chore(dependencies): update postcss (major)

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@fullhuman/postcss-purgecss (source)	4.1.3 → 8.0.0
cssnano	5.1.5 → 7.1.2
cssnano-preset-advanced	5.3.1 → 7.0.10
postcss-cli	9.1.0 → 11.0.1
postcss-custom-properties (source)	12.1.5 → 15.0.0
postcss-import	14.1.0 → 16.1.1
postcss-mixins	9.0.2 → 12.1.2
postcss-modules	4.3.1 → 6.0.1
postcss-nested	5.0.6 → 7.0.2

---

Release Notes

FullHuman/purgecss (@​fullhuman/postcss-purgecss)

v8.0.0

Compare Source

BREAKING CHANGES

• Revert the changes from v7.0.2 that modified the import of the PostCSS plugin. This was causing issues (see #​1295. The PostCSS plugin should now be imported via a default import:

import purgeCSSPlugin from '@​fullhuman/postcss-purgecss';

Features

• feat: add --preserve-paths option to CLI for maintaining folder hierarchy (aa5ac9d), closes #​377

Bug fixes

• fix: for code scanning alert no. 5: Incomplete multi-character sanitization (#​1403) (3f39411), closes #​1403
• fix: enhance setOptions to support both ES modules and CommonJS config exports (4ad48c4), closes #​1340
• fix: fix glob expression illegal operations on directories (#​1308) (b27293f), closes #​1308 #​1266
• fix: update import statements for purgeCSSPlugin in documentation and source files (e5cbce2), closes #​1295
• fix(#​995): preserve relative paths in source maps (4f6c4d9), closes #​995
• fix: enhance keyframes handling to preserve animations referenced via CSS variables (076c027), closes #​478

Changes (commits since v7.0.2)

• Add French documentation for PurgeCSS guides and plugins (b9f4309)
• fix for "Workflow does not contain permissions" (eb6d3b8)
• fix(#​995): preserve relative paths in source maps (4f6c4d9), closes #​995
• v8.0.0 (2e315a5)
• chore: format (6c0c84e)
• chore: format (7ad2fb7)
• docs: add breaking changes for v7 about named export for postcss plugin (7d86fb5)
• docs: add changelog for v7 (bafb8a1)
• docs: add SEO enhancements and sitemap support to documentation (6505b7d)
• docs: remove outdated TailwindCSS sponsor image (3949790)
• docs: update sponsorship images and remove outdated link (bdf87e4)
• docs: use named export for postcss plugin (8eb027d)
• feat: add --preserve-paths option to CLI for maintaining folder hierarchy (aa5ac9d), closes #​377
• feat: enhance keyframes handling to preserve animations referenced via CSS variables (076c027), closes #​478
• build(deps-dev): bump @​eslint/eslintrc from 3.1.0 to 3.2.0 (#​1303) (8308cdb), closes #​1303
• build(deps-dev): bump @​eslint/js from 9.11.1 to 9.39.0 (#​1391) (2348f82), closes #​1391
• build(deps-dev): bump @​rollup/plugin-typescript from 12.1.0 to 12.1.2 (#​1312) (9387a9b), closes #​1312
• build(deps-dev): bump @​rollup/plugin-typescript from 12.1.2 to 12.3.0 (#​1407) (5902189), closes #​1407
• build(deps-dev): bump @​types/glob from 8.0.0 to 9.0.0 (#​1408) (aa30f0f), closes #​1408
• build(deps-dev): bump @​types/jest from 29.5.13 to 29.5.14 (#​1301) (cb3d1c4), closes #​1301
• build(deps-dev): bump @​types/node from 22.13.0 to 25.0.3 (#​1406) (ca242ee), closes #​1406
• build(deps-dev): bump @​types/node from 22.8.6 to 22.13.0 (#​1322) (0d9f594), closes #​1322
• build(deps-dev): bump @​typescript-eslint/parser from 8.14.0 to 8.46.2 (#​1390) (67b5b0c), closes #​1390
• build(deps-dev): bump @​vuepress/plugin-search (#​1320) (00251a7), closes #​1320
• build(deps-dev): bump @​vuepress/plugin-search (#​1372) (307f8d2), closes #​1372
• build(deps-dev): bump @​vuepress/theme-default (#​1405) (047f0ea), closes #​1405
• build(deps-dev): bump axios from 1.7.7 to 1.13.2 (#​1401) (bb14e06), closes #​1401
• build(deps-dev): bump eslint from 9.39.1 to 9.39.2 (#​1409) (4a24603), closes #​1409
• build(deps-dev): bump eslint-plugin-tsdoc from 0.3.0 to 0.4.0 (#​1304) (447d424), closes #​1304
• build(deps-dev): bump form-data from 4.0.0 to 4.0.4 (#​1374) (0853fd4), closes #​1374
• build(deps-dev): bump globals from 15.11.0 to 16.5.0 (#​1393) (cfc4939), closes #​1393
• build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#​1414) (f79b815), closes #​1414
• build(deps-dev): bump prettier from 3.3.3 to 3.4.2 (#​1315) (504f025), closes #​1315
• build(deps-dev): bump prettier from 3.4.2 to 3.7.4 (#​1413) (bb778ad), closes #​1413
• build(deps-dev): bump rollup from 4.53.3 to 4.54.0 (#​1410) (14052e6), closes #​1410
• build(deps-dev): bump vuepress from 2.0.0-rc.19 to 2.0.0-rc.26 (a0bcec5)
• build(deps-dev): update @​typescript-eslint packages to version 8.48.1 (52c16f4)
• build(deps-dev): update conventional-changelog-cli to conventional-changelog version 7.1.1 (2745ee9)
• build(deps-dev): update conventional-changelog-cli to conventional-changelog version 7.1.1 (69d8bbb)
• build(deps): bump actions/checkout from 4 to 6 (#​1399) (f1f9930), closes #​1399
• build(deps): bump actions/setup-node from 4 to 6 (#​1389) (256eea7), closes #​1389
• build(deps): bump actions/stale from 9 to 10 (#​1384) (3f67275), closes #​1384
• build(deps): bump coverallsapp/github-action from 2.3.4 to 2.3.6 (#​1319) (53edc4f), closes #​1319
• build(deps): bump coverallsapp/github-action from 2.3.6 to 2.3.7 (#​1398) (9f760aa), closes #​1398
• build(deps): bump js-yaml, @​microsoft/api-documenter and lerna (#​1402) (1505cac), closes #​1402
• build(deps): bump nanoid from 3.3.7 to 3.3.8 (#​1307) (5e13f33), closes #​1307
• build(deps): bump postcss from 8.5.1 to 8.5.6 (#​1371) (c5b9e06), closes #​1371
• build(deps): bump postcss-selector-parser from 6.1.2 to 7.0.0 (#​1306) (23cf540), closes #​1306
• build(deps): bump postcss-selector-parser from 7.0.0 to 7.1.1 (#​1404) (b1f2eab), closes #​1404
• build(deps): bump tmp and inquirer (#​1400) (9a05d07), closes #​1400
• build(deps): bump typescript from 5.6.3 to 5.9.3 (#​1412) (0ee0b45), closes #​1412
• fix: for code scanning alert no. 5: Incomplete multi-character sanitization (#​1403) (3f39411), closes #​1403
• fix: enhance setOptions to support both ES modules and CommonJS config exports (4ad48c4), closes #​1340
• fix: fix glob expression illegal operations on directories (#​1308) (b27293f), closes #​1308 #​1266
• fix: update import statements for purgeCSSPlugin in documentation and source files (e5cbce2), closes #​1295

v7.0.2

Compare Source

Bug Fixes

• fix: fix issue where pseudo classes like :where, :not, :is were always removed at root level (89024ce), closes #​1282 #​978
• build: add named export for postcss plugin (87d15b7), closes #​1263

Features

• feat(purgecss-from-pug): returns ExtractorResultDetailed instead of selectors (fb51dc6)

BREAKING CHANGES

• PostCSS plugin should now be imported via purgeCSSPlugin

import { purgeCSSPlugin } from '@​fullhuman/postcss-purgecss';

• drop support for node 18.

Other

• build(deps-dev): update dependencies
• build(deps): update dependencies

Full Changelog: FullHuman/purgecss@v6.0.0...v7.0.2

v6.0.0

Compare Source

Bug Fixes

• collect of used variables for changed selector (#​1217) (9fbb592)
• gulp-purgecss: move vinyl-sourcemaps-apply to deps #​999 (7858b7a)

Features

• purgecss: add support for :where and :is #​978 (bb5782b)
• warn if no files are found #​642 (6188505)

v5.0.0

Compare Source

Bug Fixes

• add safelist variables to postcss-purgecss #​840 (c822058)
• gulp-purgecss: support skippedContentGlobs option #​853 (b72de77)
• Purgecss webpack plugin/only filter fix (#​933) (f8e4c2c)
• purgecss-webpack-plugin: add sourcemap support #​409 (b3f73ed)
• purgecss-webpack-plugin: export as named export as well as default (#​821) (a6a2c8e)
• wrong path import (4f3ddd0)

Features

• add source map support #​526 (f2a9c5a)
• gulp-purgecss: add support for gulp-sourcemaps #​257 (55c26d2)
• postcss-purgecss: load options from purgecss config (4de3bd8)
• purgecss-webpack-plugin: load config file automatically #​767 (726faaa)

BREAKING CHANGES

• purgecss-webpack-plugin: drop webpack 4 support

cssnano/cssnano (cssnano)

v7.1.2: v7.1.2

Compare Source

What's Changed

• fix: enhanced recognition of css comments by @​Nirvana-Jie in #​1730
• chore: use npm trusted publishing by @​ludofischer in #​1731
• fix: update browserslist by @​ludofischer in #​1733

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.1...cssnano@7.1.2

v7.1.1: v71.1.1

Compare Source

Bug Fixes

• fix(convert-values): exclude linear() from stripping % from value 0 by @​cernymatej in #​1720

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.1.0...cssnano@7.1.1

v7.1.0

Compare Source

Changes

• Update to SVGO 4.0
• Update browserslist

v7.0.7

Compare Source

What's Changed

• fix: update browserslist by @​ludofischer in #​1675
• fix: update postcss peer dependency to version without vulnerabilities by @​ludofischer in #​1676
• fix: update TypeScript declarations by @​ludofischer in #​1685
• perf: load default preset in startup by @​43081j in #​1691
• Add support for selector order preservation to postcss-minify-selectors by @​ezzak in #​1688
• fix(postcss-convert-values): preserve percent sign in percentage values in at-rules with double quotes by @​aramikuto in #​1695

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.6...cssnano@7.0.7

v7.0.6: v7.0.6

Compare Source

What's Changed

• Update postcss-calc and selector-parser by @​ludofischer in #​1663
• fix(postcss-convert-values): convert 0ms to 0s by @​btea in #​1665

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@7.0.5...cssnano@7.0.6

v7.0.5: v7.0.5

Compare Source

Bug Fixes

• Fix layer rule deduping #​1656

v7.0.4: v7.0.4

Compare Source

Bug fixes

• fix(postcss-convert-values): preserve percent sign in border-image-width in #​1645

v7.0.3: v7.0.3

Compare Source

Bug Fixes

• cssnano-preset-default: preserve SVG viewbox and title by default
• postcss-convert-values: preserve percent sign in arguments of color functions when needed
• postcss-ordered-values: preserve correct order in animation property
• postcss-minify-selectors: preserve quotes when escaping selector is required
• postcss-discard-comments: do not remove strings that only look like comments in selectors

Thanks to @​ota-meshi and @​seiyab for their contributions to this release.

v7.0.2: v7.0.2

Compare Source

Bug Fixes

• fix invalid output in some cases where selectors contain comments

v7.0.1

Compare Source

v7.0.0: v7.0.0

Compare Source

Breaking changes

This release drops official support for unmaintained long term support Node.js releases 14 and 16. It also drops support for non-long term support releases 19 and 21 and add support for Node.js 22. Only the package.json engines field has been updated. The code should otherwise be identical to the previous 6.1.2 release.

Ensuring support for older Node.js had become difficult as the GitHub actions runners are not available for the latest MacOS and recent pnpm also could not run on CI any more.

v6.1.2: v6.1.2

Compare Source

Bug Fixes

• preserve correct order of gap and column-gap properties

Patch Changes

• update autoprefixer

v6.1.1: v6.1.1

Compare Source

Patch changes

• update selector parser
• in the minify font plugin, you can pass a function to determine whether a css variable is one of font, font-family, and font-weight to determine whether the variable needs to remove quotes.

v6.1.0: v6.1.0

Compare Source

This release contains a lot of fixes to Browserslist support thanks to @​colinrotherham

Features

• support Browserslist options in more plugins
• support overriding autoprefixer options

Additionally, this release includes improved TypeScript types.

v6.0.5: v6.0.5

Compare Source

Bug Fixes

• correctly minify font declaration in edge cases
• preserve initial property in -webkit-line-clamp

v6.0.4: v6.0.4

Compare Source

Bug Fixes

• preserve empty @layer declarations
• avoid crashing when encountering @layer without any braces afterwards
• update to latest lilconfig dependency to avoid vulnerability

v6.0.3: v6.0.3

Compare Source

Bug fixes

• do not sort unknown properties

Other

• Require latest browserslist and postcss-selector-parser

v6.0.2: v6.0.2

Compare Source

• fix: update cssnano peer dependency to 8.4.31 to avoid security issue
• fix: update postcss-calc to 9.0.1 to solve disappearing expressions inside two brackets
• deps(postcss-svgo): update SVGO to 3.0.5 and update doc
• chore: update css-declaration-sorter
• fix(postcss-minify-selectors): prevent mangling of timeline range names
• fix(postcss-convert-values): keep percent unit in @Property
• chore(cssnano): update lilconfig to 3.0.0

v6.0.1: v6.0.1

Compare Source

Bug Fixes

• fix(postcss-merge-rules): do not merge nested rules (eb9a9a1)
• fix(postcss-reduce-idents): minify grid line names correctly (2af6687)

v6.0.0: v6.0.0

Compare Source

Major Changes

• 99d1e6a: postcss-normalize-url: remove normalize-url configuration options
• 4e272f8: postcss-svgo: Upgrade dependency svgo to v3 and increase the minimum supported node version to v14
• ca9d3f5: Switch minimum supported Node version to 14 for all packages
• 39a2040: feat!(cssnano): remove undocumented YAML config support

Migration instructions

• If you're not happy with the defaults for the normalize-url transform, turn it off completely. Options were removed as most would change the meaning of the URL, which is unexpcted in the case of CSS minification.
• In the unlikely event you're using YAML to configure cssnano, move the cssnano configuration inside the PostCSS config or use a configuration file in CommonJS or JSON format.

v5.1.15: v5.1.15

Compare Source

Bug Fixes

• fix(postcsss-reduce-initial): fix mask-repeat conversion
• fix(postcss-colormin): don't minify colors in src declarations
• fix(postcss-merge-rules): do not merge conflicting flex and border properties

v5.1.14: v5.1.14

Compare Source

Bug Fixes

• fix: update autoprefixer and browserslist
• fix(postcss-reduce-initial): improve initial properties data

v5.1.13: v5.1.13

Compare Source

Bug Fixes

• fix TypeScript type of cssnano() return value (b92dbe3)

v5.1.12: v5.1.12

Compare Source

Bug Fixes

• fix: preserve hyphenated property case (120a888)
• fix: ensure sorting properties does not break the output (0a3a133)
• fix: recognize 'constant' as a function (858a8b7)

v5.1.11: v5.1.11

Compare Source

Bug Fixes

• postcss-ordered-values: preserve constant values (32ab4d9b7d20d)

v5.1.10: v5.1.10

Compare Source

Bug Fixes

• postcss-minify-selectors: preserve similar nested selectors (f6c29fb3e75ac26a2635d)

v5.1.9: v5.1.9

Compare Source

Bug Fixes

• postcss-merge-longhand: preserve more color function fallbacks (712993cb4a4e0)

v5.1.8: v5.1.8

Compare Source

Bug Fixes

• postcss-convert-values: preserve percentage sign on IE 11 (57f060ad21734)

v5.1.7

Compare Source

v5.1.6: v5.1.6

Compare Source

Bug Fixes

• preserve border color when merging border properties (5f5080a)

postcss/postcss-cli (postcss-cli)

v11.0.1

Compare Source

• Update and minimize dependencies

v11.0.0

Compare Source

• BREAKING: Require Node.js v18+ (#​464)
• Upgrade to postcss-load-config@5 for improved ESM & TS config support (#​461, #​462)

v10.1.0

Compare Source

• Allow running --watch mode in non-TTY contexts, like Docker (#​448)
• Update dependencies

v10.0.0

Compare Source

• BREAKING: Drop Node 12 support (#​438)
• Add support for ESM config files (#​437)

csstools/postcss-plugins (postcss-custom-properties)

v15.0.0

Compare Source

January 14, 2026

• Updated: Support for Node 20.19.0 or later (major).
• Removed: commonjs API. In supported Node versions require(esm) will work without needing to make code changes.
• Updated @csstools/css-tokenizer to 4.0.0 (major)
• Updated @csstools/utilities to 3.0.0 (major)
• Updated @csstools/css-parser-algorithms to 4.0.0 (major)
• Updated @csstools/cascade-layer-name-parser to 3.0.0 (major)

v14.0.6

Compare Source

June 5, 2025

• Fix infinite loop for comments that contain variables (e.g. var(--foo) /* var(--bar) */)

v14.0.5

Compare Source

May 27, 2025

• Improve the implementation of how comments are preserved when transpiling
• Updated @csstools/css-tokenizer to 3.0.4 (patch)
• Updated @csstools/css-parser-algorithms to 3.0.5 (patch)
• Updated @csstools/cascade-layer-name-parser to 2.0.5 (patch)

v14.0.4

Compare Source

November 1, 2024

• Updated @csstools/css-tokenizer to 3.0.3 (patch)
• Updated @csstools/css-parser-algorithms to 3.0.4 (patch)
• Updated @csstools/cascade-layer-name-parser to 2.0.4 (patch)

v14.0.3

Compare Source

October 23, 2024

• Updated @csstools/css-parser-algorithms to 3.0.3 (patch)
• Updated @csstools/cascade-layer-name-parser to 2.0.3 (patch)

v14.0.2

Compare Source

October 10, 2024

• Updated @csstools/css-tokenizer to 3.0.2 (patch)
• Updated @csstools/css-parser-algorithms to 3.0.2 (patch)
• Updated @csstools/cascade-layer-name-parser to 2.0.2 (patch)

v14.0.1

Compare Source

August 18, 2024

• Updated @csstools/css-tokenizer to 3.0.1 (patch)
• Updated @csstools/css-parser-algorithms to 3.0.1 (patch)
• Updated @csstools/cascade-layer-name-parser to 2.0.1 (patch)

v14.0.0

Compare Source

August 3, 2024

• Updated: Support for Node v18+ (major).
• Updated @csstools/css-tokenizer to 3.0.0 (major)
• Updated @csstools/utilities to 2.0.0 (major)
• Updated @csstools/css-parser-algorithms to 3.0.0 (major)
• Updated @csstools/cascade-layer-name-parser to 2.0.0 (major)

v13.3.12

Compare Source

July 6, 2024

• Updated @csstools/css-tokenizer to 2.4.1 (patch)
• Updated @csstools/css-parser-algorithms to 2.7.1 (patch)
• Updated @csstools/cascade-layer-name-parser to 1.0.13 (patch)

v13.3.11

Compare Source

June 29, 2024

• Updated @csstools/css-tokenizer to 2.3.2 (patch)
• Updated @csstools/css-parser-algorithms to 2.7.0 (minor)
• Updated @csstools/cascade-layer-name-parser to 1.0.12 (patch)

v13.3.10

Compare Source

May 4, 2024

• Updated @csstools/css-tokenizer to 2.3.1 (patch)
• Updated @csstools/css-parser-algorithms to 2.6.3 (patch)
• Updated @csstools/cascade-layer-name-parser to 1.0.11 (patch)

v13.3.9

Compare Source

May 4, 2024

• Updated @csstools/css-tokenizer to 2.3.0 (minor)
• Updated @csstools/css-parser-algorithms to 2.6.2 (patch)
• Updated @csstools/cascade-layer-name-parser to 1.0.10 (patch)

v13.3.8

Compare Source

April 22, 2024

• Fix an error when a custom property has multiple dependencies and one of them is undefined

v13.3.7

Compare Source

April 11, 2024

• Improve handling of cross references between computed values of custom properties

v13.3.6

Compare Source

March 13, 2024

• Updated [@csstools/css-tokenizer](https://redirect.github.com/css

---

Configuration

📅 Schedule: Branch creation - "before 12pm on Wednesday" in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: @stencila/designa@2.0.0
npm error Found: postcss@8.4.12
npm error node_modules/postcss
npm error   dev postcss@"8.4.12" from the root project
npm error
npm error Could not resolve dependency:
npm error peer postcss@"^8.4.31" from cssnano@7.0.1
npm error node_modules/cssnano
npm error   dev cssnano@"7.0.1" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2024-05-07T22_38_21_930Z-eresolve-report.txt

npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-05-07T22_38_21_930Z-debug-0.log

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: @stencila/designa@2.0.0
npm error Found: postcss@8.4.31
npm error node_modules/postcss
npm error   dev postcss@"8.4.31" from the root project
npm error
npm error Could not resolve dependency:
npm error peer postcss@"^8.4.32" from cssnano@7.1.2
npm error node_modules/cssnano
npm error   dev cssnano@"7.1.2" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-02-12T15_39_33_538Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-02-12T15_39_33_538Z-debug-0.log