Skip to content

chore(deps): bump postcss and @angular-devkit/build-angular#3743

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-c71cdee545
Closed

chore(deps): bump postcss and @angular-devkit/build-angular#3743
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-c71cdee545

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 3, 2026

Bumps postcss to 8.5.12 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates postcss from 8.5.6 to 8.5.12

Release notes

Sourced from postcss's releases.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Changelog

Sourced from postcss's changelog.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

8.5.8

  • Fixed Processor#version.

8.5.7

  • Improved source map annotation cleaning performance (by CodeAnt AI).
Commits
  • 9bc81c4 Release 8.5.12 version
  • 85c4d7d Another try to fix coverage
  • 94484ca Try to fix coverage
  • c64b748 Load only .map source maps
  • aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
  • 233fb26 Mention original author of the solution
  • 2502f75 Release 8.5.11 version
  • 5ca1901 Speed up parsing many nested brackets
  • 42b5337 Update dependencies
  • 7e36e15 Cache node.raws locally in Stringifier hot methods
  • Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 20.3.24 to 20.3.25

Release notes

Sourced from @​angular-devkit/build-angular's releases.

20.3.25

@​angular-devkit/build-angular

Commit Description
fix - 5e01ef40e upgrade postcss to 8.5.12

@​angular/ssr

Commit Description
fix - 6686848d9 introduce trustProxyHeaders option to safely validate and sanitize proxy headers
Changelog

Sourced from @​angular-devkit/build-angular's changelog.

20.3.25 (2026-04-29)

@​angular-devkit/build-angular

Commit Type Description
5e01ef40e fix upgrade postcss to 8.5.12

@​angular/ssr

Commit Type Description
6686848d9 fix introduce trustProxyHeaders option to safely validate and sanitize proxy headers

22.0.0-next.6 (2026-04-22)

@​angular/cli

Commit Type Description
cc30034da fix dynamically resolve project Angular CLI executable inside MCP tools
ead60d3d5 fix ignore EBADF file system errors during MCP project scan
0d984cf1c fix use headless option in MCP test tool

@​schematics/angular

Commit Type Description
de630c2fc feat stabilize refactor-jasmine-vitest schematic

@​angular-devkit/build-angular

Commit Type Description
30d8332ed fix ensure route has leading slash in prerender builder
cf5b49ed7 fix fix app-shell route format and

@​angular/build

Commit Type Description
0781f7498 feat add quiet option to suppress build noise in unit tests
cd2ad3c19 feat enable chunk optimization by default with heuristics
b85ec6798 fix allow configuring Access-Control-Allow-Origin via headers option
59803b12b fix use rootDir for HMR component updates path resolution
74e7dbe56 fix validate V8 coverage support for browsers in Vitest

... (truncated)

Commits
  • 985e580 release: cut the v20.3.25 release
  • 5e01ef4 fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.12
  • 24e2502 refactor: ensure prerender routes start with a forward slash and update packa...
  • 6686848 fix(@​angular/ssr): introduce trustProxyHeaders option to safely validate and...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 3, 2026
Bumps [postcss](https://github.com/postcss/postcss) to 8.5.12 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `postcss` from 8.5.6 to 8.5.12
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.6...8.5.12)

Updates `@angular-devkit/build-angular` from 20.3.24 to 20.3.25
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v20.3.24...v20.3.25)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 20.3.25
  dependency-type: direct:development
- dependency-name: postcss
  dependency-version: 8.5.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-c71cdee545 branch from 554623b to a120450 Compare May 3, 2026 18:06
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 6, 2026

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this May 6, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-c71cdee545 branch May 6, 2026 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants