Bump the anglesharp group with 2 updates

[dependabot]

Updated AngleSharp from 1.7.1 to 1.8.1.

Release notes

Sourced from AngleSharp's releases.

1.8.1

Released on Thursday, September 10 2026

What's Changed

• Updated DoFocus and DoBlur to apply to form elements
• Improved explicit form ownership to take precedence over ancestor forms for connected controls (#​1323) @​sebastienros
• Fixed HTML hyperlink pseudo-classes omitting empty href and matching link elements (#​1337) @​sebastienros
• Fixed HTML-namespace element creation losing local-name case (#​1327) @​sebastienros
• Fixed :enabled incorrectly matching HTML links with nonempty href (#​1324) @​sebastienros
• Fixed changing focus of elements
• Released 1.8.1 by @​FlorianRappl in Release 1.8.1 AngleSharp/AngleSharp#1343

New Contributors

• @​sebastienros made their first contribution in Fix HTML hyperlink pseudo-class classification AngleSharp/AngleSharp#1338

Full Changelog: AngleSharp/AngleSharp@v1.8.0...v1.8.1

1.8.0

Released on Saturday, September 5 2026

What's Changed

• Improved AngleSharp's test website
• Fixed script data escaped state potentially not bouncing back correctly
• Added the DomSameObject annotation for the respective IDL members (#​1314) @​lahma
• Added the DomReturnType annotation for methods returning a different IDL type (#​1318)
• Released 1.8.0 by @​FlorianRappl in Release 1.8.0 AngleSharp/AngleSharp#1317

Full Changelog: AngleSharp/AngleSharp@v1.7.3...v1.8.0

1.7.3

Released on Thursday, September 3 2026

What's Changed

• Improved tracking of parse exceptions in the HtmlParser (#​1315) @​lahma
• Fixed tokenizer buffer overrun on encoding change (#​1290) @​jafin
• Fixed selector text dropping the nth-child of clause (#​1292) @​jafin
• Fixed selector text dropping the case-insensitive (#​1291) @​jafin
• Fixed selector specificity carrying between fields instead of saturating (#​1300) @​meziantou
• Fixed condition check for disposed state in ReturnToPool (#​1296) @​meziantou
• Fixed ArgumentOutOfRangeException CSS escapes (#​1299) @​meziantou
• Fixed whitespace around An+B CSS selector notations (#​1297)
• Fixed unsupported pseudo-classes matching everything (#​1295)
• Fixed DomException for invalid foreign attribute names such as xml:lang[ (#​1294)
• Fixed script data escaped state leaving escaped mode too early (#​1298)
• Fixed CurrentScript not indicating the currently executing script (#​1308) @​lahma
• Fixed returned missing attribute-properties to use empty string instead of null (#​1313) @​lahma
• Fixed removal of data-* attributes (#​1310) @​lahma
• Added missing DomName/DomAccessor annotations (#​1301) @​meziantou
• Added missing DomLiterals attribute to AdjacentPosition (#​1311) @​lahma
• Released 1.7.3 by @​FlorianRappl in Release 1.7.3 AngleSharp/AngleSharp#1302

Full Changelog: AngleSharp/AngleSharp@v1.7.2...v1.7.3

1.7.2

Released on Sunday, August 23 2026

What's Changed

• Fixed matching of annotation-xml encoding to be case-insensitive (#​1284) @​arpitjain099
• Fixed <xmp> usage in <select> elements
• Added ability to parse immutable byte buffers without a stream (#​1286) @​dv00d00
• Released 1.7.2 by @​FlorianRappl in Release 1.7.2 AngleSharp/AngleSharp#1288

New Contributors

• @​arpitjain099 made their first contribution in Match the annotation-xml encoding case-insensitively AngleSharp/AngleSharp#1284

Full Changelog: AngleSharp/AngleSharp@1.7.1...v1.7.2

Commits viewable in compare view.

Updated AngleSharp.Css from 1.0.1 to 1.1.2.

Release notes

Sourced from AngleSharp.Css's releases.

1.1.2

Released on Friday, September 11 2026

What's Changed

• Fixed issue with calculation of CSS grid style
• Fixed default value of CSS gradients
• Fixed issue with Point2D style computations
• Fixed issue with style computation of border-image-slice declarations
• Fixed handling of ::before and ::after w.r.t. content declarations
• Added support for more text-overflow keywords
• Added alignment-baseline declaration
• Added baseline-shift declaration
• Added color-interpolation-filters declaration
• Added clip-path and clip-rule declarations
• Added dominant-baseline declaration
• Added fill-opacity and fill-rule declarations
• Added marker-start, marker-mid, and marker-end declarations
• Added mask declaration
• Added text-underline-position declaration
• Added writing-mode declaration
• Released 1.1.2 by @​FlorianRappl in Release 1.1.2 AngleSharp/AngleSharp.Css#246

Full Changelog: AngleSharp/AngleSharp.Css@v1.1.1...v1.1.2

1.1.1

Released on Wednesday, September 9 2026

What's Changed

• Fixed unresolved converter re-entry (#​243) @​sebastienros
• Fixed issue with computation of transform functions
• Fixed computed animation longhands retaining unresolved initial values
• Fixed percentage border-radius components resolving against the wrong axis
• Fixed default list styling for unordered lists
• Added shorthand decomposition and clip support for overflow
• Added explicit pseudo class handling via SetPseudoClass
• Added support for parsing filter declarations
• Released 1.1.1 by @​FlorianRappl in Release 1.1.1 AngleSharp/AngleSharp.Css#245

Full Changelog: AngleSharp/AngleSharp.Css@v1.1.0...v1.1.1

1.1.0

Released on Saturday, September 5 2026

What's Changed

• Improved evaluation of comma-separated media queries (#​230)
• Fixed wrong media feature used for scripting (#​233)
• Fixed wrong rientation and scan evaluation (#​232)
• Fixed not <known media type> is always false (#​231)
• Fixed calc() computations in AoT-compiled applications (#​236) @​sebastienros
• Fixed usage of calc() with unitless scaling (multiplication / division)
• Fixed case-sensitive matching of and / or in @​supports and from / to in @​keyframes (#​240) @​meziantou
• Fixed operator associativity and result units in calc() (#​239) @​meziantou
• Fixed unquoted and invalid url() handling (#​238) @​meziantou
• Fixed handling of invalid keyframe selectors
• Fixed stackoverflow due to cyclic CSS variables (#​241)
• Added optional CSSOM compliant color seralization (#​229) @​lahma
• Added user-preference media features to the render device (#​235) @​lahma
• Added media query list evaluation using IRenderDevice (#​228) @​lahma

New Contributors

• @​sebastienros made their first contribution in Fix calc() computation in trimmed / NativeAOT applications AngleSharp/AngleSharp.Css#236

Full Changelog: AngleSharp/AngleSharp.Css@v1.0.2...v1.1.0

1.0.2

Released on Friday, August 21 2026.

What's Changed

• Fixed oklab/oklch usage with plain number as first argument (#​225) @​scasteran-jw
• Fixed preservation of @​font-face descriptors outside the hardcoded set by @​jafin in Preserve @font-face descriptors outside the hardcoded set AngleSharp/AngleSharp.Css#223
• Improved rebuilding shorthands when setting a declaration by @​jafin in Avoid rebuilding shorthands when setting a declaration AngleSharp/AngleSharp.Css#221
• Improved the build orchestrator to the Fallout stable channel (10.4.0) by @​lahma in Move the build orchestrator to the Fallout stable channel (10.4.0) AngleSharp/AngleSharp.Css#222
• Fixed oklab/oklch lightness misparsed as percentage when given as a number by @​scasteran-jw in Fix oklab/oklch lightness misparsed as percentage when given as a number AngleSharp/AngleSharp.Css#225
• Released 1.0.2 by @​FlorianRappl in Release 1.0.2 AngleSharp/AngleSharp.Css#226

New Contributors

• @​scasteran-jw made their first contribution in Fix oklab/oklch lightness misparsed as percentage when given as a number AngleSharp/AngleSharp.Css#225

Full Changelog: AngleSharp/AngleSharp.Css@v1.0.1...v1.0.2

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

[akoukovistas]

Holding this one — the bump is safe at build time but changes what the published package asks of consuming sites.

Verified locally on this branch (after dotnet restore --force-evaluate, which the PR needs anyway — see below): AngleSharp 1.8.1 + AngleSharp.Css 1.1.2 build clean and all 555 tests pass, golden CSS-normalisation tests included. So this is not a compatibility failure.

The problem is the nuspec. Since #19 we declare AngleSharp directly, so PackageVersion becomes a minimum-version dependency of the shipped package:

<dependency id="AngleSharp" version="1.8.1" />
<dependency id="AngleSharp.Css" version="1.1.2" />

Kentico.Xperience.Core depends on AngleSharp 1.7.1, so 1.8.1 satisfies it and wins — meaning installing this package into an Xperience site silently upgrades AngleSharp above the version Kentico ships and tests against. We would be imposing that on every consumer to gain nothing: the sanitiser uses stable DOM and CSS APIs that work identically on 1.7.1.

That is the same principle Directory.Packages.props already applies to HtmlSanitizer — "match the version Kentico.Xperience.WebApp already depends on, so nothing new is pulled transitively". It just was not written down for AngleSharp. It is now, in 981d308, along with a Dependabot ignore rule so major and minor bumps stop being proposed; patch updates still are. The right time to move AngleSharp is when Kentico moves it.

Also worth recording: this PR's CI failure was not the bump. Dependabot updates the Direct lock entries but leaves the CentralTransitive block at the bottom of the test project's lock file at the old version, so dotnet restore --locked-mode fails with NU1004. Any grouped NuGet PR here hits it; #24 needed the same --force-evaluate fix before it could merge.

Closing. Reopen if you would rather own the AngleSharp version deliberately — that is a legitimate choice, it just should be a deliberate one.