[dependabot]

Bumps postcss-selector-parser to 7.1.6 and updates ancestor dependencies postcss-selector-parser, stylelint, stylelint-order and stylelint-scss. These dependencies need to be updated together.

Updates postcss-selector-parser from 6.1.4 to 7.1.6

Release notes

Sourced from postcss-selector-parser's releases.

7.1.6

• fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5

• fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
• fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
• fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4

• fix: tolerate non-node children when serializing selectors

7.1.3

• Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2

• Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (#316 by @​MoOx)

v7.1.1

7.1.1

• perf: replace startsWith with strict equality (#308)
• fix(types): add walkUniversal declaration (#311)

v7.1.0

7.1.0

• feat: insert(Before|After) support multiple new node

v7.0.0

7.0.0

• Feat: make insertions during iteration safe (major)

Changelog

Sourced from postcss-selector-parser's changelog.

7.1.6 - 2026-09-03

• fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

7.1.5 - 2026-08-07

• fix: don't treat a non-prefix token before | as a namespace (#324 by @​spokodev)
• fix: preserve whitespace before a * namespace in attribute selectors (#325 by @​spokodev)
• fix: TypeError on unclosed [, ( and trailing | (#330 by @​theRizwan)

7.1.4 - 2026-06-11

• fix: tolerate non-node children when serializing selectors

7.1.3 - 2026-06-11

• Improve fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (clone/walk)

7.1.2 - 2026-06-09

• Fix CVE-2026-9358 (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 (#316 by @​MoOx)

7.1.1

• perf: replace startsWith with strict equality (#308)
• fix(types): add walkUniversal declaration (#311)

7.1.0

• feat: insert(Before|After) support multiple new node

7.0.0

• Feat: make insertions during iteration safe (major)

6.1.2

• Fixed: erroneous trailing combinators in pseudos

6.1.1

• Fixed: improve typings of constructor helpers (#292)

6.1.0

• Feature: add sourceIndex to Selector nodes (#290)

6.0.16

... (truncated)

Commits

• 4eb3468 7.1.6
• 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
• e33e9bc 7.1.5
• 6f4e6c1 fix: TypeError on unclosed [, ( and trailing | (#330)
• 4d8437f fix: preserve whitespace before a * namespace in attribute selectors (#325)
• e2f9029 fix: don't treat a non-prefix token before | as a namespace (#324)
• dd50ee1 chore(deps-dev): bump postcss from 8.5.18 to 8.5.23 (#331)
• 7e3abb2 chore(deps-dev): bump postcss from 8.5.15 to 8.5.18 (#328)
• See full diff in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint from 14.16.1 to 17.16.0

Release notes

Sourced from stylelint's releases.

17.16.0

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

• Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

17.15.0

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

• Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
• Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
• Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
• Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
• Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
• Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).

17.14.1

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0

It fixes 3 bugs, including a false negative one.

• Fixed: performance of getting module paths (#9354) (@​jeddy3).
• Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
• Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0

It fixes 3 bugs, including a false negative one.

• Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
• Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

• Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
• Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.16.0 - 2026-10-01

It fixes 2 bugs in the layout-mappings rules. This will likely be the last 17.x release, as we prepare for 18.0.0.

• Fixed: property-layout-mappings and unit-layout-mappings false negatives for uppercase property names and units (#9485) (@​giaBaoJS).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9483) (@​giaBaoJS).

17.15.0 - 2026-09-04

It adds 1 new rule and 2 new rule options, and fixes 4 bugs.

• Added: selector-no-unmatchable rule (#9451) (@​jeddy3).
• Added: ignoreFunctions: [] to color-named and color-no-hex (#9463) (@​jsmitty12).
• Fixed: custom-property-no-missing-var-function false positives for anchor positioning (#9466) (@​giaBaoJS).
• Fixed: declaration-block-no-redundant-longhand-properties autofix for font shorthand (#9402) (@​sarathfrancis90).
• Fixed: declaration-property-max-values false positives for interpolated inline expressions (#9437) (@​alexchen-sys).
• Fixed: selector-no-invalid false negatives for pseudo-elements, combinators and nested :has() (#9452) (@​jeddy3).

17.14.1 - 2026-07-20

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0 - 2026-06-25

It fixes 3 bugs, including a false negative one.

• Fixed: performance of getting module paths (#9354) (@​jeddy3).
• Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
• Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

• Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
• Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

... (truncated)

Commits

• bc06c7c Release 17.16.0 (#9551)
• f4fb76f Set target-branch to v18 in Dependabot config (#9488)
• 2019478 Fix property-layout-mappings and unit-layout-mappings false negatives for...
• e875710 Fix value-keyword-layout-mappings false positives for caption-side (#9483)
• 0547bff Release 17.15.0 (#9484)
• ac19a3c Fix custom-property-no-missing-var-function false positives for anchor posi...
• 23947ae Bump @​humanfs/node from 0.16.6 to 0.16.8 (#9480)
• 53c74f7 Bump fast-uri from 3.1.5 to 3.1.7 (#9481)
• 26856e6 Bump the jest group across 1 directory with 2 updates (#9476)
• b90ecd8 Bump browserslist from 4.28.4 to 4.28.8 (#9479)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint-order from 5.0.0 to 8.1.2

Release notes

Sourced from stylelint-order's releases.

8.1.2

• Fixed compatibility with the upcoming Stylelint v18

8.1.1

• Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

• Added custom-properties-alphabetical-order rule

8.0.0

• Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

• Added support for Stylelint 17

7.0.0

• Dropped Node.js 18 support
• Dropped support for Stylelint older than 16.18.0
• Changed: Ignore properties case for properties-order and properties-alphabetical-order
• Added support for more properties shorthands
• Fixed order autofix not applied, when Stylelint disable comments are present
• Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
• Fixed properties-order autofix not applied, when Stylelint disable comments are present
• Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
• Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

• Added support for Stylelint 16

6.0.3

• Fixed sorting inside CSS-in-JS css helper

6.0.2

• Added Stylelint v15 to peerDependencies

6.0.1

• Fix regression causing root of CSS or SCSS to report violations

6.0.0

• Dropped Node.js 12 and 14 support.
• Added support for postcss-styled-syntax.

Changelog

Sourced from stylelint-order's changelog.

8.1.2

• Fixed compatibility with the upcoming Stylelint v18

8.1.1

• Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

• Added custom-properties-alphabetical-order rule

8.0.0

• Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

• Added support for Stylelint 17

7.0.0

• Dropped Node.js 18 support
• Dropped support for Stylelint older than 16.18.0
• Changed: Ignore properties case for properties-order and properties-alphabetical-order
• Added support for more properties shorthands
• Fixed order autofix not applied, when Stylelint disable comments are present
• Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
• Fixed properties-order autofix not applied, when Stylelint disable comments are present
• Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
• Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

• Added support for Stylelint 16

6.0.3

• Fixed sorting inside CSS-in-JS css helper

6.0.2

• Added Stylelint v15 to peerDependencies

6.0.1

• Fix regression causing root of CSS or SCSS to report violations

6.0.0

• Dropped Node.js 12 and 14 support.
• Added support for postcss-styled-syntax.

Commits

• f7d9fa8 8.1.2
• 3ca8e28 Prepare 8.1.2
• 9a53b17 Update dependencies
• 2b4f934 Fix tests with Stylelint v18 branch (#221)
• 5e0802a 8.1.1
• d63b335 Prepare 8.1.1
• 707f2d9 Change how CSS from the style attribute is detected, when using `postcss-ht...
• 7db7174 Add custom-properties-alphabetical-order in README (#214)
• 6d5b26a 8.1.0
• cfa2267 Prepare 8.1.0
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint-scss from 5.3.2 to 7.3.0

Release notes

Sourced from stylelint-scss's releases.

7.3.0

• Added: function-disallowed-list report disallowed functions in at-rule params (#1333).
• Fixed: operator-no-unspaced fix false positive for CSS type() function arguments (#1329).

Full Changelog: stylelint-scss/stylelint-scss@v7.2.0...v7.3.0

7.2.0

• Added: dollar-variable-no-missing-interpolation autofix for Sass functions in custom properties (#1287).
• Added: declaration-property-value-no-unknown support for namespaced functions (#1289).
• Updated: at-rule-conditional-no-parentheses improve autofix (#1286).

Full Changelog: stylelint-scss/stylelint-scss@v7.1.1...v7.2.0

7.1.1

• Fixed: operator-no-unspaced CJS/ESM interop for postcss-media-query-parser import for Bun compatibility (#1260).

Full Changelog: stylelint-scss/stylelint-scss@v7.1.0...v7.1.1

7.1.0

• Added: support for postcss-scss in declaration-nested-properties rule (#1265).
• Added: support for postcss-scss in declaration-nested-properties-no-divided-groups rule (#1263).
• Updated: declaration-property-value-no-unknown rule to be in sync with the latest stylelint version (#1280).
• Updated: refactor parseNestedPropRoot utility for performance and clarity (#1266).

Full Changelog: stylelint-scss/stylelint-scss@v7.0.0...v7.1.0

7.0.0

• Removed: support for Node.js less than 20.19.0 (#1221)
• Removed: deprecated rules (#1220):
  • at-import-no-partial-leading-underscore
  • at-import-partial-extension-blacklist
  • at-import-partial-extension-whitelist
  • at-import-partial-extension
• Changed: to ES Modules (#931)
• Added: stylelint@^17.0.0 to peer dependency (#1222)
• Added: selector-class-pattern rule (#1219)

Full Changelog: stylelint-scss/stylelint-scss@v6.14.0...v7.0.0

6.14.0

• Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
• Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
• Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

Full Changelog: stylelint-scss/stylelint-scss@v6.13.0...v6.14.0

6.13.0

• Added: at-mixin-argumentless-call-parentheses handle mixin calls with content block arguments (#1185).
• Added: at-function-pattern, at-mixin-pattern, dollar-variable-pattern, percent-placeholder-pattern add support for arguments in custom messages (#1187).
• Added: dollar-variable-no-missing-interpolation check for CSS custom properties, add autofix, rule documentation improvements (#1195).

... (truncated)

Changelog

Sourced from stylelint-scss's changelog.

7.3.0

• Added: function-disallowed-list report disallowed functions in at-rule params (#1333).
• Fixed: operator-no-unspaced fix false positive for CSS type() function arguments (#1329).

Full Changelog: stylelint-scss/stylelint-scss@v7.2.0...v7.3.0

7.2.0

• Added: dollar-variable-no-missing-interpolation autofix for Sass functions in custom properties (#1287).
• Added: declaration-property-value-no-unknown support for namespaced functions (#1289).
• Updated: at-rule-conditional-no-parentheses improve autofix (#1286).

Full Changelog: stylelint-scss/stylelint-scss@v7.1.1...v7.2.0

7.1.1

• Fixed: operator-no-unspaced CJS/ESM interop for postcss-media-query-parser import for Bun compatibility (#1260).

Full Changelog: stylelint-scss/stylelint-scss@v7.1.0...v7.1.1

7.1.0

• Added: support for postcss-scss in declaration-nested-properties rule (#1265).
• Added: support for postcss-scss in declaration-nested-properties-no-divided-groups rule (#1263).
• Updated: declaration-property-value-no-unknown rule to be in sync with the latest stylelint version (#1280).
• Updated: refactor parseNestedPropRoot utility for performance and clarity (#1266).

Full Changelog: stylelint-scss/stylelint-scss@v7.0.0...v7.1.0

7.0.0

• Removed: support for Node.js less than 20.19.0 (#1221)
• Removed: deprecated rules (#1220):
  • at-import-no-partial-leading-underscore
  • at-import-partial-extension-blacklist
  • at-import-partial-extension-whitelist
  • at-import-partial-extension
• Changed: to ES Modules (#931)
• Added: stylelint@^17.0.0 to peer dependency (#1222)
• Added: selector-class-pattern rule (#1219)

Full Changelog: stylelint-scss/stylelint-scss@v6.14.0...v7.0.0

6.14.0

• Added: dollar-variable-no-missing-interpolation report namespaced variables in custom properties (#1225).
• Added: function-disallowed-list check disallowed functions inside @return expressions (#1214).
• Fixed: dollar-variable-no-missing-interpolation fix false positive for variables already inside interpolation (#1213).

... (truncated)

Commits

• 4a0a3e8 7.3.0
• 7c26b32 Prepare version 7.3.0 (#1348)
• 0072d55 build(deps): bump postcss-selector-parser (#1346)
• 37b504c Update contributors list (#1347)
• b15777c build(deps-dev): bump the development-dependencies group across 1 directory w...
• 1db8f62 build(deps): bump js-yaml (#1344)
• 0a1409a build(deps-dev): bump @​humanfs/node from 0.16.7 to 0.16.8 (#1341)
• 43c00d4 build(deps-dev): bump browserslist from 4.28.2 to 4.28.8 (#1340)
• 7c0e473 build(deps): bump fast-uri from 3.1.5 to 3.1.7 (#1339)
• ccced91 build(deps): bump github/codeql-action in the github-actions group (#1338)
• Additional commits viewable in compare view

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.