chore(deps-dev): bump postcss from 8.5.12 to 8.5.18

[dependabot]

Bumps postcss from 8.5.12 to 8.5.18.

Release notes

Sourced from postcss's releases.

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

Changelog

Sourced from postcss's changelog.

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

Commits

• 4c0d194 Release 8.5.18 version
• 92b4e78 Update dependencies
• 95663d3 Limit where source map can be loaded for security reasons
• 74e25ae Release 8.5.17 version
• d1518af Fix Maximum call stack size exceeded error
• 2421312 Fix linter
• a50352c Fix CI
• 33948f0 Prevent prototype hijacking in fromJSON
• 2131909 Update dependencies
• 93440ab Fix non-closed \<div align="center"> in README (#2110)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

[pkg-pr-new]

Open in StackBlitz

@nextlyhq/adapter-drizzle

npm i https://pkg.pr.new/@nextlyhq/adapter-drizzle@65fb8cf

@nextlyhq/adapter-mysql

npm i https://pkg.pr.new/@nextlyhq/adapter-mysql@65fb8cf

@nextlyhq/adapter-postgres

npm i https://pkg.pr.new/@nextlyhq/adapter-postgres@65fb8cf

@nextlyhq/adapter-sqlite

npm i https://pkg.pr.new/@nextlyhq/adapter-sqlite@65fb8cf

@nextlyhq/admin

npm i https://pkg.pr.new/@nextlyhq/admin@65fb8cf

@nextlyhq/admin-css

npm i https://pkg.pr.new/@nextlyhq/admin-css@65fb8cf

@nextlyhq/blocks-engine

npm i https://pkg.pr.new/@nextlyhq/blocks-engine@65fb8cf

create-nextly-app

npm i https://pkg.pr.new/create-nextly-app@65fb8cf

nextly

npm i https://pkg.pr.new/nextly@65fb8cf

@nextlyhq/plugin-form-builder

npm i https://pkg.pr.new/@nextlyhq/plugin-form-builder@65fb8cf

@nextlyhq/plugin-page-builder

npm i https://pkg.pr.new/@nextlyhq/plugin-page-builder@65fb8cf

@nextlyhq/plugin-sdk

npm i https://pkg.pr.new/@nextlyhq/plugin-sdk@65fb8cf

@nextlyhq/plugin-seo

npm i https://pkg.pr.new/@nextlyhq/plugin-seo@65fb8cf

@nextlyhq/storage-s3

npm i https://pkg.pr.new/@nextlyhq/storage-s3@65fb8cf

@nextlyhq/storage-uploadthing

npm i https://pkg.pr.new/@nextlyhq/storage-uploadthing@65fb8cf

@nextlyhq/storage-vercel-blob

npm i https://pkg.pr.new/@nextlyhq/storage-vercel-blob@65fb8cf

@nextlyhq/ui

npm i https://pkg.pr.new/@nextlyhq/ui@65fb8cf

commit: 65fb8cf

[github-actions]

PR title fails Conventional Commits check

Unknown scope "deps-dev" found in pull request title "chore(deps-dev): bump postcss from 8.5.12 to 8.5.18". Scope must match one of: nextly, admin, client, ui, adapter-postgres, adapter-mysql, adapter-sqlite, adapter-drizzle, storage-s3, storage-vercel-blob, storage-uploadthing, blocks-engine, plugin-form-builder, plugin-page-builder, plugin-seo, plugin-sdk, create-nextly-app, eslint-config, prettier-config, tsconfig, telemetry, playground, root, ci, docs, deps, release.

Examples of valid titles:

• feat(admin): add role manager dialog
• fix(adapter-postgres): handle connection pool exhaustion
• chore(deps): bump zod to 4.2.0

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 65fb8cf998

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Regenerate the postcss lockfile entries

This bumps the manifest to postcss: ^8.5.18, but the committed lockfile importer still records postcss as specifier: ^8.5.10 for packages/admin at pnpm-lock.yaml:690-692 and repeats the same mismatch for packages/ui at pnpm-lock.yaml:1525-1527. Since pnpm's frozen install path fails when the lockfile is out of sync with the manifest and is the CI default when a lockfile is present (pnpm install docs), fresh CI installs will fail until the lockfile is regenerated with matching specifiers.

Useful? React with 👍 / 👎.

[chatgpt-codex-connector]

Add a changeset for package manifest changes

This changes publishable package manifests for @nextlyhq/admin and @nextlyhq/ui, but the commit does not add a .changeset/*.md entry. Because this is a dependency-change PR rather than a test-, CI-, or docs-only exception, release/check enforcement will reject it until a patch changeset covering the published packages is committed.

Useful? React with 👍 / 👎.