build(deps): bump postcss-calc from 10.1.1 to 11.2.3

[dependabot]

Bumps postcss-calc from 10.1.1 to 11.2.3.

Release notes

Sourced from postcss-calc's releases.

11.2.3

What's Changed

• fix: output fewer bytes for negative zero in postcss/postcss-calc#341

Full Changelog: postcss/postcss-calc@v11.2.2...v11.2.3

11.2.2

What's Changed

Bug Fixes

• transform a division or unit conversion only when the result is exact at the configured precision. For example., calc(100% / 3) stays calc(100% / 3) instead of becoming calc(33.33333%), and calc(1cm + 1px) is no longer converted to 1.02646cm. Use precision: false to transform every division.
• keep precision significant digits for values below 1, so calc(1px / 150000) is no longer rounded to .00001px
• min(), max() and clamp() preserve the original unit
• keep the order of terms and factors around var(), env(), attr() and other substitution functions. For example, with --a: 1px + 2px, var(--a) * 2 means 1px + 2px * 2, so reordering the multiplication would be a bug. var(--a) * 2 is not rewritten to 2 * var(--a), var(--a) / var(--a) is not cancelled, and parentheses are kept (1px - (2 * var(--a))). Unrecognised functions such as anchor-size() are treated the same way, so in 2 * anchor-size(width) * .5, is no longer transformed to anchor-size(width)
• keep the parentheses of a nested calc() that contains unresolved values, so calc(var(--a) - calc(var(--b) - var(--c))) is no longer rewritten to calc(var(--a) - var(--b) + var(--c))
• do not flip every sign of a parenthesized sum that starts with a negative term: calc((var(--b) - 7 - 2)) is now calc(-9 + var(--b)) instead of calc(-1 * (9 - var(--b))), which changed the value when --b expands to several tokens

Full Changelog: postcss/postcss-calc@v11.2.1...v11.2.2

11.2.1

What's Changed

Bug fixes

• do not emit invalid minus unary operator (the browser discards values like calc(-(-12px))
• improve rounding so it is more spec-compliant in edge cases
• preserve invalid declarations with unary minus, instead of converting them to valid declarations

Full Changelog: postcss/postcss-calc@v11.2.0...v11.2.1

11.2.0

What's Changed

Features

... (truncated)

Changelog

Sourced from postcss-calc's changelog.

11.2.3 (2026-10-10)

Bug fixes

• postcss-calc now emits -0 in some cases where it previously emitted calc(-1 * 0), in order to obtain some output size savings when a negative 0 appears

11.2.2 (2026-10-1)

Bug fixes

• transform a division or unit conversion only when the result is exact at the configured precision. For example, keep calc(100% / 3) as calc(100% / 3) instead of transforming to calc(33.33333%), and no longer convert calc(1cm + 1px) to an approximate 1.02646cm. Use precision: false to transform every division.
• keep precision significant digits for values below 1, so calc(1px / 150000) is no longer rounded to .00001px
• preserve the original unit in min(), max() and clamp()
• keep the order of factors around var(), env(), attr() and other substitution functions. Factors are no longer reordered or cancelled: do not rewrite var(--a) * 2 to 2 * var(--a), do not cancel var(--a) / var(--a) and keep parentheses (1px - (2 * var(--a))). Treat unrecognised functions such as anchor-size() the same way, so 2 * anchor-size(width) * .5 is no longer folded
• keep the parentheses of a nested calc() that contains unresolved values, so calc(var(--a) - calc(var(--b) - var(--c))) is no longer rewritten to calc(var(--a) - var(--b) + var(--c))
• do not flip every sign of a parenthesized sum that starts with a negative term: calc((var(--b) - 7 - 2)) now becomes calc(-9 + var(--b)) instead of calc(-1 * (9 - var(--b))), because this last transformation changes the value when --b expands to several tokens

11.2.1 (2026-09-20)

Bug fixes

• do not emit invalid minus unary operator (the browser discards values like calc(-(-12px))
• improve rounding so it is more spec-compliant in edge cases
• preserve invalid declarations with unary minus, instead of converting them to valid declarations

11.2.0 (2026-09-17)

Features

• postcss-calc now offers two modes. By default, it tries to follow the spec as closely as possible by not unwrapping calc() value. This allows the browser to transform negative and floating point values, especially in cases where only integers are allowed in the CSS property. If you want to remove the calc() function when it wraps a single value, use unwrapSingleValue: true. This allows you to get rid of calc() and replace it with a single number wherever that is possible.

Bug fixes

... (truncated)

Commits

• 9c0f059 Publish 11.2.3
• 57c4aa7 refactor: replace closure with plain loop
• 2aac1f5 test: refactor scripts
• b54ac65 chore: add more lint rules
• ff0ba13 test: reduce duplicated code and split large test files
• ca3d479 docs: improve README
• 94847b4 fix: improve negative zero serialization
• 7eefefc chore: update postcss
• eb7c9fb chore: update linters
• e8ce5a6 chore: update pnpm to 12.10.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss-calc since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2848c3c7-1821-43e9-9e5f-909331a93b8b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	postcss-calc@​10.1.1 ⏵ 11.2.3	+1			+1

View full report