fix(deps): update dependency postcss (8.5.15 → 8.5.16)

[its-miso]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
postcss (source)	8.5.15 → 8.5.16

---

Release Notes

postcss/postcss (postcss)

v8.5.16

Compare Source

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)

PR Review: postcss 8.5.15 → 8.5.16 Dependency Upgrade

Summary

This is a low-risk patch-level dependency upgrade for postcss in the KubeTix web frontend. The change affects only kubetix-web/package-lock.json and is a single-file update.

Required Checks — Addressed

1. check for breaking API changes in updated dependencies

• ✅ VERIFIED: The postcss 8.5.16 release (published 2026-06-28) is a pure bug-fix patch with no API changes. All five changes are internal bug fixes:
  • Fixed Input#origin() position
  • Fixed raws after rehydrating a JSON AST
  • Fixed putting parent-less node in nodes of new node
  • Fixed computing offset in positionBy()
  • Fixed rangeBy() on index: 0
• No public API surface changes. No breaking changes by SemVer definition (patch version bump).
• This is a devDependency used by Tailwind CSS v4 via @tailwindcss/postcss; it does not affect the production runtime API.

2. run full test suite after upgrade

• ✅ VERIFIED: CI ran and passed for this commit (5003a41) on all checks:
  • test → success
  • frontend-build → success
  • e2e-tests → success
  • legacy-test → success
  • lint → success
  • security → success
  • helm-check → success
  • build-and-publish → success
  • review → success

Standards Compliance

• Repository AGENTS.md confirms: Python minor/patch and devDependency updates are low-risk and auto-merge eligible.
• No code changes introduced; only lockfile updated by Renovate bot.
• No platform or host-version coupling applies (postcss is a Node.js dev tool, not tied to a specific Node version in this project).

Linked Issue Fit

No linked issue. This is a standalone dependency refresh.

Evidence Provider Findings

No evidence providers configured for this PR.

Tool Harness Findings

Tool budget exhausted. Fetch attempts for GitHub release pages and npm registry encountered 404s or host-not-allowlisted errors, but the GitHub Releases Enrichment block provided the authoritative release body directly.

Unknowns / Needs Verification

None. All checks are satisfied by CI results and release metadata.

Recommendation

Approve. This is a straightforward patch-level postcss update with no breaking changes and all CI checks passing.