chore(deps-dev): bump postcss, @angular-devkit/build-angular and @storybook/angular

[dependabot]

Bumps postcss, @angular-devkit/build-angular and @storybook/angular. These dependencies needed to be updated together.
Updates postcss from 8.4.41 to 8.5.12

Release notes

Sourced from postcss's releases.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @​offset).

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

• Speed up source map encoding paring in case of the error.

8.5.8

• Fixed Processor#version.

8.5.7

• Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

• Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

• Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

• Fixed Parcel compatibility issue (by @​git-sumitchaudhary).

8.5.3

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
</tr></table> 

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.12

• Fixed reading any file via user-generated CSS.
• Added opts.unsafeMap to disable checks.

8.5.11

• Fixed nested brackets parsing performance (by @​offset).

8.5.10

• Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

• Speed up source map encoding paring in case of the error.

8.5.8

• Fixed Processor#version.

8.5.7

• Improved source map annotation cleaning performance (by CodeAnt AI).

8.5.6

• Fixed ContainerWithChildren type discriminating (by @​Goodwine).

8.5.5

• Fixed package.json→exports compatibility with some tools (by @​JounQin).

8.5.4

• Fixed Parcel compatibility issue (by @​git-sumitchaudhary).

8.5.3

• Added more details to Unknown word error (by @​hiepxanh).
• Fixed types (by @​romainmenke).
• Fixed docs (by @​catnipan).

8.5.2

• Fixed end position of rules with semicolon (by @​romainmenke).

8.5.1

• Fixed backwards compatibility for complex cases (by @​romainmenke).

... (truncated)

Commits

• 9bc81c4 Release 8.5.12 version
• 85c4d7d Another try to fix coverage
• 94484ca Try to fix coverage
• c64b748 Load only .map source maps
• aaec7b7 Avoid throwing JSON parsing errors for non-JSON source maps
• 233fb26 Mention original author of the solution
• 2502f75 Release 8.5.11 version
• 5ca1901 Speed up parsing many nested brackets
• 42b5337 Update dependencies
• 7e36e15 Cache node.raws locally in Stringifier hot methods
• Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 18.2.2 to 21.2.11

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.11

@​angular/cli

Commit	Description
	robustly parse npm manifest from array

@​angular/ssr

Commit	Description
	allow all hosts in common engine rendering options to prevent validation errors
	remove stateful flag from URL_PARAMETER_REGEXP

21.2.10

@​angular/cli

Commit	Description
	restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit	Description
	add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

Commit	Description
	fix broken img ref in ai-tutor
	introduce initial package manager workspace awareness
	remove standalone true ref in ai tutor

@​angular/ssr

Commit	Description
	introduce trustProxyHeaders option to safely validate and sanitize proxy headers
	add support for configuring trusted proxy headers via environment variable
	decode route segments when building and matching route tree
	use router to normalize URLs for comparison

21.2.8

@​angular/cli

Commit	Description
	dynamically resolve project Angular CLI executable inside MCP tools
	ignore EBADF file system errors during MCP project scan
	use headless option in MCP test tool

@​angular-devkit/build-angular

Commit	Description
	ensure route has leading slash in prerender builder
	fix app-shell route format and

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.11 (2026-05-13)

@​angular/cli

Commit	Type	Description
bbd63b7a5	fix	robustly parse npm manifest from array

@​angular/ssr

Commit	Type	Description
eafe1a719	fix	allow all hosts in common engine rendering options to prevent validation errors
7a116a80d	fix	remove stateful flag from URL_PARAMETER_REGEXP

20.3.26 (2026-05-13)

@​angular/ssr

Commit	Type	Description
7cc1871ee	fix	allow all hosts in common engine rendering options to prevent validation errors

19.2.26 (2026-05-13)

@​angular/ssr

Commit	Type	Description
842fee029	fix	allow all hosts in common engine rendering options to prevent validation errors

21.2.10 (2026-05-06)

@​angular/cli

Commit	Type	Description
bb8611913	fix	restrict MCP workspace access to allowed client roots during resolution

