chore(deps): update dependency postcss to v8.4.31 [security] #480
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
2 times, most recently
from
12646c1
to
84d29de
Compare
renovate
bot
force-pushed
the
renovate/npm-postcss-vulnerability
branch
from
84d29de
to
0bf2db3
Compare
JasonNotJson
added a commit
that referenced
this pull request
Nov 17, 2023
* Feature/career base (#492) * feat: init feature career * chore: adding assets and types * feat: changes in header imports * feat: cleaning syllabus icons * feat: adding routing * feat: adding routing to hash router * feat: career page header with job list and job detail page base (#488) * Added Icon Folder * Header Initilize * feat: solving header issue * fix: fixing header styling * Add Job List and Job Card Element * Job List and Job Card * Job List and Job Card * Page Detail * Job Detail Page * Job Page Detail * feat: adding job description page * chore: small updates --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * feat: finishing job details page (#489) * feat: career page user profile with api (#490) * feat: init user profile component * feat: created post login user profile component * feat: creating user profile input form * feat: creating dropdown list for profile creation modal * feat: struggling to deal with multiple dropdowns * feat: applying standard styling to jobdetail * feat: responsive styling * feat: successful implementation for user profile * feat: checked functionality next homework is apply button and time formatting * chore: adding styling to job card * feat: job apply functionality is set (#491) * fix: fixing job content sections list * feat: adding company job post button --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * fix: fixing index html for career * fix: hotfix on vite configuration (#493) * feat: fixing button styling due to unknown errors in dev env * chore: changing minor styling issues * feat: career post application and agreement modal (#494) * feat: adding some padding and post api * feat: agreement modal and post functionality * feat: text size to section title of job content (#495) * chore(deps): update dependency postcss to v8.4.31 [security] (#480) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: finishing up careers page (#496) * feat: finishing up careers * chore: cleaning console logs * chore: cleaning comments --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
JasonNotJson
added a commit
that referenced
this pull request
Nov 17, 2023
* Feature/career base (#492) * feat: init feature career * chore: adding assets and types * feat: changes in header imports * feat: cleaning syllabus icons * feat: adding routing * feat: adding routing to hash router * feat: career page header with job list and job detail page base (#488) * Added Icon Folder * Header Initilize * feat: solving header issue * fix: fixing header styling * Add Job List and Job Card Element * Job List and Job Card * Job List and Job Card * Page Detail * Job Detail Page * Job Page Detail * feat: adding job description page * chore: small updates --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * feat: finishing job details page (#489) * feat: career page user profile with api (#490) * feat: init user profile component * feat: created post login user profile component * feat: creating user profile input form * feat: creating dropdown list for profile creation modal * feat: struggling to deal with multiple dropdowns * feat: applying standard styling to jobdetail * feat: responsive styling * feat: successful implementation for user profile * feat: checked functionality next homework is apply button and time formatting * chore: adding styling to job card * feat: job apply functionality is set (#491) * fix: fixing job content sections list * feat: adding company job post button --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * fix: fixing index html for career * fix: hotfix on vite configuration (#493) * feat: fixing button styling due to unknown errors in dev env * chore: changing minor styling issues * feat: career post application and agreement modal (#494) * feat: adding some padding and post api * feat: agreement modal and post functionality * feat: text size to section title of job content (#495) * chore(deps): update dependency postcss to v8.4.31 [security] (#480) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: finishing up careers page (#496) * feat: finishing up careers * chore: cleaning console logs * chore: cleaning comments * chore(deps): update dependency postcss to v8.4.31 [security] (#498) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: adding mobile responsiveness to profile registeration --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
JasonNotJson
added a commit
that referenced
this pull request
Nov 20, 2023
* Feature/career base (#492) * feat: init feature career * chore: adding assets and types * feat: changes in header imports * feat: cleaning syllabus icons * feat: adding routing * feat: adding routing to hash router * feat: career page header with job list and job detail page base (#488) * Added Icon Folder * Header Initilize * feat: solving header issue * fix: fixing header styling * Add Job List and Job Card Element * Job List and Job Card * Job List and Job Card * Page Detail * Job Detail Page * Job Page Detail * feat: adding job description page * chore: small updates --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * feat: finishing job details page (#489) * feat: career page user profile with api (#490) * feat: init user profile component * feat: created post login user profile component * feat: creating user profile input form * feat: creating dropdown list for profile creation modal * feat: struggling to deal with multiple dropdowns * feat: applying standard styling to jobdetail * feat: responsive styling * feat: successful implementation for user profile * feat: checked functionality next homework is apply button and time formatting * chore: adding styling to job card * feat: job apply functionality is set (#491) * fix: fixing job content sections list * feat: adding company job post button --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * fix: fixing index html for career * fix: hotfix on vite configuration (#493) * feat: fixing button styling due to unknown errors in dev env * chore: changing minor styling issues * feat: career post application and agreement modal (#494) * feat: adding some padding and post api * feat: agreement modal and post functionality * feat: text size to section title of job content (#495) * chore(deps): update dependency postcss to v8.4.31 [security] (#480) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: finishing up careers page (#496) * feat: finishing up careers * chore: cleaning console logs * chore: cleaning comments * chore(deps): update dependency postcss to v8.4.31 [security] (#498) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: adding mobile responsiveness to profile registeration * feat: commercial disclosure page (#503) * feat: creating commercial disclosure * chore: changing some wording --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
JasonNotJson
added a commit
that referenced
this pull request
Nov 21, 2023
* Feature/career base (#492) * feat: init feature career * chore: adding assets and types * feat: changes in header imports * feat: cleaning syllabus icons * feat: adding routing * feat: adding routing to hash router * feat: career page header with job list and job detail page base (#488) * Added Icon Folder * Header Initilize * feat: solving header issue * fix: fixing header styling * Add Job List and Job Card Element * Job List and Job Card * Job List and Job Card * Page Detail * Job Detail Page * Job Page Detail * feat: adding job description page * chore: small updates --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * feat: finishing job details page (#489) * feat: career page user profile with api (#490) * feat: init user profile component * feat: created post login user profile component * feat: creating user profile input form * feat: creating dropdown list for profile creation modal * feat: struggling to deal with multiple dropdowns * feat: applying standard styling to jobdetail * feat: responsive styling * feat: successful implementation for user profile * feat: checked functionality next homework is apply button and time formatting * chore: adding styling to job card * feat: job apply functionality is set (#491) * fix: fixing job content sections list * feat: adding company job post button --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> * fix: fixing index html for career * fix: hotfix on vite configuration (#493) * feat: fixing button styling due to unknown errors in dev env * chore: changing minor styling issues * feat: career post application and agreement modal (#494) * feat: adding some padding and post api * feat: agreement modal and post functionality * feat: text size to section title of job content (#495) * chore(deps): update dependency postcss to v8.4.31 [security] (#480) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: finishing up careers page (#496) * feat: finishing up careers * chore: cleaning console logs * chore: cleaning comments * chore(deps): update dependency postcss to v8.4.31 [security] (#498) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> * feat: adding mobile responsiveness to profile registeration * feat: commercial disclosure page (#503) * feat: creating commercial disclosure * chore: changing some wording * feat: ensuring school input and styling for profile modal (#505) --------- Co-authored-by: KTheAsianimeBoi <minhkhoahc2002@gmail.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
8.4.29->8.4.318.4.14->8.4.318.4.8->8.4.318.4.23->8.4.31GitHub Vulnerability Alerts
CVE-2023-44270
An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be
\rdiscrepancies, as demonstrated by@font-face{ font:(\r/*);}in a rule.This vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being originally included in a comment.
Release Notes
postcss/postcss (postcss)
v8.4.31Compare Source
\rparsing to fix CVE-2023-44270.v8.4.30Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate. View repository job log here.