chore(deps-dev): bump postcss from 8.5.8 to 8.5.10

[dependabot]

Bumps postcss from 8.5.8 to 8.5.10.

Release notes

Sourced from postcss's releases.

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

• Speed up source map encoding paring in case of the error.

Changelog

Sourced from postcss's changelog.

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

• Speed up source map encoding paring in case of the error.

Commits

• 33b9790 Release 8.5.10 version
• 536c79e Escape </style> in CSS output (#2074)
• afa96b2 Update dependencies (#2073)
• effe88b Typo (#2072)
• 3ee79a2 Thread model (#2071)
• 2e0683d Create incident response docs (#2070)
• fe88ac2 Release 8.5.9 version
• c551632 Avoid RegExp when we can use simple JS
• 89a6b74 Move SECURITY.txt for docs folder to keep GitHub page cleaner
• 6ceb8a4 Create SECURITY.md
• Additional commits viewable in compare view

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

This is a Dependabot security bump of postcss from 8.5.8 → 8.5.10. The 8.5.10 release patches an XSS vulnerability via unescaped </style> in non-bundler cases. Changes are confined to packages/dashboard/package.json (pinned version updated) and package-lock.json (resolved version updated). No application code was modified.

Files Reviewed (2 files)

• packages/dashboard/package.json — version pin updated, no issues
• package-lock.json — resolved/integrity hashes updated to match 8.5.10, no issues

Fix these issues in Kilo Cloud

---

_{Reviewed by claude-4.6-sonnet-20260217 · 81,307 tokens}