Skip to content

chore(deps): bump postcss and vue-loader - #1468

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2cc4098b7f
Open

chore(deps): bump postcss and vue-loader#1468
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2cc4098b7f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss to 8.5.26 and updates ancestor dependency vue-loader. These dependencies need to be updated together.

Updates postcss from 8.5.19 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

Commits

Updates vue-loader from 15.11.1 to 17.4.2

Release notes

Sourced from vue-loader's releases.

v17.3.1

Bug Fixes

  • do not skip style post loader for v-bind() in non-scoped CSS (d7071bb), closes #2061

v17.3.0

Bug Fixes

Features

  • skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

v17.2.2

Bug Fixes

v17.2.1

Features

  • A new experimentalInlineMatchResource option (webpack 5 only), which leverages webpack 5's inline matchResource feature in the underlying implementation, and works well with the experiments.css feature This also makes vue-loader compatible with Rspack (#2046) (3149f6d).

Note: v17.2.0 was released by accident; it has the same content as v17.1.2, therefore not included in the Releases page.

v17.1.2

Bug Fixes

  • keep build stable when run in a different path (#2040) (a81dc0f)
  • properly close the watcher after webpack 4 tests (40b93b9)

v17.1.1

Bug Fixes

  • support experimental propsDestructure and defineModel options (6269698)

v17.1.0

Bug Fixes

Features

  • support 3.3 imported types hmr (bbd98fc)

Full Changelog: vuejs/vue-loader@v17.0.1...v17.1.0

... (truncated)

Changelog

Sourced from vue-loader's changelog.

17.4.2 (2023-12-30)

Bug Fixes

  • pass compilerOptions to sfc parse & re-enable AST reuse (d2a2e05)

17.4.1 (2023-12-30)

Bug Fixes

  • (temporarily) disable template ast reuse (31b03af)

17.4.0 (2023-12-25)

Features

  • leverage ast reuse in 3.4 (479835f)

17.3.1 (2023-10-31)

Bug Fixes

  • do not skip style post loader for v-bind() in CSS (d7071bb), closes #2061

17.3.0 (2023-10-07)

Bug Fixes

Features

  • skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

17.2.2 (2023-06-02)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies javascript Pull requests that update Javascript code labels Aug 5, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 5, 2026 01:19
@dependabot dependabot Bot added dependencies javascript Pull requests that update Javascript code labels Aug 5, 2026
@DeepDiver1975

Copy link
Copy Markdown
Contributor

Holding: CI is failing (not a rebase conflict). build / Build failed with exit code 2. The run's logs have since expired (GitHub returns HTTP 410) and the job's step detail has been purged, so the underlying error is no longer retrievable — a fresh CI run is needed to diagnose it. Not merging while the check is red.

@DeepDiver1975

Copy link
Copy Markdown
Contributor

Holding: CI is failing (not a rebase conflict). Root cause now identified (the earlier comment could not retrieve it because the run logs had expired): this PR bumps vue-loader 15.11.1 -> 17.4.2, but the project pins vue@2.7.16 (plus vue-template-compiler@2.7.16). vue-loader 17 targets Vue 3 and its vue/compiler-sfc peer cannot resolve against Vue 2, so build / Build fails at install/compile with exit code 2. Same underlying Vue 2 pin that holds #1388 and #1451. A rebase won't fix this — it needs the Vue 2 -> 3 migration (or keeping vue-loader on 15.x).

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.26 and updates ancestor dependency [vue-loader](https://github.com/vuejs/vue-loader). These dependencies need to be updated together.


Updates `postcss` from 8.5.19 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.19...8.5.26)

Updates `vue-loader` from 15.11.1 to 17.4.2
- [Release notes](https://github.com/vuejs/vue-loader/releases)
- [Changelog](https://github.com/vuejs/vue-loader/blob/main/CHANGELOG.md)
- [Commits](vuejs/vue-loader@v15.11.1...v17.4.2)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: indirect
- dependency-name: vue-loader
  dependency-version: 17.4.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2cc4098b7f branch from 3774879 to 59ea62f Compare September 1, 2026 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant