postcss 8.5.21 → 8.5.23

package/README.md

@@ -13,8 +13,7 @@ and JetBrains. The [Autoprefixer] and [Stylelint] PostCSS plugins are some o
 
 ---
 
-<img src="https://cdn.evilmartians.com/badges/logo-no-label.svg" alt="" width="22" height="16" />  Built by
-<b><a href="https://evilmartians.com/devtools?utm_source=postcss&utm_campaign=devtools-button&utm_medium=github">Evil Martians</a></b>, go-to agency for <b>developer tools</b>.
+<img src="https://cdn.evilmartians.com/badges/logo-no-label.svg" alt="" width="22" height="16" />  PostCSS is built by <b><a href="https://evilmartians.com/>Evil Martians</a></b>, an American design and engineering consultancy for <b>developer tools, AI, and cybersecurity startups</b>.
 
 ---
 

package/lib/previous-map.js

@@ -86,19 +86,13 @@ class PreviousMap {
 
   loadFile(path, cssFile, trusted) {
     if (!trusted && !this.unsafeMap) {
-      if (!/\.map$/i.test(path)) {
+      if (!/\.map$/i.test(path)) return undefined
+      if (!cssFile) return undefined
+
+      let rel = relative(dirname(cssFile), path)
+      if (rel === '..' || rel.startsWith('..' + sep) || isAbsolute(rel)) {
         return undefined
       }
-      if (cssFile) {
-        let relativePath = relative(dirname(cssFile), path)
-        if (
-          relativePath === '..' ||
-          relativePath.startsWith('..' + sep) ||
-          isAbsolute(relativePath)
-        ) {
-          return undefined
-        }
-      }
     }
     this.root = dirname(path)
     if (existsSync(path)) {

package/lib/processor.js

@@ -7,7 +7,7 @@ let Root = require('./root')
 
 class Processor {
   constructor(plugins = []) {
-    this.version = '8.5.21'
+    this.version = '8.5.23'
     this.plugins = this.normalize(plugins)
   }
 

package/lib/stringifier.js

@@ -62,14 +62,15 @@ function pushBody(str, stack, node) {
   for (let i = nodes.length - 1; i >= 0; i--) {
     let child = nodes[i]
     let childSemicolon = last !== i || semicolon
-    // A childless at-rule that still has following siblings must be
-    // terminated. Without the semicolon those trailing comments are folded
-    // into the at-rule's prelude and disappear when the output is re-parsed.
+    // A childless at-rule or a custom property declaration that still has
+    // following siblings must be terminated. Without the semicolon those
+    // trailing comments are folded into the at-rule's prelude or the custom
+    // property's value and disappear when the output is re-parsed.
     if (
       !childSemicolon &&
       i < nodes.length - 1 &&
-      child.type === 'atrule' &&
-      !child.nodes
+      ((child.type === 'atrule' && !child.nodes) ||
+        (child.type === 'decl' && child.prop.startsWith('--')))
     ) {
       childSemicolon = true
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "postcss",
-  "version": "8.5.21",
+  "version": "8.5.23",
   "description": "Tool for transforming styles with JS plugins",
   "keywords": [
     "css",