... (truncated)

Commits

• 00e3663 release: cut the v21.2.11 release
• eafe1a7 fix(@​angular/ssr): allow all hosts in common engine rendering options to prev...
• 7a116a8 fix(@​angular/ssr): remove stateful flag from URL_PARAMETER_REGEXP
• a7705fb build: update cross-repo angular dependencies
• 453ed5b build: update github/codeql-action action to v4.35.4
• f0f9b2d refactor(@​angular/cli): add validation and logging to npm manifest parsing
• bbd63b7 fix(@​angular/cli): robustly parse npm manifest from array
• 64cbd62 release: cut the v21.2.10 release
• 6f26f4f build: lock file maintenance
• 111dcc3 refactor(@​angular/cli): re-add resolveModule for find examples tool
• Additional commits viewable in compare view

Updates @storybook/angular from 8.2.9 to 8.6.18

Release notes

Sourced from @​storybook/angular's releases.

v8.6.18

8.6.18

• Add request validation

v8.6.17

8.6.17

• Harden websocket connection

v8.6.16

8.6.16

• No-op release. No changes.

Changelog

Sourced from @​storybook/angular's changelog.

8.6.18

• Add request validation

8.6.17

• Harden websocket connection

8.6.16

• No-op release. No changes.

8.6.14

• CLI: Add skip onboarding, recommended/minimal config - #30930, thanks @​shilman!
• Core: Fix using dates in expect statements - #28413, thanks @​yann-combarnous!
• React Native Web: Fix expo router by setting JSX to automatic - #31484, thanks @​dannyhw!
• Test: Make sure that lit arrays are not cloned - #31435, thanks @​kasperpeulen!

8.6.13

• Controls: Fix boxShadow on empty controls - #27193, thanks @​H0onnn!
• React Native Web: Update react-native-web - #31324, thanks @​ndelangen!

8.6.12

• CLI: Only install Visual Test Addon if test feature is selected - #30966, thanks @​ghengeveld!
• Core: Fix telemetry error on Storybook UI - #30953, thanks @​yannbf!
• Ember: Fix ember-template-compiler import for ember 6+ - #30682, thanks @​leoeuclids!
• Next: Update vite-plugin-storybook-nextjs to 2.0.0--canary.33.17a2310.0 - #30997, thanks @​kasperpeulen!
• Svelte: Exclude node_modules from docgen - #30981, thanks @​JReinhold!

8.6.11

• Angular: Fix zone.js support for Angular libraries - #30941, thanks @​valentinpalkovic!

8.6.10

• Addon-docs: Fix non-string handling in Stories block - #30913, thanks @​JamesIves!
• Nextjs: Fix styled-jsx optimize vite warnings - #30932, thanks @​kasperpeulen!
• React: Fix actImplementation is not a function - #30929, thanks @​kasperpeulen!

8.6.9

• Next: Fix react aliases in next vite plugin - #30914, thanks @​kasperpeulen!

8.6.8

• Angular: Export all files in Angular package.json - #30849, thanks @​kasperpeulen!
• CLI: Don't add packageManager entry to package.json automatically - #30855, thanks @​kasperpeulen!

... (truncated)

Commits

• 81930ad Bump version from "8.6.17" to "8.6.18" [skip ci]
• c6e550a Bump version from "8.6.16" to "8.6.17" [skip ci]
• 7e51515 Bump version from "8.6.15" to "8.6.16" [skip ci]
• 3812b43 Bump version from 8.6.14 to 8.6.15 MANUALLY
• ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
• 8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
• 1c35b29 Bump version from "8.6.11" to "8.6.12" [skip ci]
• 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
• 83fd38a Merge pull request #30941 from storybookjs/valentin/fix-zone-support-in-angular
• 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/angular since your current version.

[github-actions]

This pull request will be closed in 7 days as it has been open for 30 days with no activity.
To prevent the pull request from being closed, either comment on this pull request or remove the "status: stale" label.