chore(deps): bump postcss, @angular-devkit/build-angular and ng-packagr by dependabot[bot] · Pull Request #143 · technikhil314/angular-components

dependabot · 2026-07-30T03:43:58Z

Bumps postcss to 8.5.19 and updates ancestor dependencies postcss, @angular-devkit/build-angular and ng-packagr. These dependencies need to be updated together.

Updates postcss from 7.0.35 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

... (truncated)

Commits

9543b22 Release 8.5.19 version
3d13bf9 Fix CI on Windows too
00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
7a05b33 Temporary fix CI
4c0d194 Release 8.5.18 version
92b4e78 Update dependencies
95663d3 Limit where source map can be loaded for security reasons
74e25ae Release 8.5.17 version
d1518af Fix Maximum call stack size exceeded error
2421312 Fix linter
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates @angular-devkit/build-angular from 0.8.9 to 22.1.0

Release notes

Sourced from @angular-devkit/build-angular's releases.

22.1.0

@angular/cli

Commit Description

abort and guide manual mitigation when updating catalog packages

prevent Yarn registry environment variable override

remove algoliasearch dependency and support latest docs versions

resolve correct registry name when using npm alias syntax during update

respect client-side release age settings during update resolution

revert package.json changes if installation tasks fail during update

robustly parse npm manifest from array

@schematics/angular

Commit Description

update ai-config to include Angular MCP server config

remove unused spec tsconfig outDir

@angular-devkit/core

Commit Description

deprecate stringToFileBuffer and fileBufferToString

@angular/build

Commit Description

add built-in SQLite cache store fallback

emit debug ids for stable subresource integrity hashes

enable chunk optimization for server builds

migrate advanced optimization Babel plugins to oxc-parser + magic-string

migrate i18n inliner to oxc-parser + magic-string

share persistent build cache across git worktrees

add bounded timeout to vitest executor disposal

anchor debug ID comment matching and make injection idempotent

prevent esbuild service hang on internal component stylesheet builds

prevent stripping nested sourceMappingURL comments

support hyphens and underscores when stripping chunk hash in chunk optimizer

default chunk optimization to use Rolldown

enable fast-path AST printing with sourcemaps in AotCompilation

@angular/ssr

Commit Description

support the standard Forwarded header

Deprecations

@angular-devkit/core

stringToFileBuffer and fileBufferToString are deprecated. Use standard Web APIs (TextEncoder and TextDecoder) instead.

Internal usages within the repository have been removed and replaced with standard Web APIs. The public API golden file for @angular-devkit/core has been updated to reflect the deprecations.

22.1.0-rc.0

@angular/cli

Commit Description

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

22.1.0 (2026-07-29)

Deprecations

@angular-devkit/core

stringToFileBuffer and fileBufferToString are deprecated. Use standard Web APIs (TextEncoder and TextDecoder) instead.

Internal usages within the repository have been removed and replaced with standard Web APIs. The public API golden file for @angular-devkit/core has been updated to reflect the deprecations.

@schematics/angular

Commit Type Description

89d7f59cd feat update ai-config to include Angular MCP server config

b345bb54d fix remove unused spec tsconfig outDir

@angular/cli

Commit Type Description

f59bcf529 fix abort and guide manual mitigation when updating catalog packages

48f90f5d5 fix prevent Yarn registry environment variable override

c963ecbec fix remove algoliasearch dependency and support latest docs versions

6859d25c3 fix resolve correct registry name when using npm alias syntax during update

3a2589dac fix respect client-side release age settings during update resolution

5c3101bff fix revert package.json changes if installation tasks fail during update

7932caaf9 fix robustly parse npm manifest from array

@angular-devkit/core

Commit Type Description

fd336d365 refactor deprecate stringToFileBuffer and fileBufferToString

@angular/build

Commit Type Description

34d558c3c feat add built-in SQLite cache store fallback

0c18dc0f6 feat emit debug ids for stable subresource integrity hashes

51f69276f feat enable chunk optimization for server builds

10dc30f9c feat migrate advanced optimization Babel plugins to oxc-parser + magic-string

917393a4c feat migrate i18n inliner to oxc-parser + magic-string

52ae7f862 feat share persistent build cache across git worktrees

95510511d fix add bounded timeout to vitest executor disposal

62b11e316 fix anchor debug ID comment matching and make injection idempotent

6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds

291caab61 fix prevent stripping nested sourceMappingURL comments

0e3ca3dfb fix support hyphens and underscores when stripping chunk hash in chunk optimizer

... (truncated)

Commits

See full diff in compare view

Updates ng-packagr from 4.7.1 to 22.1.0

Release notes

Sourced from ng-packagr's releases.

