[Snyk] Upgrade tailwindcss from 4.1.1 to 4.1.13

[stephencornwell]

Snyk has created this PR to upgrade tailwindcss from 4.1.1 to 4.1.13.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 12 versions ahead of your current version.

• The recommended version was released 2 months ago.

Release notes

Package name: tailwindcss

• 4.1.13 - 2025-09-04
  

  Changed

  • Drop warning from browser build (#18731)
  • Drop exact duplicate declarations when emitting CSS (#18809)

  Fixed

  • Don't transition visibility when using transition (#18795)
  • Discard matched variants with unknown named values (#18799)
  • Discard matched variants with non-string values (#18799)
  • Show suggestions for known matchVariant values (#18798)
  • Replace deprecated clip with clip-path in sr-only (#18769)
  • Hide internal fields from completions in matchUtilities (#18820)
  • Ignore .vercel folders by default (can be overridden by @ source … rules) (#18855)
  • Consider variants starting with @- to be invalid (e.g. @-2xl:flex) (#18869)
  • Do not allow custom variants to start or end with a - or _ (#18867, #18872)
  • Upgrade: Migrate aria theme keys to @ custom-variant (#18815)
  • Upgrade: Migrate data theme keys to @ custom-variant (#18816)
  • Upgrade: Migrate supports theme keys to @ custom-variant (#18817)
• 4.1.12 - 2025-08-14
  

  Fixed

  • Don't consider the global important state in @ apply (#18404)
  • Add missing suggestions for flex-<number> utilities (#18642)
  • Fix trailing ) from interfering with extraction in Clojure keywords (#18345)
  • Detect classes inside Elixir charlist, word list, and string sigils (#18432)
  • Track source locations through @ plugin and @ config (#18345)
  • Allow boolean values of process.env.DEBUG in @ tailwindcss/node (#18485)
  • Ignore consecutive semicolons in the CSS parser (#18532)
  • Center the dropdown icon added to an input with a paired datalist by default (#18511)
  • Extract candidates in Slang templates (#18565)
  • Improve error messages when encountering invalid functional utility names (#18568)
  • Discard CSS AST objects with false or undefined properties (#18571)
  • Allow users to disable URL rebasing in @ tailwindcss/postcss via transformAssetUrls: false (#18321)
  • Fix false-positive migrations in addEventListener and JavaScript variable names (#18718)
  • Fix Standalone CLI showing default Bun help when run via symlink on Windows (#18723)
  • Read from --border-color-* theme keys in divide-* utilities for backwards compatibility (#18704)
  • Don't scan .hdr and .exr files for classes by default (#18734)
• 4.1.11 - 2025-06-26
  

  Fixed

  • Add heuristic to skip candidate migrations inside emit(…) (#18330)
  • Extract candidates with variants in Clojure/ClojureScript keywords (#18338)
  • Document --watch=always in the CLI's usage (#18337)
  • Add support for Vite 7 to @ tailwindcss/vite (#18384)
• 4.1.10 - 2025-06-11
  

  Fixed

  • Fix incorrectly generated CSS when using percentages in arbitrary values with calc (e.g. w-[calc(100%-var(--offset))]) (#18289)
• 4.1.9 - 2025-06-11
  

  Fixed

  • Correctly parse custom properties with strings containing semicolons (#18251)
  • Upgrade: Migrate arbitrary modifiers without percentage signs to bare values (e.g. /[0.16] → /16) (#18184)
  • Upgrade: Migrate CSS variable shorthands where fallback value contains function call (#18184)
  • Upgrade: Migrate negative arbitrary values to negative bare values (e.g. mb-[-32rem] → -mb-128) (#18212)
  • Upgrade: Do not migrate blur in wire:model.blur (#18216)
  • Don't add spaces around CSS dashed idents when formatting math expressions (#18220)
• 4.1.8 - 2025-05-28
  

  Added

  • Improve error messages when @ apply fails (#18059)

  Fixed

  • Upgrade: Do not migrate declarations that look like candidates in <style> blocks (#18057, 18068)
  • Upgrade: Don't error when looking for tailwindcss in pnpm monorepos (#18065)
  • Upgrade: Don't error when updating dependencies in pnpm monorepos (#18065)
  • Upgrade: Migrate deprecated order-none to order-0 (#18126)
  • Support Leptos class: attributes when extracting classes (#18093)
  • Fix "Cannot read properties of undefined" crash on malformed arbitrary value (#18133)
  • Upgrade: Migrate -mt-[0px] to mt-[0px] instead of the other way around (#18154)
  • Fix Haml pre-processing crash when there is no \n at the end of the file (#18155)
  • Ignore .pnpm-store folders by default (can be overridden by @ source … rules) (#18163)
  • Fix PostCSS crash when calling toJSON() (#18083)
• 4.1.7 - 2025-05-15
  

  Added

  • Upgrade: Migrate bare values to named values (#18000)
  • Upgrade: Added cache to improve template migration performance (#18025)

  Fixed

  • Allow _ before numbers during candidate extraction (#17961)
  • Prevent duplicate suggestions when using @ theme and @ utility together (#17675)
  • Ensure that media queries within ::before and ::after pseudo selectors create valid CSS rules in production builds (#17979)
  • Ensure that the standalone CLI does not leave temporary files behind (#17981)
  • Ensure -rotate-* utilities properly negate arbitrary values (#18014)
  • Ignore custom variants using :merge(…) selectors in legacy JS plugins (#18020)
  • Ensure classes containing . are properly extracted from Clojure files (#18038)
  • Upgrade: Fix error when using @ import … source(…) (#17963)
  • Upgrade: Change casing of utilities with named values to kebab-case to match updated theme variables (#18017)
  • Upgrade: Don't migrate strings that match utility names in Vue attribute bindings other than class (#18025)
• 4.1.6 - 2025-05-09
• 4.1.5 - 2025-04-30
• 4.1.4 - 2025-04-14
• 4.1.3 - 2025-04-04
• 4.1.2 - 2025-04-03
• 4.1.1 - 2025-04-02

from tailwindcss GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs