chore(deps): bump postcss from 8.5.12 to 8.5.23 in /test-projects/expo-purchasely-test

[dependabot]

Bumps postcss from 8.5.12 to 8.5.23.

Release notes

Sourced from postcss's releases.

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

• Fixed postcss-scss commend regression.

Changelog

Sourced from postcss's changelog.

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

... (truncated)

Commits

• eb9e1fe Release 8.5.23 version
• 9d19c78 Update dependencies
• 7beca13 Does no load source map file without opts.from
• decea51 Typo
• c18e30d Update EM banner
• 98a39ad Update EM banner
• a3e48c4 Release 8.5.22 version
• f49d691 Fix custom property losing its semicolon before a comment (#2117)
• 28e0daf Release 8.5.21 version
• 3d2b4e4 Update dependencies
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[greptile-apps]

PR author is in the excluded authors list.

[macminisupport]

Automated Dependabot review (2026-07-26) — research only, no merge/approve action taken.

Patch bump (8.5.12 → 8.5.23), test-projects/expo-purchasely-test. Changelog across 8.5.13→8.5.23 is bugfixes plus a security-hardening item (source maps no longer load without opts.from) — no breaking API changes documented.

CI: build-ios failed on this PR while every other job passed, including the parallel build-rn-0-86-ios job on the same commit — an inconsistent signature that's worth a look at the actual job log (https://github.com/Purchasely/Purchasely-ReactNative/actions/runs/30174869628/job/89721912754) before assuming it's a real regression from a CSS-tooling patch bump vs. a flake. Not auto-merging pending that check. No hold label, no merge conflicts.

Note: issues are disabled on this repo, so this review is posted as PR comments (see also #267, #266, #268, #265, #264) rather than a single tracking issue.

@kherembourg — could you glance at the build-ios failure log linked above? If it's unrelated/flaky this is otherwise a clean patch bump.

Related: #267, #266, #268, #265, #264

---

Generated by Claude Code

[macminisupport]

Dependabot review cycle summary for all 6 open dependency PRs (this one included) posted on #264 (GitHub Issues is disabled on this repo, so that PR hosts the tracking summary): #264 (comment)

This PR: postcss 8.5.12 → 8.5.23 (patch). ⚠️ build-ios check failed — worth investigating before merge. Waiting on @kherembourg confirmation before any merge/rebase action.

---

Generated by Claude Code

[macminisupport]

Automated Dependabot review — CI failing, awaiting confirmation

Note: this repo has Issues disabled, so a tracking issue could not be created for this batch; posting status directly here and on #264 instead. The other 4 open Dependabot PRs in this batch (#265, #266, #267, #268 — all minor/patch bumps with green CI) were already approved and merged.

This PR bumps postcss (used only in test-projects/expo-purchasely-test) from 8.5.12 to 8.5.23 — a patch bump with no breaking changes in the changelog. However, its CI run has a failing build-ios check while every other job (build-android, test, lint, iOS unit tests, build-rn-0-86-android/ios) passed. Given this is an unrelated dev-dependency bump inside a test project, this looks like a likely flaky/unrelated iOS build issue rather than something caused by the postcss bump itself, but it hasn't been re-run or investigated.

Reply here to confirm: should this be investigated, re-run, or skipped/closed?

---

Generated by Claude Code

[macminisupport]

Automated Dependabot review (2026-07-31) — research only, no merge/approve action taken.

Note: Issues are disabled on this repo, so this status is posted as a PR comment (as in prior cycles).

Only 1 open Dependabot PR currently: this one. Unchanged from the prior cycle — postcss 8.5.12 → 8.5.23 (patch), changelog is bugfixes + a security hardening item, no breaking changes. CI: build-ios still failing while every other job (including the parallel build-rn-0-86-ios on the same commit) passes — still unresolved whether this is a real regression or a flake pending @kherembourg's look at the job log. No hold label, no merge conflicts. Not merging pending that check.

---

Generated by Claude Code

[macminisupport]

Automated Dependabot review (2026-08-01) — unchanged, research only.

Still the only open Dependabot PR in this repo. No change from the prior cycle: postcss 8.5.12 → 8.5.23 (patch), no breaking changes in the changelog. CI: build-ios still the lone failure while every other job (including the parallel build-rn-0-86-ios job on the same commit) passes — still unresolved whether this is a real regression or a flake. No hold label, no merge conflicts. Not merging pending a look at that job log.

@kherembourg — still waiting on a look at the build-ios failure log (linked in the 2026-07-26 comment above) whenever you have a moment; otherwise this is a clean patch bump ready to go.

---

Generated by Claude Code