chore(deps): bump postcss and @angular-devkit/build-angular by dependabot[bot] · Pull Request #108 · contentstack/kickstart-angular

dependabot · 2026-08-05T12:11:23Z

Bumps postcss to 8.5.23 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates postcss from 8.5.12 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

Fixed postcss-scss commend regression.

Changelog

Sourced from postcss's changelog.

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

Fixed raws after rehydrating a JSON AST (by @sarathfrancis90).

Fixed putting parent-less node in nodes of new node (by @MahinAnowar).

Fixed computing offset in positionBy() (by @greymoth-jp).

Fixed rangeBy() on index: 0 (by @sarathfrancis90).

8.5.15

Fixed declaration parsing performance (by @homanp).

8.5.14

Fixed custom syntax regression (by @43081j).

8.5.13

... (truncated)

Commits

eb9e1fe Release 8.5.23 version
9d19c78 Update dependencies
7beca13 Does no load source map file without opts.from
decea51 Typo
c18e30d Update EM banner
98a39ad Update EM banner
a3e48c4 Release 8.5.22 version
f49d691 Fix custom property losing its semicolon before a comment (#2117)
28e0daf Release 8.5.21 version
3d2b4e4 Update dependencies
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Updates @angular-devkit/build-angular from 21.2.15 to 21.2.20

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.20

@angular-devkit/build-angular

Commit Description

upgrade postcss to 8.5.23

@angular/build

Commit Description

upgrade postcss to 8.5.23

21.2.19

@angular-devkit/build-angular

Commit Description

update http-proxy-middleware to 3.0.7

21.2.18

@angular/cli

Commit Description

respect release age policy in update bootstrapping logic

@angular/build

Commit Description

bump undici to 7.28.0

bump vite to 7.3.6

21.2.17

@angular/build

Commit Description

bump @babel/core to 7.29.7

bump esbuild to 0.28.1

bump piscina to 5.2.0

bump vite to 7.3.5

21.2.16

@angular/cli

Commit Description

update pacote to 21.5.1

@angular/ssr

Commit Description

prioritize options over environment variables in AngularNodeAppEngine

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.20 (2026-08-05)

@angular-devkit/build-angular

Commit Type Description

972f6db7e9 fix upgrade postcss to 8.5.23

@angular/build

Commit Type Description

8de75ada50 fix upgrade postcss to 8.5.23

20.3.33 (2026-08-05)

@angular-devkit/build-angular

Commit Type Description

0b4008f17d fix upgrade postcss to 8.5.23

@angular/build

Commit Type Description

fc861affcd fix upgrade postcss to 8.5.23

22.1.2 (2026-07-30)

@angular/cli

Commit Type Description

57db27ea91 fix add packages with built-in schematics to devDependencies only

@angular/build

Commit Type Description

baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

... (truncated)

Commits

928eb73 release: cut the v21.2.20 release
972f6db fix(@angular-devkit/build-angular): upgrade postcss to 8.5.23
8de75ad fix(@angular/build): upgrade postcss to 8.5.23
1a72825 release: cut the v21.2.19 release
df54298 fix(@angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
fe3a606 release: cut the v21.2.18 release
2510ee3 fix(@angular/build): bump vite to 7.3.6
61a810a fix(@angular/cli): respect release age policy in update bootstrapping logic
a2b6116 fix(@angular/build): bump undici to 7.28.0
9c1edbc release: cut the v21.2.17 release
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

bump version to 0.0.2 and update dependencies

feat: refactor home component to use signals for state management fix: improve error handling in content loading style: update TypeScript target and library to ES2023 refactor: make stack property readonly in ContentstackService

…stack

…properties

… configuration

chore: update dependencies and Angular version to 20.1.6

add codeowners

…er-file remove-duplicate-codeowner-file

move CODEOWNERS to .github folder

package lock fixed and ignores adapted

Update package dependencies and version bump to 0.0.5

…and process.env for production

updated angular version

changed region from us to NA

Add @rollup/rollup-linux-x64-gnu, @rollup/rollup-linux-x64-musl, lightningcss-linux-x64-gnu, and lightningcss-linux-x64-musl as optionalDependencies and regenerate lockfile so Linux CI environments can resolve native platform binaries without hitting the npm optional dependency bug.

chore: add Linux optional dependencies for Rollup and LightningCSS

fix: resolve Snyk security and license issues

fix: resolve Snyk security issues

Bumps [postcss](https://github.com/postcss/postcss) to 8.5.23 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `postcss` from 8.5.12 to 8.5.23 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.12...8.5.23) Updates `@angular-devkit/build-angular` from 21.2.15 to 21.2.20 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.15...v21.2.20) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.23 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.20 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

snyk-io · 2026-08-05T12:11:35Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-05T12:12:00Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	0	✅ Passed
🔵 Low Severity	0	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

dependabot · 2026-08-07T11:02:46Z

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

nandeesh-gajula and others added 30 commits June 26, 2025 18:50

Initial commit

7952573

feat: initial commit

6003f6c

sca-scan.yml

fedc0e5

policy-scan.yml

9eee049

issues-jira.yml

7b45b0b

secrets-scan.yml

43c6580

Updated codeowners

cb3ba94

bump version to 0.0.2 and update dependencies

8ff5144

Merge pull request #8 from contentstack/feat/deps

b3999c0

bump version to 0.0.2 and update dependencies

chore: update dependencies and Angular version to 20.1.6

469091e

feat: refactor home component to use signals for state management fix: improve error handling in content loading style: update TypeScript target and library to ES2023 refactor: make stack property readonly in ContentstackService

feat: add environment configuration and generation script for Content…

c85d31d

…stack

chore: remove unused environment configuration files

43b22b1

feat: enhance environment configuration with additional Contentstack …

24562e6

…properties

feat: add checksums for generate-env.js and vite-env.d.ts in Talisman…

0f0edd2

… configuration

Merge pull request #14 from contentstack/chore/angular-20

345e1a4

chore: update dependencies and Angular version to 20.1.6

add codeowners

e360b85

Merge pull request #18 from contentstack/fix/add-code0wner

ef4ca40

add codeowners

remove-duplicate-codeowner-file

ed185ca

Merge pull request #19 from contentstack/fix/remove-duplicate-codeown…

55f0f13

…er-file remove-duplicate-codeowner-file

move CODEOWNERS to .github folder

f2df159

Merge pull request #21 from contentstack/fix/move-codeowners

5cb7fb6

move CODEOWNERS to .github folder

package lock fixed and ignores adapted

2b6148a

talisman fix

3edd1cc

Merge pull request #22 from contentstack/chore/fix-pkg-lock

7e4c877

package lock fixed and ignores adapted

Delete secrets-scan.yml

a19aa9f

Updated codeowners

6542dcf

Update package dependencies and version bump to 0.0.5

0c5f05e

Merge pull request #30 from contentstack/chore/update-deps-02-10-2025

d62204f

Update package dependencies and version bump to 0.0.5

Enhance environment variable loading: read from .env for development …

2842eca

…and process.env for production

deps

b2d14f3

cs-raj and others added 18 commits June 17, 2026 15:18

updated angular version

28f200b

Merge branch 'main' into enhc/DX-8580

f9de4f1

Merge pull request #82 from contentstack/enhc/DX-8580

6ff6fb8

updated angular version

issues-jira.yml

97a8900

changed region from us to NA

233b878

Merge branch 'main' into enhc/DX-8580

2f293e2

Merge pull request #83 from contentstack/enhc/DX-8580

f4a2b9a

changed region from us to NA

Merge branch 'main' into enhc/DX-8580

aac61c1

Merge pull request #84 from contentstack/enhc/DX-8580

64d9236

chore: add Linux optional dependencies for Rollup and LightningCSS

Delete issues-jira.yml

e26798c

fix snyk issues

38086a7

snyk fixes

25ae2bc

Merge pull request #98 from contentstack/fix/snyk-issues

fd7302a

fix: resolve Snyk security and license issues

sca-scan.yml

e7bdd25

fix: resolve Snyk security issues

0d53a42

Merge pull request #105 from contentstack/fix/snyk-issues-10-8

0d94ace

fix: resolve Snyk security issues

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026

dependabot Bot requested a review from a team as a code owner August 5, 2026 12:11

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026

dependabot Bot mentioned this pull request Aug 5, 2026

chore(deps): bump postcss and @angular-devkit/build-angular #100

Closed

harshitha-cstk closed this Aug 7, 2026

harshitha-cstk force-pushed the dependabot/npm_and_yarn/multi-33d318a61d branch from c3a7947 to 0f81f9c Compare August 7, 2026 11:02

dependabot Bot deleted the dependabot/npm_and_yarn/multi-33d318a61d branch August 7, 2026 11:02

Navigation Menu

Uh oh!

chore(deps): bump postcss and @angular-devkit/build-angular - #108

chore(deps): bump postcss and @angular-devkit/build-angular#108
dependabot[bot] wants to merge 74 commits into
mainfrom
dependabot/npm_and_yarn/multi-33d318a61d

dependabot Bot commented on behalf of github Aug 5, 2026

Uh oh!

snyk-io Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Commit	Description
	bump `@babel/core` to 7.29.7
	bump esbuild to 0.28.1
	bump piscina to 5.2.0
	bump vite to 7.3.5

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 5, 2026

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.15

8.5.14

8.5.13

21.2.20

@​angular-devkit/build-angular

@​angular/build

21.2.19

@​angular-devkit/build-angular

21.2.18

@​angular/cli

@​angular/build

21.2.17

@​angular/build

21.2.16

@​angular/cli

@​angular/ssr

21.2.20 (2026-08-05)

@​angular-devkit/build-angular

@​angular/build

20.3.33 (2026-08-05)

@​angular-devkit/build-angular

@​angular/build

22.1.2 (2026-07-30)

@​angular/cli

@​angular/build

Uh oh!

snyk-io Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/cli`

`@angular/ssr`

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

snyk-io Bot commented Aug 5, 2026 •

edited

Loading