Skip to content

chore(deps-dev): bump tailwindcss from 3.4.19 to 4.3.3 in /src/Dhadgar.ShoppingCart - #151

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/Dhadgar.ShoppingCart/tailwindcss-4.3.3
Closed

chore(deps-dev): bump tailwindcss from 3.4.19 to 4.3.3 in /src/Dhadgar.ShoppingCart#151
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/Dhadgar.ShoppingCart/tailwindcss-4.3.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps tailwindcss from 3.4.19 to 4.3.3.

Release notes

Sourced from tailwindcss's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

v4.3.1

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)
  • Ensure drop-shadow-* color utilities work with custom shadow values containing calc(…) (#20080)
  • Fix 'Sourcemap is likely to be incorrect' warnings when using @tailwindcss/vite (#20103)
  • Ensure @tailwindcss/webpack can be installed in Rspack projects without requiring webpack as a peer dependency (#20027)

... (truncated)

Changelog

Sourced from tailwindcss's changelog.

[4.3.3] - 2026-07-16

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

[4.3.2] - 2026-06-26

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

[4.3.1] - 2026-06-12

Added

  • Add --silent option to suppress output in @tailwindcss/cli (#20100)

Fixed

  • Remove deprecation warnings by using Module#registerHooks instead of Module#register on Node 26+ (#20028)
  • Canonicalization: don't crash when plugin utilities throw for unsupported values (#20052)
  • Allow @apply to be used with CSS mixins (#19427)
  • Ensure not-* correctly negates @container queries, including style(…) queries (#20059)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tailwindcss since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies javascript Pull requests that update javascript code labels Jul 26, 2026
@dependabot
chore(deps-dev): bump tailwindcss in /src/Dhadgar.ShoppingCart
deaf6b2 
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) from 3.4.19 to 4.3.3.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/src/Dhadgar.ShoppingCart/tailwindcss-4.3.3 branch from 09b1f42 to deaf6b2 Compare July 26, 2026 21:04
@Cadacious Cadacious mentioned this pull request Oct 26, 2026
Merged
Cadacious added a commit that referenced this pull request Oct 26, 2026
@Cadacious @claude
chore(deps): migrate Panel and ShoppingCart to Tailwind 4
c3d26bb 
Supersedes Dependabot #150 and #151. Started from
`npx @tailwindcss/upgrade` (4.3.3), then reviewed and adjusted:

- Build: tailwindcss 4.3.3 through @tailwindcss/vite in astro.config.
  postcss.config.mjs, tailwind.config.mjs and autoprefixer are gone
  (v4 handles vendor prefixes itself). The upgrade tool wired up
  @tailwindcss/postcss, which was swapped for the Vite plugin.
- Theme: tailwind.config theme.extend moved into an @theme block in
  src/styles/global.css. backgroundSize.grid has no v4 theme
  namespace (the tool emitted a dead --background-size-grid, so
  bg-grid vanished from the build); restored as @Utility bg-grid.
- Sources: `@import 'tailwindcss' source('..')` limits scanning to
  src/, matching v3's content glob, so the legacy .razor files and
  READMEs are not scanned. SharedAuth holds no class names, so it
  needs no @source.
- Utility renames from the tool: rounded -> rounded-sm,
  backdrop-blur-sm -> backdrop-blur-xs, outline-none ->
  outline-hidden, flex-shrink-0 -> shrink-0, bg-gradient-to-* ->
  bg-linear-to-*, bg-[#0A0E17] -> bg-space-dark (same value).
- Visual parity: kept the tool's v3 border-colour compatibility rule
  and added v4's documented button cursor:pointer rule. @layer
  components and utilities blocks became @Utility rules.
- Drop tailwind.config.mjs from the csproj NpmBuild inputs and
  update the README and CLAUDE.md notes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE
Cadacious added a commit that referenced this pull request Oct 26, 2026
@Cadacious @claude
chore(deps): consolidate remaining Dependabot updates (#201)
5ada87a 
* ci(deps): bump GitHub Actions and hold MassTransit at v8

