chore(deps): bump browserslist and @angular-devkit/build-angular

[dependabot]

Bumps browserslist to 4.28.8 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates browserslist from 4.14.5 to 4.28.8

Release notes

Sourced from browserslist's releases.

4.28.8

• Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

• Improved parsing performance.
• Fixed unbounded memory growth (by @​alanturing881).
• Fixed prototype write issue (by @​alanturing881).

4.28.6

• Fixed Electron version queries (by @​spokodev).

4.28.5

• Fixed > and >= queries (by @​spokodev).

4.28.4

• Fixed SyntaxError regression of 4.28.3.

4.28.3

• Fixed baseline query case-insensitivity (by @​swwind).

4.28.2

• Fix prototype pollution (by @​chluo1997).

4.28.1

• Removed Baseline warning since we have it own warning.

4.27.0

• Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

• Fixed throwOnMissing with extends query (by @​alexander-akait).

4.26.2

• Fixed baseline-browser-mapping version requirement.

4.26.1

• Updated Firefox ESR.

4.26.0

• Added Baseline queries (by @​tonypconway).

4.25.4

• Fixed Windows support for custom stats (by @​torgeilo).

4.25.3

• Fixed ReDoS (by @​ericcornelissen).

4.25.2

• Fixed Node.js --permission support (by @​broofa).

... (truncated)

Changelog

Sourced from browserslist's changelog.

4.28.8

• Fixed including kaios in baseline queries (by @​Jaybhade).

4.28.7

• Improved parsing performance.
• Fixed unbounded memory growth (by @​alanturing881).
• Fixed prototype write issue (by @​alanturing881).

4.28.6

• Fixed Electron version queries (by @​spokodev).

4.28.5

• Fixed > and >= queries (by @​spokodev).

4.28.4

• Fixed SyntaxError regression of 4.28.3.

4.28.3

• Fixed baseline query case-insensitivity (by @​swwind).

4.28.2

• Fix prototype pollution (by @​chluo1997).

4.28.1

• Removed Baseline warning since we have it own warning.

4.48.0

• Added firefox >= esr query support (by @​SethFalco).
• Fixed docs (by @​SethFalco).

4.27.0

• Added BROWSERSLIST_TRACE_WARNING environment variable.

4.26.3

• Fixed throwOnMissing with extends query (by @​alexander-akait).

4.26.2

• Fixed baseline-browser-mapping version requirement.

... (truncated)

Commits

• f2f2e6c Release 4.28.8 version
• d0787c8 Update dependencies
• fcf8fa9 Merge pull request #939 from Jaybhade/fix/baseline-kaios-without-downstream
• 57ecd64 fix: support "including kaios" without downstream
• 093a0f6 Update EM banner
• b637868 Release 4.28.7 version
• 313f465 Update dependencies
• c935c5a Fix regexp performance
• d7e9e65 Rewrite structure parsing to make it always fast
• ec4a55e Fix import order
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for browserslist since your current version.

Updates @angular-devkit/build-angular from 0.8.9 to 21.2.22

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.22

@​angular-devkit/build-angular

Commit	Description
	update webpack-dev-server to 5.2.6

21.2.21

@​angular/cli

Commit	Description
	update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular/build

Commit	Description
	bump undici to 7.29.0

21.2.20

@​angular-devkit/build-angular

Commit	Description
	upgrade postcss to 8.5.23

@​angular/build

Commit	Description
	upgrade postcss to 8.5.23

21.2.19

@​angular-devkit/build-angular

Commit	Description
	update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit	Description
	respect release age policy in update bootstrapping logic

@​angular/build

Commit	Description
	bump undici to 7.28.0
	bump vite to 7.3.6

21.2.17

@​angular/build

Commit	Description
	bump @​babel/core to 7.29.7
	bump esbuild to 0.28.1
	bump piscina to 5.2.0

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.22 (2026-08-26)

@​angular-devkit/build-angular

Commit	Type	Description
b0047b04f5	fix	update webpack-dev-server to 5.2.6

20.3.35 (2026-08-26)

@​angular-devkit/build-angular

Commit	Type	Description
94b620acd7	fix	update webpack-dev-server to 5.2.6

22.2.0-next.4 (2026-08-19)

@​angular/cli

Commit	Type	Description
34e1e0bb5	fix	enforce MCP roots in get_best_practices tool
2b060630c	fix	handle errors from isAllowedWorkspacePath in best-practices tool
24fd8fce2	fix	throw on out-of-roots workspace in best-practices tool

@​schematics/angular

Commit	Type	Description
ce1b60f89	fix	transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/build

Commit	Type	Description
175273931	feat	Support splitting browser and server stats jsonfiles for easier consumption
1ee0beca7	fix	correct misleading error message for top-level await
0ffe2d27f	fix	disable code splitting for unit test builds
50994d76e	fix	preserve integrity and crossorigin in autoCsp loader
d6fd24320	perf	traverse AST with iterative post-order walker in i18n inliner

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular-devkit/build-angular since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.