chore(deps): update dependency postcss-modules to v9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
postcss-modules	^6.0.1 → ^9.0.0

---

Release Notes

css-modules/postcss-modules (postcss-modules)

v9.0.1

Compare Source

Fixed

• Added a type declaration for postcss-modules/loader so TypeScript users can extend it with declare module without hitting a type error. #​172 by @​sapphi-red

v9.0.0

Compare Source

Breaking

• Minimum Node.js bumped from 20 to 20.6, the release that stabilized module.register.

Added

• New postcss-modules/loader subpath — an opt-in Node module-customization hook. Run with node --import postcss-modules/loader app.mjs and JavaScript files can do import styles from "./button.css" to receive the class-name token map as the default export, mirroring css-loader's modules workflow. Options live in postcss-modules.config.{js,cjs,mjs} in cwd, the POSTCSS_MODULES_CONFIG env var, or a "postcss-modules" key in package.json, and accept the same shape as the PostCSS plugin. Aimed at non-bundler use cases (SSR, Node scripts, Jest/Vitest in node mode); bundler users keep using their existing integrations. #​80

v8.3.1

Compare Source

Fixed

• hashPrefix is now applied when no custom generateScopedName is set. Previously the option was only honoured by generic-names, so the built-in default generator silently ignored it. #​160
• Empty rules left behind after :global { ... } unwrapping (e.g. a Sass block containing only a multi-line comment) are now removed instead of emitted as orphaned { ... } blocks. #​136

v8.3.0

Compare Source

Added

• New localsConvention value 'all' — emit the original class name plus the camelCase and dashes-camelCase variants in one pass.
• New localsConvention value 'none' — emit only the original class name, with no additional aliases.
• The function form of localsConvention may now return an array of strings. Every entry in the array is added to the locals map and resolves to the same value, which makes it easy to expose a single CSS class under multiple JS-friendly aliases.

Adapted from the unmerged work in #​154 by @​CarbonORM.

v8.1.0

Compare Source

Internal

• Replaced Babel with swc across the entire toolchain: @swc/cli compiles src/ to build/, @swc/jest transforms test files, and ESLint now uses its default espree parser. Removed five @babel/* devDependencies and the unused @babel/register runtime hook. The published build/*.js keeps the same module.exports = (opts) => ...; module.exports.postcss = true shape, so existing CommonJS consumers are unaffected.
• Pinned transitive file-type to v22 via overrides to silence @swc/cli's vulnerable dependency chain.

v7.0.0

Compare Source

Breaking

• Dropped support for Node.js 10, 12, 14, and 15. The minimum supported Node.js version is now 18.

Security

• Patched 14 Dependabot security alerts in transitive dependencies (form-data, lodash, @babel/core, @babel/plugin-transform-modules-systemjs, uuid, picomatch, flatted, minimatch, qs, js-yaml, nanoid)
• Bumped jest from 26 to 30 to drop vulnerable node-notifier, sane, and jsdom chains

Internal

• Regenerated Jest snapshots for the new pretty-format serializer (cosmetic only; emitted CSS and JSON are unchanged)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.