build(deps-dev): bump postcss from 8.2.10 to 8.3.5

[dependabot-preview]

⚠️ Dependabot Preview has been deactivated ⚠️

This pull request was created by Dependabot Preview, and you've upgraded to Dependabot. This means it won't respond to dependabot commands nor will it be automatically closed if a new version is found.

If you close this pull request, Dependabot will re-create it the next time it checks for updates and everything will work as expected.

---

Bumps postcss from 8.2.10 to 8.3.5.

Release notes

Sourced from postcss's releases.

8.3.5

• Fixed broken AST detection.

8.3.4

• Fixed broken AST detection.

8.3.3

• Fixed broken AST on postcss dependency duplication in custom parsers.

8.3.2

• Update changelog.

8.3.1

• Fixed false positives PostCSS does nothing warning on syntax option.

8.3 “Duke Murmur”

PostCSS 8.3 improved source map parsing performance, added Node#assign() shortcut, and experimental Document node to AST.

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations in PostCSS & Autoprefixer Open Collective.

Source Map Performance

Because PostCSS needs synchronous API, we can’t move from the old `source-map 0.6 to 0.7 (many other open-source projects too).

@​7rulnik forked source-map 0.6 to source-map-js and back-ported performance improvements from 0.7. In 8.3 we switched from source-map to this source-map-js fork.

You map see 4x performance improvements in parsing map from processing step before PostCSS (for instance, Sass).

Document Nodes

Thanks to @​gucong3000, PostCSS already parse CSS from HTML and JS files (CSS-in-JS templates and objects).

But his plugin need big updates. @​hudochenkov from stylelint team decided to create new parsers for styles inside CSS-in-JS, HTML, and Markdown.

... (truncated)

Changelog

Sourced from postcss's changelog.

Change Log

This project adheres to Semantic Versioning.

8.3.4

• Fixed broken AST detection.

8.3.3

• Fixed broken AST on postcss dependency duplication in custom parsers.

8.3.2

• Update changelog.

8.3.1

• Fixed false positives PostCSS does nothing warning on syntax option.

8.3 “Duke Murmur”

• Added Node#assign() shortcut (by Jonathan Neal).
• Added experimental Document node to AST (by Aleks Hudochenkov).
• Moved to faster fork of source-map (by Valentin Semirulnik).

8.2.15

• Fixed list type definitions (by @​n19htz).

8.2.14

• Removed source-map from client-side bundle (by Barak Igal).

8.2.13

• Fixed ReDoS vulnerabilities in source map parsing (by Yeting Li).

8.2.12

• Fixed package.json exports.

8.2.11

• Fixed DEP0148 warning in Node.js 16.
• Fixed docs (by @​semiromid).

Commits

• e3781e9 Release 8.3.5 version
• 9c43841 Update dependencies
• 97d1c84 Set my flag after changing prototype
• 871e549 Merge pull request #1603 from navanshu/main
• d200bf0 Update plugins.md
• bdd4edd Update plugins.md
• c7bae29 Release 8.3.4 version
• 8b4a8b1 Fix Node[my] hack
• 7ea0c9b Release 8.3.3 version
• ff6abab Fix Symbol description
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)