chore(deps-dev): bump cssnano from 4.1.11 to 5.0.2 in /ui

[dependabot-preview[bot]]

Bumps cssnano from 4.1.11 to 5.0.2.

Release notes

Sourced from cssnano's releases.

v5.0.2

Bug Fixes

• postcss-merge-longhand: mergeLonghand should not apply to CSS variables (#1057) (8aa64c7), closes #1051

v5.0.0

Major changes

• requires Node >= 10.13
• PostCSS 8 API, so cssnano 5 does not emit warnings when running under PostCSS 8
• updated to SVGO 2, fixing many SVG minification bugs
• updated css-value-parser and css-selector-parser, fixing many bugs

Upgrade notes

If you use the cssnano JavaScript API, you need to change your code:

• Replace cssnano.process() with cssnano().process() (notice the () after cssnano)

• pass cssnano options to cssnano() instead of process()

cssnano(cssnanoOptions).process(postcssOptions)

Bug fixes

• fix improperly discarding @font-face declarations #726
• partially fix some isues where cssnano did not combine rules when used together with postcss-nested #1004
• fix translate3d() minification #920
• fix minification of values starting with e #589, #984
• fix minification of percentage vaalues #962, #957
• fix minification of aspect-ratio #963
• fix merging of @supports rules #974
• fix sorting of longhand and shorthand properties #535
• remove vulnerable dependency and always warn with bad SVG input #1034

Commits

• 06730cd Publish
• 8aa64c7 fix(postcss-merge-longhand): mergeLonghand should not apply to CSS variables ...
• 15da338 Publish (#1048)
• 3dee7c5 fix(cssnano): replace opencollective with funding field. (#1047)
• 2bde303 docs: add cssnano 5 release notes (#1021)
• 0e2c3bf Merge pull request #1043 from cssnano/fix-svg-warnings
• 7ae1cf7 fix(postcss-svgo): fix processing declaration mixing svg and non svg
• 747f16c Merge pull request #1039 from cssnano/v5
• ac2dbc7 Publish
• 53a5d66 Merge pull request #1034 from cssnano/silence-cve-alerts
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Looks like cssnano is up-to-date now, so this is no longer needed.