7.1.2

Author: MoOx

.github/workflows/test.yml

@@ -2,8 +2,8 @@ name: test
 on:
   push:
     branches:
-    - 'main'
-    - 'master'
+      - "main"
+      - "master"
   pull_request:
 
 defaults:
@@ -32,8 +32,8 @@ jobs:
       - name: test
         run: |
           case "${{ matrix.node }}" in "20"|"22"|"24")
-            npm run test:node22
+            npm test
           ;;*)
-          npm test
+          npm test:node-lt-20
           ;;
           esac

CHANGELOG.md

@@ -1,3 +1,7 @@
+# 7.1.2 - 2026-06-09
+
+- Fix [CVE-2026-9358](https://github.com/advisories/GHSA-w9m9-85wc-3x92) (NVD) / SNYK-JS-POSTCSSSELECTORPARSER-16873882 ([#316](https://github.com/postcss/postcss-selector-parser/pull/316) by [@MoOx](https://github.com/MoOx))
+
 # 7.1.1
 
 - perf: replace startsWith with strict equality (#308)

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "postcss-selector-parser",
-  "version": "7.1.1",
+  "version": "7.1.2",
   "devDependencies": {
     "@babel/cli": "^7.11.6",
     "@babel/core": "^7.11.6",
@@ -38,9 +38,10 @@
     "prepare": "del-cli dist && BABEL_ENV=publish babel src --out-dir dist --ignore /__tests__/",
     "lintfix": "eslint --fix src",
     "report": "nyc report --reporter=html",
-    "test": "nyc ava src/__tests__/*.mjs",
-    "test:node22": "nyc ava src/__tests__/*.mjs --node-arguments=--no-experimental-detect-module",
-    "testone": "ava"
+    "test:node-lt-20": "nyc ava src/__tests__/*.mjs",
+    "test": "nyc ava src/__tests__/*.mjs --node-arguments=--no-experimental-detect-module",
+    "testone": "ava",
+    "release": "npx npmpub"
   },
   "dependencies": {
     "cssesc": "^3.0.0",