chore(deps): bump postcss and @angular-devkit/build-angular in /front-end by dependabot[bot] · Pull Request #1881 · soujava/vagas-java

dependabot

Bumps postcss to 8.5.12 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates postcss from 8.3.6 to 8.5.12

Release notes

Sourced from postcss's releases.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
</tr></table> 

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.12

Fixed reading any file via user-generated CSS.

Added opts.unsafeMap to disable checks.

8.5.11

Fixed nested brackets parsing performance (by @offset).

8.5.10

Fixed XSS via unescaped </style> in non-bundler cases (by @TharVid).

8.5.9

Speed up source map encoding paring in case of the error.

8.5.8

Fixed Processor#version.

8.5.7

Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

... (truncated)

Commits

9bc81c4 Release 8.5.12 version
85c4d7d Another try to fix coverage
94484ca Try to fix coverage
c64b748 Load only .map source maps
aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
233fb26 Mention original author of the solution
2502f75 Release 8.5.11 version
5ca1901 Speed up parsing many nested brackets
42b5337 Update dependencies
7e36e15 Cache node.raws locally in Stringifier hot methods
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 12.2.18 to 21.2.10

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.10

@angular/cli

Commit Description

restrict MCP workspace access to allowed client roots during resolution

21.2.9

@schematics/angular

Commit Description

add missing imports for focus and skip APIs in refactor-jasmine-vitest

@angular/cli

Commit Description

fix broken img ref in ai-tutor

introduce initial package manager workspace awareness

remove standalone true ref in ai tutor

@angular/ssr

Commit Description

introduce trustProxyHeaders option to safely validate and sanitize proxy headers

add support for configuring trusted proxy headers via environment variable

decode route segments when building and matching route tree

use router to normalize URLs for comparison

21.2.8

@angular/cli

Commit Description

dynamically resolve project Angular CLI executable inside MCP tools

ignore EBADF file system errors during MCP project scan

use headless option in MCP test tool

@angular-devkit/build-angular

Commit Description

ensure route has leading slash in prerender builder

fix app-shell route format and

@angular/build

Commit Description

use rootDir for HMR component updates path resolution

validate V8 coverage support for browsers in Vitest

21.2.7

@angular/cli

Commit Description

handle missing package manager during analytics initialization

@angular/build

| Commit | Description |

Commit	Description
	restrict MCP workspace access to allowed client roots during resolution

Commit	Description
	add missing imports for focus and skip APIs in refactor-jasmine-vitest

Commit	Description
	fix broken img ref in ai-tutor
	introduce initial package manager workspace awareness
	remove standalone true ref in ai tutor

Commit	Description
	introduce trustProxyHeaders option to safely validate and sanitize proxy headers
	add support for configuring trusted proxy headers via environment variable
	decode route segments when building and matching route tree
	use router to normalize URLs for comparison

Commit	Description
	dynamically resolve project Angular CLI executable inside MCP tools
	ignore EBADF file system errors during MCP project scan
	use headless option in MCP test tool

Commit	Description
	ensure route has leading slash in prerender builder
	fix app-shell route format and

Commit	Description
	use rootDir for HMR component updates path resolution
	validate V8 coverage support for browsers in Vitest

Commit	Description
	handle missing package manager during analytics initialization

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.10 (2026-05-06)

@angular/cli

Commit Type Description

bb8611913 fix restrict MCP workspace access to allowed client roots during resolution

19.2.25 (2026-04-30)

@angular-devkit/build-angular

Commit Type Description

49ae0ad2d fix upgrade postcss to 8.5.12

@angular/build

Commit Type Description

2d53feca5 fix update esbuild to 0.28.0

@angular/ssr

Commit Type Description

02ce8bf26 fix introduce trustProxyHeaders option to safely validate and sanitize proxy headers

22.0.0-next.7 (2026-04-29)

@angular/cli

Commit Type Description

0572df064 fix fix broken img ref in ai-tutor

d6121b5e8 fix introduce initial package manager workspace awareness

48eab1fc0 fix remove standalone true ref in ai tutor

@schematics/angular

Commit Type Description

Commit	Type	Description
bb8611913	fix	restrict MCP workspace access to allowed client roots during resolution

Commit	Type	Description
49ae0ad2d	fix	upgrade postcss to 8.5.12

Commit	Type	Description
2d53feca5	fix	update esbuild to `0.28.0`

Commit	Type	Description
02ce8bf26	fix	introduce trustProxyHeaders option to safely validate and sanitize proxy headers

Commit	Type	Description
0572df064	fix	fix broken img ref in ai-tutor
d6121b5e8	fix	introduce initial package manager workspace awareness
48eab1fc0	fix	remove standalone true ref in ai tutor

... (truncated)

Commits

64cbd62 release: cut the v21.2.10 release
6f26f4f build: lock file maintenance
111dcc3 refactor(@angular/cli): re-add resolveModule for find examples tool
5418ebb build: update cross-repo angular dependencies
a2c8029 refactor: configure Gemini reviewer to ignore lockfile and changelog
7130c92 refactor(@angular/cli): integrate MCP roots into Host abstraction
bb86119 fix(@angular/cli): restrict MCP workspace access to allowed client roots duri...
564b108 release: cut the v21.2.9 release
dbda92b build: update cross-repo angular dependencies
828c175 build: update pnpm to v10.33.2
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

chore(deps): bump postcss and @angular-devkit/build-angular in /front-end by dependabot[bot] · Pull Request #1881 · soujava/vagas-java

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

8.5.2

8.5.1

8.5 “Duke Alloces”

8.5.12

8.5.11

8.5.10

8.5.9

8.5.8

8.5.7

8.5.6

8.5.5

8.5.4

8.5.3

8.5.2

8.5.1

21.2.10

@​angular/cli

21.2.9

@​schematics/angular

@​angular/cli

@​angular/ssr

21.2.8

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

21.2.7

@​angular/cli

@​angular/build

21.2.10 (2026-05-06)

@​angular/cli

19.2.25 (2026-04-30)

@​angular-devkit/build-angular

@​angular/build

@​angular/ssr

22.0.0-next.7 (2026-04-29)

@​angular/cli

@​schematics/angular

`@angular/cli`

`@schematics/angular`

`@angular/cli`

`@angular/ssr`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@schematics/angular`