From 3ce396faae598c6ddffd494cac30e61c2723ba94 Mon Sep 17 00:00:00 2001 From: Marco Nenciarini Date: Wed, 21 Oct 2026 10:44:43 +0200 Subject: [PATCH] fix(deps): override postcss-selector-parser to 7.1.6 or later Dependabot alert 2 flags postcss-selector-parser below 7.1.6, which tailwindcss 3 and its postcss-nested pull in at 6.1.5. Tailwind 3 has no patched release, and the update Dependabot proposes jumps to tailwindcss 4, which breaks the build. Override the package so the whole tree uses the patched version. Signed-off-by: Marco Nenciarini --- package-lock.json | 28 ---------------------------- package.json | 3 +++ 2 files changed, 3 insertions(+), 28 deletions(-) diff --git a/package-lock.json b/package-lock.json index 8487d7eb..1259c4a0 100644 --- a/package-lock.json +++ b/package-lock.json @@ -3058,20 +3058,6 @@ "postcss": "^8.2.14" } }, - "node_modules/postcss-nested/node_modules/postcss-selector-parser": { - "version": "6.1.5", - "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.5.tgz", - "integrity": "sha512-TEHFzb5KRDKaOgJ4TYE+0jyJtFbjLvkdVOu0fZ2b6MTWzoqZd4Le+61aEppWkvTlYePgOX4ATL1wsAIPMLTw6Q==", - "dev": true, - "license": "MIT", - "dependencies": { - "cssesc": "^3.0.0", - "util-deprecate": "^1.0.2" - }, - "engines": { - "node": ">=4" - } - }, "node_modules/postcss-nesting": { "version": "14.0.3", "resolved": "https://registry.npmjs.org/postcss-nesting/-/postcss-nesting-14.0.3.tgz", @@ -3674,20 +3660,6 @@ "node": ">= 6" } }, - "node_modules/tailwindcss/node_modules/postcss-selector-parser": { - "version": "6.1.5", - "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.5.tgz", - "integrity": "sha512-TEHFzb5KRDKaOgJ4TYE+0jyJtFbjLvkdVOu0fZ2b6MTWzoqZd4Le+61aEppWkvTlYePgOX4ATL1wsAIPMLTw6Q==", - "dev": true, - "license": "MIT", - "dependencies": { - "cssesc": "^3.0.0", - "util-deprecate": "^1.0.2" - }, - "engines": { - "node": ">=4" - } - }, "node_modules/tailwindcss/node_modules/readdirp": { "version": "3.6.0", "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz", diff --git a/package.json b/package.json index 0ad9b070..120dffd1 100644 --- a/package.json +++ b/package.json @@ -26,5 +26,8 @@ "postcss-cli": "^12.0.0", "postcss-preset-env": "^11.0.0", "tailwindcss": "^3.0.23" + }, + "overrides": { + "postcss-selector-parser": "^7.1.6" } }