chore: bump postcss-selector-parser version

[g1rly-c0d3r]

Fixes #8534

Addresses https://github.com/specify/specify7/security/dependabot/317

Checklist

• Self-review the PR after opening it to make sure the changes look good and
  self-explanatory (or properly documented)
• Add relevant issue to release milestone

Testing instructions

• light general testing

Summary by CodeRabbit

• Chores
  • Updated a transitive dependency version constraint to improve dependency consistency.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 7d066c8c-bc3d-48e2-9744-4dc7cd419ce4

📥 Commits

Reviewing files that changed from the base of the PR and between 4d38155 and 08efed6.

📒 Files selected for processing (1)

• specifyweb/frontend/js_src/package.json

🚧 Files skipped from review as they are similar to previous changes (1)

• specifyweb/frontend/js_src/package.json

Included review availability: Your plan provides up to 2 included reviews per hour; 1 remains after this review.

---

📝 Walkthrough

Walkthrough

The frontend package configuration adds a css-loader override that pins its transitive postcss-selector-parser dependency to ^7.1.3.

Changes

Dependency override

Layer / File(s)	Summary
Pin css-loader parser dependency specifyweb/frontend/js_src/package.json	The overrides section now forces css-loader to use postcss-selector-parser version ^7.1.3.

Priority: ⬇️ Low

Change: Other

Merge Risk: ⚪ Minimal · up to 08efe

No actionable merge risk was identified for this dependency configuration change.

🚥 Pre-merge checks | ✅ 5 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Testing Instructions	⚠️ Warning	The testing instructions only say “light general testing.” They do not identify the affected frontend CSS build or provide a reproducible test command. The change overrides postcss-selector-parser u…	Replace “light general testing” with explicit steps. From specifyweb/frontend/js_src, run npm ci and npx webpack -o ../static/js --mode=production (or run make build). State that the check verifies successful CSS processing and fron…

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: updating the postcss-selector-parser dependency version through a package override.
Linked Issues check	✅ Passed	Issue #8534 requires a version bump for postcss-selector-parser. The pull request adds a css-loader override in specifyweb/frontend/js_src/package.json that pins postcss-selector-parser to `^7…
Out of Scope Changes check	✅ Passed	The reviewed code change is limited to the dependency override in package.json. The dependency override directly supports issue #8534. The release milestone is administrative and is not an unrelated…
Automatic Tests	✅ Passed	PASS: Automatic tests are not necessary for this dependency-only security update. The reviewed diff changes only package.json and package-lock.json; it adds a css-loader override for `postcss-se…

Full details: Testing Instructions

Explanation

The testing instructions only say “light general testing.” They do not identify the affected frontend CSS build or provide a reproducible test command. The change overrides postcss-selector-parser under css-loader, and webpack.config.js uses css-loader and postcss-loader for CSS processing. The frontend Makefile provides a relevant production build command, but the PR instructions do not mention it.

Resolution

Replace “light general testing” with explicit steps. From specifyweb/frontend/js_src, run npm ci and npx webpack -o ../static/js --mode=production (or run make build). State that the check verifies successful CSS processing and frontend bundle generation with the updated dependency.

• Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch issue-8534

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}