Tailwind CSS saw a minor version bump from 1.7.4 to 1.7.5 on August 26, 2020, representing incremental improvements for this utility-first CSS framework. Both versions share an identical core philosophy of rapidly building custom user interfaces, retaining the same core dependencies essential for functionality. Key dependencies such as postcss, autoprefixer, lodash, and normalize.css are consistent, ensuring a stable base for styling projects. Similarly, the developer tooling, including jest, eslint, prettier, and Babel-related packages, remain unchanged, indicating a focus on maintaining code quality and a smooth development workflow.
The most noticeable difference, aside from the version number, lies in the minor update to the lodash dependency, moving from version 4.17.15 in 1.7.4 to 4.17.20 in 1.7.5. While seemingly small, this Lodash update may include bug fixes, performance improvements, or minor feature enhancements beneficial for developers leveraging Tailwind's extensive utility classes. The unpacked size of the package also differs slightly, with 1.7.5 being marginally smaller. Developers should consider these updates, particularly the Lodash version, when assessing compatibility and potential benefits for their projects. Always refer to the official Lodash changelog for detailed information on the changes introduced in the updated version. As the focus is on the Lodash core library, there are likely no changes that will impact existing Tailwind projects.
All the vulnerabilities related to the version 1.7.5 of the package
PostCSS line return parsing error
An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be \r discrepancies, as demonstrated by @font-face{ font:(\r/*);} in a rule.
This vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being originally included in a comment.
