Skip to content

build(deps): bump postcss and @angular-devkit/build-angular in /ng8-http-requests - #1291

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ng8-http-requests/multi-33d318a61d
Open

build(deps): bump postcss and @angular-devkit/build-angular in /ng8-http-requests#1291
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/ng8-http-requests/multi-33d318a61d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps postcss to 8.5.23 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates postcss from 8.5.6 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates @angular-devkit/build-angular from 21.1.0 to 21.2.20

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.20

@​angular-devkit/build-angular

Commit Description
fix - 972f6db7e9 upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - 8de75ada50 upgrade postcss to 8.5.23

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit Description
fix - 61a810ab6 respect release age policy in update bootstrapping logic

@​angular/build

Commit Description
fix - a2b6116ed bump undici to 7.28.0
fix - 2510ee3c9 bump vite to 7.3.6

21.2.17

@​angular/build

Commit Description
fix - 9c366e8be bump @​babel/core to 7.29.7
fix - 6a06ce9e9 bump esbuild to 0.28.1
fix - 637b84877 bump piscina to 5.2.0
fix - e86d58a12 bump vite to 7.3.5

21.2.16

@​angular/cli

Commit Description
fix - 77c9047ac update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - d052e97da prioritize options over environment variables in AngularNodeAppEngine

21.2.15

@​angular/cli

Commit Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.20 (2026-08-05)

@​angular-devkit/build-angular

Commit Type Description
972f6db7e9 fix upgrade postcss to 8.5.23

@​angular/build

Commit Type Description
8de75ada50 fix upgrade postcss to 8.5.23

20.3.33 (2026-08-05)

@​angular-devkit/build-angular

Commit Type Description
0b4008f17d fix upgrade postcss to 8.5.23

@​angular/build

Commit Type Description
fc861affcd fix upgrade postcss to 8.5.23

22.1.2 (2026-07-30)

@​angular/cli

Commit Type Description
57db27ea91 fix add packages with built-in schematics to devDependencies only

@​angular/build

Commit Type Description
baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

... (truncated)

Commits
  • 928eb73 release: cut the v21.2.20 release
  • 972f6db fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
  • 8de75ad fix(@​angular/build): upgrade postcss to 8.5.23
  • 1a72825 release: cut the v21.2.19 release
  • df54298 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • fe3a606 release: cut the v21.2.18 release
  • 2510ee3 fix(@​angular/build): bump vite to 7.3.6
  • 61a810a fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • a2b6116 fix(@​angular/build): bump undici to 7.28.0
  • 9c1edbc release: cut the v21.2.17 release
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.23 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `postcss` from 8.5.6 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.23)

Updates `@angular-devkit/build-angular` from 21.1.0 to 21.2.20
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.1.0...v21.2.20)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.20
  dependency-type: direct:development
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/ng8-http-requests/multi-33d318a61d branch from 8cd91ef to 30a8852 Compare August 11, 2026 02:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants