chore(deps-dev): bump postcss from 8.5.10 to 8.5.23 by dependabot[bot] · Pull Request #4964 · module-federation/core

dependabot · 2026-08-05T08:47:41Z

Bumps postcss from 8.5.10 to 8.5.23.

Release notes

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

Changelog

Sourced from postcss's changelog.

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

... (truncated)

Commits

eb9e1fe Release 8.5.23 version
9d19c78 Update dependencies
7beca13 Does no load source map file without opts.from
decea51 Typo
c18e30d Update EM banner
98a39ad Update EM banner
a3e48c4 Release 8.5.22 version
f49d691 Fix custom property losing its semicolon before a comment (#2117)
28e0daf Release 8.5.21 version
3d2b4e4 Update dependencies
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

changeset-bot · 2026-08-05T08:47:50Z

⚠️ No Changeset found

Latest commit: 77fc184

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

pkg-pr-new · 2026-08-05T08:50:54Z

Open in StackBlitz

@module-federation/devtools

pnpm add https://pkg.pr.new/@module-federation/devtools@77fc184

@module-federation/cli

pnpm add https://pkg.pr.new/@module-federation/cli@77fc184

create-module-federation

pnpm add https://pkg.pr.new/create-module-federation@77fc184

@module-federation/dts-plugin

pnpm add https://pkg.pr.new/@module-federation/dts-plugin@77fc184

@module-federation/enhanced

pnpm add https://pkg.pr.new/@module-federation/enhanced@77fc184

@module-federation/error-codes

pnpm add https://pkg.pr.new/@module-federation/error-codes@77fc184

@module-federation/esbuild

pnpm add https://pkg.pr.new/@module-federation/esbuild@77fc184

@module-federation/managers

pnpm add https://pkg.pr.new/@module-federation/managers@77fc184

@module-federation/manifest

pnpm add https://pkg.pr.new/@module-federation/manifest@77fc184

@module-federation/metro

pnpm add https://pkg.pr.new/@module-federation/metro@77fc184

@module-federation/metro-plugin-rnc-cli

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rnc-cli@77fc184

@module-federation/metro-plugin-rnef

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rnef@77fc184

@module-federation/metro-plugin-rock

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rock@77fc184

@module-federation/modern-js

pnpm add https://pkg.pr.new/@module-federation/modern-js@77fc184

@module-federation/modern-js-v3

pnpm add https://pkg.pr.new/@module-federation/modern-js-v3@77fc184

@module-federation/native-federation-tests

pnpm add https://pkg.pr.new/@module-federation/native-federation-tests@77fc184

@module-federation/native-federation-typescript

pnpm add https://pkg.pr.new/@module-federation/native-federation-typescript@77fc184

