chore(deps): update dependency postcss-modules to v9 (UI5#8757)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[postcss-modules](https://redirect.github.com/css-modules/postcss-modules)
| [`6.0.1` →
`9.0.0`](https://renovatebot.com/diffs/npm/postcss-modules/6.0.1/9.0.0)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/postcss-modules/9.0.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/postcss-modules/6.0.1/9.0.0?slim=true)
|

---

### Release Notes

<details>
<summary>css-modules/postcss-modules (postcss-modules)</summary>

###
[`v9.0.0`](https://redirect.github.com/css-modules/postcss-modules/blob/HEAD/CHANGELOG.md#900)

[Compare
Source](https://redirect.github.com/css-modules/postcss-modules/compare/v8.3.1...v9.0.0)

##### Breaking

- Minimum Node.js bumped from 20 to 20.6, the release that stabilized
`module.register`.

##### Added

- New `postcss-modules/loader` subpath — an opt-in Node
module-customization hook. Run with `node --import
postcss-modules/loader app.mjs` and JavaScript files can do `import
styles from "./button.css"` to receive the class-name token map as the
default export, mirroring `css-loader`'s `modules` workflow. Options
live in `postcss-modules.config.{js,cjs,mjs}` in cwd, the
`POSTCSS_MODULES_CONFIG` env var, or a `"postcss-modules"` key in
`package.json`, and accept the same shape as the PostCSS plugin. Aimed
at non-bundler use cases (SSR, Node scripts, Jest/Vitest in node mode);
bundler users keep using their existing integrations.
[#&UI5#8203;80](https://redirect.github.com/madyankin/postcss-modules/issues/80)

###
[`v8.3.1`](https://redirect.github.com/css-modules/postcss-modules/blob/HEAD/CHANGELOG.md#831)

[Compare
Source](https://redirect.github.com/css-modules/postcss-modules/compare/v8.3.0...v8.3.1)

##### Fixed

- `hashPrefix` is now applied when no custom `generateScopedName` is
set. Previously the option was only honoured by `generic-names`, so the
built-in default generator silently ignored it.
[#&UI5#8203;160](https://redirect.github.com/madyankin/postcss-modules/issues/160)
- Empty rules left behind after `:global { ... }` unwrapping (e.g. a
Sass block containing only a multi-line comment) are now removed instead
of emitted as orphaned `{ ... }` blocks.
[#&UI5#8203;136](https://redirect.github.com/madyankin/postcss-modules/issues/136)

###
[`v8.3.0`](https://redirect.github.com/css-modules/postcss-modules/blob/HEAD/CHANGELOG.md#830)

[Compare
Source](https://redirect.github.com/css-modules/postcss-modules/compare/v8.1.0...v8.3.0)

##### Added

- New `localsConvention` value `'all'` — emit the original class name
plus the camelCase and dashes-camelCase variants in one pass.
- New `localsConvention` value `'none'` — emit only the original class
name, with no additional aliases.
- The function form of `localsConvention` may now return an array of
strings. Every entry in the array is added to the locals map and
resolves to the same value, which makes it easy to expose a single CSS
class under multiple JS-friendly aliases.

Adapted from the unmerged work in
[#&UI5#8203;154](https://redirect.github.com/madyankin/postcss-modules/pull/154)
by [@&UI5#8203;CarbonORM](https://redirect.github.com/CarbonORM).

###
[`v8.1.0`](https://redirect.github.com/css-modules/postcss-modules/blob/HEAD/CHANGELOG.md#810)

[Compare
Source](https://redirect.github.com/css-modules/postcss-modules/compare/v7.0.0...v8.1.0)

##### Internal

- Replaced Babel with swc across the entire toolchain: `@swc/cli`
compiles `src/` to `build/`, `@swc/jest` transforms test files, and
ESLint now uses its default `espree` parser. Removed five `@babel/*`
devDependencies and the unused `@babel/register` runtime hook. The
published `build/*.js` keeps the same `module.exports = (opts) => ...;
module.exports.postcss = true` shape, so existing CommonJS consumers are
unaffected.
- Pinned transitive `file-type` to v22 via `overrides` to silence
`@swc/cli`'s vulnerable dependency chain.

###
[`v7.0.0`](https://redirect.github.com/css-modules/postcss-modules/blob/HEAD/CHANGELOG.md#700)

[Compare
Source](https://redirect.github.com/css-modules/postcss-modules/compare/v6.0.1...v7.0.0)

##### Breaking

- Dropped support for Node.js 10, 12, 14, and 15. The minimum supported
Node.js version is now 18.

##### Security

- Patched 14 Dependabot security alerts in transitive dependencies
(`form-data`, `lodash`, `@babel/core`,
`@babel/plugin-transform-modules-systemjs`, `uuid`, `picomatch`,
`flatted`, `minimatch`, `qs`, `js-yaml`, `nanoid`)
- Bumped `jest` from 26 to 30 to drop vulnerable `node-notifier`,
`sane`, and `jsdom` chains

##### Internal

- Regenerated Jest snapshots for the new `pretty-format` serializer
(cosmetic only; emitted CSS and JSON are unchanged)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [x] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/UI5/webcomponents-react).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

package.json

@@ -104,7 +104,7 @@
     "postcss": "8.5.16",
     "postcss-cli": "11.0.1",
     "postcss-import": "16.1.1",
-    "postcss-modules": "6.0.1",
+    "postcss-modules": "9.0.0",
     "prettier": "3.8.5",
     "publint": "0.3.21",
     "rimraf": "6.1.3",

yarn.lock

@@ -18629,7 +18629,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"postcss-modules-local-by-default@npm:^4.0.5":
+"postcss-modules-local-by-default@npm:^4.2.0":
   version: 4.2.0
   resolution: "postcss-modules-local-by-default@npm:4.2.0"
   dependencies:
@@ -18642,7 +18642,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"postcss-modules-scope@npm:^3.2.0":
+"postcss-modules-scope@npm:^3.2.1":
   version: 3.2.1
   resolution: "postcss-modules-scope@npm:3.2.1"
   dependencies:
@@ -18664,21 +18664,21 @@ __metadata:
   languageName: node
   linkType: hard
 
-"postcss-modules@npm:6.0.1":
-  version: 6.0.1
-  resolution: "postcss-modules@npm:6.0.1"
+"postcss-modules@npm:9.0.0":
+  version: 9.0.0
+  resolution: "postcss-modules@npm:9.0.0"
   dependencies:
     generic-names: "npm:^4.0.0"
     icss-utils: "npm:^5.1.0"
     lodash.camelcase: "npm:^4.3.0"
     postcss-modules-extract-imports: "npm:^3.1.0"
-    postcss-modules-local-by-default: "npm:^4.0.5"
-    postcss-modules-scope: "npm:^3.2.0"
+    postcss-modules-local-by-default: "npm:^4.2.0"
+    postcss-modules-scope: "npm:^3.2.1"
     postcss-modules-values: "npm:^4.0.0"
     string-hash: "npm:^1.1.3"
   peerDependencies:
     postcss: ^8.0.0
-  checksum: 10c0/b82230693cb257b69db486df8835626d96632481ec6a8777b51ae7a530a56fa0ed399cbc8c2c777525f31fefab5a2d12ea7331a748fdfddde9f16cf3fff3bc58
+  checksum: 10c0/333d282f98a9cc2dfd660a35981a9ca3468cde473b2fcee163bbb2aeb0e0153131b2bf83966a0071dbde3bce4c4ac9c7cf6a1e0bd4a71ae24b33abed8db3f471
   languageName: node
   linkType: hard
 
@@ -22187,7 +22187,7 @@ __metadata:
     postcss: "npm:8.5.16"
     postcss-cli: "npm:11.0.1"
     postcss-import: "npm:16.1.1"
-    postcss-modules: "npm:6.0.1"
+    postcss-modules: "npm:9.0.0"
     prettier: "npm:3.8.5"
     publint: "npm:0.3.21"
     react: "npm:19.2.7"