chore(deps): Bump postcss from 8.5.10 to 8.5.25

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.25. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.25) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.25 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Merge pull request #1583 from crazy-max/group-codeql-dependabot-updates
2026-08-01 11:30:50 +02:00 · 2026-07-31 18:37:36 +00:00 · 2026-07-09 13:57:08 +02:00 · 2026-07-09 12:39:06 +02:00 · 2026-07-03 11:08:48 +02:00 · 2026-07-02 14:14:12 +00:00
2 changed files with 26 additions and 23 deletions
@@ -10,6 +10,9 @@ updates:
      crazy-max-dot-github:
        patterns:
          - "crazy-max/.github/*"
+      codeql-actions:
+        patterns:
+          - "github/codeql-action/*"
    labels:
      - "dependencies"
      - "bot"
@@ -1648,7 +1648,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/core@npm:^3.1.0, @sigstore/core@npm:^3.2.0":
+"@sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
  version: 3.2.1
  resolution: "@sigstore/core@npm:3.2.1"
  checksum: 10/2f6c1ced55f8ed3f7fc705a668eb95db9471511dfb1f054927822bf97a051dd62228ecf6a9f1932d240c2c4ae69a3b5066550789e5ad8f4257839a4370e5a120
@@ -1669,7 +1669,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/sign@npm:^4.1.0":
+"@sigstore/sign@npm:^4.1.1":
  version: 4.1.1
  resolution: "@sigstore/sign@npm:4.1.1"
  dependencies:
@@ -1683,7 +1683,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/tuf@npm:^4.0.1":
+"@sigstore/tuf@npm:^4.0.2":
  version: 4.0.2
  resolution: "@sigstore/tuf@npm:4.0.2"
  dependencies:
@@ -1703,14 +1703,14 @@ __metadata:
  languageName: node
  linkType: hard

-"@sigstore/verify@npm:^3.1.0":
-  version: 3.1.0
-  resolution: "@sigstore/verify@npm:3.1.0"
+"@sigstore/verify@npm:^3.1.1":
+  version: 3.1.1
+  resolution: "@sigstore/verify@npm:3.1.1"
  dependencies:
    "@sigstore/bundle": "npm:^4.0.0"
-    "@sigstore/core": "npm:^3.1.0"
+    "@sigstore/core": "npm:^3.2.1"
    "@sigstore/protobuf-specs": "npm:^0.5.0"
-  checksum: 10/c85713cc326236ef39608e4b061c1192306fd3edd7a1334237d5d53dbb132f04e3f9d3cfd4bb2d521bf0c95a9f98945a748c97ecb06e5f36cfd09488a0d3d73f
+  checksum: 10/4cb24b0e62b85ebf2b62698041e0dc212d152fd40a95c05c237357c992265a23e5789f86b138bea2eea0c5f6b994974d968f03dde9c692a514f96ae4b26f31a9
  languageName: node
  linkType: hard

@@ -4532,12 +4532,12 @@ __metadata:
  languageName: node
  linkType: hard

-"nanoid@npm:^3.3.11":
-  version: 3.3.11
-  resolution: "nanoid@npm:3.3.11"
+"nanoid@npm:^3.3.16":
+  version: 3.3.16
+  resolution: "nanoid@npm:3.3.16"
  bin:
    nanoid: bin/nanoid.cjs
-  checksum: 10/73b5afe5975a307aaa3c95dfe3334c52cdf9ae71518176895229b8d65ab0d1c0417dd081426134eb7571c055720428ea5d57c645138161e7d10df80815527c48
+  checksum: 10/8004af92b5541af1dbd23b69845b5026f777d5b7ef07163cea1837aae86e052ced8b383cecbf8a4f1b5e77ae207df96dc45e16b9e0fa3c4b761d085f1e42851b
  languageName: node
  linkType: hard

@@ -4960,13 +4960,13 @@ __metadata:
  linkType: hard

 "postcss@npm:^8.5.6":
-  version: 8.5.10
-  resolution: "postcss@npm:8.5.10"
+  version: 8.5.25
+  resolution: "postcss@npm:8.5.25"
  dependencies:
-    nanoid: "npm:^3.3.11"
+    nanoid: "npm:^3.3.16"
    picocolors: "npm:^1.1.1"
    source-map-js: "npm:^1.2.1"
-  checksum: 10/7eac6169e535b63c8412e94d4f6047fc23efa3e9dde804b541940043c831b25f1cd867d83cd2c4371ad2450c8abcb42c208aa25668c1f0f3650d7f72faf711a8
+  checksum: 10/68aaeb314a1b2407e11e926acc0462b01b3e911d3d9e755d06adc5b2ececdefe8432dc3c3c93eacc07138952e17997d4674529061b8e3a338a7ac4c1accfdf98
  languageName: node
  linkType: hard

@@ -5387,16 +5387,16 @@ __metadata:
  linkType: hard

 "sigstore@npm:^4.0.0":
-  version: 4.1.0
-  resolution: "sigstore@npm:4.1.0"
+  version: 4.1.1
+  resolution: "sigstore@npm:4.1.1"
  dependencies:
    "@sigstore/bundle": "npm:^4.0.0"
-    "@sigstore/core": "npm:^3.1.0"
+    "@sigstore/core": "npm:^3.2.1"
    "@sigstore/protobuf-specs": "npm:^0.5.0"
-    "@sigstore/sign": "npm:^4.1.0"
-    "@sigstore/tuf": "npm:^4.0.1"
-    "@sigstore/verify": "npm:^3.1.0"
-  checksum: 10/7312eed22f82bebcd80a897a163e220bb1df2c084c308d17fb431ff03ef28cf20e3b17312fd8024793dcefa27e794c31174d604a28fc85672a9d6d7f34bbd4a6
+    "@sigstore/sign": "npm:^4.1.1"
+    "@sigstore/tuf": "npm:^4.0.2"
+    "@sigstore/verify": "npm:^3.1.1"
+  checksum: 10/8fb38bbdc3ee1e79b3f19e0015ebf35b7d7f890673722f182960ec88f02a52f2f631fc983e7f8bafa3a37653a760ddc00277721a8f9159ee6ee311159ca3dfbe
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
dependabot[bot]andGitHub	c309545754	chore(deps): Bump postcss from 8.5.10 to 8.5.25 Bumps [postcss](https://github.com/postcss/postcss) from 8.5.10 to 8.5.25. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.5.10...8.5.25) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.25 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-07-31 18:37:36 +00:00
CrazyMaxandGitHub	cb941d0b89	Merge pull request #1583 from crazy-max/group-codeql-dependabot-updates chore: group codeql dependabot updates	2026-07-09 13:57:08 +02:00
CrazyMax	a9855f30a5	chore: group codeql dependabot updates Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-07-09 12:39:06 +02:00
CrazyMaxandGitHub	3add1637a6	Merge pull request #1577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1 chore(deps): Bump sigstore from 4.1.0 to 4.1.1	2026-07-03 11:08:48 +02:00
dependabot[bot]andGitHub	6d79e06484	chore(deps): Bump sigstore from 4.1.0 to 4.1.1 Bumps [sigstore](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1) --- updated-dependencies: - dependency-name: sigstore dependency-version: 4.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-07-02 14:14:12 +00:00