chore(deps): bump postcss and nuxt

[dependabot]

Bumps postcss and nuxt. These dependencies needed to be updated together.
Updates postcss from 8.5.3 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).
• Fixed putting parent-less node in nodes of new node (by @​MahinAnowar).
• Fixed computing offset in positionBy() (by @​greymoth-jp).
• Fixed rangeBy() on index: 0 (by @​sarathfrancis90).

8.5.15

• Fixed declaration parsing performance (by @​homanp).

8.5.14

• Fixed custom syntax regression (by @​43081j).

8.5.13

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.26

• Fixed list.split() regression (by @​lazerg).
• Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

• Fixed 8.5.17 visitor regression.
• Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

• Preserve the BOM after the processing (by @​hdimer).

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

8.5.20

• Fixed missing space if AtRule#params is set after (by @​sarathfrancis90).
• Fixed mixing AST error on warnings (by @​MahinAnowar).

8.5.19

• Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

• Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

• Fixed Maximum call stack size exceeded error.
• Fixed Prototype hijacking for postcss.fromJSON().
• Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

• Fixed Input#origin() position (by @​mizdra).
• Fixed raws after rehydrating a JSON AST (by @​sarathfrancis90).

... (truncated)

Commits

• 07b2577 Release 8.5.26 version
• 47de6b9 Update CI
• 1493a83 Fix Rule#selectors losing the empty selector (#2129)
• 180db16 Typo
• 29e9e00 Resolve symlinks before the previous-source-map containment check (#2125)
• 3ba8f84 Update dependencies
• 87e72f6 Update lock file
• caaeeb9 Upgrade nanoid to fix infinite loop on zero size (#2124)
• 3609b6f Explain how to type plugin options
• fbad419 docs: show ESM and TypeScript plugin declaration (#2118)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates nuxt from 2.18.1 to 4.5.2

Release notes

Sourced from nuxt's releases.

v4.5.2

4.5.2 is the next patch release.

👉 Changelog

compare changes

🔥 Performance

• nuxt,kit: Skip rewriting unchanged generated files (#35902)
• kit,nuxt: Use lazy imports to improve parsing speed (#35901)
• vite: Skip html entry probes in bare-import resolver (#35907)
• nuxt: Reuse app and component scans for unchanged structures (#35912)

🩹 Fixes

• vite: Resolve client manifest path from resolved config (#35883)
• nuxt: Use client-side navigation for links inside islands (#35806)
• nuxt: Generate types for route params defined with definePageMeta (#35857)
• nuxt: Serialize island payloads for components with underscores in keys (#35807)
• nitro: Dedupe island renders when prerendering (#35835)
• nuxt: Drop prefetch hints for never-hydrated chunks (#35812)
• vite: Use same asset filenames for worker builds (#35866)
• nitro: Reject non-object island props (#35867)
• nuxt: Support options api in v-for islands transform (#35877)
• nuxt: Improve page meta extraction + performance (#35869)
• nuxt: Set build outputs when restoring vue cache (#35895)
• kit: Honour nested apply and applyToEnvironment in vite wrapper (#35899)
• nuxt: Re-check for preview mode after prerendered page hydration (#35886)
• kit,nuxt,vite: Handle missed chokidar watch events (#35887)
• nuxt: Settle asyncData status when bailing (#35908)
• kit: Clone resolved config with klona rather than klona/full (#35914)
• kit: Honour nested plugins' enforce in vite wrapper (#35916)
• nuxt: Collect build cache once build outputs are final (#35929)
• vite: Resolve vite env api sourcemaps in vite-node (#35758)
• nuxt: Don't warn about missing <NuxtPage> on nav + with slot (#35948)
• kit: Prepend vite environment wrapper plugin when prepend is set (#35942)
• nuxt: Depend on rolldown as a peer to reuse vite's copy (3fda97f60)
• nitro: Define import.meta.test for server code (#35987)
• nuxt: Match route rules against decoded paths (9123ed850)

💅 Refactors

• nuxt: Use vue-component-type-helpers instead of locally maintained helpers (#35840)
• nuxt: Use isReferenceIdentifier in page-meta plugin (#35882)

📖 Documentation

• Sync mcp server page with live tools and providers (#35856)
• Add server components guide and mostly-static site recipe (#35778)
• Minor changes (#33479)
• Add accessible routing guide (#34796)
• Update testing guide to test-utils v4.1.0 (#35873)
• Update .env provider reference from dotenv to c12 (#35911)
• Add note to avoid using defineVitestProject in e2e tests (#35926)
• Update roadmap (f6e6027fe)

📦 Build

• ui-templates: Copy generated templates from resolved output dir (#35921)

... (truncated)

Commits

• e2d3a39 v4.5.2
• 9123ed8 fix(nuxt): match route rules against decoded paths
• 2c38086 chore: bump nuxt rolldown peer dep to match unctx
• 3fda97f fix(nuxt): depend on rolldown as a peer to reuse vite's copy
• b960d36 refactor(nuxt): use isReferenceIdentifier in page-meta plugin (#35882)
• 1f52b61 fix(nuxt): don't warn about missing \<NuxtPage> on nav + with slot (#35948)
• c7604bd fix(nuxt): collect build cache once build outputs are final (#35929)
• ba4fc0a perf(nuxt): reuse app and component scans for unchanged structures (#35912)
• d7f5f07 fix(nuxt): settle asyncData status when bailing (#35908)
• 2ca27f1 perf(kit,nuxt): use lazy imports to improve parsing speed (#35901)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nuxt since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

🚧 Non-security major version bump — auto-merge intentionally skipped. Review and merge manually.