From ab366b6a6dbdaf823e043da9fc33267b2c6d6b23 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 27 Aug 2026 15:20:09 +0000 Subject: [PATCH 1/2] Bump postcss from 8.5.10 to 8.5.23 Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.23. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.23) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- yarn.lock | 23 +---------------------- 1 file changed, 1 insertion(+), 22 deletions(-) diff --git a/yarn.lock b/yarn.lock index 4e70765..fa20090 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2531,7 +2531,6 @@ __metadata: eslint-plugin-promise: "npm:6.1.1" eslint-plugin-standard: "npm:5.0.0" np: "npm:9.2.0" - postcss: "npm:8.5.23" prettier: "npm:3.2.5" sortablejs: "npm:^1.15.2" tailwindcss: "npm:3.4.1" @@ -6764,15 +6763,6 @@ __metadata: languageName: node linkType: hard -"nanoid@npm:^3.3.11": - version: 3.3.11 - resolution: "nanoid@npm:3.3.11" - bin: - nanoid: bin/nanoid.cjs - checksum: 10c0/40e7f70b3d15f725ca072dfc4f74e81fcf1fbb02e491cf58ac0c79093adc9b0a73b152bcde57df4b79cd097e13023d7504acb38404a4da7bc1cd8e887b82fe0b - languageName: node - linkType: hard - "nanoid@npm:^3.3.16": version: 3.3.17 resolution: "nanoid@npm:3.3.17" @@ -7539,7 +7529,7 @@ __metadata: languageName: node linkType: hard -"postcss@npm:8.5.23": +"postcss@npm:^8.4.23, postcss@npm:^8.5.3": version: 8.5.23 resolution: "postcss@npm:8.5.23" dependencies: @@ -7550,17 +7540,6 @@ __metadata: languageName: node linkType: hard -"postcss@npm:^8.4.23, postcss@npm:^8.5.3": - version: 8.5.10 - resolution: "postcss@npm:8.5.10" - dependencies: - nanoid: "npm:^3.3.11" - picocolors: "npm:^1.1.1" - source-map-js: "npm:^1.2.1" - checksum: 10c0/c592dffa0c4873b401f01955b265538d9942f425040df5e2b8f0ad34c83773a792ea0fa5859ccc99cfb5b955b4ebff118ab7056315388dc83b107b0fa8313576 - languageName: node - linkType: hard - "prelude-ls@npm:^1.2.1": version: 1.2.1 resolution: "prelude-ls@npm:1.2.1" From 3f3eb6fd9539934b0f2213fd9e068e51ff2aa154 Mon Sep 17 00:00:00 2001 From: Patrick Lewis Date: Thu, 27 Aug 2026 11:28:27 -0400 Subject: [PATCH 2/2] fix(deps): regenerate yarn.lock for postcss 8.5.23 Dependabot's lockfile edit dropped the `postcss: "npm:8.5.23"` entry from the workspace devDependencies while merging the postcss descriptors, so the lockfile no longer matched package.json and `yarn install --immutable` refused the install. Regenerating with yarn 4.12.0 restores the workspace entry and keeps the merged descriptor, so postcss resolves to 8.5.23 for the direct dependency and for tailwindcss and vite. --- yarn.lock | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/yarn.lock b/yarn.lock index fa20090..258b4c4 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2531,6 +2531,7 @@ __metadata: eslint-plugin-promise: "npm:6.1.1" eslint-plugin-standard: "npm:5.0.0" np: "npm:9.2.0" + postcss: "npm:8.5.23" prettier: "npm:3.2.5" sortablejs: "npm:^1.15.2" tailwindcss: "npm:3.4.1" @@ -7529,7 +7530,7 @@ __metadata: languageName: node linkType: hard -"postcss@npm:^8.4.23, postcss@npm:^8.5.3": +"postcss@npm:8.5.23, postcss@npm:^8.4.23, postcss@npm:^8.5.3": version: 8.5.23 resolution: "postcss@npm:8.5.23" dependencies: