Skip to content

fix(@angular-devkit/build-angular): upgrade postcss to 8.5.23 - #33731

Merged
alan-agius4 merged 2 commits into
angular:20.3.xfrom
alan-agius4:security-bump-postcss-20.3.x
Aug 3, 2026
Merged

fix(@angular-devkit/build-angular): upgrade postcss to 8.5.23#33731
alan-agius4 merged 2 commits into
angular:20.3.xfrom
alan-agius4:security-bump-postcss-20.3.x

Conversation

@alan-agius4

@alan-agius4 alan-agius4 commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

This addresses GHSA-fxqj-rqcc-2cmp

@angular-robot angular-robot Bot added the area: build & ci Related the build and CI infrastructure of the project label Aug 3, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the postcss dependency from version 8.5.12 to 8.5.23 in both packages/angular/build/package.json and packages/angular_devkit/build_angular/package.json. There are no review comments, and I have no feedback to provide.

@alan-agius4 alan-agius4 changed the title build: update dependency postcss to v8.5.23 fix(@angular-devkit/build-angular): upgrade postcss to 8.5.23 Aug 3, 2026
@alan-agius4
alan-agius4 force-pushed the security-bump-postcss-20.3.x branch from 7f39486 to 5ec494b Compare August 3, 2026 09:51
@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Aug 3, 2026
@alan-agius4
alan-agius4 requested a review from clydin August 3, 2026 09:52
@alan-agius4
alan-agius4 force-pushed the security-bump-postcss-20.3.x branch 2 times, most recently from d954ee4 to cf0cc96 Compare August 3, 2026 09:57
@alan-agius4
alan-agius4 force-pushed the security-bump-postcss-20.3.x branch from cf0cc96 to 29f2942 Compare August 3, 2026 09:59
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Aug 3, 2026
@alan-agius4
alan-agius4 merged commit 0b4008f into angular:20.3.x Aug 3, 2026
31 of 32 checks passed
@alan-agius4
alan-agius4 deleted the security-bump-postcss-20.3.x branch August 3, 2026 16:06
@alan-agius4

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build area: @angular-devkit/build-angular area: build & ci Related the build and CI infrastructure of the project target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants