Tailwind CSS released version 1.8.9 on September 13, 2020, shortly after version 1.8.8 on September 11, 2020. Both versions share the same core dependencies, including essential packages like postcss, lodash, autoprefixer, and @fullhuman/postcss-purgecss, ensuring consistent functionality for building responsive and customizable user interfaces. These dependencies are critical for Tailwind's utility-first approach, enabling developers to rapidly style elements directly within their HTML.
Looking at the metadata, the most noticeable difference lies in the unpacked size within the dist object. Version 1.8.9 has an unpacked size of 19078402 bytes, while version 1.8.8 is slightly smaller at 18869545 bytes. This suggests that version 1.8.9 might include additional features, optimizations, or bug fixes that contributed to the increased size. Although the file countremains the same at 198 for both versions, this subtle difference in size could be a consideration for developers concerned about bundle size or initial load times. While the dependency lists are identical, the release date suggests a quick follow-up release, implying that 1.8.9 likely addresses issues or improvements discovered immediately after the 1.8.8 release. If you're using Tailwind CSS, upgrading from 1.8.8 to 1.8.9 is advisable to ensure you have the latest stability improvements and potential minor enhancements.
All the vulnerabilities related to the version 1.8.9 of the package
PostCSS line return parsing error
An issue was discovered in PostCSS before 8.4.31. It affects linters using PostCSS to parse external Cascading Style Sheets (CSS). There may be \r discrepancies, as demonstrated by @font-face{ font:(\r/*);} in a rule.
This vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS in such a way that it will contains parts parsed by PostCSS as a CSS comment. After processing by PostCSS, it will be included in the PostCSS output in CSS nodes (rules, properties) despite being originally included in a comment.
