Skip to content

ASE-533: pin web postcss to 8.5.10 - #820

Merged
BetterAndBetterII merged 2 commits into
mainfrom
fix/ase-533-postcss-upgrade
May 16, 2026
Merged

BetterAndBetterII merged 2 commits into
mainfrom
fix/ase-533-postcss-upgrade

Conversation

@BetterAndBetterII

Copy link
Copy Markdown
Collaborator

Summary

  • pin the web/ pnpm override and lockfile to postcss@8.5.10
  • extend the frontend lockfile security guards so stale postcss entries fail fast
  • add a focused Vitest regression that resolves PostCSS through Vite and verifies </style> is escaped during stringification

Validation

  • PATH=$HOME/.nvm/versions/node/v22.22.1/bin:$PATH; cd web && pnpm exec vitest run src/lib/security/postcss-stringifier.test.ts
  • PATH=$HOME/.nvm/versions/node/v22.22.1/bin:$PATH; cd web && pnpm install --frozen-lockfile --reporter=append-only && pnpm exec playwright install chromium && pnpm run ci (all non-e2e stages passed; the local Playwright suite later showed unrelated existing 500 Internal Error failures in ticket-runtime-card and mobile settings flows)
  • PATH=$HOME/.nvm/versions/node/v22.22.1/bin:$PATH; cd web && pnpm exec playwright test tests/e2e/workflows.spec.ts --project=chromium --grep "scheduled jobs creation remains responsive" --reporter=line

@BetterAndBetterII
BetterAndBetterII merged commit 7f554c1 into main May 16, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant