 and stylelint-scss ^7.2.0, with @stylistic/stylelint-plugin ^5.2.1, stylelint-config-recommended ^18.0.0, and stylelint-config-recommended-scss ^17.0.1. This changes the inherited rules, including enabling media-type-no-deprecated and no-invalid-position-declaration (#80738).

Bug Fixes

  • Fix invalid RegEx for the @stylistic/max-line-length rule in the stylistic config (#80738).

24.3.0 (2026-08-26)

24.2.0 (2026-08-12)

24.1.0 (2026-07-29)

24.0.0 (2026-07-14)

Breaking Changes

  • Increase the minimum required Node.js version to 20.19.0 || 22.13.0, i.e. versions supporting require(esm) (#79755).

Enhancements

  • length-zero-no-unit rule now ignores custom properties and var functions, for better compatibility with usage inside calc functions. calc functions are already exempt from the rule by default, and this change extends the same exemption to variables that may be used within calc functions, as unitless zeros are not valid in CSS math functions (#79786).
  • Include plugin-wpds/no-token-fallback-values from @wordpress/theme to catch manual design token fallbacks in the shared Stylelint config (#79768).
  • Update @stylistic/stylelint-plugin to ^3.1.3 (#79648).
  • Convert configuration to ESM (#79755).
Commits
  • 12441e2 chore(release): publish
  • 36c194f Update changelog files
  • 7b99cae Merge changes published in the Gutenberg plugin "release/24.2" branch
  • 56d8058 chore(release): publish
  • 9ff3f0e Update changelog files
  • f905a64 Merge changes published in the Gutenberg plugin "release/24.1" branch
  • 485f42a chore(release): publish
  • c89dd70 Update changelog files
  • a55a0d7 Merge changes published in the Gutenberg plugin "release/24.0" branch
  • d06b010 chore(release): publish (#82084)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
chore(deps): bump postcss-selector-parser and @wordpress/stylelint-co…
9286a7b 
…nfig

Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) and [@wordpress/stylelint-config](https://github.com/WordPress/gutenberg/tree/HEAD/packages/stylelint-config). These dependencies needed to be updated together.

Updates `postcss-selector-parser` from 7.1.4 to 7.1.6
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss-selector-parser@7.1.4...7.1.6)

Updates `@wordpress/stylelint-config` from 23.42.0 to 26.1.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/stylelint-config/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/stylelint-config@26.1.0/packages/stylelint-config)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.6
  dependency-type: indirect
- dependency-name: "@wordpress/stylelint-config"
  dependency-version: 26.1.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants