Bump postcss from 8.2.8 to 8.3.6 in /website (#814)
Bump postcss from 8.2.8 to 8.3.6 in /website (#814)

Summary:
Bumps [postcss](https://github.com/postcss/postcss) from 8.2.8 to 8.3.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/postcss/postcss/releases">postcss's releases</a>.</em></p>
<blockquote>
<h2>8.3.6</h2>
<ul>
<li>Fixed column in <code>missed semicolon</code> error (by <a href="https://github.com/Gusted"><code>@​Gusted</code></a>).</li>
</ul>
<h2>8.3.5</h2>
<ul>
<li>Fixed broken AST detection.</li>
</ul>
<h2>8.3.4</h2>
<ul>
<li>Fixed broken AST detection.</li>
</ul>
<h2>8.3.3</h2>
<ul>
<li>Fixed broken AST on <code>postcss</code> dependency duplication in custom parsers.</li>
</ul>
<h2>8.3.2</h2>
<ul>
<li>Update changelog.</li>
</ul>
<h2>8.3.1</h2>
<ul>
<li>Fixed false positives <code>PostCSS does nothing</code> warning on <code>syntax</code> option.</li>
</ul>
<h2>8.3 “Duke Murmur”</h2>

<p>PostCSS 8.3 improved source map parsing performance, added <code>Node#assign()</code> shortcut, and experimental <code>Document</code> node to AST.</p>
<h2>Thanks to Sponsors</h2>
<p>This release was possible thanks to our community.</p>

<p>If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:</p>
<ul>
<li><a href="https://tidelift.com/"><strong>Tidelift</strong></a> with a Spotify-like subscription model supporting all projects from your lock file.</li>
<li>Direct donations in <a href="https://opencollective.com/postcss#section-contributors"><strong>PostCSS &amp; Autoprefixer Open Collective</strong></a>.</li>
</ul>
<h2>Source Map Performance</h2>
<p>Because PostCSS needs synchronous API, we can’t move from the old `source-map 0.6 to 0.7 (many other open-source projects too).</p>
<p><a href="https://github.com/7rulnik"><code>@​7rulnik</code></a> forked <code>source-map</code> 0.6 to <a href="https://www.npmjs.com/package/source-map-js"><code>source-map-js</code></a> and back-ported performance improvements from 0.7. In 8.3 we <a href="https://github-redirect.dependabot.com/postcss/postcss/pull/1515">switched</a> from <code>source-map</code> to this <code>source-map-js</code> fork.</p>
<p>You map see 4x performance improvements in parsing map from processing step before PostCSS (for instance, Sass).</p>
<h2><code>Document</code> Nodes</h2>
<p>Thanks to <a href="https://github.com/gucong3000"><code>@​gucong3000</code></a>, PostCSS already parse CSS from HTML and JS files (CSS-in-JS templates and objects).</p>

</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's changelog</a>.</em></p>
<blockquote>
<h2>8.3.6</h2>
<ul>
<li>Fixed column in <code>missed semicolon</code> error (by <a href="https://github.com/Gusted"><code>@​Gusted</code></a>).</li>
</ul>
<h2>8.3.5</h2>
<ul>
<li>Fixed broken AST detection.</li>
</ul>
<h2>8.3.4</h2>
<ul>
<li>Fixed broken AST detection.</li>
</ul>
<h2>8.3.3</h2>
<ul>
<li>Fixed broken AST on <code>postcss</code> dependency duplication in custom parsers.</li>
</ul>
<h2>8.3.2</h2>
<ul>
<li>Update changelog.</li>
</ul>
<h2>8.3.1</h2>
<ul>
<li>Fixed false positives <code>PostCSS does nothing</code> warning on <code>syntax</code> option.</li>
</ul>
<h2>8.3 “Duke Murmur”</h2>
<ul>
<li>Added <code>Node#assign()</code> shortcut (by Jonathan Neal).</li>
<li>Added experimental <code>Document</code> node to AST (by Aleks Hudochenkov).</li>
<li>Moved to faster fork of <code>source-map</code> (by Valentin Semirulnik).</li>
</ul>
<h2>8.2.15</h2>
<ul>
<li>Fixed <code>list</code> type definitions (by <a href="https://github.com/n19htz"><code>@​n19htz</code></a>).</li>
</ul>
<h2>8.2.14</h2>
<ul>
<li>Removed <code>source-map</code> from client-side bundle (by Barak Igal).</li>
</ul>
<h2>8.2.13</h2>
<ul>
<li>Fixed ReDoS vulnerabilities in source map parsing (by Yeting Li).</li>
</ul>
<h2>8.2.12</h2>
<ul>
<li>Fixed <code>package.json</code> exports.</li>
</ul>
<h2>8.2.11</h2>
<ul>
<li>Fixed <code>DEP0148</code> warning in Node.js 16.</li>
<li>Fixed docs (by <a href="https://github.com/semiromid"><code>@​semiromid</code></a>).</li>
</ul>
<h2>8.2.10</h2>
<ul>
<li>Fixed ReDoS vulnerabilities in source map parsing.</li>
<li>Fixed webpack 5 support (by Barak Igal).</li>
<li>Fixed docs (by Roeland Moors).</li>
</ul>
<h2>8.2.9</h2>
<ul>
<li>Exported <code>NodeErrorOptions</code> type (by Rouven Weßling).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/postcss/postcss/commit/91c6d661e8c789e154f966b4a468716501ff6d42"><code>91c6d66</code></a> Release 8.3.6 version</li>
<li><a href="https://github.com/postcss/postcss/commit/d3e7aa9d3ce3aeb77ed8d7dfa4b15f906866efb1"><code>d3e7aa9</code></a> Update dependencies</li>
<li><a href="https://github.com/postcss/postcss/commit/c72594b67380fdc83c39ce65ae6386d570438e28"><code>c72594b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/postcss/postcss/issues/1618">#1618</a> from Gusted/fix-missed-semicolon</li>
<li><a href="https://github.com/postcss/postcss/commit/422b5bfe8363795fabc9600c2b98205847d7013d"><code>422b5bf</code></a> Return correct column on <code>missed semicolon</code></li>
<li><a href="https://github.com/postcss/postcss/commit/1545d8aabd2a920c76a70fdd4e7c43a9464fba5e"><code>1545d8a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/postcss/postcss/issues/1610">#1610</a> from hex-ci/patch-1</li>
<li><a href="https://github.com/postcss/postcss/commit/476141a74fa88e7f31e5e6e22320469ab86d0d21"><code>476141a</code></a> Added postcss-unit-processor plugin to the list</li>
<li><a href="https://github.com/postcss/postcss/commit/56dcf91862a0c89b66169f2a888a16ee619eadf1"><code>56dcf91</code></a> Added postcss-unit-processor plugin to the list</li>
<li><a href="https://github.com/postcss/postcss/commit/7e7b0e912a505aaa8b81fd30b156f68f0a60a754"><code>7e7b0e9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/postcss/postcss/issues/1605">#1605</a> from megos/fix-duplicate-changelog</li>
<li><a href="https://github.com/postcss/postcss/commit/08ea82e83036f6be14ce4b9391bca768198bd8bd"><code>08ea82e</code></a> Fix duplicate changelog</li>
<li><a href="https://github.com/postcss/postcss/commit/e3781e9cb7cadec64735ab8d13245de163ef2263"><code>e3781e9</code></a> Release 8.3.5 version</li>
<li>Additional commits viewable in <a href="https://github.com/postcss/postcss/compare/8.2.8...8.3.6">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=postcss&package-manager=npm_and_yarn&previous-version=8.2.8&new-version=8.3.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

 ---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/facebook/litho/network/alerts).

</details>

Pull Request resolved: https://github.com/facebook/litho/pull/814

Reviewed By: jknoxville

Differential Revision: D30407387

Pulled By: colriot

fbshipit-source-id: 07b8efc5865f61ac67dc3a14fdfbd3fe11279ade

facebook/litho,facebook/litho,facebook/litho,facebook/litho,facebook/litho,facebook/litho