[dependabot]

Bumps stylelint from 17.16.0 to 18.0.0.

Release notes

Sourced from stylelint's releases.

18.0.0

It contains 13 breaking changes, which we've detailed in the migrating to 18.0.0 guide. It also adds 4 new rules and fixes 16 bugs.

• Removed: support for end-of-life and older versions of Node.js (#9486) (@​jeddy3).
• Removed: support for CommonJS-style filename-less and extension-less locator paths (#9545) (@​jeddy3).
• Removed: resolution of packages from the global node_modules directory (#9534) (@​jeddy3).
• Removed: context.fix property (#9505) (@​jeddy3).
• Removed: declaration-block-single-line-max-declarations rule (#9565) (@​jeddy3).
• Removed: *syntax options from declaration-property-value-no-unknown (#9487) (@​jeddy3).
• Removed: ignoreSelectors option from selector-max-specificity (#9579) (@​jeddy3).
• Changed: TypeScript config files to be loaded by Node.js's built-in type stripping (#9489) (@​jeddy3).
• Changed: the CLI to parse arguments with node:util.parseArgs (#9508) (@​jeddy3).
• Changed: globbyOptions to support only a subset of options (#9500) (@​jeddy3).
• Changed: function-no-unknown to use the CSSTree Syntax Reference for known functions and to ignore vendor-prefixed functions (#9574) (@​jeddy3).
• Changed: color detection to use new color option with node:util.styleText (#9529) (@​jeddy3).
• Changed: hyperlink detection (#9536) (@​jeddy3).
• Added: at-charset-rule-no-invalid rule (#9509) (@​firefoxic).
• Added: declaration-property-custom-property-allowed-list rule (#9542) (@​jeddy3).
• Added: value-no-invalid rule (#9507) (@​jeddy3).
• Added: value-type-custom-property-required-list experimental rule (#9572) (@​jeddy3).
• Added: stable support for processors configuration property (#9543) (@​jeddy3).
• Added: stable support for referenceFiles configuration property (#9598) (@​jeddy3).
• Added: result.stylelint.postcss property for plugins (#9594) (@​jeddy3).
• Added: stylelint.version property (#9595) (@​ybiquitous).
• Added: languageOptions.syntax support to function-no-unknown (#9574) (@​jeddy3).
• Fixed: referenceFiles performance (#9573) (@​jeddy3).
• Fixed: import and cache performance by replacing file-entry-cache (#9593) (@​jeddy3).
• Fixed: import performance by lazily loading css-tree (#9580) (@​jeddy3).
• Fixed: exit code when all errors in a file are suppressed and other problems are reported (#9528) (@​schreibse).
• Fixed: --fix for files where the only change is the removal of a byte order mark (#9512) (@​firefoxic).
• Fixed: Config['extends'] type for configuration objects (#9526) (@​firefoxic).
• Fixed: at-rule-descriptor-value-no-unknown false negatives for var() (#9614) (@​jeddy3).
• Fixed: custom-property-{pattern,no-missing-var-function} and *-no-unknown false positives and negatives for @property with a list of names (#9571) (@​jeddy3).
• Fixed: custom-property-no-missing-var-function false negatives for custom properties defined in referenceFiles (#9570) (@​jeddy3).
• Fixed: custom-property-no-missing-var-function false positives for recently introduced properties (#9567) (@​jeddy3).
• Fixed: declaration-block-no-redundant-longhand-properties and declaration-block-no-shorthand-property-overrides false negatives for contain-intrinsic-size (#9550) (@​firefoxic).
• Fixed: declaration-block-no-shorthand-property-overrides false negatives for flow-relative properties overridden by physical shorthands (#9549) (@​firefoxic).
• Fixed: declaration-property-value-no-unknown false negatives for values containing known custom properties (#9537) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false negatives for values containing registered custom properties (#9566) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives and negatives for files included in a referenceFiles bundle (#9358) (@​romainmenke).
• Fixed: property-layout-mappings false negatives for physical shorthand properties (#9615) (@​jeddy3).

18.0.0-next.0

This is a prerelease of our next major. Migration guide.

• Removed: support for end-of-life and older versions of Node.js (#9486) (@​jeddy3).
• Removed: support for CommonJS-style filename-less and extension-less locator paths (#9545) (@​jeddy3).
• Removed: resolution of packages from the global node_modules directory (#9534) (@​jeddy3).
• Removed: declaration-block-single-line-max-declarations rule (#9565) (@​jeddy3).
• Removed: context.fix property (#9505) (@​jeddy3).

... (truncated)

Changelog

Sourced from stylelint's changelog.

18.0.0 - 2026-11-03

It contains 13 breaking changes, which we've detailed in the migrating to 18.0.0 guide. It also adds 4 new rules and fixes 16 bugs.

• Removed: support for end-of-life and older versions of Node.js (#9486) (@​jeddy3).
• Removed: support for CommonJS-style filename-less and extension-less locator paths (#9545) (@​jeddy3).
• Removed: resolution of packages from the global node_modules directory (#9534) (@​jeddy3).
• Removed: context.fix property (#9505) (@​jeddy3).
• Removed: declaration-block-single-line-max-declarations rule (#9565) (@​jeddy3).
• Removed: *syntax options from declaration-property-value-no-unknown (#9487) (@​jeddy3).
• Removed: ignoreSelectors option from selector-max-specificity (#9579) (@​jeddy3).
• Changed: TypeScript config files to be loaded by Node.js's built-in type stripping (#9489) (@​jeddy3).
• Changed: the CLI to parse arguments with node:util.parseArgs (#9508) (@​jeddy3).
• Changed: globbyOptions to support only a subset of options (#9500) (@​jeddy3).
• Changed: function-no-unknown to use the CSSTree Syntax Reference for known functions and to ignore vendor-prefixed functions (#9574) (@​jeddy3).
• Changed: color detection to use new color option with node:util.styleText (#9529) (@​jeddy3).
• Changed: hyperlink detection (#9536) (@​jeddy3).
• Added: at-charset-rule-no-invalid rule (#9509) (@​firefoxic).
• Added: declaration-property-custom-property-allowed-list rule (#9542) (@​jeddy3).
• Added: value-no-invalid rule (#9507) (@​jeddy3).
• Added: value-type-custom-property-required-list experimental rule (#9572) (@​jeddy3).
• Added: stable support for processors configuration property (#9543) (@​jeddy3).
• Added: stable support for referenceFiles configuration property (#9598) (@​jeddy3).
• Added: result.stylelint.postcss property for plugins (#9594) (@​jeddy3).
• Added: stylelint.version property (#9595) (@​ybiquitous).
• Added: languageOptions.syntax support to function-no-unknown (#9574) (@​jeddy3).
• Fixed: referenceFiles performance (#9573) (@​jeddy3).
• Fixed: import and cache performance by replacing file-entry-cache (#9593) (@​jeddy3).
• Fixed: import performance by lazily loading css-tree (#9580) (@​jeddy3).
• Fixed: exit code when all errors in a file are suppressed and other problems are reported (#9528) (@​schreibse).
• Fixed: --fix for files where the only change is the removal of a byte order mark (#9512) (@​firefoxic).
• Fixed: Config['extends'] type for configuration objects (#9526) (@​firefoxic).
• Fixed: at-rule-descriptor-value-no-unknown false negatives for var() (#9614) (@​jeddy3).
• Fixed: custom-property-{pattern,no-missing-var-function} and *-no-unknown false positives and negatives for @property with a list of names (#9571) (@​jeddy3).
• Fixed: custom-property-no-missing-var-function false negatives for custom properties defined in referenceFiles (#9570) (@​jeddy3).
• Fixed: custom-property-no-missing-var-function false positives for recently introduced properties (#9567) (@​jeddy3).
• Fixed: declaration-block-no-redundant-longhand-properties and declaration-block-no-shorthand-property-overrides false negatives for contain-intrinsic-size (#9550) (@​firefoxic).
• Fixed: declaration-block-no-shorthand-property-overrides false negatives for flow-relative properties overridden by physical shorthands (#9549) (@​firefoxic).
• Fixed: declaration-property-value-no-unknown false negatives for values containing known custom properties (#9537) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false negatives for values containing registered custom properties (#9566) (@​jeddy3).
• Fixed: declaration-property-value-no-unknown false positives and negatives for files included in a referenceFiles bundle (#9358) (@​romainmenke).
• Fixed: property-layout-mappings false negatives for physical shorthand properties (#9615) (@​jeddy3).

Commits

• 7c49e18 Release 18.0.0 (#9628)
• 88973f0 Prepare 18.0.0 (#9627)
• c775354 Fix declaration-property-value-no-unknown false positives and negatives for...
• 9040322 Change ignore* for value-type-custom-property-required-list (#9626)
• 106c1f0 Document custom property example more precisely in the customising guide (#9624)
• 221d9b8 Document overrides more prominently in customizing guide (#9623)
• 6c923ef Document configuration-based approach to rules (#9622)
• 5290eea Document use cases in rule extended description of each rule (#9621)
• a1d7ca9 Bump ignore from 7.0.12 to 7.0.14 (#9620)
• 0009a60 Bump npm-run-all2 from 9.0.3 to 9.0.4 (#9619)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[chatgpt-codex-connector]

Codex Review Summary: ❌ Failed

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	❌ Failed 2026-11-07T07:14:36.596264Z We couldn’t complete this review. Comment @codex review to try again.	30ad3d3	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[AceHack]

@dependabot rebase

[AceHack]

@dependabot rebase