@module-federation/nextjs-mf

pnpm add https://pkg.pr.new/@module-federation/nextjs-mf@77fc184

@module-federation/node

pnpm add https://pkg.pr.new/@module-federation/node@77fc184

@module-federation/observability-plugin

pnpm add https://pkg.pr.new/@module-federation/observability-plugin@77fc184

@module-federation/playground

pnpm add https://pkg.pr.new/@module-federation/playground@77fc184

@module-federation/retry-plugin

pnpm add https://pkg.pr.new/@module-federation/retry-plugin@77fc184

@module-federation/rsbuild-plugin

pnpm add https://pkg.pr.new/@module-federation/rsbuild-plugin@77fc184

@module-federation/rspack

pnpm add https://pkg.pr.new/@module-federation/rspack@77fc184

@module-federation/rspress-plugin

pnpm add https://pkg.pr.new/@module-federation/rspress-plugin@77fc184

@module-federation/runtime

pnpm add https://pkg.pr.new/@module-federation/runtime@77fc184

@module-federation/runtime-core

pnpm add https://pkg.pr.new/@module-federation/runtime-core@77fc184

@module-federation/runtime-tools

pnpm add https://pkg.pr.new/@module-federation/runtime-tools@77fc184

@module-federation/sdk

pnpm add https://pkg.pr.new/@module-federation/sdk@77fc184

@module-federation/storybook-addon

pnpm add https://pkg.pr.new/@module-federation/storybook-addon@77fc184

@module-federation/third-party-dts-extractor

pnpm add https://pkg.pr.new/@module-federation/third-party-dts-extractor@77fc184

@module-federation/treeshake-frontend

pnpm add https://pkg.pr.new/@module-federation/treeshake-frontend@77fc184

@module-federation/treeshake-server

pnpm add https://pkg.pr.new/@module-federation/treeshake-server@77fc184

@module-federation/typescript

pnpm add https://pkg.pr.new/@module-federation/typescript@77fc184

@module-federation/utilities

pnpm add https://pkg.pr.new/@module-federation/utilities@77fc184

@module-federation/webpack-bundler-runtime

pnpm add https://pkg.pr.new/@module-federation/webpack-bundler-runtime@77fc184

@module-federation/bridge-react

pnpm add https://pkg.pr.new/@module-federation/bridge-react@77fc184

@module-federation/bridge-react-webpack-plugin

pnpm add https://pkg.pr.new/@module-federation/bridge-react-webpack-plugin@77fc184

@module-federation/bridge-shared

pnpm add https://pkg.pr.new/@module-federation/bridge-shared@77fc184

@module-federation/bridge-vue3

pnpm add https://pkg.pr.new/@module-federation/bridge-vue3@77fc184

@module-federation/inject-external-runtime-core-plugin

pnpm add https://pkg.pr.new/@module-federation/inject-external-runtime-core-plugin@77fc184

commit: 77fc184

github-actions · 2026-08-05T08:51:54Z

Bundle Size Report

7 package(s) changed, 35 unchanged.

Package dist + ESM entry

Package	Total dist (raw)	Delta	ESM gzip	Delta
`@module-federation/runtime`	20.0 kB	-13 B (-0.1%)	715 B	no change

Bundle targets

Package	Web bundle (gzip)	Delta	Node bundle (gzip)	Delta
`@module-federation/cli`	2.3 kB	-8 B (-0.3%)	2.4 kB	-33 B (-1.3%)
`@module-federation/core`	1.0 kB	-1 B (-0.1%)	1.0 kB	-34 B (-3.1%)
`@module-federation/devtools`	30.3 kB	no change	30.3 kB	-25 B (-0.1%)
`@module-federation/enhanced`	2.7 kB	+3 B (+0.1%)	2.8 kB	-45 B (-1.6%)
`@module-federation/metro-plugin-rnc-cli`	416 B	no change	435 B	-27 B (-5.8%)
`@module-federation/node`	9.2 kB	no change	9.2 kB	-30 B (-0.3%)

Consumer scenarios

Scenario	Web output (gzip)	Delta	Node output (gzip)	Delta	Gap (node-web)	Delta
Enhanced remoteEntry	21.6 kB	-14 B (-0.1%)	23.1 kB	-25 B (-0.1%)	+1.5 kB	-11 B

Total dist (raw): 35.84 MB (-13 B (-0.0%))
Total ESM gzip: 106.4 kB (no change)
Total web bundle (gzip): 235.9 kB (-6 B (-0.0%))
Total node bundle (gzip): 238.2 kB (-194 B (-0.1%))
Tracked ./bundler entry gzip: 556 B (no change)
Tracked ./bundler web bundle (gzip): 4.8 kB (no change)
Tracked ./bundler node bundle (gzip): 4.8 kB (no change)

Bundle sizes are generated with rslib (Rspack). Package-root metrics preserve the historical report. Tracked subpath exports such as ./bundler are measured separately so ENV_TARGET-driven tree-shaking is visible. Bare imports are externalized to keep package-level sizes consistent, and assets are emitted as resources.

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.23. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.10...8.5.23) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026

dependabot Bot mentioned this pull request Aug 5, 2026

chore(deps-dev): bump postcss from 8.5.10 to 8.5.18 #4940

Closed

dependabot Bot force-pushed the dependabot/npm_and_yarn/postcss-8.5.23 branch from 8ac975b to 77fc184 Compare August 6, 2026 08:29

Navigation Menu

Uh oh!

Uh oh!

chore(deps-dev): bump postcss from 8.5.10 to 8.5.23 - #4964

chore(deps-dev): bump postcss from 8.5.10 to 8.5.23#4964
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/postcss-8.5.23

dependabot Bot commented on behalf of github Aug 5, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

Uh oh!

changeset-bot Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

pkg-pr-new Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundle Size Report

Package dist + ESM entry

Bundle targets

Consumer scenarios

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 5, 2026 •

edited

Loading

changeset-bot Bot commented Aug 5, 2026 •

edited

Loading

pkg-pr-new Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading