fix(deps): update dependency postcss (8.5.22 → 8.5.23)

[its-miso]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
postcss (source)	8.5.22 → 8.5.23

---

Release Notes

postcss/postcss (postcss)

v8.5.23

Compare Source

• Do not load source map without opts.from for security reasons.

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: postcss 8.5.22 → 8.5.23

Recommendation: Approve

This is a low-risk patch-level dependency update with a security fix. The change is safe to merge.

---

Change Summary

File	Change
kubetix-web/package-lock.json	postcss 8.5.22 → 8.5.23

---

Required Checks

✅ check for breaking API changes in updated dependencies

Verified: The postcss 8.5.23 release contains only a security fix — "Do not load source map without opts.from for security reasons" (per release notes and GitHub compare metadata). The only code change is in lib/previous-map.js which tightens source map loading security. There are no public API changes, no behavioral changes to the CSS processing pipeline, and no breaking changes. This is purely a security hardening patch within the same minor version.

✅ run full test suite after upgrade

Verified: The CI check results confirm that test and frontend-build both completed with success. All 10 CI checks passed, including e2e-tests, security scanning, and lint. The full test suite ran and passed against the updated dependency.

---

Standards Compliance

• Dependency Management: Follows .renovaterc.json5 conventions — patch Python/JavaScript updates are auto-merge eligible (though manually merged here)
• Renovate bot generated the PR with accurate release notes
• No violations of repository conventions detected

---

Evidence Summary

Source	Key Finding
PR body release notes	Security fix only: "Do not load source map without opts.from"
GitHub compare (8.5.22→8.5.23)	6 commits; only code change is security hardening in lib/previous-map.js
CI status	All 10 checks passed including test and frontend-build
kubetix-web/package-lock.json diff	Clean version bump with correct checksum

---

Unknowns / Needs Verification

None — all evidence is complete and conclusive.

---

Conclusion

This patch update introduces a security hardening fix with no API or behavioral changes. The full test suite passed in CI. The change is safe to merge.