Build(deps-dev): bump @tailwindcss/postcss from 4.1.18 to 4.2.1#569
Build(deps-dev): bump @tailwindcss/postcss from 4.1.18 to 4.2.1#569dependabot[bot] wants to merge 2 commits intomainfrom
Conversation
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
The files' contents are under analysis for test generation. |
github-actions
bot
added
the
size/L
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Caution Review the following alerts detected in dependencies. According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. Learn more about Socket for GitHub.
|
 |
|
Overall Grade |
Security Reliability Complexity Hygiene Coverage |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| Test coverage |  |
Mar 4, 2026 1:33p.m. | Review ↗ |
| Secrets | |
Mar 4, 2026 1:33p.m. | Review ↗ |
| JavaScript | |
Mar 4, 2026 1:33p.m. | Review ↗ |
Code Coverage Summary
| Language | Line Coverage (Overall) |
|---|---|
| Aggregate | 93.8% |
| Javascript | 93.8% |
➟ Additional coverage metrics may have been reported. See full coverage report ↗
gstraccini
bot
added
the
☑️ auto-merge
![gstraccini[bot]](https://avatars.githubusercontent.com/in/480132?s=60&v=4){kind=small}
guibranco
left a comment
guibranco
left a comment
There was a problem hiding this comment.
Automatically approved by gstraccini[bot]
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/postcss-4.2.1
branch
from
1628083 to
0c2407a
Compare
Bumps [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) from 4.1.18 to 4.2.1. - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.1/packages/@tailwindcss-postcss) --- updated-dependencies: - dependency-name: "@tailwindcss/postcss" dependency-version: 4.2.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/tailwindcss/postcss-4.2.1
branch
from
0c2407a to
bb6e08c
Compare
|
Infisical secrets check: ✅ No secrets leaked! 💻 Scan logs2026-03-04T13:32:53Z INF scanning for exposed secrets...
1:32PM INF 471 commits scanned.
2026-03-04T13:32:53Z INF scan completed in 372ms
2026-03-04T13:32:53Z INF no leaks found
|
|
|
A newer version of @tailwindcss/postcss exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged. |
1 participant
Bumps @tailwindcss/postcss from 4.1.18 to 4.2.1.
Release notes
Sourced from
@tailwindcss/postcss's releases.Changelog
Sourced from
@tailwindcss/postcss's changelog.Commits
1dce64e4.2.1 (#19714)1b164114.2.0 (#19695)d9fff9fdocs: update package README CI badge to main (#19692)8ed67bfFix Tailwind CSS package README GitHub links (#19644)1638f35Bump dependencies (#19608)bccf4bbAdd@tailwindcss/webpackloader for Tailwind CSS v4 (#19610)8d5e955Update dedent 1.7.0 → 1.7.1 (patch) (#19484)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)