From 5e30c61f5c72cf3c4727e20e0dfc9efd05856a0a Mon Sep 17 00:00:00 2001
From: aaronjmars <61592645+aaronjmars@users.noreply.github.com>
Date: Wed, 5 Aug 2026 09:36:21 -0400
Subject: [PATCH] security: bump postcss to 8.5.25 (Dependabot alerts)

Bump the postcss override from ^8.5.10 to ^8.5.25 (resolves 8.5.13 -> 8.5.25)
to clear two open Dependabot alerts:

- GHSA-r28c-9q8g-f849 (high)   - patched in 8.5.18
- GHSA-fxqj-rqcc-2cmp (medium) - patched in 8.5.23

8.5.25 clears both. postcss is a transitive dependency pinned via the existing
overrides block. Lockfile regenerated with the pinned npm@10.9.8.
---
 package-lock.json | 14 +++++++-------
 package.json      |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 6661f43..8bcffb2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -9827,9 +9827,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.13",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.13.tgz",
-      "integrity": "sha512-qif0+jGGZoLWdHey3UFHHWP0H7Gbmsk8T5VEqyYFbWqPr1XqvLGBbk/sl8V5exGmcYJklJOhOQq1pV9IcsiFag==",
+      "version": "8.5.25",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
+      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
       "funding": [
         {
           "type": "opencollective",
@@ -9846,7 +9846,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.11",
+        "nanoid": "^3.3.16",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },
@@ -9868,9 +9868,9 @@
       }
     },
     "node_modules/postcss/node_modules/nanoid": {
-      "version": "3.3.12",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz",
-      "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==",
+      "version": "3.3.17",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz",
+      "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index b28da89..c30a440 100644
--- a/package.json
+++ b/package.json
@@ -64,7 +64,7 @@
     "vitest": "^4.1.10"
   },
   "overrides": {
-    "postcss": "^8.5.10",
+    "postcss": "^8.5.25",
     "sharp": "^0.35.0",
     "@hono/node-server": "^2.0.5",
     "@esbuild-kit/core-utils": {