Skip to content

Update @tailwindcss/postcss 4.1.18 → 4.2.0 (minor)#554

Closed
depfu[bot] wants to merge 1 commit intomainfrom
depfu/update/npm/@tailwindcss/postcss-4.2.0
Closed

Update @tailwindcss/postcss 4.1.18 → 4.2.0 (minor)#554
depfu[bot] wants to merge 1 commit intomainfrom
depfu/update/npm/@tailwindcss/postcss-4.2.0

Conversation

@depfu
Copy link
Copy Markdown
Contributor

@depfu depfu bot commented Feb 19, 2026

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ @​tailwindcss/postcss (4.1.18 → 4.2.0)

Sorry, we couldn't find anything useful about this release.

✳️ tailwindcss (4.1.18 → 4.2.0) · Repo · Changelog

Release Notes

4.2.0

Added

  • Add mauve, olive, mist, and taupe color palettes to the default theme (#19627)
  • Add @tailwindcss/webpack package to run Tailwind CSS as a webpack plugin (#19610)
  • Add pbs-* and pbe-* utilities for padding-block-start and padding-block-end (#19601)
  • Add mbs-* and mbe-* utilities for margin-block-start and margin-block-end (#19601)
  • Add scroll-pbs-* and scroll-pbe-* utilities for scroll-padding-block-start and scroll-padding-block-end (#19601)
  • Add scroll-mbs-* and scroll-mbe-* utilities for scroll-margin-block-start and scroll-margin-block-end (#19601)
  • Add border-bs-* and border-be-* utilities for border-block-start and border-block-end (#19601)
  • Add inline-*, min-inline-*, max-inline-* utilities for inline-size, min-inline-size, and max-inline-size (#19612)
  • Add block-*, min-block-*, max-block-* utilities for block-size, min-block-size, and max-block-size (#19612)
  • Add inset-s-*, inset-e-*, inset-bs-*, inset-be-* utilities for inset-inline-start, inset-inline-end, inset-block-start, and inset-block-end (#19613)
  • Add font-features-* utility for font-feature-settings (#19623)

Fixed

  • Prevent double @supports wrapper for color-mix values (#19450)
  • Allow whitespace around @source inline() argument (#19461)
  • Emit comment when source maps are saved to files when using @tailwindcss/cli (#19447)
  • Detect utilities containing capital letters followed by numbers (#19465)
  • Fix class extraction for Rails' strict locals (#19525)
  • Align @utility name validation with Oxide scanner rules (#19524)
  • Fix infinite loop when using @variant inside @custom-variant (#19633)
  • Allow multiples of .25 in aspect-* fractions (e.g. aspect-8.5/11) (#19688)
  • Ensure changes to external files listed via @source trigger a full page reload when using @tailwindcss/vite (#19670)
  • Improve performance of Oxide scanner in bigger projects by reducing file system walks (#19632)
  • Ensure import aliases in Astro v5 work without crashing when using @tailwindcss/vite (#19677)
  • Allow escape characters in @utility names to improve support with formatters such as Biome (#19626)
  • Fix incorrect canonicalization results when canonicalizing multiple times (#19675)
  • Add .jj to default ignored content directories (#19687)

Deprecated

  • Deprecate start-* and end-* utilities in favor of inset-s-* and inset-e-* utilities (#19613)

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ @​emnapi/core (indirect, 1.7.1 → 1.8.1) · Repo

Release Notes

1.8.1

What's Changed

Full Changelog: v1.8.0...v1.8.1

1.8.0

What's Changed

Full Changelog: v1.7.1...v1.8.0

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 4 commits:

↗️ @​emnapi/runtime (indirect, 1.7.1 → 1.8.1) · Repo

Release Notes

1.8.1

What's Changed

Full Changelog: v1.8.0...v1.8.1

1.8.0

What's Changed

Full Changelog: v1.7.1...v1.8.0

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 4 commits:

↗️ @​napi-rs/wasm-runtime (indirect, 1.1.0 → 1.1.1) · Repo

Sorry, we couldn't find anything useful about this release.

↗️ enhanced-resolve (indirect, 5.18.4 → 5.19.0) · Repo

Release Notes

5.19.0

Features

  • Added TsconfigPathsPlugin (replacement for tsconfig-paths-webpack-plugin) .

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 4 commits:

↗️ lightningcss (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-darwin-arm64 (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-darwin-x64 (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-linux-arm64-gnu (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-linux-arm64-musl (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-linux-x64-gnu (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-linux-x64-musl (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.

↗️ lightningcss-win32-x64-msvc (indirect, 1.30.2 → 1.31.1) · Repo

Release Notes

1.31.0

Features

Fixes

Does any of this look wrong? Please let us know.

Sorry, we couldn't find anything useful about this release.


Depfu Status

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands
@​depfu rebase
Rebases against your default branch and redoes this update
@​depfu recreate
Recreates this PR, overwriting any edits that you've made to it
@​depfu merge
Merges this PR once your tests are passing and conflicts are resolved
@​depfu cancel merge
Cancels automatic merging of this PR
@​depfu close
Closes this PR and deletes the branch
@​depfu reopen
Restores the branch and reopens this PR (if it's closed)
@​depfu pause
Ignores all future updates for this dependency and closes this PR
@​depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR
@​depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)

@depfu depfu bot added the depfu label Feb 19, 2026
@code-genius-code-coverage
Copy link
Copy Markdown

The files' contents are under analysis for test generation.

@guibranco guibranco enabled auto-merge (squash) February 19, 2026 16:25
@gstraccini gstraccini bot added the ☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) label Feb 19, 2026
@github-actions github-actions bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Feb 19, 2026
Copy link
Copy Markdown
Member

@guibranco guibranco left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved by gstraccini[bot]

@gstraccini gstraccini bot added the 🤖 bot Automated processes or integrations label Feb 19, 2026
@guibranco
Copy link
Copy Markdown
Member

@depfu merge

@deepsource-io
Copy link
Copy Markdown

deepsource-io bot commented Feb 19, 2026

DeepSource Code Review

DeepSource reviewed changes in the commit range 0356e4b...55ca88b on this pull request. Below is the summary for the review, and you can see the individual issues we found as review comments.

For detailed review results, please see the PR on DeepSource ↗

PR Report Card

Security × 0 issues Overall PR Quality   

Reliability × 0 issues
Complexity × 0 issues
Hygiene × 0 issues
Coverage × 0 issues

Code Review Summary

Analyzer Status Summary Details
Test coverage No new issues detected. Review ↗
Secrets No new issues detected. Review ↗
JavaScript No new issues detected. Review ↗
How are these analyzer statuses calculated?

Administrators can configure which issue categories are reported and cause analysis to be marked as failed when detected. This helps prevent bad and insecure code from being introduced in the codebase. If you're an administrator, you can modify this in the repository's settings.

Code Coverage Summary

Language Line Coverage Branch Coverage
Aggregate
93.8%
100%
Javascript
93.8%
0%

➟ Additional coverage metrics may have been reported. See full coverage report ↗

@github-actions
Copy link
Copy Markdown

Infisical secrets check: ✅ No secrets leaked!

💻 Scan logs
2026-02-19T16:26:07Z INF scanning for exposed secrets...
4:26PM INF 460 commits scanned.
2026-02-19T16:26:07Z INF scan completed in 357ms
2026-02-19T16:26:07Z INF no leaks found

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedtailwindcss@​4.1.18 ⏵ 4.2.0100 +110084 +198100
Updated@​tailwindcss/​postcss@​4.1.18 ⏵ 4.2.0100 +110010098100

View full report

@socket-security
Copy link
Copy Markdown

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Block Low
Dynamic module loading: npm lightningcss

Location: Package overview

From: package-lock.jsonnpm/vite@7.3.1npm/@tailwindcss/postcss@4.2.0npm/lightningcss@1.31.1

ℹ Read more on: This package | This alert | What is dynamic require?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should avoid dynamic imports when possible. Audit the use of dynamic require to ensure it is not executing malicious or vulnerable code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/lightningcss@1.31.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@sonarqubecloud
Copy link
Copy Markdown

@depfu
Copy link
Copy Markdown
Contributor Author

depfu bot commented Feb 24, 2026

Closed in favor of #562.

@depfu depfu bot closed this Feb 24, 2026
auto-merge was automatically disabled February 24, 2026 14:33

Pull request was closed

@depfu depfu bot deleted the depfu/update/npm/@tailwindcss/postcss-4.2.0 branch February 24, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

☑️ auto-merge Automatic merging of pull requests (gstraccini-bot) 🤖 bot Automated processes or integrations depfu size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant