chore(deps): bump the npm-security-updates group across 1 directory with 3 updates by dependabot[bot] · Pull Request #61 · zitadel/angular-auth

dependabot · 2026-08-04T00:40:53Z

Bumps the npm-security-updates group with 3 updates in the / directory: brace-expansion, linkify-it and postcss.

Updates brace-expansion from 1.1.15 to 1.1.18

Commits

758fcd6 1.1.18
27fbeed Merge commit from fork
5c57cc2 1.1.17
d757f1d npm ignore .claude
cb4b9e4 fix: backport GHSA-mh99-v99m-4gvg (#129)
447763a 1.1.16
d74e630 fix: v1 backport for CVE-2026-13149 (#122)
See full diff in compare view

Updates linkify-it from 5.0.1 to 5.0.2

Changelog

5.0.2 / 2026-07-02

Fixed DoS in mailto: links (restrict user name to 64 chars).

Restricted user/pass part length in links.

Commits

50a0c91 5.0.2 released
de3b885 Update package hooks
13effaa Add package lock
39d748d Bump c8
00ce877 Drop tlds deps
ecde823 Update benchmark to mitata
23c62cd Refactor demo / doc build and publish
fd63f3b CI config update
f4ea5af demo: update bootstrap & layout
1454fb6 lint: dim warnings
Additional commits viewable in compare view

Updates postcss from 8.5.15 to 8.5.28

Release notes

Sourced from postcss's releases.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

8.5.16

Fixed Input#origin() position (by @mizdra).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.28

Fixes types regression.

8.5.27

Fixed removing any comments starting with /*# (by @dylanpulver).

Fixed * hack before a comment in Custom Properties (by @Jaybhade).

Fixed empty values in the middle of list.comma() (by @MahinAnowar).

Fixed whitespace-only values in list.space() (by @MahinAnowar).

Fixed rule’s end position on space before semicolon (by @maximilliangrand).

Fixed types (by @romainmenke).

Fixed Chinese text in deprecation warning (by @Jesse205).

8.5.26

Fixed list.split() regression (by @lazerg).

Track symlinks in path protection in source map loading (by @drengir1).

8.5.25

Fixed 8.5.17 visitor regression.

Fixed list.split() for non-string values (by @amir-rezaei).

8.5.24

Preserve the BOM after the processing (by @hdimer).

8.5.23

Do not load source map without opts.from for security reasons.

8.5.22

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

8.5.21

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).

Fixed docs (by @isker).

8.5.20

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).

Fixed mixing AST error on warnings (by @MahinAnowar).

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

... (truncated)

Commits

e544bff Release 8.5.28 version
f8fc252 Typo
5039fd7 Add missed release notes
ae40ca4 Release 8.5.27 version
62b1626 Fix linter
1dba938 Update dependencies
3e82edc Keep non-annotation comments when the processor has no plugins (#2150)
6d23bc3 Fix link
508e997 Add GitHub Sponsors link
e993739 Add CodeRabbit sponsor (#2145)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

…ith 4 updates (#50) Bumps the npm-security-updates group with 3 updates in the / directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core). Updates `@angular/common` from 19.2.25 to 22.0.2 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.2/packages/common) Updates `@angular/compiler` from 19.2.25 to 22.0.2 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.2/packages/compiler) Updates `@angular/core` from 19.2.25 to 22.0.2 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.2/packages/core) Updates `@babel/core` from 7.26.9 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-core) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 22.0.2 dependency-type: direct:development dependency-group: npm-security-updates - dependency-name: "@angular/compiler" dependency-version: 22.0.2 dependency-type: direct:development dependency-group: npm-security-updates - dependency-name: "@angular/core" dependency-version: 22.0.2 dependency-type: direct:development dependency-group: npm-security-updates - dependency-name: "@babel/core" dependency-version: 7.29.0 dependency-type: indirect dependency-group: npm-security-updates ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: replace deprecated labels with issue types in templates bug_report.md: labels: bug -> type: bug feature_request.md: labels: enhancement -> type: enhancement documentation-issue.md: labels: docs -> labels: area/docs * chore: assign task type to documentation issue template Documentation issues keep the area/docs label and additionally get the task issue type.

mridang · 2026-09-10T10:07:56Z

@dependabot recreate

…ith 3 updates Bumps the npm-security-updates group with 3 updates in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [linkify-it](https://github.com/markdown-it/linkify-it) and [postcss](https://github.com/postcss/postcss). Updates `brace-expansion` from 1.1.15 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.15...v1.1.18) Updates `linkify-it` from 5.0.1 to 5.0.2 - [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/linkify-it@5.0.1...5.0.2) Updates `postcss` from 8.5.15 to 8.5.28 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.15...8.5.28) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm-security-updates - dependency-name: linkify-it dependency-version: 5.0.2 dependency-type: indirect dependency-group: npm-security-updates - dependency-name: postcss dependency-version: 8.5.25 dependency-type: indirect dependency-group: npm-security-updates ... Signed-off-by: dependabot[bot] <support@github.com>

mridang · 2026-09-10T23:54:41Z

@dependabot rebase

dependabot · 2026-09-10T23:55:53Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot and others added 3 commits June 22, 2026 05:56

ci: add issues/PRs to kanban project workflow (#57)

e93bc6c

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update JavaScript / TypeScript code labels Aug 4, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-security-updates-e30d1480f5 branch from cc13926 to 88b879c Compare September 10, 2026 10:09

mridang force-pushed the main branch from e93bc6c to cd6f403 Compare September 10, 2026 23:53

dependabot Bot closed this Sep 10, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-security-updates-e30d1480f5 branch September 10, 2026 23:55

Navigation Menu

Uh oh!

chore(deps): bump the npm-security-updates group across 1 directory with 3 updates - #61

chore(deps): bump the npm-security-updates group across 1 directory with 3 updates#61
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/npm-security-updates-e30d1480f5

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited

Loading

Uh oh!

mridang commented Sep 10, 2026

Uh oh!

mridang commented Sep 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

5.0.2 / 2026-07-02

8.5.28

8.5.27

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

8.5.18

8.5.17

8.5.16

8.5.28

8.5.27

8.5.26

8.5.25

8.5.24

8.5.23

8.5.22

8.5.21

8.5.20

8.5.19

Uh oh!

mridang commented Sep 10, 2026

Uh oh!

mridang commented Sep 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Aug 4, 2026 •

edited

Loading