UI5 / webcomponents-react / 40357849055

86%

push

github

chore(deps): bump postcss-selector-parser from 6.1.4 to 6.1.5 (#9108)

Bumps
[postcss-selector-parser](https://github.com/postcss/postcss-selector-parser)
from 6.1.4 to 6.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss-selector-parser/releases">postcss-selector-parser's
releases</a>.</em></p>
<blockquote>
<h2>6.1.5</h2>
<ul>
<li>fix: parse flat selectors in linear time, closing a CPU exhaustion
vulnerability (<a
href="https://github.com/advisories/GHSA-rj75-hqrm-r3gf">CVE-2026-104844</a>
/ GHSA-rj75-hqrm-r3gf, reported by Wayde Shi), backported from 7.1.6 (<a
href="https://redirect.github.com/postcss/postcss-selector-parser/pull/346">#346</a>
by <a
href="https://github.com/bradyshutt"><code>@​bradyshutt</code></a>)</li>
</ul>
<h3>The 6.x line is now in security-only maintenance</h3>
<p>This release exists because the advisory above covers every published
6.x
version, and until now the only remediation on offer was an upgrade to
7.x.
<strong>6.1.5 is the patched version for the 6.x line.</strong></p>
<p>The line is kept alive for the installed base that cannot move to 7
yet, Tailwind
CSS 3 in particular, which depends on <code>^6.1.2</code>. From here on
it receives security
fixes only: no features, no other bug fixes, no type changes. Everything
else
goes to 7.x, where this package is actively developed. Tailwind CSS 4 no
longer
depends on this package at all, so this line is expected to retire on
its own.</p>
<p>6.1.5 is published under the <code>legacy-v6</code> npm dist-tag, so
<code>npm install postcss-selector-parser</code> keeps resolving to 7.x.
Existing <code>^6</code>
ranges pick up 6.1.5 as usual.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss-selector-parser/blob/6.1.5/CHANGELOG.md">postcss-selector-parser's
changelog</a>.</em></p>
<blockquote>
<h1>6.1.5 - 2026-10-19</h1>
<ul>
<li>fix: parse fl... (continued)

4143 of 5185 branches covered (79.9%)

Branch coverage included in aggregate %.

7229 of 8079 relevant lines covered (89.48%)

559118.32 hits per line