build: update dependency postcss to v8.5.12 (21.2.x) - autoclosed

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
postcss (source)	8.5.6 → 8.5.12

---

• If you want to rebase/retry this PR, check this box

---

Release Notes

postcss/postcss (postcss)

v8.5.12

Compare Source

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

v8.5.11

Compare Source

• Fixed nested brackets parsing performance (by @​offset).

v8.5.10

Compare Source

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

v8.5.9

Compare Source

• Speed up source map encoding paring in case of the error.

v8.5.8

Compare Source

• Fixed Processor#version.

v8.5.7

Compare Source

• Improved source map annotation cleaning performance (by CodeAnt AI).

[gemini-code-assist]

Code Review

This pull request updates the postcss dependency from version 8.5.6 to 8.5.12 across multiple packages and the lockfile to address security vulnerabilities. While the new version has been added, the lockfile still contains references to the vulnerable version 8.5.6; it is recommended to consolidate the dependency tree, perhaps by running pnpm dedupe, to ensure the older version is completely removed.

[gemini-code-assist]

The lockfile still contains an entry for postcss@8.5.6. Since this update addresses security vulnerabilities (such as arbitrary file read and XSS), it is recommended to ensure that all instances of the vulnerable version are removed from the dependency tree. You may want to check for other packages pinning this version or run pnpm dedupe to consolidate on the patched version.