Tailwind CSS version 1.7.3 is a minor patch release building upon the solid foundation of version 1.7.2. Both versions provide developers with a utility-first CSS framework designed for rapid UI development. Core functionalities and the core set of utilities remain consistent between the two, ensuring a smooth upgrade for existing users. The dependency tree remains identical, with shared packages like postcss, lodash, and autoprefixer staying at the same versions, ensuring consistent behavior. The development dependencies used for testing, linting, and building the package also remain unchanged, indicating that the core development workflow and quality assurance processes are stable. The key difference between these releases is the unpackedSize which grew slightly from 14874664 to 14875720 and the release date. While seemingly identical in terms of features and dependencies, updating from 1.7.2 to 1.7.3 likely addresses some minor bug fixes, performance improvements, or internal adjustments. For developers, this means a safe and recommended upgrade to ensure the most stable and reliable experience using Tailwind CSS. Although the changes are incremental, staying up-to-date with such patch releases is generally advisable for optimal performance and access to the latest refinements. The release of version 1.7.3 happened on 2020-08-20, just one day after the release of 1.7.2.
All the vulnerabilities related to the version 1.7.3 of the package
PostCSS line return parsing error
An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be \r
discrepancies, as demonstrated by @font-face{ font:(\r/*);}
in a rule.
This vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being originally included in a comment.