build(deps): bump postcss from 8.5.15 to 8.5.25 in /frontend

Bumps [postcss](https://github.com/postcss/postcss) from 8.5.15 to 8.5.25.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.5.15...8.5.25)

---
updated-dependencies:
- dependency-name: postcss
  dependency-version: 8.5.25
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/kb-refresh.yml

@@ -1,81 +0,0 @@
-name: KB refresh (helm-dashboard)
-
-# TWICE-DAILY batched refresh of this repo's knowledge-base record. Mirrors the mono
-# kb-refresh pattern, adapted for a single repo: on a schedule we diff
-# `kb-refresh-last..HEAD` — `kb-refresh-last` is a lightweight marker tag this workflow
-# moves to HEAD after each successful run — and if anything changed in that window we
-# trigger the KB Buildkite pipeline with CHANGED=helm-dashboard so the `repos/helm-dashboard` KB
-# record regenerates (deterministic + AI). The KB repo is updated; this repo is never
-# modified (only its lightweight marker tag is moved). No-change runs are skipped to
-# save tokens. The KB pipeline's nightly full rebuild is the backstop.
-
-on:
-  schedule:
-    - cron: '0 11,20 * * *'   # 11:00 & 20:00 UTC — batches all merges since the previous run
-  workflow_dispatch:
-
-permissions:
-  contents: write            # to move the kb-refresh-last marker tag
-
-jobs:
-  refresh:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout (full history + tags to diff since last run)
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Detect changes since last run
-        id: detect
-        run: |
-          MARKER="kb-refresh-last"
-          # Diff from the marker tag set by the previous successful run to HEAD.
-          # First run / missing tag -> fall back to the last 24h of history (the KB
-          # pipeline's nightly full rebuild is the backstop for anything this misses).
-          if git rev-parse -q --verify "refs/tags/${MARKER}" >/dev/null; then
-            BASE=$(git rev-list -n1 "refs/tags/${MARKER}")
-          else
-            BASE=$(git rev-list -n1 --before="24 hours ago" "$GITHUB_SHA" || true)
-          fi
-          [ -z "$BASE" ] && BASE="${GITHUB_SHA}^"
-          echo "Diff base: $BASE"
-          # Single-repo: any non-empty diff in the window -> refresh this repo's record.
-          if [ -n "$(git diff --name-only "$BASE" "$GITHUB_SHA")" ]; then
-            echo "changed=helm-dashboard" >> "$GITHUB_OUTPUT"
-            echo "Changes detected since last run -> refreshing helm-dashboard."
-          else
-            echo "changed=" >> "$GITHUB_OUTPUT"
-            echo "No changes since last run -> nothing to refresh."
-          fi
-
-      - name: Trigger knowledge-base pipeline (targeted refresh)
-        if: steps.detect.outputs.changed != ''
-        env:
-          BUILDKITE_API_TOKEN: ${{ secrets.BUILDKITE_API_TOKEN }}
-          BK_ORG: komodor               # Buildkite org slug (NOT the GitHub org "komodorio")
-          BK_PIPELINE: knowledge-base
-          CHANGED: ${{ steps.detect.outputs.changed }}
-        run: |
-          if [ -z "$BUILDKITE_API_TOKEN" ]; then echo "BUILDKITE_API_TOKEN not set — skipping."; exit 0; fi
-          payload=$(printf '{"commit":"HEAD","branch":"master","message":"KB refresh — %s","env":{"CHANGED":"%s"}}' "$CHANGED" "$CHANGED")
-          resp=$(curl -sS -w $'\n%{http_code}' -X POST \
-            "https://api.buildkite.com/v2/organizations/${BK_ORG}/pipelines/${BK_PIPELINE}/builds" \
-            -H "Authorization: Bearer ${BUILDKITE_API_TOKEN}" \
-            -H "Content-Type: application/json" \
-            -d "$payload")
-          code=${resp##*$'\n'}; body=${resp%$'\n'*}
-          echo "$body"
-          if [ "$code" -ge 200 ] && [ "$code" -lt 300 ]; then
-            echo "Triggered KB refresh for: ${CHANGED} [HTTP $code]."
-          else
-            echo "::error::Buildkite trigger failed (HTTP $code): $body"; exit 1
-          fi
-
-      - name: Advance the kb-refresh-last marker
-        run: |
-          # Reached when the trigger succeeded or there was nothing to refresh (a failed
-          # trigger exits non-zero above and skips this, so the window is retried next
-          # run). Move the marker forward; pushing a lightweight tag — never the branch.
-          git tag -f kb-refresh-last "$GITHUB_SHA"
-          git push -f origin refs/tags/kb-refresh-last

frontend/package-lock.json

@@ -9991,9 +9991,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.12",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz",
-      "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==",
+      "version": "3.3.16",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
+      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
       "dev": true,
       "funding": [
         {
@@ -10648,9 +10648,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.15",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.15.tgz",
-      "integrity": "sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==",
+      "version": "8.5.25",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz",
+      "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==",
       "dev": true,
       "funding": [
         {
@@ -10668,7 +10668,7 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "nanoid": "^3.3.12",
+        "nanoid": "^3.3.16",
         "picocolors": "^1.1.1",
         "source-map-js": "^1.2.1"
       },

frontend/yarn.lock

@@ -5127,10 +5127,10 @@ nano-spawn@^2.0.0:
   resolved "https://registry.npmjs.org/nano-spawn/-/nano-spawn-2.0.0.tgz"
   integrity sha512-tacvGzUY5o2D8CBh2rrwxyNojUsZNU2zjNTzKQrkgGJQTbGAfArVWXSKMBokBeeg6C7OLRGUEyoFlYbfeWQIqw==
 
-nanoid@^3.3.12:
-  version "3.3.12"
-  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.12.tgz#ab3d912e217a6d0a514f00a72a16543a28982c05"
-  integrity sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==
+nanoid@^3.3.16:
+  version "3.3.16"
+  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.16.tgz#a04d8ec4b1f10009d2d533947aefe4293737816c"
+  integrity sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==
 
 napi-postinstall@^0.3.0:
   version "0.3.4"
@@ -5504,11 +5504,11 @@ postcss-value-parser@^4.2.0:
   integrity sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==
 
 postcss@^8.5.1, postcss@^8.5.6:
-  version "8.5.15"
-  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.15.tgz#d1eaf677a324e9ec02196da2d3fecf4a0b9a735c"
-  integrity sha512-FfR8sjd4em2T6fb3I2MwAJU7HWVMr9zba+enmQeeWFfCbm+UOC/0X4DS8XtpUTMwWMGbjKYP7xjfNekzyGmB3A==
+  version "8.5.25"
+  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.25.tgz#5012a598eaaa897f21bbe8553be3cb7bd2bd78cb"
+  integrity sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==
   dependencies:
-    nanoid "^3.3.12"
+    nanoid "^3.3.16"
     picocolors "^1.1.1"
     source-map-js "^1.2.1"