Skip to content

build(deps-dev): bump autoprefixer from 10.4.22 to 10.5.4 - #75

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/autoprefixer-10.5.4
Open

build(deps-dev): bump autoprefixer from 10.4.22 to 10.5.4#75
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/autoprefixer-10.5.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown

Bumps autoprefixer from 10.4.22 to 10.5.4.

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

10.5.2

  • Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).

10.4.27

  • Removed development key from package.json.

10.4.26

  • Reduced package size.

10.4.25

  • Fixed broken gradients on CSS Custom Properties (by @​serger777).

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).

10.4.23

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

10.5.2

  • Moved -webkit-fill-available before -moz-available, so Firefox will use -webkit- version which is closer to stretch.

10.5.1

10.5.0 “Each Endeavouring, All Achieving”

  • Added mask-position-x and mask-position-y support (by @​toporek).

10.4.27

  • Removed development key from package.json.

10.4.26

  • Reduced package size.

10.4.25

  • Fixed broken gradients on CSS Custom Properties (by @​serger777).

10.4.24

  • Made Autoprefixer a little faster (by @​Cherry).

10.4.23

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for autoprefixer since your current version.


@dependabot @github

dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@socket-security

socket-security Bot commented Aug 26, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedautoprefixer@​10.4.22 ⏵ 10.5.4100 +110088 -188 -3100

View full report

@dependabot dependabot Bot changed the title build(deps-dev): bump autoprefixer from 10.4.20 to 10.5.4 build(deps-dev): bump autoprefixer from 10.4.22 to 10.5.4 Sep 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/autoprefixer-10.5.4 branch from 9e70225 to 873b1b9 Compare September 3, 2026 03:07
Bumps [autoprefixer](https://github.com/postcss/autoprefixer) from 10.4.22 to 10.5.4.
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.4.22...10.5.4)

---
updated-dependencies:
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/autoprefixer-10.5.4 branch from 873b1b9 to 9440ad3 Compare September 3, 2026 10:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants