Bump postcss, @nx/angular and @angular-devkit/build-angular by dependabot[bot] · Pull Request #551 · binary-coffee-dev/dcs-frontend

dependabot · 2026-08-02T05:43:33Z

Bumps postcss, @nx/angular and @angular-devkit/build-angular. These dependencies needed to be updated together.
Updates postcss from 8.5.15 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

Changelog

Sourced from postcss's changelog.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

Commits

9543b22 Release 8.5.19 version
3d13bf9 Fix CI on Windows too
00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
7a05b33 Temporary fix CI
4c0d194 Release 8.5.18 version
92b4e78 Update dependencies
95663d3 Limit where source map can be loaded for security reasons
74e25ae Release 8.5.17 version
d1518af Fix Maximum call stack size exceeded error
2421312 Fix linter
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates @nx/angular from 22.7.5 to 23.1.1

Release notes

Sourced from @nx/angular's releases.

23.1.1 (2026-07-30)

🚀 Features

core: derive stable repo key from normalized remote and relative path (#36439)

repo: add react + vite + vitest + playwright example (#35921)

🩹 Fixes

angular-rspack: speed up builds and align behavior with the esbuild application builder (#36268, #34936)

bundling: support TypeScript esbuildConfig files in the esbuild executor (#36352, #36349)

bundling: acknowledge @swc/core build scripts when configuring rollup (#36412)

core: speed up npm lockfile parsing (#36216)

core: speed up lockfile parsing and catalog resolution (#36223)

core: show performance report recommendations only when actionable (#36344)

core: close daemon log descriptors after spawn to avoid Node 26 crash (#36280)

core: prevent shell injection in nx import (#36348)

core: correct the 22.6.0 gitignore and analytics migration wiring (#36356)

core: support npm 12 and pnpm in the package provenance check (#36354, #36338)

core: honor pnpm minimumReleaseAge config on pnpm 11 (#36335, #36330)

core: support pnpm 11 patched dependency hashes (#36360)

core: resolve name refs copied into pattern-matched target arrays (#36359)

core: resolve source-loaded plugin transitive workspace imports (#36296)

core: unbreak pnpm 11 installs by acknowledging build-script deps from generators (#36302)

core: include continuous and default-config dependencies in show target (#36374)

core: make unit tests pass locally regardless of invoking package manager (#35994)

core: respect --aiAgents none to skip AI agent file generation (#34944, #34692)

core: use --config.frozen-lockfile=false for pnpm add during migrate (#36337)

core: run selected projects with --exclude-task-dependencies (#35562)

core: stop passing git revisions through a shell in affected commands (#36379)

core: collect trickling watcher bursts fully on daemon force-flush (#36391)

core: report tasks running in another Nx process in the inline TUI (#36341)

core: stop ratatui cursor queries from racing the TUI event stream (#36318)

core: render critical-path tasks as a nested list in the job summary (#36394)

core: keep pnpm-workspace.yaml comments and read package.json as jsonc (#36411)

core: support multiple brace groups in workspace glob matching (#36395)

core: handle CRLF line endings in pnpm multi-document lockfiles (#36419, #35828, #35840)

core: correct glob pattern expansion for ZeroOrOne groups (#31857)

core: stop re-querying confirmed cache misses in task orchestrator (#36301, #35632)

core: sample project graph perf span telemetry per session at 10% (#36420)

core: strip terminal query sequences when replaying task output (#36432)

core: preserve FORCE_COLOR=0 intent for forked child tasks (#35293)

core: handle colons in target name when resolving inputs to generate graph (#36429, #33710)

core: merge default plugins through the source-map-aware merge path (#36257)

core: keep nx migrate on the requested version when release-age gates interfere (#36444)

core: avoid bogus duplicate project name errors when generating nested apps (#36458)

core: pin typescript in preset dependencies so npm cannot hoist typescript 7 (#36497)

core: bump pinned axios and brace-expansion past vulnerable versions (#36507, #36474)

core: parse pnpm lockfiles that omit the packages block (#36512)

core: keep real dependencies when omitting peers from npm temp installs (#36518)

... (truncated)

Commits

82f3693 fix(js): resolve package and extension-less tsconfig extends read from the tr...
df40b73 fix(linter): use projectService for typed linting in flat configs (#35727)
d00a4a2 docs(misc): update broken doc links in deprecation warnings (#36187)
a88e494 chore(repo): migrate to nx 23.1.0-rc.2 (#36269)
f45a6a1 fix(testing): disable justInTimeCompile for webpack Cypress component testing...
15cfe44 fix(angular): make nx migrate to Angular 22 leave a buildable workspace (#36183)
df5157b feat(core): support filtered targetDefaults via the nested-array shape (#36049)
1393537 fix(angular): bump prescribed angular version to 22.0.4 (#36130)
f22e75c feat(repo): enable the tsgo compiler workspace-wide (#35926)
192f668 feat(angular): support angular v22 (#35851)
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 21.2.9 to 22.1.2

Release notes

Sourced from @angular-devkit/build-angular's releases.

22.1.2

@angular/cli

Commit Description

add packages with built-in schematics to devDependencies only

@angular/build

Commit Description

prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1

@angular/cli

Commit Description

support npm 12 metadata array and error formats

@angular/build

Commit Description

rewrite paths from sandboxed execroots when running under Bazel

22.1.0

@angular/cli

Commit Description

abort and guide manual mitigation when updating catalog packages

prevent Yarn registry environment variable override

remove algoliasearch dependency and support latest docs versions

resolve correct registry name when using npm alias syntax during update

respect client-side release age settings during update resolution

revert package.json changes if installation tasks fail during update

robustly parse npm manifest from array

@schematics/angular

Commit Description

update ai-config to include Angular MCP server config

remove unused spec tsconfig outDir

@angular-devkit/core

Commit Description

deprecate stringToFileBuffer and fileBufferToString

@angular/build

Commit Description

add built-in SQLite cache store fallback

emit debug ids for stable subresource integrity hashes

enable chunk optimization for server builds

migrate advanced optimization Babel plugins to oxc-parser + magic-string

migrate i18n inliner to oxc-parser + magic-string

share persistent build cache across git worktrees

add bounded timeout to vitest executor disposal

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

22.1.2 (2026-07-30)

@angular/cli

Commit Type Description

57db27ea91 fix add packages with built-in schematics to devDependencies only

@angular/build

Commit Type Description

baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1 (2026-07-30)

@angular/cli

Commit Type Description

ab971a8543 fix support npm 12 metadata array and error formats

@angular/build

Commit Type Description

db24220fb8 fix rewrite paths from sandboxed execroots when running under Bazel

22.2.0-next.0 (2026-07-30)

@angular/cli

Commit Type Description

e148a8df93 fix support npm 12 metadata array and error formats

@angular/build

Commit Type Description

6469b5f1f5 fix rewrite paths from sandboxed execroots when running under Bazel

... (truncated)

Commits

bccc749 release: cut the v22.1.2 release
57db27e fix(@angular/cli): add packages with built-in schematics to devDependencies only
baed978 fix(@angular/build): prevent IIFE wrapper interleaving for adjacent classes i...
dde9aed build: update cross-repo angular dependencies
51efbd8 build: update github/codeql-action action to v4.37.4
6c15ac8 ci: add branch tracking comments to dev-infra GitHub actions
5d92c65 release: cut the v22.1.1 release
e30e18a build: update dependency webpack to v5.109.2
46d42d8 build: update dependency oxc-parser to v0.142.0
9ccb475 build: update bazel dependencies
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [postcss](https://github.com/postcss/postcss), [@nx/angular](https://github.com/nrwl/nx/tree/HEAD/packages/angular) and [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies needed to be updated together. Updates `postcss` from 8.5.15 to 8.5.19 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.19) Updates `@nx/angular` from 22.7.5 to 23.1.1 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/23.1.1/packages/angular) Updates `@angular-devkit/build-angular` from 21.2.9 to 22.1.2 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v22.1.2) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.19 dependency-type: direct:development - dependency-name: "@nx/angular" dependency-version: 23.1.1 dependency-type: direct:production - dependency-name: "@angular-devkit/build-angular" dependency-version: 22.1.2 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 2, 2026

Navigation Menu

Uh oh!

Bump postcss, @nx/angular and @angular-devkit/build-angular - #551

Bump postcss, @nx/angular and @angular-devkit/build-angular#551
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/multi-6490ab8e1f

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	abort and guide manual mitigation when updating catalog packages
	prevent Yarn registry environment variable override
	remove algoliasearch dependency and support latest docs versions
	resolve correct registry name when using npm alias syntax during update
	respect client-side release age settings during update resolution
	revert package.json changes if installation tasks fail during update
	robustly parse npm manifest from array

Commit	Description
	update ai-config to include Angular MCP server config
	remove unused spec tsconfig outDir

Commit	Description
	add built-in SQLite cache store fallback
	emit debug ids for stable subresource integrity hashes
	enable chunk optimization for server builds
	migrate advanced optimization Babel plugins to oxc-parser + magic-string
	migrate i18n inliner to oxc-parser + magic-string
	share persistent build cache across git worktrees
	add bounded timeout to vitest executor disposal

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 2, 2026

8.5.19

8.5.18

8.5.17

8.5.16

8.5.19

8.5.18

8.5.17

8.5.16

23.1.1 (2026-07-30)

🚀 Features

🩹 Fixes

22.1.2

@​angular/cli

@​angular/build

22.1.1

@​angular/cli

@​angular/build

22.1.0

@​angular/cli

@​schematics/angular

@​angular-devkit/core

@​angular/build

22.1.2 (2026-07-30)

@​angular/cli

@​angular/build

22.1.1 (2026-07-30)

@​angular/cli

@​angular/build

22.2.0-next.0 (2026-07-30)

@​angular/cli

@​angular/build

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular-devkit/core`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`