build(deps): bump the prod group with 2 updates

[dependabot]

Bumps the prod group with 2 updates: cssnano and webpack-bundle-analyzer.

Updates cssnano from 8.0.6 to 8.0.10

Release notes

Sourced from cssnano's releases.

v8.0.10

What's Changed

• Make charset normalization idempotent in cssnano/cssnano#1949

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.9...cssnano@8.0.10

v8.0.9

Bug fixes

Bug fixes coming by way of updating colordx and svgo to the latest release.

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.8...cssnano@8.0.9

v8.0.8

What's Changed

Bug Fixes

• fix(postcss-minify-gradients): minify gradients using spec algorithm in cssnano/cssnano#1941

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.7...cssnano@8.0.8

v8.0.7

What's Changed

Bug Fixes

• fix(cssnano): tighten option types in cssnano/cssnano#1919
• fix(postcss-discard-empty): better optimize cascade layers in cssnano/cssnano#1924

Documentation

• docs: add security information in cssnano/cssnano#1922

Website playground

• feat(site): update playground to use a web worker in cssnano/cssnano#1918

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.6...cssnano@8.0.7

Commits

• f8c1a16 test: improve test failure legibility
• e224941 ci: fix branch name in workflow
• d6c53fb Publish cssnano 8.0.10
• 5ecbee4 fix(postcss-normalize-charset): ensure normalize charset is idempotent
• d757e27 test: increase coverage
• 1b62cbd test: add idempotency test for lite preset
• 388d70a test: add some more benchmarks
• 2cc6885 test: improve performance testing
• 0d69c9c Publish cssnano 8.0.9
• 641cba9 docs: update site dependencies
• Additional commits viewable in compare view

Updates webpack-bundle-analyzer from 5.3.1 to 5.3.2

Release notes

Sourced from webpack-bundle-analyzer's releases.

v5.3.2

Patch Changes

• Parse Webpack 5 module maps nested in UMD wrappers, using bundle module IDs and Webpack runtime structure to choose among IIFE candidates. (by @​Menny1337 in #733)

• Improve report generation performance for compilations with many assets. (by @​christiango in #723)

• Resolve bundle assets and report files against the correct compiler output path when a plugin instance is shared by multiple compilers. (by @​utkarshalpha in #725)

Changelog

Sourced from webpack-bundle-analyzer's changelog.

5.3.2

Patch Changes

• Parse Webpack 5 module maps nested in UMD wrappers, using bundle module IDs and Webpack runtime structure to choose among IIFE candidates. (by @​Menny1337 in #733)

• Improve report generation performance for compilations with many assets. (by @​christiango in #723)

• Resolve bundle assets and report files against the correct compiler output path when a plugin instance is shared by multiple compilers. (by @​utkarshalpha in #725)

Commits

• a4d4123 chore(release): new release (#726)
• a5b70c3 fix: parse Webpack 5 module maps nested in UMD wrappers (#733)
• 24e3f77 Improve analyzer performance for bundles with many assets (#723)
• 23adc7a docs: troubleshoot stats error-only (#730)
• 34eec1b docs: add Jenkins CSP troubleshooting for blank static reports (#724)
• 83a8ee5 fix: preserve compiler paths for shared plugin instances (#725)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions