chore(deps): bump postcss and css-loader in /plugins/jodit-html-editor - #4731
chore(deps): bump postcss and css-loader in /plugins/jodit-html-editor#4731dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.23 and updates ancestor dependency [css-loader](https://github.com/webpack/css-loader). These dependencies need to be updated together. Updates `postcss` from 7.0.39 to 8.5.23 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.39...8.5.23) Updates `css-loader` from 3.5.3 to 7.1.4 - [Release notes](https://github.com/webpack/css-loader/releases) - [Changelog](https://github.com/webpack/css-loader/blob/main/CHANGELOG.md) - [Commits](webpack/css-loader@v3.5.3...v7.1.4) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: indirect - dependency-name: css-loader dependency-version: 7.1.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want higher recall? High effort reviews run extra passes and find more bugs. A team admin can switch effort levels in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 172c532. Configure here.
| "coveralls": "^3.0.2", | ||
| "cross-env": "^5.2.0", | ||
| "css-loader": "^3.5.3", | ||
| "css-loader": "^7.1.4", |
There was a problem hiding this comment.
css-loader incompatible with Webpack 4
High Severity
css-loader is bumped from 3.x to 7.1.4, which requires Webpack ^5.27.0 and Node >=18.12.0. This package still depends on Webpack ^4.43.0 (locked at 4.43.0) and declares Node >=6.0.0, so npm run build / webpack is expected to fail when processing CSS.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 172c532. Configure here.
|
| Command | Status | Duration | Result |
|---|---|---|---|
nx test @e2e/angular-17-ssr |
❌ Failed | 55s | View ↗ |
nx test @snippet/angular-17-ssr |
❌ Failed | 43s | View ↗ |
nx test @builder.io/sdks |
❌ Failed | 8s | View ↗ |
nx test @e2e/qwik-city |
✅ Succeeded | 7m 26s | View ↗ |
nx test @e2e/nextjs-sdk-next-app |
✅ Succeeded | 7m 2s | View ↗ |
nx test @e2e/angular-17 |
✅ Succeeded | 6m 40s | View ↗ |
nx test @e2e/angular-19-ssr |
✅ Succeeded | 5m 18s | View ↗ |
nx test @e2e/gen1-react |
✅ Succeeded | 5m | View ↗ |
Additional runs (38) |
✅ Succeeded | ... | View ↗ |
💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗.
☁️ Nx Cloud last updated this comment at 2026-07-26 23:24:58 UTC
Bumps postcss to 8.5.23 and updates ancestor dependency css-loader. These dependencies need to be updated together.
Updates
postcssfrom 7.0.39 to 8.5.23Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
eb9e1feRelease 8.5.23 version9d19c78Update dependencies7beca13Does no load source map file without opts.fromdecea51Typoc18e30dUpdate EM banner98a39adUpdate EM bannera3e48c4Release 8.5.22 versionf49d691Fix custom property losing its semicolon before a comment (#2117)28e0dafRelease 8.5.21 version3d2b4e4Update dependenciesMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.
Updates
css-loaderfrom 3.5.3 to 7.1.4Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
5b795afchore(release): 7.1.4aeddefefix: update peer dependency for@rspack/corev2 (#1652)b2b2de7chore(release): 7.1.301869bcfix: allow to usemoduleclass name (#1649)7dd15ecchore(deps): bump js-yaml (#1648)db26202chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#1647)7daf1b8Update CONTRIBUTING link to point to GitHub pagede1e633chore: correct link path (#1645)563ad63chore: migrate from contrib and swap branches (#1644)e68bf7echore: update github actions/checkout from v4 to v5 (#1642)Install script changes
This version modifies
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Major css-loader/PostCSS upgrades can break webpack builds; css-loader 7 expects webpack 5 while the plugin still pins webpack 4.
Overview
Bumps
css-loaderfrom 3.5.3 to 7.1.4 inplugins/jodit-html-editor(package.jsonand lockfile only).That major jump pulls in Postcss 8 (from 7) and newer postcss-modules / icss-utils versions, and drops several nested deps that shipped with css-loader 3. css-loader 7 also raises its engine requirement to Node ≥ 18.12 and lists webpack ^5.27 as a peer, while this package still declares webpack ^4.43—worth confirming
npm run buildstill works on your Node/webpack setup.Reviewed by Cursor Bugbot for commit 172c532. Bugbot is set up for automated code reviews on this repo. Configure here.