Version Details and Security Vulnerabilities

PostCSS Custom Properties, a plugin enabling the use of Custom Properties Queries within CSS, has released version 13.1.0, a minor update from the previous stable version 13.0.0. While both versions share the same fundamental purpose and license (MIT), the key difference lies in the expanded dependency list of the newer release. Version 13.1.0 introduces three new dependencies that developers should consider. Specifically, it adds @csstools/css-tokenizer, @csstools/css-parser-algorithms, and @csstools/cascade-layer-name-parser, modules within the CSS Tools project. These additions likely bring enhanced parsing and processing capabilities, particularly for more complex or nuanced custom property scenarios, and especially for the support of cascade layers.

The core functionality remains consistent as custom properties is still dependent on "postcss-value-parser" and a peer dependency on PostCSS v8.4 or higher. However, this update suggests a move towards greater standardization and potentially better support for advanced CSS features. Developers upgrading to v13.1.0 should be aware of these new dependencies and factor them into their project's dependency tree.

Further, beyond dependency changes, developers might also find an improvement in the internal architecture and handling of custom properties due to new added dependencies. The updated version also comes with a slightly increased file count (13 vs 11) and unpacked size (31425 vs 27072 bytes), which could factor into bundle size considerations. The newer version released about two months later than the previous latest, and is another sign that the plugin is being actively maintained.