From 7704bac6addfc2ac02b5b585ebfa6ffa0e2001c2 Mon Sep 17 00:00:00 2001 From: cozy <36821509+vxcozy@users.noreply.github.com> Date: Sat, 2 May 2026 15:02:21 -0400 Subject: [PATCH] fix(deps): pin postcss to >= 8.5.10 to patch Dependabot alert Adds pnpm override `postcss@<8.5.10` -> `8.5.10`. postcss is purely transitive (no direct deps), so an override is the cleanest fix. The lockfile was on 8.5.9, which is vulnerable to XSS via unescaped in CSS stringify output. Co-Authored-By: Claude Opus 4.7 (1M context) --- .changeset/dependabot-postcss.md | 9 + package.json | 3 +- pnpm-lock.yaml | 346 +++++++++++++++---------------- 3 files changed, 176 insertions(+), 182 deletions(-) create mode 100644 .changeset/dependabot-postcss.md diff --git a/.changeset/dependabot-postcss.md b/.changeset/dependabot-postcss.md new file mode 100644 index 0000000..606f425 --- /dev/null +++ b/.changeset/dependabot-postcss.md @@ -0,0 +1,9 @@ +--- +"@tomehq/core": patch +"@tomehq/cli": patch +"@tomehq/theme": patch +"@tomehq/components": patch +"@tomehq/editor": patch +--- + +Security: pin transitive `postcss` to `>= 8.5.10` via pnpm override. Patches a medium-severity advisory ([GHSA](https://github.com/tomehq/tome/security/dependabot/42)) where unescaped `` in PostCSS's CSS stringify output enables an XSS vector. diff --git a/package.json b/package.json index 0695e93..2dfd31c 100644 --- a/package.json +++ b/package.json @@ -41,7 +41,8 @@ "picomatch@>=4.0.0 <4.0.4": "4.0.4", "yaml@>=2.0.0 <2.8.3": "2.8.3", "vite@>=6.0.0 <6.4.2": "6.4.2", - "@hono/node-server@<1.19.13": "1.19.13" + "@hono/node-server@<1.19.13": "1.19.13", + "postcss@<8.5.10": "8.5.10" } } } diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5d5902a..f6aea5c 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -14,6 +14,7 @@ overrides: yaml@>=2.0.0 <2.8.3: 2.8.3 vite@>=6.0.0 <6.4.2: 6.4.2 '@hono/node-server@<1.19.13': 1.19.13 + postcss@<8.5.10: 8.5.10 importers: @@ -86,7 +87,7 @@ importers: version: 25.5.0 tsup: specifier: ^8.0.0 - version: 8.5.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) + version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) typescript: specifier: ^6.0.0 version: 6.0.2 @@ -113,7 +114,7 @@ importers: version: 19.2.4 tsup: specifier: ^8.0.0 - version: 8.5.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) + version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) typescript: specifier: ^6.0.0 version: 6.0.2 @@ -198,7 +199,7 @@ importers: version: 25.5.0 tsup: specifier: ^8.0.0 - version: 8.5.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) + version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) typescript: specifier: ^6.0.0 version: 6.0.2 @@ -393,7 +394,7 @@ importers: version: 19.2.4(react@19.2.4) tsup: specifier: ^8.0.0 - version: 8.5.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) + version: 8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3) typescript: specifier: ^6.0.0 version: 6.0.2 @@ -3315,7 +3316,7 @@ packages: engines: {node: ^10 || ^12 || >=14} hasBin: true peerDependencies: - postcss: ^8.1.0 + postcss: 8.5.10 b4a@1.8.0: resolution: {integrity: sha512-qRuSmNSkGQaHwNbM7J78Wwy+ghLEYF1zNrSeMxj4Kgw6y33O3mXcQ6Ie9fRvfU/YnxWkOchPXbaLb73TkIsfdg==} @@ -3667,7 +3668,7 @@ packages: resolution: {integrity: sha512-LTuzjPoyA2vMGKKcaOqKSp7Ub2eGrNfKiZH4LpezxpNrsICGCSFvsQOI29psISxNZtaXibkC2CXzrQ5enMeGGw==} engines: {node: ^14 || ^16 || >=18} peerDependencies: - postcss: ^8.0.9 + postcss: 8.5.10 css-select@5.2.2: resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==} @@ -3696,19 +3697,19 @@ packages: resolution: {integrity: sha512-B3Eoouzw/sl2zANI0AL9KbacummJTCww+fkHaDBMZad/xuVx8bUduPLly6hKVQAlrmvYkS1jB1CVQEKm3gn0AA==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 cssnano-utils@5.0.1: resolution: {integrity: sha512-ZIP71eQgG9JwjVZsTPSqhc6GHgEr53uJ7tK5///VfyWj6Xp2DBmixWHqJgPno+PqATzn48pL42ww9x5SSGmhZg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 cssnano@7.1.4: resolution: {integrity: sha512-T9PNS7y+5Nc9Qmu9mRONqfxG1RVY7Vuvky0XN6MZ+9hqplesTEwnj9r0ROtVuSwUVfaDhVlavuzWIVLUgm4hkQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 csso@5.0.5: resolution: {integrity: sha512-0LrrStPOdJj+SPCCrGhzryycLjwcgUSHBtxNA8aIDxf0GLsRh1cKYhB00Gd1lDOS4yGH69+SNn13+TWbVHETFQ==} @@ -4821,10 +4822,6 @@ packages: resolution: {integrity: sha512-aY/R+aEsRelme17KGQa/1ZSIpLpNYYrhcrepKTZgE+W3WM16YMCaPwOHLHsmopZHELU0Ojin1lPVxKR0MihncA==} engines: {node: 20 || >=22} - lru-cache@11.3.3: - resolution: {integrity: sha512-JvNw9Y81y33E+BEYPr0U7omo+U9AySnsMsEiXgwT6yqd31VQWTLNQqmT4ou5eqPFUrTfIDFta2wKhB1hyohtAQ==} - engines: {node: 20 || >=22} - lru-cache@11.3.5: resolution: {integrity: sha512-NxVFwLAnrd9i7KUBxC4DrUhmgjzOs+1Qm50D3oF1/oL+r1NpZ4gA7xvG0/zJ8evR7zIKn4vLf7qTNduWFtCrRw==} engines: {node: 20 || >=22} @@ -5440,50 +5437,50 @@ packages: resolution: {integrity: sha512-NYEsLHh8DgG/PRH2+G9BTuUdtf9ViS+vdoQ0YA5OQdGsfN4ztiwtDWNtBl9EKeqNMFnIu8IKZ0cLxEQ5r5KVMw==} engines: {node: ^18.12 || ^20.9 || >=22.0} peerDependencies: - postcss: ^8.4.38 + postcss: 8.5.10 postcss-colormin@7.0.7: resolution: {integrity: sha512-sBQ628lSj3VQpDquQel8Pen5mmjFPsO4pH9lDLaHB1AVkMRHtkl0pRB5DCWznc9upWsxint/kV+AveSj7W1tew==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-convert-values@7.0.9: resolution: {integrity: sha512-l6uATQATZaCa0bckHV+r6dLXfWtUBKXxO3jK+AtxxJJtgMPD+VhhPCCx51I4/5w8U5uHV67g3w7PXj+V3wlMlg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-discard-comments@7.0.6: resolution: {integrity: sha512-Sq+Fzj1Eg5/CPf1ERb0wS1Im5cvE2gDXCE+si4HCn1sf+jpQZxDI4DXEp8t77B/ImzDceWE2ebJQFXdqZ6GRJw==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-discard-duplicates@7.0.2: resolution: {integrity: sha512-eTonaQvPZ/3i1ASDHOKkYwAybiM45zFIc7KXils4mQmHLqIswXD9XNOKEVxtTFnsmwYzF66u4LMgSr0abDlh5w==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-discard-empty@7.0.1: resolution: {integrity: sha512-cFrJKZvcg/uxB6Ijr4l6qmn3pXQBna9zyrPC+sK0zjbkDUZew+6xDltSF7OeB7rAtzaaMVYSdbod+sZOCWnMOg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-discard-overridden@7.0.1: resolution: {integrity: sha512-7c3MMjjSZ/qYrx3uc1940GSOzN1Iqjtlqe8uoSg+qdVPYyRb0TILSqqmtlSFuE4mTDECwsm397Ya7iXGzfF7lg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-load-config@6.0.1: resolution: {integrity: sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==} engines: {node: '>= 18'} peerDependencies: jiti: '>=1.21.0' - postcss: '>=8.0.9' + postcss: 8.5.10 tsx: ^4.8.1 yaml: 2.8.3 peerDependenciesMeta: @@ -5500,109 +5497,109 @@ packages: resolution: {integrity: sha512-Kpu5v4Ys6QI59FxmxtNB/iHUVDn9Y9sYw66D6+SZoIk4QTz1prC4aYkhIESu+ieG1iylod1f8MILMs1Em3mmIw==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-merge-rules@7.0.8: resolution: {integrity: sha512-BOR1iAM8jnr7zoQSlpeBmCsWV5Uudi/+5j7k05D0O/WP3+OFMPD86c1j/20xiuRtyt45bhxw/7hnhZNhW2mNFA==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-minify-font-values@7.0.1: resolution: {integrity: sha512-2m1uiuJeTplll+tq4ENOQSzB8LRnSUChBv7oSyFLsJRtUgAAJGP6LLz0/8lkinTgxrmJSPOEhgY1bMXOQ4ZXhQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-minify-gradients@7.0.2: resolution: {integrity: sha512-fVY3AB8Um7SJR5usHqTY2Ngf9qh8IRN+FFzrBP0ONJy6yYXsP7xyjK2BvSAIrpgs1cST+H91V0TXi3diHLYJtw==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-minify-params@7.0.6: resolution: {integrity: sha512-YOn02gC68JijlaXVuKvFSCvQOhTpblkcfDre2hb/Aaa58r2BIaK4AtE/cyZf2wV7YKAG+UlP9DT+By0ry1E4VQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-minify-selectors@7.0.6: resolution: {integrity: sha512-lIbC0jy3AAwDxEgciZlBullDiMBeBCT+fz5G8RcA9MWqh/hfUkpOI3vNDUNEZHgokaoiv0juB9Y8fGcON7rU/A==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-charset@7.0.1: resolution: {integrity: sha512-sn413ofhSQHlZFae//m9FTOfkmiZ+YQXsbosqOWRiVQncU2BA3daX3n0VF3cG6rGLSFVc5Di/yns0dFfh8NFgQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-display-values@7.0.1: resolution: {integrity: sha512-E5nnB26XjSYz/mGITm6JgiDpAbVuAkzXwLzRZtts19jHDUBFxZ0BkXAehy0uimrOjYJbocby4FVswA/5noOxrQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-positions@7.0.1: resolution: {integrity: sha512-pB/SzrIP2l50ZIYu+yQZyMNmnAcwyYb9R1fVWPRxm4zcUFCY2ign7rcntGFuMXDdd9L2pPNUgoODDk91PzRZuQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-repeat-style@7.0.1: resolution: {integrity: sha512-NsSQJ8zj8TIDiF0ig44Byo3Jk9e4gNt9x2VIlJudnQQ5DhWAHJPF4Tr1ITwyHio2BUi/I6Iv0HRO7beHYOloYQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-string@7.0.1: resolution: {integrity: sha512-QByrI7hAhsoze992kpbMlJSbZ8FuCEc1OT9EFbZ6HldXNpsdpZr+YXC5di3UEv0+jeZlHbZcoCADgb7a+lPmmQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-timing-functions@7.0.1: resolution: {integrity: sha512-bHifyuuSNdKKsnNJ0s8fmfLMlvsQwYVxIoUBnowIVl2ZAdrkYQNGVB4RxjfpvkMjipqvbz0u7feBZybkl/6NJg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-unicode@7.0.6: resolution: {integrity: sha512-z6bwTV84YW6ZvvNoaNLuzRW4/uWxDKYI1iIDrzk6D2YTL7hICApy+Q1LP6vBEsljX8FM7YSuV9qI79XESd4ddQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-url@7.0.1: resolution: {integrity: sha512-sUcD2cWtyK1AOL/82Fwy1aIVm/wwj5SdZkgZ3QiUzSzQQofrbq15jWJ3BA7Z+yVRwamCjJgZJN0I9IS7c6tgeQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-normalize-whitespace@7.0.1: resolution: {integrity: sha512-vsbgFHMFQrJBJKrUFJNZ2pgBeBkC2IvvoHjz1to0/0Xk7sII24T0qFOiJzG6Fu3zJoq/0yI4rKWi7WhApW+EFA==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-ordered-values@7.0.2: resolution: {integrity: sha512-AMJjt1ECBffF7CEON/Y0rekRLS6KsePU6PRP08UqYW4UGFRnTXNrByUzYK1h8AC7UWTZdQ9O3Oq9kFIhm0SFEw==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-reduce-initial@7.0.6: resolution: {integrity: sha512-G6ZyK68AmrPdMB6wyeA37ejnnRG2S8xinJrZJnOv+IaRKf6koPAVbQsiC7MfkmXaGmF1UO+QCijb27wfpxuRNg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-reduce-transforms@7.0.1: resolution: {integrity: sha512-MhyEbfrm+Mlp/36hvZ9mT9DaO7dbncU0CvWI8V93LRkY6IYlu38OPg3FObnuKTUxJ4qA8HpurdQOo5CyqqO76g==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-selector-parser@7.1.1: resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==} @@ -5612,23 +5609,19 @@ packages: resolution: {integrity: sha512-zU9H9oEDrUFKa0JB7w+IYL7Qs9ey1mZyjhbf0KLxwJDdDRtoPvCmaEfknzqfHj44QS9VD6c5sJnBAVYTLRg/Sg==} engines: {node: ^18.12.0 || ^20.9.0 || >= 18} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-unique-selectors@7.0.5: resolution: {integrity: sha512-3QoYmEt4qg/rUWDn6Tc8+ZVPmbp4G1hXDtCNWDx0st8SjtCbRcxRXDDM1QrEiXGG3A45zscSJFb4QH90LViyxg==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 postcss-value-parser@4.2.0: resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==} - postcss@8.5.8: - resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==} - engines: {node: ^10 || ^12 || >=14} - - postcss@8.5.9: - resolution: {integrity: sha512-7a70Nsot+EMX9fFU3064K/kdHWZqGVY+BADLyXc8Dfv+mTLLVl6JzJpPaCZ2kQL9gIJvKXSLMHhqdRRjwQeFtw==} + postcss@8.5.10: + resolution: {integrity: sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==} engines: {node: ^10 || ^12 || >=14} powershell-utils@0.1.0: @@ -6196,7 +6189,7 @@ packages: resolution: {integrity: sha512-I3f053GBLIiS5Fg6OMFhq/c+yW+5Hc2+1fgq7gElDMMSqwlRb3tBf2ef6ucLStYRpId4q//bQO1FjcyNyy4yDQ==} engines: {node: ^18.12.0 || ^20.9.0 || >=22.0} peerDependencies: - postcss: ^8.4.32 + postcss: 8.5.10 sucrase@3.35.1: resolution: {integrity: sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==} @@ -6350,7 +6343,7 @@ packages: peerDependencies: '@microsoft/api-extractor': ^7.36.0 '@swc/core': ^1 - postcss: ^8.4.12 + postcss: 8.5.10 typescript: '>=4.5.0' peerDependenciesMeta: '@microsoft/api-extractor': @@ -8510,9 +8503,9 @@ snapshots: '@rollup/plugin-replace': 6.0.3(rollup@4.60.1) '@vitejs/plugin-vue': 6.0.5(vite@7.3.2(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.30(typescript@6.0.2)) '@vitejs/plugin-vue-jsx': 5.1.5(vite@7.3.2(@types/node@25.5.0)(jiti@2.6.1)(lightningcss@1.32.0)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.3))(vue@3.5.30(typescript@6.0.2)) - autoprefixer: 10.4.27(postcss@8.5.9) + autoprefixer: 10.4.27(postcss@8.5.10) consola: 3.4.2 - cssnano: 7.1.4(postcss@8.5.9) + cssnano: 7.1.4(postcss@8.5.10) defu: 6.1.7 esbuild: 0.27.7 escape-string-regexp: 5.0.0 @@ -8526,7 +8519,7 @@ snapshots: nuxt: 4.3.1(@emnapi/core@1.9.2)(@emnapi/runtime@1.9.2)(@parcel/watcher@2.5.6)(@types/node@25.5.0)(@vue/compiler-sfc@3.5.32)(cac@6.7.14)(db0@0.3.4)(eslint@9.39.4(jiti@2.6.1))(ioredis@5.10.1)(lightningcss@1.32.0)(magicast@0.5.2)(optionator@0.9.4)(rolldown@1.0.0-rc.15)(rollup@4.60.1)(srvx@0.11.15)(terser@5.46.0)(tsx@4.21.0)(typescript@6.0.2)(vite@8.0.8(@types/node@25.5.0)(esbuild@0.27.7)(jiti@2.6.1)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.3))(yaml@2.8.3) pathe: 2.0.3 pkg-types: 2.3.0 - postcss: 8.5.9 + postcss: 8.5.10 rollup-plugin-visualizer: 6.0.11(rolldown@1.0.0-rc.15)(rollup@4.60.1) seroval: 1.5.2 std-env: 3.10.0 @@ -9729,7 +9722,7 @@ snapshots: '@vue/shared': 3.5.30 estree-walker: 2.0.2 magic-string: 0.30.21 - postcss: 8.5.9 + postcss: 8.5.10 source-map-js: 1.2.1 optional: true @@ -9742,7 +9735,7 @@ snapshots: '@vue/shared': 3.5.32 estree-walker: 2.0.2 magic-string: 0.30.21 - postcss: 8.5.9 + postcss: 8.5.10 source-map-js: 1.2.1 optional: true @@ -9986,13 +9979,13 @@ snapshots: async@3.2.6: optional: true - autoprefixer@10.4.27(postcss@8.5.9): + autoprefixer@10.4.27(postcss@8.5.10): dependencies: browserslist: 4.28.2 caniuse-lite: 1.0.30001787 fraction.js: 5.3.4 picocolors: 1.1.1 - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true @@ -10343,9 +10336,9 @@ snapshots: srvx: 0.11.15 optional: true - css-declaration-sorter@7.4.0(postcss@8.5.9): + css-declaration-sorter@7.4.0(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 optional: true css-select@5.2.2: @@ -10376,51 +10369,51 @@ snapshots: cssesc@3.0.0: optional: true - cssnano-preset-default@7.0.12(postcss@8.5.9): + cssnano-preset-default@7.0.12(postcss@8.5.10): dependencies: browserslist: 4.28.2 - css-declaration-sorter: 7.4.0(postcss@8.5.9) - cssnano-utils: 5.0.1(postcss@8.5.9) - postcss: 8.5.9 - postcss-calc: 10.1.1(postcss@8.5.9) - postcss-colormin: 7.0.7(postcss@8.5.9) - postcss-convert-values: 7.0.9(postcss@8.5.9) - postcss-discard-comments: 7.0.6(postcss@8.5.9) - postcss-discard-duplicates: 7.0.2(postcss@8.5.9) - postcss-discard-empty: 7.0.1(postcss@8.5.9) - postcss-discard-overridden: 7.0.1(postcss@8.5.9) - postcss-merge-longhand: 7.0.5(postcss@8.5.9) - postcss-merge-rules: 7.0.8(postcss@8.5.9) - postcss-minify-font-values: 7.0.1(postcss@8.5.9) - postcss-minify-gradients: 7.0.2(postcss@8.5.9) - postcss-minify-params: 7.0.6(postcss@8.5.9) - postcss-minify-selectors: 7.0.6(postcss@8.5.9) - postcss-normalize-charset: 7.0.1(postcss@8.5.9) - postcss-normalize-display-values: 7.0.1(postcss@8.5.9) - postcss-normalize-positions: 7.0.1(postcss@8.5.9) - postcss-normalize-repeat-style: 7.0.1(postcss@8.5.9) - postcss-normalize-string: 7.0.1(postcss@8.5.9) - postcss-normalize-timing-functions: 7.0.1(postcss@8.5.9) - postcss-normalize-unicode: 7.0.6(postcss@8.5.9) - postcss-normalize-url: 7.0.1(postcss@8.5.9) - postcss-normalize-whitespace: 7.0.1(postcss@8.5.9) - postcss-ordered-values: 7.0.2(postcss@8.5.9) - postcss-reduce-initial: 7.0.6(postcss@8.5.9) - postcss-reduce-transforms: 7.0.1(postcss@8.5.9) - postcss-svgo: 7.1.1(postcss@8.5.9) - postcss-unique-selectors: 7.0.5(postcss@8.5.9) - optional: true - - cssnano-utils@5.0.1(postcss@8.5.9): - dependencies: - postcss: 8.5.9 - optional: true - - cssnano@7.1.4(postcss@8.5.9): - dependencies: - cssnano-preset-default: 7.0.12(postcss@8.5.9) + css-declaration-sorter: 7.4.0(postcss@8.5.10) + cssnano-utils: 5.0.1(postcss@8.5.10) + postcss: 8.5.10 + postcss-calc: 10.1.1(postcss@8.5.10) + postcss-colormin: 7.0.7(postcss@8.5.10) + postcss-convert-values: 7.0.9(postcss@8.5.10) + postcss-discard-comments: 7.0.6(postcss@8.5.10) + postcss-discard-duplicates: 7.0.2(postcss@8.5.10) + postcss-discard-empty: 7.0.1(postcss@8.5.10) + postcss-discard-overridden: 7.0.1(postcss@8.5.10) + postcss-merge-longhand: 7.0.5(postcss@8.5.10) + postcss-merge-rules: 7.0.8(postcss@8.5.10) + postcss-minify-font-values: 7.0.1(postcss@8.5.10) + postcss-minify-gradients: 7.0.2(postcss@8.5.10) + postcss-minify-params: 7.0.6(postcss@8.5.10) + postcss-minify-selectors: 7.0.6(postcss@8.5.10) + postcss-normalize-charset: 7.0.1(postcss@8.5.10) + postcss-normalize-display-values: 7.0.1(postcss@8.5.10) + postcss-normalize-positions: 7.0.1(postcss@8.5.10) + postcss-normalize-repeat-style: 7.0.1(postcss@8.5.10) + postcss-normalize-string: 7.0.1(postcss@8.5.10) + postcss-normalize-timing-functions: 7.0.1(postcss@8.5.10) + postcss-normalize-unicode: 7.0.6(postcss@8.5.10) + postcss-normalize-url: 7.0.1(postcss@8.5.10) + postcss-normalize-whitespace: 7.0.1(postcss@8.5.10) + postcss-ordered-values: 7.0.2(postcss@8.5.10) + postcss-reduce-initial: 7.0.6(postcss@8.5.10) + postcss-reduce-transforms: 7.0.1(postcss@8.5.10) + postcss-svgo: 7.1.1(postcss@8.5.10) + postcss-unique-selectors: 7.0.5(postcss@8.5.10) + optional: true + + cssnano-utils@5.0.1(postcss@8.5.10): + dependencies: + postcss: 8.5.10 + optional: true + + cssnano@7.1.4(postcss@8.5.10): + dependencies: + cssnano-preset-default: 7.0.12(postcss@8.5.10) lilconfig: 3.1.3 - postcss: 8.5.9 + postcss: 8.5.10 optional: true csso@5.0.5: @@ -11769,9 +11762,6 @@ snapshots: lru-cache@11.2.7: {} - lru-cache@11.3.3: - optional: true - lru-cache@11.3.5: {} lru-cache@5.1.1: @@ -12969,175 +12959,175 @@ snapshots: pathe: 2.0.3 optional: true - postcss-calc@10.1.1(postcss@8.5.9): + postcss-calc@10.1.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-selector-parser: 7.1.1 postcss-value-parser: 4.2.0 optional: true - postcss-colormin@7.0.7(postcss@8.5.9): + postcss-colormin@7.0.7(postcss@8.5.10): dependencies: '@colordx/core': 5.0.3 browserslist: 4.28.2 caniuse-api: 3.0.0 - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-convert-values@7.0.9(postcss@8.5.9): + postcss-convert-values@7.0.9(postcss@8.5.10): dependencies: browserslist: 4.28.2 - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-discard-comments@7.0.6(postcss@8.5.9): + postcss-discard-comments@7.0.6(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-selector-parser: 7.1.1 optional: true - postcss-discard-duplicates@7.0.2(postcss@8.5.9): + postcss-discard-duplicates@7.0.2(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 optional: true - postcss-discard-empty@7.0.1(postcss@8.5.9): + postcss-discard-empty@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 optional: true - postcss-discard-overridden@7.0.1(postcss@8.5.9): + postcss-discard-overridden@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 optional: true - postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(yaml@2.8.3): + postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3): dependencies: lilconfig: 3.1.3 optionalDependencies: jiti: 2.6.1 - postcss: 8.5.9 + postcss: 8.5.10 tsx: 4.21.0 yaml: 2.8.3 - postcss-merge-longhand@7.0.5(postcss@8.5.9): + postcss-merge-longhand@7.0.5(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 - stylehacks: 7.0.8(postcss@8.5.9) + stylehacks: 7.0.8(postcss@8.5.10) optional: true - postcss-merge-rules@7.0.8(postcss@8.5.9): + postcss-merge-rules@7.0.8(postcss@8.5.10): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 - cssnano-utils: 5.0.1(postcss@8.5.9) - postcss: 8.5.9 + cssnano-utils: 5.0.1(postcss@8.5.10) + postcss: 8.5.10 postcss-selector-parser: 7.1.1 optional: true - postcss-minify-font-values@7.0.1(postcss@8.5.9): + postcss-minify-font-values@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-minify-gradients@7.0.2(postcss@8.5.9): + postcss-minify-gradients@7.0.2(postcss@8.5.10): dependencies: '@colordx/core': 5.0.3 - cssnano-utils: 5.0.1(postcss@8.5.9) - postcss: 8.5.9 + cssnano-utils: 5.0.1(postcss@8.5.10) + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-minify-params@7.0.6(postcss@8.5.9): + postcss-minify-params@7.0.6(postcss@8.5.10): dependencies: browserslist: 4.28.2 - cssnano-utils: 5.0.1(postcss@8.5.9) - postcss: 8.5.9 + cssnano-utils: 5.0.1(postcss@8.5.10) + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-minify-selectors@7.0.6(postcss@8.5.9): + postcss-minify-selectors@7.0.6(postcss@8.5.10): dependencies: cssesc: 3.0.0 - postcss: 8.5.9 + postcss: 8.5.10 postcss-selector-parser: 7.1.1 optional: true - postcss-normalize-charset@7.0.1(postcss@8.5.9): + postcss-normalize-charset@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 optional: true - postcss-normalize-display-values@7.0.1(postcss@8.5.9): + postcss-normalize-display-values@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-positions@7.0.1(postcss@8.5.9): + postcss-normalize-positions@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-repeat-style@7.0.1(postcss@8.5.9): + postcss-normalize-repeat-style@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-string@7.0.1(postcss@8.5.9): + postcss-normalize-string@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-timing-functions@7.0.1(postcss@8.5.9): + postcss-normalize-timing-functions@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-unicode@7.0.6(postcss@8.5.9): + postcss-normalize-unicode@7.0.6(postcss@8.5.10): dependencies: browserslist: 4.28.2 - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-url@7.0.1(postcss@8.5.9): + postcss-normalize-url@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-normalize-whitespace@7.0.1(postcss@8.5.9): + postcss-normalize-whitespace@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-ordered-values@7.0.2(postcss@8.5.9): + postcss-ordered-values@7.0.2(postcss@8.5.10): dependencies: - cssnano-utils: 5.0.1(postcss@8.5.9) - postcss: 8.5.9 + cssnano-utils: 5.0.1(postcss@8.5.10) + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true - postcss-reduce-initial@7.0.6(postcss@8.5.9): + postcss-reduce-initial@7.0.6(postcss@8.5.10): dependencies: browserslist: 4.28.2 caniuse-api: 3.0.0 - postcss: 8.5.9 + postcss: 8.5.10 optional: true - postcss-reduce-transforms@7.0.1(postcss@8.5.9): + postcss-reduce-transforms@7.0.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 optional: true @@ -13147,29 +13137,23 @@ snapshots: util-deprecate: 1.0.2 optional: true - postcss-svgo@7.1.1(postcss@8.5.9): + postcss-svgo@7.1.1(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-value-parser: 4.2.0 svgo: 4.0.1 optional: true - postcss-unique-selectors@7.0.5(postcss@8.5.9): + postcss-unique-selectors@7.0.5(postcss@8.5.10): dependencies: - postcss: 8.5.9 + postcss: 8.5.10 postcss-selector-parser: 7.1.1 optional: true postcss-value-parser@4.2.0: optional: true - postcss@8.5.8: - dependencies: - nanoid: 3.3.11 - picocolors: 1.1.1 - source-map-js: 1.2.1 - - postcss@8.5.9: + postcss@8.5.10: dependencies: nanoid: 3.3.11 picocolors: 1.1.1 @@ -13979,10 +13963,10 @@ snapshots: dependencies: inline-style-parser: 0.2.7 - stylehacks@7.0.8(postcss@8.5.9): + stylehacks@7.0.8(postcss@8.5.10): dependencies: browserslist: 4.28.2 - postcss: 8.5.9 + postcss: 8.5.10 postcss-selector-parser: 7.1.1 optional: true @@ -14151,7 +14135,7 @@ snapshots: tslib@2.8.1: optional: true - tsup@8.5.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3): + tsup@8.5.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(typescript@6.0.2)(yaml@2.8.3): dependencies: bundle-require: 5.1.0(esbuild@0.27.3) cac: 6.7.14 @@ -14162,7 +14146,7 @@ snapshots: fix-dts-default-cjs-exports: 1.0.1 joycon: 3.1.1 picocolors: 1.1.1 - postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.9)(tsx@4.21.0)(yaml@2.8.3) + postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.10)(tsx@4.21.0)(yaml@2.8.3) resolve-from: 5.0.0 rollup: 4.59.0 source-map: 0.7.6 @@ -14171,7 +14155,7 @@ snapshots: tinyglobby: 0.2.15 tree-kill: 1.2.2 optionalDependencies: - postcss: 8.5.9 + postcss: 8.5.10 typescript: 6.0.2 transitivePeerDependencies: - jiti @@ -14387,7 +14371,7 @@ snapshots: chokidar: 5.0.0 destr: 2.0.5 h3: 1.15.11 - lru-cache: 11.3.3 + lru-cache: 11.3.5 node-fetch-native: 1.6.7 ofetch: 1.5.1 ufo: 1.6.3 @@ -14544,7 +14528,7 @@ snapshots: esbuild: 0.25.12 fdir: 6.5.0(picomatch@4.0.4) picomatch: 4.0.4 - postcss: 8.5.9 + postcss: 8.5.10 rollup: 4.60.1 tinyglobby: 0.2.16 optionalDependencies: @@ -14561,7 +14545,7 @@ snapshots: esbuild: 0.27.7 fdir: 6.5.0(picomatch@4.0.4) picomatch: 4.0.4 - postcss: 8.5.9 + postcss: 8.5.10 rollup: 4.60.1 tinyglobby: 0.2.16 optionalDependencies: @@ -14578,7 +14562,7 @@ snapshots: dependencies: lightningcss: 1.32.0 picomatch: 4.0.4 - postcss: 8.5.8 + postcss: 8.5.10 rolldown: 1.0.0-rc.15 tinyglobby: 0.2.15 optionalDependencies: @@ -14594,7 +14578,7 @@ snapshots: dependencies: lightningcss: 1.32.0 picomatch: 4.0.4 - postcss: 8.5.8 + postcss: 8.5.10 rolldown: 1.0.0-rc.15 tinyglobby: 0.2.15 optionalDependencies: