fix: upgrade postcss 8.5.20 → 8.5.23 (GHSA-6g55-p6wh-862q)

Arbitrary .map file read via untrusted sourceMappingURL when from is unset. Added npm overrides to force postcss@8.5.23 across all transitive deps (tsup, vitest→vite).
2026-08-04 09:12:20 +03:00
parent 56480443b4
commit ea40ce1e93
2 changed files with 6 additions and 3 deletions
@@ -35,5 +35,8 @@
    "typescript": "5.9.3",
    "typescript-eslint": "8.45.0",
    "vitest": "^4.1.10"
+  },
+  "overrides": {
+    "postcss": "8.5.23"
  }
 }