diff --git a/flake.nix b/flake.nix
index 28d519175..aaa892abd 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,7 +24,7 @@
 
             offlineCache = pkgs.fetchYarnDeps {
               yarnLock = ./yarn.lock;
-              hash = "sha256-5jI1gkUJE9NF5yvfbdzU9s+8i/ZIE9YLSeAMaD3lc7s=";
+              hash = "sha256-5hdmuMJfhQUl8+o5onxMj96GB4J+qT5UwwHLGTcZKQ4=";
             };
 
             # The repo targets a specific Electron major. If flake.lock goes
diff --git a/package.json b/package.json
index 47a5312e4..8cf9683fd 100644
--- a/package.json
+++ b/package.json
@@ -104,7 +104,7 @@
     "lefthook": "^2.1.6",
     "mini-css-extract-plugin": "^2.10.2",
     "npm-run-all2": "^9.0.2",
-    "postcss": "^8.5.12",
+    "postcss": "^8.5.17",
     "postcss-scss": "^4.0.9",
     "sass": "^1.99.0",
     "sass-loader": "^17.0.0",
diff --git a/yarn.lock b/yarn.lock
index 7b4621c9b..744cfe1a4 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6597,10 +6597,10 @@ postcss-value-parser@^4.1.0, postcss-value-parser@^4.2.0:
   resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz#723c09920836ba6d3e5af019f92bc0971c02e514"
   integrity sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==
 
-postcss@^8.4.40, postcss@^8.5.12, postcss@^8.5.15, postcss@^8.5.16, postcss@^8.5.8:
-  version "8.5.16"
-  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.16.tgz#1230ce0b5df354c24c0ea45f99ce5f6a88279d28"
-  integrity sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==
+postcss@^8.4.40, postcss@^8.5.15, postcss@^8.5.16, postcss@^8.5.17, postcss@^8.5.8:
+  version "8.5.17"
+  resolved "https://registry.yarnpkg.com/postcss/-/postcss-8.5.17.tgz#45f1f5fd542e2bc18ba8bbf92c85c3cd8485c285"
+  integrity sha512-J7EF+8X+CzRPaJPOv9Ck2wNWJvGnnl3PcNPAdGg6GTLjyVpyQ0yATMSXRFRV01BviT/9Gwuc3rjEyJbDJG9a4w==
   dependencies:
     nanoid "^3.3.12"
     picocolors "^1.1.1"