We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Describe the bug https://github.com/nextcloud/text/security/dependabot/42 reports a regexp DOS in postcss 7.x
We actually have conflicting requirements here:
@vue/[email protected] requires postcss@^7.0.36 via @vue/[email protected] @nextcloud/[email protected] requires postcss@^7.0.36 via a transitive dependency on @vue/[email protected] [email protected] requires postcss@^8.4.32 @vitejs/[email protected] requires postcss@^8.4.32 via [email protected] No patched version available for postcss
So right now we include postcss@7 and postcss@8.
postcss@7
postcss@8
Both requirements of postcss@7 come from @vue/[email protected] which should not be required anymore since vue 2.7. However we still require it due to the need for vue-loader@15 for using webpack with vue 2.
@vue/[email protected]
Looks like this might be the way forward:
@vue/component-compiler-utils
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Describe the bug
https://github.com/nextcloud/text/security/dependabot/42 reports a regexp DOS in postcss 7.x
We actually have conflicting requirements here:
So right now we include
postcss@7
andpostcss@8
.Both requirements of postcss@7 come from
@vue/[email protected]
which should not be required anymore since vue 2.7. However we still require it due to the need for vue-loader@15 for using webpack with vue 2.Looks like this might be the way forward:
@vue/component-compiler-utils
thus no more old postcss.The text was updated successfully, but these errors were encountered: