Autoprefixer 10.4.13 represents a subtle but important update over its predecessor, 10.4.12, in this popular CSS prefixing tool. Both versions maintain the core functionality of parsing CSS and adding vendor prefixes based on data from the "Can I Use" website, ensuring compatibility across various browsers. The developer experience remains consistent, with dependencies like picocolors, fraction.js, browserslist, normalize-range, and postcss-value-parser staying stable. Equally important, the peer dependency on postcss remains at ^8.1.0, which means that the new version doesn't introduce compatibility issues in existing projects that use postcss.
The key difference lies primarily within the caniuse-lite dependency. Version 10.4.13 upgrades to caniuse-lite version ^1.0.30001426, while 10.4.12 relies on ^1.0.30001407. This seemingly small change indicates an updated database of browser compatibility information within caniuse-lite. Consequently, Autoprefixer 10.4.13 provides more accurate and up-to-date prefixing, reflecting the latest browser support for CSS features. Furthermore, the updated version has a slightly bigger unpacked size (198690 vs 198645), which is reasonable, giving the updated caniuse-lite database. Developers should upgrade to 10.4.13 to ensure their CSS is optimally tailored for current browser environments, reducing unnecessary prefixes and improving overall code cleanliness. The release dates highlights the currency of these versions.
The are not vulnerabilities for the version 10.4.13 of the package autoprefixer