fix(@angular-devkit/build-angular): upgrade postcss to 8.5.12#33070
Conversation
This addresses GHSA-qx2v-qp2m-jg93 Fixes: angular#33067
There was a problem hiding this comment.
Code Review
This pull request updates the postcss dependency from version 8.5.2 to 8.5.12 in the root and package-level package.json files, with corresponding updates in pnpm-lock.yaml. Feedback suggests that the old, potentially vulnerable versions of postcss and nanoid still persist in the lockfile and should be pruned if they are no longer required to avoid triggering security scanners.
|
This PR was merged into the repository. The changes were merged into the following branches:
|
|
This pull request has been automatically locked due to inactivity. Read more about our automatic conversation locking policy. This action has been performed automatically by a bot. |
This addresses GHSA-qx2v-qp2m-jg93
Fixes: #33067