- actions/github-script v7 -> v9.0.0, actions/checkout v4 -> v7.0.1 and
  actions/create-github-app-token v1 -> v3.3.0 in the gemini and pr-agent
  workflows, now pinned by SHA like the rest of the repo.
- dorny/test-reporter v3.0.0 -> v3.2.0, Azure/static-web-apps-deploy to
  1a947af.
- Dependabot ignores MassTransit major versions: v9+ is commercially
  licensed. The OpenTransit switch is tracked in #195.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): express 5, jose 6, dotenv 17 in BetterAuth

Supersedes Dependabot #156 (express), #155 (jose) and #157 (dotenv).

- express 4.22 -> 5.3: the Better Auth catch-all becomes
  /api/v1/betterauth/*splat (path-to-regexp v8 rejects a bare "*").
  express.json() is no longer global; it runs only on the exchange
  route, as Better Auth's Express docs require the auth handler to see
  the raw body. The listen callback ignores the error argument that
  Express 5 now passes on bind failure.
- jose 5.10 -> 6.2: importPKCS8 + SignJWT usage is unchanged.
- dotenv 16.6 -> 17.4: loaded through src/env.js with quiet: true so
  the new "injected env" log line does not appear.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): React 19 in Panel and ShoppingCart

Bump react, react-dom, @types/react and @types/react-dom to 19.x in
both apps (supersedes Dependabot #148, #149, #152, #164). No source
changes were needed: neither app uses the global JSX namespace,
argument-less useRef, ReactDOM.render, defaultProps, propTypes or
string refs. @astrojs/react 6 accepts React 19. SharedAuth has no
React dependency, so it is unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): migrate Panel and ShoppingCart to Tailwind 4

Supersedes Dependabot #150 and #151. Started from
`npx @tailwindcss/upgrade` (4.3.3), then reviewed and adjusted:

- Build: tailwindcss 4.3.3 through @tailwindcss/vite in astro.config.
  postcss.config.mjs, tailwind.config.mjs and autoprefixer are gone
  (v4 handles vendor prefixes itself). The upgrade tool wired up
  @tailwindcss/postcss, which was swapped for the Vite plugin.
- Theme: tailwind.config theme.extend moved into an @theme block in
  src/styles/global.css. backgroundSize.grid has no v4 theme
  namespace (the tool emitted a dead --background-size-grid, so
  bg-grid vanished from the build); restored as @Utility bg-grid.
- Sources: `@import 'tailwindcss' source('..')` limits scanning to
  src/, matching v3's content glob, so the legacy .razor files and
  READMEs are not scanned. SharedAuth holds no class names, so it
  needs no @source.
- Utility renames from the tool: rounded -> rounded-sm,
  backdrop-blur-sm -> backdrop-blur-xs, outline-none ->
  outline-hidden, flex-shrink-0 -> shrink-0, bg-gradient-to-* ->
  bg-linear-to-*, bg-[#0A0E17] -> bg-space-dark (same value).
- Visual parity: kept the tool's v3 border-colour compatibility rule
  and added v4's documented button cursor:pointer rule. @layer
  components and utilities blocks became @Utility rules.
- Drop tailwind.config.mjs from the csproj NpmBuild inputs and
  update the README and CLAUDE.md notes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): bump scope minor/patch group and drop @types/cytoscape stub

Applies Dependabot #183: astro 7.4.2, cytoscape 3.34.4,
@typescript-eslint 8.72, eslint-plugin-react-hooks 7.1.1, globals 17.13,
autoprefixer 10.6.1, prettier 3.9.10.

@types/cytoscape 3.31.0 is a deprecated stub (cytoscape ships its own
index.d.ts), so remove it instead of bumping. Raise engines.node to
>=22.23.4 to match astro 7.4.2's minimum.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): bump scope to react 19

Applies Dependabot #159 (react, @types/react) and moves react-dom and
@types/react-dom with it, since the pair must stay in lockstep. No source
changes needed: tsc --noEmit is clean (no global JSX namespace, every
useRef has an initial value, no removed APIs in use).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): migrate scope to tailwind css 4

Applies Dependabot #160 (tailwindcss 3.4.19 -> 4.3.3) using the official
@tailwindcss/upgrade tool, then reviewed and adjusted:

- Run Tailwind through @tailwindcss/vite in astro.config; drop
  postcss.config.mjs, autoprefixer and @tailwindcss/postcss (v4 handles
  vendor prefixing itself).
- Port tailwind.config.mjs (slate-950, Roboto sans, class dark mode) to
  @theme / @custom-variant in global.css and delete the config file.
- Restrict source detection to src/ with source("../"), matching the old
  content glob.
- Class renames from the tool: outline-none -> outline-hidden,
  backdrop-blur(-sm) -> backdrop-blur-sm(-xs), flex-shrink-0 -> shrink-0,
  bg-gradient-to-b -> bg-linear-to-b, arbitrary opacity/z-index to the
  bare-value forms. Computed values are unchanged.
- Keep v3 visuals: gray-200 default border colour and cursor:pointer on
  buttons via @layer base; move element-level globals (select/option
  colours, a { text-decoration: none }, safe-area padding) into
  @layer base so utilities such as hover:underline and bg-black/30 on
  selects still win, as they did in v3.
- Drop tailwind.config.mjs from the csproj build inputs; update README.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* chore(deps): NuGet minor/patch group, coverlet 10, MessagePack 3

Consolidates Dependabot #175, #176 and #180, re-applied on current main.

- #175 group: Microsoft.Extensions/ASP.NET Core/EF Core to 10.0.14 (aligned
  with SignalR.Client already at 10.0.14 on main), OpenTelemetry 1.18.0,
  OpenIddict 7.7.0, StackExchange.Redis 2.13.17, Aspire hosting 13.5.3,
  Azure SDKs, Graph, Spectre.Console 0.57.2, test tooling and others.
- Held back: MassTransit stays 8.3.6 (v9 is commercially licensed);
  System.CommandLine stays 2.0.0-beta4 (2.0 stable is an API rewrite,
  ~340 call sites in Dhadgar.Cli; needs its own PR).
- #176: coverlet.collector 10.0.1.
- #180: MessagePack 3.1.12 (3.1.8 is itself inside GHSA-qhrr-8q5h-9q3h,
  patched at 3.1.9). Aspire only uses StreamJsonRpc's SystemTextJsonFormatter.
- Aspire.AppHost.Sdk 13.1.0 -> 13.5.3 to match the hosting packages;
  ASPIRE010 kept as a message (we use package-delivered DCP, not the CLI bundle).
- Spectre 0.57 adds ConfirmAsync: CA1849 fixed at 7 CLI confirm prompts.
- Scalar 2.17 adds namespace Scalar.AspNetCore.Attributes: CA1724 fixed by
  renaming TracingConstants.Attributes to SpanAttributes.
- Regenerated packages.lock.json files.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* fix(deps): finish the Scope Tailwind 4 move and review fixes

The Scope Tailwind 4 commit was missing its package, lockfile, Astro
config, csproj and README changes, and still had tailwind.config.mjs.
Restore them so Scope builds with @tailwindcss/vite.

Also put the static-web-apps-deploy pin back to the v1 commit main
uses, and update the BetterAuth README to express 5, jose 6 and
dotenv 17.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* ci(npm): fetch the newest Node 22 in the npm-ci action

The runner caches Node 22.23.3, but Astro 7.4.2 needs >=22.23.4, so
setup-node now checks for the latest 22.x instead of using the cache.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

* ci(codeql): run CodeQL nightly instead of on every PR

CodeQL now runs on a nightly schedule against main (and by hand), not on
pushes or pull requests, so its findings are triaged from the Security
tab rather than blocking merges.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014QCSL3vKBpaY5vx6epF7wE

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@Cadacious

Cadacious commented Oct 26, 2026

Copy link
Copy Markdown
Contributor

Superseded by #201, which landed these updates.

@Cadacious Cadacious closed this Oct 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/src/Dhadgar.ShoppingCart/tailwindcss-4.3.3 branch October 26, 2026 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Cadacious