From 757f653607d11a2214e069095a26660b37327310 Mon Sep 17 00:00:00 2001 From: "Alexander M. Turek" Date: Mon, 21 Jun 2021 10:40:20 +0200 Subject: [PATCH 1/2] Bump PostCSS This is a security update, see https://www.npmjs.com/advisories/1693 --- packages/resolve-url-loader/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/resolve-url-loader/package.json b/packages/resolve-url-loader/package.json index df03389..f1683ce 100644 --- a/packages/resolve-url-loader/package.json +++ b/packages/resolve-url-loader/package.json @@ -43,7 +43,7 @@ "convert-source-map": "1.7.0", "es6-iterator": "2.0.3", "loader-utils": "1.2.3", - "postcss": "7.0.21", + "postcss": "7.0.36", "rework": "1.0.1", "rework-visit": "1.0.0", "source-map": "0.6.1" From 3d7c15a2dff070a7562b5134c46ddbbe3acb790d Mon Sep 17 00:00:00 2001 From: Ben Holloway Date: Tue, 22 Jun 2021 09:10:12 +1000 Subject: [PATCH 2/2] update lockfile --- yarn.lock | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/yarn.lock b/yarn.lock index 7c58b76..1e21644 100644 --- a/yarn.lock +++ b/yarn.lock @@ -1162,10 +1162,10 @@ posix-character-classes@^0.1.0: resolved "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz#01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab" integrity sha1-AerA/jta9xoqbAL+q7jB/vfgDqs= -postcss@7.0.21: - version "7.0.21" - resolved "https://registry.npmjs.org/postcss/-/postcss-7.0.21.tgz#06bb07824c19c2021c5d056d5b10c35b989f7e17" - integrity sha512-uIFtJElxJo29QC753JzhidoAhvp/e/Exezkdhfmt8AymWT6/5B7W1WmponYWkHk2eg6sONyTch0A3nkMPun3SQ== +postcss@7.0.36: + version "7.0.36" + resolved "https://registry.npmjs.org/postcss/-/postcss-7.0.36.tgz#056f8cffa939662a8f5905950c07d5285644dfcb" + integrity sha512-BebJSIUMwJHRH0HAQoxN4u1CN86glsrwsW0q7T+/m44eXOUAxSNdHRkNZPYz5vVUbg17hFgOQDE7fZk7li3pZw== dependencies: chalk "^2.4.2" source-map "^0.6.1"