22.1.0

Bug Fixes

ng-packagr: log correct diagnostics array for warnings (401d5e7), closes #3346

ng-packagr: prevent concurrent compilation and stale cache results (e5d77a7)

22.1.0-next.4

Bug Fixes

ng-packagr: log correct diagnostics array for warnings (401d5e7), closes #3346

22.1.0-next.3

Bug Fixes

ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (a63fbc0), closes #3343

Performance

ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (0851ec8)

22.1.0-next.2

Bug Fixes

ng-packagr: prevent concurrent compilation and stale cache results (e5d77a7)

22.0.2

Bug Fixes

ng-packagr: log correct diagnostics array for warnings (9d1c0cd), closes #3346

22.0.1

Bug Fixes

ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (44bc3a7), closes #3343

ng-packagr: prevent concurrent compilation and stale cache results (c4fd75f)

Performance

ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (1b6ac8e)

22.0.0

⚠ BREAKING CHANGES

ng-packagr: TypeScript versions older than 6.0 are no longer supported.

Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

... (truncated)

Changelog

Sourced from ng-packagr's changelog.

22.1.0 (2026-07-29)

Bug Fixes

ng-packagr: log correct diagnostics array for warnings (401d5e7), closes #3346

ng-packagr: prevent concurrent compilation and stale cache results (e5d77a7)

22.1.0-rc.0 (2026-07-24)

22.1.0-next.4 (2026-07-24)

Bug Fixes

ng-packagr: log correct diagnostics array for warnings (401d5e7), closes #3346

22.1.0-next.3 (2026-07-01)

Bug Fixes

ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (a63fbc0), closes #3343

Performance

ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (0851ec8)

22.0.1 (2026-07-01)

Bug Fixes

ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (44bc3a7), closes #3343

ng-packagr: prevent concurrent compilation and stale cache results (c4fd75f)

Performance

ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (1b6ac8e)

22.1.0-next.2 (2026-06-11)

Bug Fixes

ng-packagr: prevent concurrent compilation and stale cache results (e5d77a7)

22.1.0-next.1 (2026-06-03)

... (truncated)

Commits

e4ae4b2 release: cut 22.1.0
d2eba5b build: update @angular/compiler-cli peer dependency range to include versions...
74b6630 build: update pnpm to v11.17.0
1bb8c60 build: update pnpm/action-setup action to v6.0.9
064813f build: update all non-major dependencies
8f8954a build: update all github actions to v7
7b69401 Update CHANGELOG.md
9480ef9 release: cut 22.1.0-rc.0
2563d4d release: cut 22.1.0-next.5
de59877 release: cut 22.1.0-next.4
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ng-packagr since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.19 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [ng-packagr](https://github.com/ng-packagr/ng-packagr). These dependencies need to be updated together. Updates `postcss` from 7.0.35 to 8.5.19 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.35...8.5.19) Updates `@angular-devkit/build-angular` from 0.8.9 to 22.1.0 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/v22.1.0) Updates `ng-packagr` from 4.7.1 to 22.1.0 - [Release notes](https://github.com/ng-packagr/ng-packagr/releases) - [Changelog](https://github.com/ng-packagr/ng-packagr/blob/main/CHANGELOG.md) - [Commits](ng-packagr/ng-packagr@v4.7.1...22.1.0) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.19 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 22.1.0 dependency-type: direct:development - dependency-name: ng-packagr dependency-version: 22.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-30T14:04:33Z

Superseded by #144.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026

dependabot Bot closed this Jul 30, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/multi-ecad9b0992 branch July 30, 2026 14:04

Navigation Menu

chore(deps): bump postcss, @angular-devkit/build-angular and ng-packagr - #143

chore(deps): bump postcss, @angular-devkit/build-angular and ng-packagr#143
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-ecad9b0992

dependabot Bot commented on behalf of github Jul 30, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	abort and guide manual mitigation when updating catalog packages
	prevent Yarn registry environment variable override
	remove algoliasearch dependency and support latest docs versions
	resolve correct registry name when using npm alias syntax during update
	respect client-side release age settings during update resolution
	revert package.json changes if installation tasks fail during update
	robustly parse npm manifest from array

Commit	Description
	update ai-config to include Angular MCP server config
	remove unused spec tsconfig outDir

Commit	Description
	add built-in SQLite cache store fallback
	emit debug ids for stable subresource integrity hashes
	enable chunk optimization for server builds
	migrate advanced optimization Babel plugins to oxc-parser + magic-string
	migrate i18n inliner to oxc-parser + magic-string
	share persistent build cache across git worktrees
	add bounded timeout to vitest executor disposal
	anchor debug ID comment matching and make injection idempotent
	prevent esbuild service hang on internal component stylesheet builds
	prevent stripping nested sourceMappingURL comments
	support hyphens and underscores when stripping chunk hash in chunk optimizer
	default chunk optimization to use Rolldown
	enable fast-path AST printing with sourcemaps in AotCompilation

Commit	Type	Description
89d7f59cd	feat	update ai-config to include Angular MCP server config
b345bb54d	fix	remove unused spec tsconfig outDir

Commit	Type	Description
f59bcf529	fix	abort and guide manual mitigation when updating catalog packages
48f90f5d5	fix	prevent Yarn registry environment variable override
c963ecbec	fix	remove algoliasearch dependency and support latest docs versions
6859d25c3	fix	resolve correct registry name when using npm alias syntax during update
3a2589dac	fix	respect client-side release age settings during update resolution
5c3101bff	fix	revert package.json changes if installation tasks fail during update
7932caaf9	fix	robustly parse npm manifest from array

Commit	Type	Description
34d558c3c	feat	add built-in SQLite cache store fallback
0c18dc0f6	feat	emit debug ids for stable subresource integrity hashes
51f69276f	feat	enable chunk optimization for server builds
10dc30f9c	feat	migrate advanced optimization Babel plugins to oxc-parser + magic-string
917393a4c	feat	migrate i18n inliner to oxc-parser + magic-string
52ae7f862	feat	share persistent build cache across git worktrees
95510511d	fix	add bounded timeout to vitest executor disposal
62b11e316	fix	anchor debug ID comment matching and make injection idempotent
6d9b360e5	fix	prevent esbuild service hang on internal component stylesheet builds
291caab61	fix	prevent stripping nested sourceMappingURL comments
0e3ca3dfb	fix	support hyphens and underscores when stripping chunk hash in chunk optimizer

Conversation

dependabot Bot commented on behalf of github Jul 30, 2026

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

8.5.12

8.5.11

8.5.10

8.5.9

22.1.0

@​angular/cli

@​schematics/angular

@​angular-devkit/core

@​angular/build

@​angular/ssr

Deprecations

@​angular-devkit/core

22.1.0-rc.0

@​angular/cli

22.1.0 (2026-07-29)

Deprecations

@​angular-devkit/core

@​schematics/angular

@​angular/cli

@​angular-devkit/core

@​angular/build

22.1.0

Bug Fixes

22.1.0-next.4

Bug Fixes

22.1.0-next.3

Bug Fixes

Performance

22.1.0-next.2

Bug Fixes

22.0.2

Bug Fixes

22.0.1

Bug Fixes

Performance

22.0.0

⚠ BREAKING CHANGES

22.1.0 (2026-07-29)

Bug Fixes

22.1.0-rc.0 (2026-07-24)

22.1.0-next.4 (2026-07-24)

Bug Fixes

22.1.0-next.3 (2026-07-01)

Bug Fixes

Performance

22.0.1 (2026-07-01)

Bug Fixes

Performance

22.1.0-next.2 (2026-06-11)

Bug Fixes

22.1.0-next.1 (2026-06-03)

Uh oh!

dependabot Bot commented on behalf of github Jul 30, 2026

Uh oh!

Reviewers

Assignees

`@angular/cli`

`@schematics/angular`

`@angular-devkit/core`

`@angular/build`

`@angular/ssr`

`@angular-devkit/core`

`@angular/cli`

`@angular-devkit/core`

`@schematics/angular`

`@angular/cli`

`@angular-devkit/core`

`@angular/build`