chore(deps-dev): bump postcss from 7.0.36 to 8.3.7 in /frontend

[dependabot]

Bumps postcss from 7.0.36 to 8.3.7.

Release notes

Sourced from postcss's releases.

8.3.7

• Replaced colorette to nanocolors.
• Added bug field to package.json (by @​coliff).
• Improved docs (by @​camelpunch and @​paulshryock).

8.3.6

• Fixed column in missed semicolon error (by @​Gusted).

8.3.5

• Fixed broken AST detection.

8.3.4

• Fixed broken AST detection.

8.3.3

• Fixed broken AST on postcss dependency duplication in custom parsers.

8.3.2

• Update changelog.

8.3.1

• Fixed false positives PostCSS does nothing warning on syntax option.

8.3 “Duke Murmur”

PostCSS 8.3 improved source map parsing performance, added Node#assign() shortcut, and experimental Document node to AST.

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations in PostCSS & Autoprefixer Open Collective.

Source Map Performance

Because PostCSS needs synchronous API, we can’t move from the old `source-map 0.6 to 0.7 (many other open-source projects too).

@​7rulnik forked source-map 0.6 to source-map-js and back-ported performance improvements from 0.7. In 8.3 we switched from source-map to this source-map-js fork.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.3.7

• Replaced colorette to nanocolors.
• Added bug field to package.json (by Christian Oliff).
• Improved docs (by Andrew Bruce and Paul Shryock).

8.3.6

• Fixed column in missed semicolon error (by @​Gusted).

8.3.5

• Fixed broken AST detection.

8.3.4

• Fixed broken AST detection.

8.3.3

• Fixed broken AST on postcss dependency duplication in custom parsers.

8.3.2

• Update changelog.

8.3.1

• Fixed false positives PostCSS does nothing warning on syntax option.

8.3 “Duke Murmur”

• Added Node#assign() shortcut (by Jonathan Neal).
• Added experimental Document node to AST (by Aleks Hudochenkov).
• Moved to faster fork of source-map (by Valentin Semirulnik).

8.2.15

• Fixed list type definitions (by @​n19htz).

8.2.14

• Removed source-map from client-side bundle (by Barak Igal).

8.2.13

• Fixed ReDoS vulnerabilities in source map parsing (by Yeting Li).

8.2.12

• Fixed package.json exports.

8.2.11

• Fixed DEP0148 warning in Node.js 16.
• Fixed docs (by @​semiromid).

8.2.10

• Fixed ReDoS vulnerabilities in source map parsing.
• Fixed webpack 5 support (by Barak Igal).
• Fixed docs (by Roeland Moors).

8.2.9

... (truncated)

Commits

• d6a194d Release 8.3.7 version
• acabfd3 Update dependencies
• a482e70 Replace colorette to nanocolors
• b15781c Merge pull request #1634 from postcss/dependabot/npm_and_yarn/nth-check-2.0.1
• 0b74a01 Bump nth-check from 2.0.0 to 2.0.1
• 6a659f3 Merge pull request #1633 from postcss/dependabot/npm_and_yarn/tmpl-1.0.5
• b7da9ea Bump tmpl from 1.0.4 to 1.0.5
• 75966a9 Merge pull request #1626 from camelpunch/patch-1
• 2e27259 Community fixes error in English :)
• 3a590ae Update dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Pages

Latest commit:	569885f
Status:	⚡️  Build in progress...

View logs

[kobim]

@dependabot ignore this major version
waiting on facebook/create-react-app#11121
and create-react-app 5.0

[dependabot]

OK, I won't notify you about version 8.x.x again, unless you re-open this PR or update to a 8.x.x release yourself.