Skip to content

fix: update postcss selector parser to 7.1.6 - #332

Merged
Vladislav Nechakhin (vladislav-nechakhin) merged 1 commit into
mainfrom
open-swe/dependency-remediation-07fb6bc4
Oct 19, 2026
Merged

Vladislav Nechakhin (vladislav-nechakhin) merged 1 commit into
mainfrom
open-swe/dependency-remediation-07fb6bc4

Conversation

@vladislav-nechakhin

@vladislav-nechakhin Vladislav Nechakhin (vladislav-nechakhin) commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Upgrade the compatible transitive postcss-selector-parser resolution from 7.1.1 to 7.1.6 for GHSA-rj75-hqrm-r3gf and GHSA-w9m9-85wc-3x92.
  • Regenerate pnpm-lock.yaml using the declared pnpm 10.5.1. Both PostCSS module consumers now resolve the patched parser, without manifest overrides or application changes.

Verification

  • Inspected the complete lockfile diff: only the parser version, integrity, and consumer references change.
  • git diff --check — passed.
  • pnpm 10.5.1 frozen-lockfile installation accepted the lockfile, but downloads remained incomplete under severe shared network/I/O contention; installation was stopped.
  • Focused parser smoke was blocked by missing util-deprecate during the incomplete install; no parser regression is established. Full lint/build not run. Existing TypeScript 7 and Zod peer warnings are unchanged.
  • No full test suite run; CI status is not asserted.

Made by Open SWE · view thread · openai:gpt-6.1-sol (medium)

Refresh the compatible transitive parser resolution with pnpm 10.5.1.

Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
@vercel

vercel Bot commented Oct 19, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
langgraph-chat Ready Ready Preview Oct 19, 2026 9:36am UTC

Request Review

@vladislav-nechakhin
Vladislav Nechakhin (vladislav-nechakhin) marked this pull request as ready for review October 19, 2026 11:54
@vladislav-nechakhin
Vladislav Nechakhin (vladislav-nechakhin) merged commit 7a50341 into main Oct 19, 2026
11 checks passed
@vladislav-nechakhin
Vladislav Nechakhin (vladislav-nechakhin) deleted the open-swe/dependency-remediation-07fb6bc4 branch October 19, 2026 12:05

This branch was successfully deployed

1 active deployment
Preview — 991de7f6 Deployed Oct 19, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant