Bump postcss from 8.2.7 to 8.3.6

[dependabot]

Bumps postcss from 8.2.7 to 8.3.6.

Release notes

Sourced from postcss's releases.

8.3.6

• Fixed column in missed semicolon error (by @​Gusted).

8.3.5

• Fixed broken AST detection.

8.3.4

• Fixed broken AST detection.

8.3.3

• Fixed broken AST on postcss dependency duplication in custom parsers.

8.3.2

• Update changelog.

8.3.1

• Fixed false positives PostCSS does nothing warning on syntax option.

8.3 “Duke Murmur”

PostCSS 8.3 improved source map parsing performance, added Node#assign() shortcut, and experimental Document node to AST.

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations in PostCSS & Autoprefixer Open Collective.

Source Map Performance

Because PostCSS needs synchronous API, we can’t move from the old `source-map 0.6 to 0.7 (many other open-source projects too).

@​7rulnik forked source-map 0.6 to source-map-js and back-ported performance improvements from 0.7. In 8.3 we switched from source-map to this source-map-js fork.

You map see 4x performance improvements in parsing map from processing step before PostCSS (for instance, Sass).

Document Nodes

Thanks to @​gucong3000, PostCSS already parse CSS from HTML and JS files (CSS-in-JS templates and objects).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.3.6

• Fixed column in missed semicolon error (by @​Gusted).

8.3.5

• Fixed broken AST detection.

8.3.4

• Fixed broken AST detection.

8.3.3

• Fixed broken AST on postcss dependency duplication in custom parsers.

8.3.2

• Update changelog.

8.3.1

• Fixed false positives PostCSS does nothing warning on syntax option.

8.3 “Duke Murmur”

• Added Node#assign() shortcut (by Jonathan Neal).
• Added experimental Document node to AST (by Aleks Hudochenkov).
• Moved to faster fork of source-map (by Valentin Semirulnik).

8.2.15

• Fixed list type definitions (by @​n19htz).

8.2.14

• Removed source-map from client-side bundle (by Barak Igal).

8.2.13

• Fixed ReDoS vulnerabilities in source map parsing (by Yeting Li).

8.2.12

• Fixed package.json exports.

8.2.11

• Fixed DEP0148 warning in Node.js 16.
• Fixed docs (by @​semiromid).

8.2.10

• Fixed ReDoS vulnerabilities in source map parsing.
• Fixed webpack 5 support (by Barak Igal).
• Fixed docs (by Roeland Moors).

8.2.9

• Exported NodeErrorOptions type (by Rouven Weßling).

8.2.8

• Fixed browser builds in webpack 4 (by Matt Jones).

Commits

• 91c6d66 Release 8.3.6 version
• d3e7aa9 Update dependencies
• c72594b Merge pull request #1618 from Gusted/fix-missed-semicolon
• 422b5bf Return correct column on missed semicolon
• 1545d8a Merge pull request #1610 from hex-ci/patch-1
• 476141a Added postcss-unit-processor plugin to the list
• 56dcf91 Added postcss-unit-processor plugin to the list
• 7e7b0e9 Merge pull request #1605 from megos/fix-duplicate-changelog
• 08ea82e Fix duplicate changelog
• e3781e9 Release 8.3.5 version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #668 (7e71bb0) into next (641af76) will increase coverage by 2.82%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             next     #668      +/-   ##
==========================================
+ Coverage   80.16%   82.99%   +2.82%     
==========================================
  Files         148       73      -75     
  Lines        2012      788    -1224     
  Branches      313      186     -127     
==========================================
- Hits         1613      654     -959     
+ Misses        315      113     -202     
+ Partials       84       21      -63     

Impacted Files	Coverage Δ
packages/base/src/resolvers/SEO.ts
packages/base/src/resolvers/db/fauna/Client.ts
packages/base/src/queries/Config.ts
packages/auth/server/resolvers/db/fauna/User.ts
packages/auth/server/resolvers/db/faker/User.ts
...ackages/auth/server/mail/PasswordResetConfirmed.ts
packages/auth/server/mail/PasswordResetRequest.ts
...kages/dershop/server/resolvers/db/fauna/Product.ts
packages/dershop/server/resolvers/Config.ts
...ackages/dershop/server/resolvers/db/fauna/Order.ts
... and 65 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 641af76...7e71bb0. Read the comment docs.