Bump postcss@~8.5.10 to address CVE GHSA-qx2v-qp2m-jg93 (#5796)

Co-authored-by: Camille Malonzo <cmalonzo@users.noreply.github.com>

Author: cmalonzo

build-tests/heft-sass-test/package.json

@@ -29,7 +29,7 @@
     "eslint": "~9.37.0",
     "html-webpack-plugin": "~4.5.2",
     "postcss-loader": "~4.1.0",
-    "postcss": "~8.4.6",
+    "postcss": "~8.5.10",
     "react-dom": "~19.2.3",
     "react": "~19.2.3",
     "style-loader": "~2.0.0",

common/changes/@rushstack/heft-sass-plugin/postcss-8.5.10_2026-04-29-15-22.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/heft-sass-plugin",
+      "comment": "Bump postcss@~8.5.10 to address CVE GHSA-qx2v-qp2m-jg93",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/heft-sass-plugin"
+}

common/changes/@rushstack/heft-web-rig/postcss-8.5.10_2026-04-29-15-22.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/heft-web-rig",
+      "comment": "Bump postcss@~8.5.10 to address CVE GHSA-qx2v-qp2m-jg93",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/heft-web-rig"
+}