From bc53edb30c24d268e7fb97a747b11c54c534fff7 Mon Sep 17 00:00:00 2001 From: Andrew Duthie Date: Tue, 10 Oct 2023 09:47:27 -0400 Subject: [PATCH] Pin PostCSS to resolve advisory, remove explicit dependency changelog: Internal, Dependencies, Update dependencies to resolve security advisories --- package.json | 4 ++-- yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 20fc369eae8..4546dd9abc0 100644 --- a/package.json +++ b/package.json @@ -79,7 +79,6 @@ "mocha": "^10.0.0", "mq-polyfill": "^1.1.8", "msw": "^1.3.2", - "postcss": "^8.4.22", "prettier": "^3.0.3", "quibble": "^0.6.17", "react-test-renderer": "^17.0.2", @@ -92,6 +91,7 @@ "webpack-dev-server": "^4.11.1" }, "resolutions": { - "minimist": "1.2.6" + "minimist": "1.2.6", + "postcss": "8.4.31" } } diff --git a/yarn.lock b/yarn.lock index ea91efed739..48f47699c08 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5480,10 +5480,10 @@ postcss-value-parser@^4.2.0: resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz#723c09920836ba6d3e5af019f92bc0971c02e514" integrity sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ== -postcss@^8.4.22, postcss@^8.4.24: - version "8.4.25" - resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.25.tgz#4a133f5e379eda7f61e906c3b1aaa9b81292726f" - integrity sha512-7taJ/8t2av0Z+sQEvNzCkpDynl0tX3uJMCODi6nT3PfASC7dYCWV9aQ+uiCf+KBD4SEFcu+GvJdGdwzQ6OSjCw== +postcss@8.4.31, postcss@^8.4.24: + version "8.4.31" + resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.4.31.tgz#92b451050a9f914da6755af352bdc0192508656d" + integrity sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ== dependencies: nanoid "^3.3.6" picocolors "^1.0.0"