From d169c7a11cea3db34a9c60c3d174ceb4941cc517 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 11 Aug 2026 06:16:14 +0000
Subject: [PATCH 1/2] Bump postcss from 8.5.21 to 8.5.26

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.21 to 8.5.26.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.21...8.5.26)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 787b484..e583791 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1230,9 +1230,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmmirror.com/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "dev": true,
       "funding": [
         {
@@ -1269,9 +1269,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.21",
-      "resolved": "https://registry.npmmirror.com/postcss/-/postcss-8.5.21.tgz",
-      "integrity": "sha512-v4sDNP3fdNiWMfabO7OwOQdOX8TiQSztKyT1Wj0w+j7LDallJThJRBBBmzVGyYj0crMh7jlV4zepPkiNu9UwDQ==",
+      "version": "8.5.26",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
       "dev": true,
       "funding": [
         {
@@ -1289,7 +1289,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.16",
+        "nanoid": "^3.3.17",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },

From f288042cbfda7fb7ccda4960b174c8f0366161ee Mon Sep 17 00:00:00 2001
From: eRAW Development <eraw@localhost>
Date: Tue, 11 Aug 2026 14:25:16 +0800
Subject: [PATCH 2/2] docs: refresh notices for postcss security update

---
 THIRD_PARTY_NOTICES.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/THIRD_PARTY_NOTICES.md b/THIRD_PARTY_NOTICES.md
index 7577afd..fc8f4a1 100644
--- a/THIRD_PARTY_NOTICES.md
+++ b/THIRD_PARTY_NOTICES.md
@@ -83,10 +83,10 @@ eRAW itself is distributed under GPL-3.0-or-later. Dependency copyrights remain
 | fdir | 6.5.0 | development | MIT |
 | fsevents | 2.3.3 | development | MIT |
 | katex | 0.16.22 | runtime | MIT |
-| nanoid | 3.3.16 | development | MIT |
+| nanoid | 3.3.18 | development | MIT |
 | picocolors | 1.1.1 | development | ISC |
 | picomatch | 4.0.5 | development | MIT |
-| postcss | 8.5.21 | development | MIT |
+| postcss | 8.5.26 | development | MIT |
 | rollup | 4.62.2 | development | MIT |
 | source-map-js | 1.2.1 | development | BSD-3-Clause |
 | tinyglobby | 0.2.17 | development | MIT |