chore(deps): bump postcss and @angular-devkit/build-angular by dependabot[bot] · Pull Request #100 · contentstack/kickstart-angular

dependabot · 2026-07-30T08:43:56Z

Bumps postcss to 8.5.19 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates postcss from 8.5.12 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

Changelog

Sourced from postcss's changelog.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

Commits

9543b22 Release 8.5.19 version
3d13bf9 Fix CI on Windows too
00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
7a05b33 Temporary fix CI
4c0d194 Release 8.5.18 version
92b4e78 Update dependencies
95663d3 Limit where source map can be loaded for security reasons
74e25ae Release 8.5.17 version
d1518af Fix Maximum call stack size exceeded error
2421312 Fix linter
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates @angular-devkit/build-angular from 21.2.15 to 22.1.0

Release notes

Sourced from @angular-devkit/build-angular's releases.

22.1.0

@angular/cli

Commit Description

abort and guide manual mitigation when updating catalog packages

prevent Yarn registry environment variable override

remove algoliasearch dependency and support latest docs versions

resolve correct registry name when using npm alias syntax during update

respect client-side release age settings during update resolution

revert package.json changes if installation tasks fail during update

robustly parse npm manifest from array

@schematics/angular

Commit Description

update ai-config to include Angular MCP server config

remove unused spec tsconfig outDir

@angular-devkit/core

Commit Description

deprecate stringToFileBuffer and fileBufferToString

@angular/build

Commit Description

add built-in SQLite cache store fallback

emit debug ids for stable subresource integrity hashes

enable chunk optimization for server builds

migrate advanced optimization Babel plugins to oxc-parser + magic-string

migrate i18n inliner to oxc-parser + magic-string

share persistent build cache across git worktrees

add bounded timeout to vitest executor disposal

anchor debug ID comment matching and make injection idempotent

prevent esbuild service hang on internal component stylesheet builds

prevent stripping nested sourceMappingURL comments

support hyphens and underscores when stripping chunk hash in chunk optimizer

default chunk optimization to use Rolldown

enable fast-path AST printing with sourcemaps in AotCompilation

@angular/ssr

Commit Description

support the standard Forwarded header

Deprecations

@angular-devkit/core

stringToFileBuffer and fileBufferToString are deprecated. Use standard Web APIs (TextEncoder and TextDecoder) instead.

Internal usages within the repository have been removed and replaced with standard Web APIs. The public API golden file for @angular-devkit/core has been updated to reflect the deprecations.

22.1.0-rc.0

@angular/cli

Commit Description

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

22.1.0 (2026-07-29)

Deprecations

@angular-devkit/core

stringToFileBuffer and fileBufferToString are deprecated. Use standard Web APIs (TextEncoder and TextDecoder) instead.

Internal usages within the repository have been removed and replaced with standard Web APIs. The public API golden file for @angular-devkit/core has been updated to reflect the deprecations.

@schematics/angular

Commit Type Description

89d7f59cd feat update ai-config to include Angular MCP server config

b345bb54d fix remove unused spec tsconfig outDir

@angular/cli

Commit Type Description

f59bcf529 fix abort and guide manual mitigation when updating catalog packages

48f90f5d5 fix prevent Yarn registry environment variable override

c963ecbec fix remove algoliasearch dependency and support latest docs versions

6859d25c3 fix resolve correct registry name when using npm alias syntax during update

3a2589dac fix respect client-side release age settings during update resolution

5c3101bff fix revert package.json changes if installation tasks fail during update

7932caaf9 fix robustly parse npm manifest from array

@angular-devkit/core

Commit Type Description

fd336d365 refactor deprecate stringToFileBuffer and fileBufferToString

@angular/build

Commit Type Description

34d558c3c feat add built-in SQLite cache store fallback

0c18dc0f6 feat emit debug ids for stable subresource integrity hashes

51f69276f feat enable chunk optimization for server builds

10dc30f9c feat migrate advanced optimization Babel plugins to oxc-parser + magic-string

917393a4c feat migrate i18n inliner to oxc-parser + magic-string

52ae7f862 feat share persistent build cache across git worktrees

95510511d fix add bounded timeout to vitest executor disposal

62b11e316 fix anchor debug ID comment matching and make injection idempotent

6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds

291caab61 fix prevent stripping nested sourceMappingURL comments

0e3ca3dfb fix support hyphens and underscores when stripping chunk hash in chunk optimizer

... (truncated)

Commits

4c4a584 release: cut the v22.1.0 release
975554c build: update Angular framework and ng-packagr versions to 22.1.0 stable release
96ea55a build: lock file maintenance
43cafab fix(@angular/build): safeguard Karma builder stream controller against closed...
d513ed2 fix(@angular/cli): declare devserver_start and devserver_stop as isReadOnly:f...
0e38a37 refactor(@angular/build): remove unnecessary realpath resolution for workspac...
b1daa51 build: update pnpm to v11.17.0
b907871 build: update cross-repo angular dependencies
7e4959e release: cut the v22.1.0-rc.0 release
ed5a4bf docs: release notes for the v22.0.8 release
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.19 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `postcss` from 8.5.12 to 8.5.19 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.12...8.5.19) Updates `@angular-devkit/build-angular` from 21.2.15 to 22.1.0 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.15...v22.1.0) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.19 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 22.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026

dependabot Bot requested a review from a team as a code owner July 30, 2026 08:43

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump postcss and @angular-devkit/build-angular - #100

chore(deps): bump postcss and @angular-devkit/build-angular#100
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c09a0d15ea

dependabot Bot commented on behalf of github Jul 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	abort and guide manual mitigation when updating catalog packages
	prevent Yarn registry environment variable override
	remove algoliasearch dependency and support latest docs versions
	resolve correct registry name when using npm alias syntax during update
	respect client-side release age settings during update resolution
	revert package.json changes if installation tasks fail during update
	robustly parse npm manifest from array

Commit	Description
	update ai-config to include Angular MCP server config
	remove unused spec tsconfig outDir

Commit	Description
	add built-in SQLite cache store fallback
	emit debug ids for stable subresource integrity hashes
	enable chunk optimization for server builds
	migrate advanced optimization Babel plugins to oxc-parser + magic-string
	migrate i18n inliner to oxc-parser + magic-string
	share persistent build cache across git worktrees
	add bounded timeout to vitest executor disposal
	anchor debug ID comment matching and make injection idempotent
	prevent esbuild service hang on internal component stylesheet builds
	prevent stripping nested sourceMappingURL comments
	support hyphens and underscores when stripping chunk hash in chunk optimizer
	default chunk optimization to use Rolldown
	enable fast-path AST printing with sourcemaps in AotCompilation

Commit	Type	Description
89d7f59cd	feat	update ai-config to include Angular MCP server config
b345bb54d	fix	remove unused spec tsconfig outDir

Commit	Type	Description
f59bcf529	fix	abort and guide manual mitigation when updating catalog packages
48f90f5d5	fix	prevent Yarn registry environment variable override
c963ecbec	fix	remove algoliasearch dependency and support latest docs versions
6859d25c3	fix	resolve correct registry name when using npm alias syntax during update
3a2589dac	fix	respect client-side release age settings during update resolution
5c3101bff	fix	revert package.json changes if installation tasks fail during update
7932caaf9	fix	robustly parse npm manifest from array

Commit	Type	Description
34d558c3c	feat	add built-in SQLite cache store fallback
0c18dc0f6	feat	emit debug ids for stable subresource integrity hashes
51f69276f	feat	enable chunk optimization for server builds
10dc30f9c	feat	migrate advanced optimization Babel plugins to oxc-parser + magic-string
917393a4c	feat	migrate i18n inliner to oxc-parser + magic-string
52ae7f862	feat	share persistent build cache across git worktrees
95510511d	fix	add bounded timeout to vitest executor disposal
62b11e316	fix	anchor debug ID comment matching and make injection idempotent
6d9b360e5	fix	prevent esbuild service hang on internal component stylesheet builds
291caab61	fix	prevent stripping nested sourceMappingURL comments
0e3ca3dfb	fix	support hyphens and underscores when stripping chunk hash in chunk optimizer

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 30, 2026

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

22.1.0

@​angular/cli

@​schematics/angular

@​angular-devkit/core

@​angular/build

@​angular/ssr

Deprecations

@​angular-devkit/core

22.1.0-rc.0

@​angular/cli

22.1.0 (2026-07-29)

Deprecations

@​angular-devkit/core

@​schematics/angular

@​angular/cli

@​angular-devkit/core

@​angular/build

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular/cli`

`@schematics/angular`

`@angular-devkit/core`

`@angular/build`

`@angular/ssr`

`@angular-devkit/core`

`@angular/cli`

`@angular-devkit/core`

`@schematics/angular`

`@angular/cli`

`@angular-devkit/core`

`@angular/build`