Skip to content

css: stop rewriting valid positions into ones browsers reject - #45197

Closed
robobun wants to merge 1 commit into
mainfrom
robobun/c7c4c27b/css-position-to-css
Closed

robobun wants to merge 1 commit into
mainfrom
robobun/c7c4c27b/css-position-to-css

Conversation

@robobun

@robobun robobun commented Oct 13, 2026

Copy link
Copy Markdown
Collaborator

Problem

  • bun build rewrites a valid position into one that browsers reject. radial-gradient(circle at right 40%, red, blue) prints at right top 40%. With --minify, background-position: center bottom 10px prints 50% bottom 10px.
  • The cause is Position::to_css (src/css/values/position.rs:150), which prints every position. The port from lightningcss lost three offset: Some(_) tests and two fallback rows. No issue reports this.

Fix

  • Seven edits make Position::to_css equal to the lightningcss printer. Two of them only shorten valid output.
  • Correct because a side keyword needs the longer form only when it has an offset. Chrome 153 rejected 112 of 2401 generated valid cases, and now rejects none.
  • Verified: test/js/bun/css/css.test.ts (103 rows fail on main) and test/bundler/css/wpt/background-computed.test.ts (5 fail). Also ran test/js/bun/css/ and test/bundler/css/ (timeouts in Notes).
  • Self-reviewed: 9 concerns raised, 8 addressed. Notes name the other.

Background

  • A position has an x and a y part. Each is center, a length, or a side keyword with an optional offset (right 10px).
  • Only background-position accepts three values (right 10px center). A gradient position accepts one, two or four.
  • Considered only the three offset tests: 50% bottom 10px stays invalid. Considered a printer for each grammar: lightningcss has one.

Downsides

  • Valid output changes text for 18 of 46063 declarations in test/js/bun/css/files. All 18 get shorter and stay valid.
  • Position::to_css grows by 181 bytes. left top costs 21 more instructions for each print. No allocation is added.
  • CSS that an older bun wrote stays invalid when bun builds it again. Build it from source.
Notes

Repro

printf '.a { background: radial-gradient(circle at right 40%%, red, blue) }\n.b { background: conic-gradient(at right 40%%, red, blue) }\n.c { background: radial-gradient(circle at 10px bottom, red, blue) }\n.d { background-position: center bottom 10px }\n.e { background-position-x: 10px; background-position-y: top 5px }\n' > in.css
bun build ./in.css --outdir out && cat out/in.css
bun build ./in.css --outdir outmin --minify && cat outmin/in.css
Source main prints This PR prints Chrome 153 on what main prints
radial-gradient(circle at right 40%, red, blue) at right top 40% at right 40% rejects
conic-gradient(at right 40%, red, blue) at right top 40% at right 40% rejects
radial-gradient(circle at 10px bottom, red, blue) at left 10px bottom at 10px bottom rejects
background-position: center bottom 10px with --minify 50% bottom 10px center bottom 10px rejects
background-position-x: 10px and background-position-y: top 5px 10px top 5px 10px 5px rejects

A comparison of bun's output with lightningcss 1.33.0 found this. I found no issue that reports it.

The web-platform-tests file css/css-images/parsing/gradient-position-invalid.html lists radial-gradient(at right top 5px, red, blue) as invalid. gradient-position-valid.html lists radial-gradient(at right 40%, red, blue) as valid.

The seven edits (src/css/values/position.rs)

Line Edit Invalid output on main that it removes Valid output that it changes
152 offset test on the arm that writes top at right 40% printed as at right top 40% background-position: right 40% printed as right top 40%
159 offset test on the arm that writes center none right center now prints 100%
169 offset test on the arm that writes left at 10px bottom printed as at left 10px bottom background-position: 10px bottom printed as left 10px bottom
186 new arm: left <offset> with a centered y none left 10px center printed as 10px 50%, now 10px
207 new arm: centered x with bottom <offset> center bottom 10px printed as 50% bottom 10px with --minify none
250 x table returns a length that is not zero x 10px with y top 5px printed as 10px top 5px 10px top now prints 10px 0
277 y table returns a length that is not zero x left 10px with y 20px printed as left 10px 20px left 20px now prints 0 20px. center 10px now prints 50% 10px without --minify too

The first three edits and the two table rows restore what the port lost. The same omissions were in the earlier Zig version of this file. The two new arms come from lightningcss commit e4bcec34e5 (2026-01-20), which is later than the port. After this change the function has the same arms, in the same order, as impl ToCss for Position in lightningcss 1.33.0.

Position::to_css has five call sites: src/css/values/gradient.rs:510 and :606, src/css/properties/masking.rs:227, and src/css/properties/background.rs:156 and :352. None of them changes.

Tests

  • css.test.ts has 216 new rows and 1 changed expectation (left 10px center: 10px 50% to 10px, the same change that lightningcss made to its own test). On a debug build of main, 103 rows fail: the changed row and 102 of the new rows. The other 114 new rows pass on main too. They pin output that this change must not alter.
  • 9 of the rows in the background block are from the tests of lightningcss. 3 of them fail on main.
  • Each of the seven edits has rows that fail without it. With one edit removed at a time, css.test.ts fails 20, 19, 34, 5, 4, 12 and 12 rows.
  • cssTest compares with all whitespace removed. Each of those rows has a minify_test twin that compares the exact text.
  • background-computed.test.ts runs five of the cases through the bundler.
  • bun pm diff compares at right 40% with at right top 40% as "formatting only" on main, and as a real change with this PR. I checked this by hand. test/cli/install/bun-pm-diff.test.ts has 6 tests that time out under the debug build here, so I did not add a case to it.
  • Suites that time out under the debug build with and without this change: css-fuzz.test.ts, nested-selector-expansion.test.ts, nested-vendor-prefix-duplication.test.ts. selector-list-error-recovery.test.ts timed out when the whole directory ran in one process. It passes when it runs alone.

Measurements

Release builds of the merge base and of this branch, same profile, same machine.

  • Size: Position::to_css 1930 to 2111 bytes (nm -S). Text of the binary: +256 bytes (size). The stripped binary has the same file size.
  • Instructions for each printed position, counted with a qemu-x86_64 execution trace over Position::to_css and the two PositionComponent::to_css functions. Each count is the same in two runs. 10px 20px 177 to 141. 0 0 132 to 141. center 83 to 85. left top 94 to 115. right 10px bottom 20px 199 to 200. The output of these five is the same before and after.
  • The same five inside Position::to_css alone: 119 to 141, 132 to 141, 52 to 54, 94 to 115, 97 to 98.
  • Calls inside Position::to_css (objdump): 23 before and 23 after, to the same targets. None is an allocator or a clone.
  • Text: 3868 generated rules (positions in background-position, the background and mask shorthands, radial and conic gradients, and merged x and y longhands), compared with lightningcss 1.33.0. Outputs that differ in more than white space: 450 (455 with --minify) to 0. With --minify, 1059 more rules differ only in white space, in values that bun does not parse. This change does not touch them.
  • Of the outputs that change, Chrome accepted 338 (295 with --minify) before. All of those get shorter. Chrome accepts all of them after.
  • Chrome 153, CSS.supports, on the 2401 rules whose source it accepts: rejected outputs 112 (144 with --minify) to 0.
  • Old output: of those 112 and 144 rejected outputs, this branch prints all of them unchanged when it builds them again.
  • The 15 stylesheets in test/js/bun/css/files: 18 of 46063 declaration lines change, all in pico.css and tachyons.css. All 18 get shorter. Chrome accepts all 18 before and after. Minified output: 2732962 to 2732866 bytes.
  • valgrind, perf, bloaty and strace are not installed on the machine. I used nm, size, objdump and qemu-x86_64.

Not in this PR

Self-review

The review raised 9 concerns. None asked for a code change. 8 asked for a title that names the symptom and for the facts above. The ninth also asked for a separate change: unicode-range: U+0131 ; (with a space before the semicolon) prints U131, from src/css/rules/font_face.rs. That is a different function, and it is not part of this PR.

`Position::to_css` prints the position of `background-position`, of the
`background` and `mask` shorthands, and of radial and conic gradients.
It wrote the three-value form for a side keyword that has no offset.
`radial-gradient(circle at right 40%, red, blue)` printed
`at right top 40%`, which only `background-position` accepts.

The first three arms now test the offset, as lightningcss does. The
fallback prints a length that is not zero as a length, so merged x and y
longhands no longer print `10px top 5px`. Two arms from lightningcss
commit e4bcec34e5 print `left 10px center` as `10px` and keep
`center bottom 10px` as written under `--minify`, where it printed
`50% bottom 10px`.
@robobun

robobun commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator Author
Updated 5:29 PM PT - Oct 13th, 2026

✅ @robobun, your commit 7efcbb1142580560d5a5b0797ba41567a0682ef6 passed in Build #125257! 🎉


🧪   To try this PR locally:

bunx bun-pr 45197

That installs a local version of the PR into your bun-45197 executable, so you can run:

bun-45197 --bun

@robobun

robobun commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator Author

Status: closed. The change landed in #47025 (7942008). On main at that commit, the command below prints at right 40% and center bottom 10px.

How I reproduced it (release build of main before the change, and bun 1.4.3-canary):

printf '.a { background: radial-gradient(circle at right 40%%, red, blue) }\n.b { background-position: center bottom 10px }\n' > in.css
bun build ./in.css --outdir out --minify && cat out/in.css

Before the change, main printed radial-gradient(circle at right top 40%,red,#00f) and background-position:50% bottom 10px. In Chrome 153, CSS.supports is true for both source values and false for both printed values. With the change, bun prints at right 40% and center bottom 10px.

PR: #45197

@coderabbitai

coderabbitai Bot commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Configuration used: Repository: oven-sh/bun/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 8ddae040-053a-4fcc-84f7-323b26932ba3
📥 Commits

Reviewing files that changed from the base of the PR and between 281698a and 7efcbb1.

📒 Files selected for processing: 3
  • src/css/values/position.rs
  • test/bundler/css/wpt/background-computed.test.ts
  • test/js/bun/css/css.test.ts

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 5 remain after this review.

Walkthrough

The change updates CSS position serialization to preserve edge-offset semantics while emitting compact forms for centered axes. Regression tests cover background-position, background and mask shorthands, gradients, axis-longhand merging, and computed styles.

Changes

Position serialization

Layer / File(s) Summary
Position serialization and coverage
src/css/values/position.rs, test/js/bun/css/css.test.ts, test/bundler/css/wpt/background-computed.test.ts
Position::to_css adjusts edge-offset and centered-position output. Nonzero x- and y-length components are included in normalized values. Tests cover serialization, minification, longhand merging, and computed styles.

Suggested reviewers: jarred-sumner

Priority: ➖ Normal

Merge Risk: ⚪ Minimal · up to 7efcb

This change stops CSS positions from being serialized into forms browsers reject. No concrete merge-blocking risk was identified.

Pre-merge checks: Passed 4
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title clearly describes the main change: preventing Bun from rewriting valid CSS positions into forms that browsers reject.
Description check Passed The description explains the problem, fix, scope, trade-offs, and verification results. It does not use the exact template headings, but it provides the required change summary and testing details in …
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches: 💡 1
🛠️ Fix failing CI checks: 💡
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@claude claude Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nothing blocking. The comments below are optional suggestions. There is no need to push a fix for them before merging.

Beyond the inline nit, I traced every cell of the 6x6 background-position-x/-y merge matrix through the new arm order in Position::to_css and each expected string is what the printer emits for that (x, y) shape, with no three-value form reaching a gradient site. I also checked the split-axis case background-position-x: 50%; background-position-y: bottom 10px: it takes the left <x> <side> <offset> arm and prints the valid four-value form, so the center bottom <len> arm's keyword-only match is not a gap.

Extended reasoning...

The production change is confined to the Position::to_css printer in src/css/values/position.rs (three new offset.is_some() guards, two new arms, and the fallback length rows), with the rest of the diff being test rows in test/js/bun/css/css.test.ts and test/bundler/css/wpt/background-computed.test.ts; it touches no security-sensitive surface. The one surviving finding is a coverage nit; the ruled-out note records the matrix trace and the split-axis percentage case so a human reviewer need not redo them, but since the change alters non-minified output for some valid inputs and I could not diff against the lightningcss 1.33.0 source offline, a human confirmation of that alignment is still worthwhile.

Comment thread test/js/bun/css/css.test.ts Resolved
Jarred-Sumner added a commit that referenced this pull request Oct 27, 2026
### What does this PR do?

Consolidates the open pull requests on the CSS parser (`src/css`:
parsing, minifying, lowering, printing, CSS modules) into one.

179 open pull requests were in scope. Each was judged by one rule: **the
output must mean to a browser what the input meant.** Every claim was
run through a build of `main`, a build with the change, lightningcss
1.33 and Chromium 156 (CSSOM, computed values, painted pixels for colors
and gradients), and counted against 10,116 real stylesheets: the
published CSS of about 190 popular npm packages, plus stylesheets from
open source repositories. 107 land here, whole or in part, most of them
cut down. The source diff is net negative.

Of the 10,116, 9,509 are stylesheets that someone ships. The rest are
test fixtures of other tools (521), Tailwind v4 source that needs its
plugin (59) and SCSS, PostCSS or template source (27).

| 9,509 shipped stylesheets | `main` | this branch |
|---|---|---|
| fail to build | 71 | 35 |
| ... of those, valid CSS that Bun rejects | | 0 |
| minified output reads differently in Chromium than the input | 552 | 2
|
| CSS modules with a name that is referenced but not defined, or
exported but not defined | 166 | 0 |

| all 10,116 | `main` | this branch |
|---|---|---|
| fail to build | 192 | 141 |
| minified output reads differently in Chromium than the input | 593 |
15 |
| build on `main`, fail here | | 0 |
| right on `main`, wrong here (minified, and at the default targets) | |
0 |
| size of the minified output, no targets | 162.32 MB | 162.47 MB
(+0.093%) |
| size of the output at the default targets | 224.1 MB | 210.2 MB
(-6.2%) |

A syntax error is a build error, with one exception: the IE star hack
`*zoom: 1` is skipped, because tachyons and handsontable ship it. The 35
shipped stylesheets that fail are invalid CSS: 28 have a selector that
Chromium drops (semantic-ui-css, swiper, @ionic/core, Adobe Spectrum,
xp.css), 2 an `@import` after other rules, and one each `@supports not X
and Y`, a nested `@keyframes`, a stray comma, a selector list in
`::slotted()`, `@media screen\0` (govuk-frontend). The 2 that read
differently fold a `color-mix()` inside a gradient (see the known gaps).

The growth of the minified output is rules and declarations that `main`
deleted by mistake: 87 KB of rules, 45 KB of prefixed declarations that
only browser targets can rule out.

#### Popular CSS that `main` breaks today

- normalize.css, modern-normalize, sanitize.css: `font-family:
monospace, monospace` is collapsed to `monospace`, which changes the
font size from 16px to 13px (#46662).
- CKEditor 5, Tabler, Carbon, VitePress, Ionic, PatternFly, Excalidraw:
a rule of custom properties is deleted as a "duplicate" of a later rule
with the same selector and other custom properties. 37 stylesheets lose
1,681 custom properties (#33684).
- Material Components, daisyUI, DocSearch, plyr: a `var()` size loses to
its own fallback (#42101).
- nextra, daisyUI, CKEditor: declarations written after a nested rule
are moved above it (#45462).
- antd 4, purecss, govuk-frontend: browser hacks in selector lists start
to apply everywhere (#42100).
- foundation-sites, flatpickr, 98.css, blueprintjs, scalar,
react-datepicker: the build fails on valid CSS (#46756, #38552, #38534).
tachyons, handsontable: it fails on the IE star hack (#46751).
- nodejs.org, Mantine: a CSS module exports classes that no rule
defines, because the `@apply` or `@mixin` in them is moved out of the
rule (#46759).
- hint.css and 42 more: `z-index: 1000001` and `1000000` become the same
number (#46715).
- Adobe Spectrum: `--version: 5.0.1` prints as `5.1`.
- A quarter of all stylesheets: minified output has a stray space in
`align-items: center` (#41993).

#### Behavior changes to look at first

1. **`light-dark()` is kept as written at the default browser targets**
(#42009). The lowered form `var(--buncss-light, a) var(--buncss-dark,
b)` is invalid unless a compiled `color-scheme` covers the element: 184
of the 215 real stylesheets that get it never define the variable, so
every browser drops the declaration. The docs section on the polyfill is
removed.
2. **`border` is not built from longhands** (#42072):
`border-width:0;border-style:solid;border-color:red` stays three
declarations, because `border` also resets `border-image`. 305 real
stylesheets grow by 30 KB in total; `bootstrap.min.css` by 113 bytes, 5
gzipped. No real stylesheet was found where the old merge shows, so this
is the one to drop if size matters more. 14 existing expectations
change.
3. **A CSS module no longer exports names that only occur inside
`:global(...)`** (#45487). 73 real modules lose 202 export keys, all of
them names that no rule has. `import { g }` or `composes: g` of such a
name becomes a build error.
4. **Container names and `@counter-style` names stay global in a CSS
module** (#45247 by @mikamikasuki). `main` hashes the `@container` name
but not `container-name`, so a named query never matches.
postcss-modules (Vite, css-loader, Next.js) keeps them global;
lightningcss and esbuild hash both. Global keeps a container that is
queried from another file or from JS working.
5. **Syntax errors are build errors, also two that `main` lets
through**: a media query that stops short (`@media screen and {`,
`@media not {`, `@import "a.css" screen and;`) and `@media (width <) foo
{`. No stylesheet of the 10,116 has either. A condition that is valid by
the grammar though no browser knows it, `( ... )` or `fn( ... )`, is
kept as written (#46756): `(min-width:0\0)`, `(not(hover))`.
6. **Declarations after a nested rule stay where they were written**, as
a nested declarations rule (#45462). Changes the output of 199 real
stylesheets; in a fuzz of 2,850 nested programs compared by computed
style, `main` was wrong in 1,056 and the pull request's code, before it
was trimmed here, in none.
7. **`Bun.color`**: `color()` inputs are converted instead of returned
as a string (`Bun.color("color(srgb 1 0 0)", "hex")` was `"color(srgb 1
0 0)"`); `currentColor`, system colors and `light-dark()` give `null` in
the converting formats instead of the keyword as a string; a relative
color or `color-mix()` outside sRGB is clipped, not gamut-mapped
(`hsl(from oklch(100% .399 336.3) h s l)` is `#ff5bff`, was `#fff`).
8. The `:-moz-any()` and `:-webkit-any()` copies of rules with `:is()`
are gone at the default targets (#45945, #42029). The `:-webkit-any()`
copy outranked the original rule: `.title{color:blue}
:is(h1,h2,h3){color:red}` painted red. 5.8% of all default-target output
was the `:-moz-any()` copies.
9. `Property` grows from 216 to 224 bytes: `Url` stores its text as a
slice so that two `url()` values can be compared (#46895). The pull
request packed a pointer and a `u32` behind `unsafe` to avoid that.

#### Not in this PR, needs a decision

- **Raise the default browser targets (#40369) and add a `cssTarget`
option (#40368).** Today: Chrome 80, Edge 80, Firefox 78, Safari 14,
Opera 67, and no public way to change them. At Vite 8's floor the output
of the 9,924 stylesheets is 15.3% smaller (3.9% gzipped). About a dozen
fixes here only matter at today's floor, and code for older targets is
unreachable without the option.
- Vendor prefixes for `user-select`, `appearance`, `hyphens` and five
more (#45814): 1,116 real stylesheets lack a prefix they need at the
default targets. And for `backdrop-filter` (#44648): 173.
- Clip instead of gamut-map in the sRGB fallback of a plain wide-gamut
color: deletes about 90 lines, changes every pinned fallback hex. If the
mapping stays, #44647 by @oddharsh makes it closer to what browsers
paint (colors off by 2/255 or more: 168 to 110 of 3,170 real ones).

#### Changes

**Rules: duplicates, merging, nesting, fallbacks**

- The `:-moz-any()` copy of every rule with `:is()` or `:not(a, b)` is
gone: Firefox 78 has `:is()` (#45945). 1,164 real stylesheets
- Keep declarations written after a nested rule in place with a nested
declarations rule (#45462). 379 real stylesheets
- With nesting compiled away, an unknown at-rule inside a style rule was
moved out of it: `.wrapper{@apply flex}` printed a bare `@apply flex;`
and the rule was gone, so a CSS module exported a class that no rule
defines. It now stays in a block under the compiled selector. 72 real
modules with Tailwind's `@apply`, 25 with Mantine's `@mixin` (#46759).
316 real stylesheets
- Keep !important in the rules generated for logical properties and
color-scheme (#38597). 311 real stylesheets
- With browser targets, remove an earlier duplicate rule only when its
declaration block is equal (#46861). 171 real stylesheets
- Compare custom property names in `PropertyId` equality and importance
in duplicate-rule detection (#33684). 40 real stylesheets
- Keep same-condition @supports rules and empty named @layer blocks
(#46733). 31 real stylesheets
- Keep target-added vendor prefix passes on cloned and re-minified
rules, and never print a bare `:full-screen` (#43339). 12 real
stylesheets
- Keep the selectors on rules added for color fallbacks and logical
properties (#43240). 3 real stylesheets
- A later declaration of a property drops the `@supports` color copies
of the earlier one, which printed after the rule and won (#45560). 2
real stylesheets
- Do not merge style rules in a stylesheet that holds `revert-rule`
(#46953). 1 real stylesheets
- `@import ... supports(-webkit-mask: none)` kept its prefix (#38589)

**Properties and shorthands**

- Print align-items:center without a stray space when no safe/unsafe
keyword is given (#41993). 3,317 real stylesheets
- Emit the physical longhands instead of the inset shorthand for targets
without it (#38583). 1,452 real stylesheets
- Keep the stops of an upward gradient as written, and drop a `50%` hint
only at the midpoint (#46790). 104 real stylesheets
- Emit unparsed border-block-* declarations when compiling logical
borders (#38582). 89 real stylesheets
- Keep repeated font families and dedupe only the inserted system-ui
fallbacks (#46662). 88 real stylesheets
- A `width` / `height` / `min-*` / `max-*` with `var()` or `env()` was
printed before the plain fallback written above it, so the fallback won
(#42101). 26 real stylesheets
- Keep box-orient and box-direction when flex-direction or flex-flow
follows (#45672). 16 real stylesheets
- Write held prefixed background declarations at every flush (#46882). 6
real stylesheets
- Derive equality for Size2D and BorderRadius, and keep every prefix in
the border-radius handler (#45665). 2 real stylesheets
- Print `none` instead of an empty border-image, mask-border or
mask-box-image value (#45143). 2 real stylesheets
- Keep font/transition sub-properties on the side of the shorthand they
were written on (#41990). 2 real stylesheets
- CSS-wide keywords are not names: `font:12px Arial;font-family:inherit`
printed `font:12px inherit`, `color-scheme:inherit` and
`color-scheme:auto` printed `normal`, `transition-property:unset` was
folded into `transition` (#42022). 2 real stylesheets
- Only fold font longhands into `font` when the rule declared a `font`
(#45459)
- Keep a font family name quoted when its identifiers do not read back
as the same name (#46606)
- Stop rewriting valid positions into ones browsers reject (#45197)
- `border` is no longer built from longhands unless the rule also sets
what `border` resets (`border-image`), and an author's `border-image`
reset is no longer dropped. `transition` is likewise only written where
the rule wrote one, because it resets `transition-behavior` (#42072)
- `border; border-image: <gradient>; border-image-slice: 1` lost the
gradient in every default build (#42018)
- A prefixed `linear-gradient` keeps its direction, written or
generated: the prefixed syntax names the starting side and measures
angles differently (#46697)

**At-rules**

- Print @font-face format() keywords as strings (#37979). 439 real
stylesheets
- Print @supports `not` conditions without a leading space (#38559). 88
real stylesheets
- Reset after the number token of a unicode-range (#45835). 33 real
stylesheets
- Keep `<general-enclosed>` media and container conditions as written
(#46756). 24 real stylesheets
- A strict range such as `(width < 768px)` lowered for old targets still
matched at exactly 768px. The step is now `.02px`. The `not all and`
form for other units is not taken (#46806). 18 real stylesheets
- Keep scanning an @supports condition after a nested block (#38552). 9
real stylesheets
- Every `@counter-style name` printed as `@counter-stylename`, which
browsers drop (also #46692). In a CSS module the name now stays global,
like the `list-style` that refers to it (#33679). 9 real stylesheets
- Keep a keyframe whose block has an invalid item (#46288). 2 real
stylesheets
- Read an @Property initial-value on the stylesheet's parser, keep an
unmatched value as written (#45806). 2 real stylesheets
- `@media {}` is `all`. A media query that stops after `and`, `or` or
`not` (`@media screen and {`) is a build error; `main` printed `not all`
or dropped the condition, silently. The `@layer` and type selector parts
are not taken (#46869). 2 real stylesheets
- Accept a name-only `@container` and a `style()` feature with no value
(#46689). 1 real stylesheets
- Parse `<timeline-range-name> <percentage>` keyframe selectors (#45652)
- Allow `or` inside parentheses after a media type (#45088)
- Print the `=` comparison in media and container queries as `=`
(#45071)
- Parse the @font-palette-values font-family descriptor as a list of
family names (#45484)

**Selectors**

- Never wrap a selector list in :is() (#46787). 414 real stylesheets
- Stop emitting :-webkit-any() copies of :is() that outrank the original
rule (#42029). 373 real stylesheets
- With browser targets, a selector list with a vendor-prefixed member
was split, which revives hacks that rely on other engines dropping the
whole list: `.s *::-ms-backdrop,.s{flex:auto}` applied everywhere.
Rewritten; the list is printed as written (#42100). 42 real stylesheets
- Print the vendor prefix on downleveled :any-link, :read-only,
:read-write, :placeholder-shown and :autofill (#42131). 12 real
stylesheets
- Fix nesting lowering of a `&` that does not lead its selector
(#43047). 8 real stylesheets
- `@scope`: `&` and implicit selectors compile to `:where(:scope)`,
relative selectors and bare declarations parse (#43165). 7 real
stylesheets
- Only reject bare :global / :local pseudo-classes in CSS modules
(#38534). 5 real stylesheets
- Stop truncating `@scope to (...)` and stop replacing `&` in the
scope-end selector (#43146). 2 real stylesheets
- `[xl|href$=".pdf"]` lost its namespace prefix (#45159). 2 real
stylesheets
- Match An+B keywords exactly and take only `+` as the leading sign
(#42953). 1 real stylesheets
- Parse ::details-content and ::picker() like ::part() (#45504). 1 real
stylesheets
- Parse :window-inactive as an ordinary pseudo-class, and accept it
after ::selection (#45815)
- Print :nth-col(1) and :nth-last-col(1) in functional form (#41575)
- `li::before::marker` failed the build (#45810)
- `&` inside `:nth-child(... of S)` is resolved when nesting is compiled
away. The second selector serializer (326 lines) is deleted (#43024)

**Colors and `Bun.color`**

- Keep light-dark() as written under the default browser targets
(#42009). 227 real stylesheets
- Number and percentage channels parse in `lab()`, `lch()`, `oklab()`,
`oklch()`, `hsl()` and `hwb()`; the hue of `lch` / `oklch` is no longer
scaled by alpha (#45084). 130 real stylesheets
- `Bun.color` returns `null` for `currentColor`, system colors and
`light-dark()` in the converting formats, instead of the CSS keyword as
a string (#33047). 130 real stylesheets
- Relative colors: channel keywords are on the scale of their function
(`rgb(from #369 calc(r + 10) g b)`), the origin's alpha is kept, a
relative color kept as written gets no `@supports` copies, and a result
outside sRGB is not folded (#45362). 31 real stylesheets
- Keep rotate: 0deg out of none, and keep the origin alpha in relative
colors (#38486). 13 real stylesheets
- Compute the D50 reference white in f32 so greys convert to lab(l 0 0)
like lightningcss (#38535). 7 real stylesheets
- Return a missing hue for a grey from conversions into lch, oklch, hsl
and hwb (#45201). 5 real stylesheets
- Fix color(a98-rgb), srgb-linear relative colors and color-mix(in
xyz-d50) (#38487). 4 real stylesheets
- Match named colors without regard to ASCII case (#45092). 3 real
stylesheets
- Fold min(), max() and clamp() over plain numbers (#39515)
- `calc(l - .08)` in a percentage channel of a relative color became NaN
and printed `#000` (also #45970) (#45971)
- Bun.color: convert color() inputs instead of returning them as a CSS
string (#38488)
- A `color-mix(in srgb, ...)` result outside sRGB prints `color(srgb
...)` instead of a gamut-mapped hex (#39269)

**`calc()` and numbers**

- Rounding to 6 significant digits ate into the integer part:
`z-index:2147483647` became `2147480000`, `max-width:9999999px` became
`10000000px`, `--x:1234567.5` became `1234570`. It now only cuts a
fraction short: a value kept as tokens prints its source text, a typed
value prints every integer digit and at least one digit of the fraction
(#46715). 43 real stylesheets
- A number without a unit is no longer repaired into `px`
(`height:1.5715` is dropped by a standards-mode browser, so it prints as
written), `calc(-1 * 0)` is not a length, and on a property of the range
[0,∞] (sizes, border radii, padding, border and outline widths, gap,
`flex-basis`, `font-size`) a `calc()` that folds below zero prints `0`
instead of an invalid negative literal, and a negative literal no longer
replaces the valid declaration before it (`width:10px;width:-5px`
printed `width:-5px`) (#42104). 24 real stylesheets
- Print numbers from the f32's shortest digits, not its f64 expansion
(#38565). 17 real stylesheets
- Print negative numbers below 1 with a single minus sign (#38516)
- Keep math functions over two different length units as written
(#38489)
- Fold rem() with a truncated quotient, so it keeps the sign of the
dividend (#32286)
- A one-argument `min()` / `max()` around a sum printed without any
function (`width:100% - 20px`) (#46145)
- `round()` breaks ties upward and handles a negative step as browsers
do (#45249)

**CSS modules**

- A CSS module exports its `@keyframes` names (`styles.spin`). Hashing
is unchanged (#46720). 145 real stylesheets
- A name inside `:global(...)` prints plain but was exported as
`name_<hash>`, a class no rule has (also #38573) (#45487). 90 real
stylesheets
- Keep container names global in CSS modules (#45247). 6 real
stylesheets
- Tag the keyframes name when an `animation` value falls back to raw
tokens (#46034). 6 real stylesheets
- In a plain stylesheet `composes: a from "./b.css"` was treated as an
import: the file was inlined and an absolute path printed (#45961). 4
real stylesheets
- Drop a rejected composes instead of failing the file at print time
(#38538). 1 real stylesheets
- Keep every rule's custom properties for the composes conflict check
(#38523)
- Keep composes working after a nested rule in the same block (#38520)
- `IdentOrRef::hash` read 2 of 16 bytes, so in release builds every
class of a module hashed alike (#30784)

**Tokens, `url()`, diagnostics**

- The block skip stack no longer allocates on every block exit (#39533)
- Report the diagnostic's line without its line breaks in
position.lineText (#38342). 192 real stylesheets
- Compare `url()` values by their text (#46895). 26 real stylesheets
- Values kept as tokens keep the blanks they were written with instead
of having them re-invented at print time: `attr(x type(<number>))`
printed `type(< number> )`, which browsers drop. Minified output still
drops the blanks that cannot matter (#45577). 19 real stylesheets
- The IE star hack (`*zoom:1`) failed the whole build. The declaration
is skipped, as every browser does. It is the one syntax error that
builds: tachyons, handsontable and jasmine ship it (#46751). 8 real
stylesheets
- The path of a copied asset spliced into `url()` is always quoted, so a
file name with a space or a parenthesis cannot end the `url()` (#41557).
7 real stylesheets
- Move the skip loop of parse_until_before out of the generic body
(#39520)
- Remove dead code from bun_css: the unused `impl Default for Property`
(#45618)
- Default the at-rule and qualified-rule parser traits, drop the
url_to_css shim (#31999)

**Speed**

Four inputs that took quadratic or exponential time, or produced output
out of proportion, are now linear, with no new limit and no extra pass
(#31639, #42243, #38531, #43421).

**Tests only**

- `css-fuzz.test.ts` never ran in CI and timed out on debug builds; it
is a deterministic table now (#38500)
- `nth-anplusb-ident.test.ts` counts heaps in a child process (#46331)
- `color.test.ts` checks the ansi-16 sweep with one `expect()` (#42824)
- Not CSS, but it failed this PR's CI and fails on `main` too:
`ws-proxy.test.ts` on Windows, "a message sent during a TLS
renegotiation arrives after it". The helper server now renegotiates from
the callback of the frame's write (#46170)

**No pull request covered these**

- `--v: 5.0.1` printed as `5.1`, `--w: 1.0.0` as `10`, `--x: 1+2` as
`12`, `2n+1` as `2n1`: a number token that touches another keeps its
source text.
- `color-scheme: auto` printed as `normal`, and `color-scheme: dark
light` as `light dark`.
- A bare `:global` or `:local` in a CSS module sets the scope of the
names after it, up to the end of the selector, as in css-loader. It was
a build error.
- The scrollbar states (`a:horizontal`,
`::-webkit-scrollbar{&:horizontal{}}`) are valid in a plain compound, as
in WebKit and Blink.
- Without browser targets, `-webkit-box-align`, `-ms-flex-align` and the
like were dropped next to their standard form (flatpickr,
foundation-sites, materialize-css: 28 stylesheets), and
`-webkit-fill-available` before `-moz-available` (beercss).
- `(-o-min-device-pixel-ratio: 2/1)` printed as `2`.
- `sin()`, `cos()` and `tan()` are exact at multiples of 90deg:
`calc(100px * cos(90deg))` printed `-.00000437114px`.
- A `display-p3` color at targets that have P3 but not the other
`color()` spaces (Safari 10.1 to 14) got itself as a fallback.
- `width: rem(-18px, 5px)` folds to a negative literal once `rem()` is
right; it prints `0`.
- Consecutive nested declarations rules, which arise when same-query
`@media` blocks in one rule merge, are folded into one and count against
the existing selector expansion limit as the `&{}` rules they replace
did.

#### Known and not fixed here

- Four longhands are still folded into a `transition` the author did not
write where the targets add a prefixed copy of a property (`mask-image`
at Chrome 80): only the shorthand gives the copy its own times.
- A later `background`, `box-shadow` or `border-*` declaration still
loses to the `@supports` copy of an earlier `var()` value of the same
property with a wide-gamut color. Same on `main`; #45560 is taken for
the properties of the fallback handler and for unparsed values only.
- A merged rule prints the unprefixed name in the passes of the rule it
absorbed: `.d::-webkit-input-placeholder{}.d::-moz-placeholder{}` prints
`::placeholder` for the second (#42106, not taken: it breaks the merge
of prefix-equivalent rules).
- The `border`, `outline` and `font` shorthands, `line-height`,
`scroll-padding`, `background-size` and a few more still print a
`calc()` that folds below zero as a negative literal. No real stylesheet
has one.
- `all` is not a property Bun knows, so `a{margin-top:1px;all:unset}`
prints `all` first. Same on `main`.
- A selector kept as raw tokens loses the blank before `*` when
minified: `--sel: .dark *` prints `.dark*`. Same on `main`.
- `width:calc(0% + 12px)` folds to `12px`, which lays out differently in
a table cell. Same on `main`.
- The `:dir()` / `:lang()` rules of a lowered logical property print
before the nested rules of their rule, so a logical declaration written
after a nested rule of equal specificity still loses to it. Same on
`main`.
- A fraction is still rounded to 6 significant digits (`12345.678`
prints `12345.7`, `33.3333333333%` prints `33.3333%`). Keeping every
digit would add up to 282 KB over the corpus.
- `@keyframes "quoted"` is hashed in a module but not exported.
- In a module, a keyframes name inside a `var()` fallback is not hashed:
`animation: var(--enter, fade 1s)`. Same on `main`.
- A `color-mix()` or relative color folded to a hex inside a gradient
changes the interpolation from Oklab to sRGB (VS Code, clawhub).
Printing `color(srgb ..)` instead needs a fallback for `mask-image`,
`list-style-image` and custom properties at the default targets, which
have none.
- A comma list in `@container` still fails the build.
- After a bare `:global`, names that are hashed at print time
(`::view-transition-old(foo)`) are still hashed; inside `:global(...)`
they are not.

#### Pull requests in scope that do not land here

- Duplicates of a pull request that lands here: #36961 (of #37979),
#38478 (of #46662), #38480 (of #46733), #38482 (of #46715), #38491 (of
#38500), #38508 (of #45201), #38513 (of #45362), #38573 (of #45487),
#38640 (of #38500), #45525 (of #45247), #45589 (of #46756), #45970 (of
#45971)
- Already fixed on `main`: #38674
- Right, but for input nobody writes (0 of 10,116 stylesheets, and not
new syntax): #31916, #38526, #38592, #39349, #41139, #41801, #42042,
#42484, #43078, #45604, #45908, #46086, #46221, #46224, #46273, #46694,
#46707, #46737, #46755, #46816, #46870, #46934
- Right or harmless, but not worth their code, their bigger output or
the behavior they change: #30905, #31924, #33332, #34426, #36225,
#38006, #38512, #38547, #38551, #38561, #38572, #38576, #38607, #38623,
#38667, #38692, #42106, #42912, #42918, #43407, #43434, #44700, #45442,
#45546, #45747, #45759, #45825, #45946, #46061, #46127, #46206
- Need a decision (see above), stay open: #40368, #40369, #44647,
#44648, #45814
- Stays open: #45787

Out of scope: CSS linking and chunking in the bundler, the dev server,
docs-only pull requests, and repository-wide sweeps that touch `src/css`
in passing.

Thanks to @mikamikasuki (#45247), @alii (#39520, #31999) and @oddharsh,
whose measurements on #40369 and #41990 were used.

Fixes #16727.
Fixes #24770.
Fixes #30772.
Fixes #44704.
Fixes #45089.
Fixes #45237.
Fixes #46872.

### How did you verify your code works?

- The 35 CSS test files pass on a debug build, also with
`FORCE_COLOR=1`. 600+ of the tests in this branch fail on a build of
`main`. An earlier head of this branch passed all 179 CI jobs that ran.
- The reproduction of each issue listed above was run on `main` (wrong)
and on this branch (right).
- Differential run over the 10,116 stylesheets, `main` against this
branch, minified without targets and through `Bun.build` at the default
targets: no stylesheet that builds on `main` fails; Chromium 156
compares the output with the input rule by rule (CSSOM, then computed
values on a sized element in a standards-mode document, colors as
painted pixels in sRGB and P3). The comparison has 195 control pairs
that must read equal or different. For stylesheets that read differently
on both builds, mostly because of lowering, the sets of differences were
compared; the three new ones are two minifier fixtures that are wrong on
both and one comparison artifact.
- CSS modules are checked for consistency instead, since hashed names
defeat the comparison: every reference points at a name the output
defines, every export exists.
- `Bun.color`: 59 inputs in 13 formats on both builds; every changed
cell was read.
@Jarred-Sumner

Copy link
Copy Markdown
Collaborator

Landed in #47025 (7942008).

Stop rewriting valid positions into ones browsers reject

@robobun

robobun commented Oct 27, 2026

Copy link
Copy Markdown
Collaborator Author

Checked on main at 7942008 with a debug build. The report's rows print valid positions, and every row from this branch (css.test.ts and background-computed.test.ts) passes there.

One of the seven edits has no test on main: the else branch at src/css/values/position.rs:276-278. With it removed, test/js/bun/css/css.test.ts, test/bundler/esbuild/css.test.ts and test/bundler/css/ still pass, and these print a form that Chrome 153 rejects:

Source Output without lines 276-278
background-position-x: left 10px; background-position-y: 20px background-position: left 10px 20px
background-position: left 10px top 5px; background-position-y: 40% background-position: left 10px 40%

This row in the positions browsers accept block pins it:

minify_test(".a{background-position-x:left 10px;background-position-y:20px}", ".a{background-position:10px 20px}");

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants