@angular/build 19.0.0-next.9 → 19.0.0-rc.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@angular/build",
-  "version": "19.0.0-next.9",
+  "version": "19.0.0-rc.0",
   "description": "Official build system for Angular",
   "keywords": [
     "Angular CLI",
@@ -23,39 +23,41 @@
   "builders": "builders.json",
   "dependencies": {
     "@ampproject/remapping": "2.3.0",
-    "@angular-devkit/architect": "0.1900.0-next.9",
-    "@babel/core": "7.25.2",
-    "@babel/helper-annotate-as-pure": "7.24.7",
+    "@angular-devkit/architect": "0.1900.0-rc.0",
+    "@babel/core": "7.26.0",
+    "@babel/helper-annotate-as-pure": "7.25.9",
     "@babel/helper-split-export-declaration": "7.24.7",
-    "@babel/plugin-syntax-import-attributes": "7.25.6",
-    "@inquirer/confirm": "4.0.1",
+    "@babel/plugin-syntax-import-attributes": "7.26.0",
+    "@inquirer/confirm": "5.0.1",
     "@vitejs/plugin-basic-ssl": "1.1.0",
+    "beasties": "0.1.0",
     "browserslist": "^4.23.0",
-    "critters": "0.0.24",
     "esbuild": "0.24.0",
     "fast-glob": "3.3.2",
     "https-proxy-agent": "7.0.5",
     "istanbul-lib-instrument": "6.0.3",
-    "listr2": "8.2.4",
-    "lmdb": "3.1.3",
-    "magic-string": "0.30.11",
+    "listr2": "8.2.5",
+    "magic-string": "0.30.12",
     "mrmime": "2.0.0",
     "parse5-html-rewriting-stream": "7.0.0",
     "picomatch": "4.0.2",
     "piscina": "4.7.0",
-    "rollup": "4.22.5",
-    "sass": "1.79.4",
+    "rollup": "4.24.3",
+    "sass": "1.80.5",
     "semver": "7.6.3",
-    "vite": "5.4.8",
+    "vite": "5.4.10",
     "watchpack": "2.4.2"
   },
+  "optionalDependencies": {
+    "lmdb": "3.1.3"
+  },
   "peerDependencies": {
-    "@angular/compiler": "^19.0.0-next.0",
-    "@angular/compiler-cli": "^19.0.0-next.0",
-    "@angular/localize": "^19.0.0-next.0",
-    "@angular/platform-server": "^19.0.0-next.0",
-    "@angular/service-worker": "^19.0.0-next.0",
-    "@angular/ssr": "^19.0.0-next.9",
+    "@angular/compiler": "^19.0.0-next.9",
+    "@angular/compiler-cli": "^19.0.0-next.9",
+    "@angular/localize": "^19.0.0-next.9",
+    "@angular/platform-server": "^19.0.0-next.9",
+    "@angular/service-worker": "^19.0.0-next.9",
+    "@angular/ssr": "^19.0.0-rc.0",
     "less": "^4.2.0",
     "postcss": "^8.4.0",
     "tailwindcss": "^2.0.0 || ^3.0.0",

package/src/builders/application/build-action.js

@@ -83,12 +83,6 @@ async function* runEsBuildBuildAction(action, options) {
             cacheOptions.basePath,
             `${workspaceRoot.replace(/\\/g, '/')}/**/.*/**`,
         ];
-        if (!preserveSymlinks) {
-            // Ignore all node modules directories to avoid excessive file watchers.
-            // Package changes are handled below by watching manifest and lock files.
-            // NOTE: this is not enable when preserveSymlinks is true as this would break `npm link` usages.
-            ignored.push('**/node_modules/**');
-        }
         // Setup a watcher
         const { createWatcher } = await Promise.resolve().then(() => __importStar(require('../../tools/esbuild/watcher')));
         watcher = createWatcher({
@@ -101,11 +95,17 @@ async function* runEsBuildBuildAction(action, options) {
         options.signal?.addEventListener('abort', () => void watcher?.close());
         // Watch the entire project root if 'NG_BUILD_WATCH_ROOT' environment variable is set
         if (environment_options_1.shouldWatchRoot) {
+            if (!preserveSymlinks) {
+                // Ignore all node modules directories to avoid excessive file watchers.
+                // Package changes are handled below by watching manifest and lock files.
+                // NOTE: this is not enable when preserveSymlinks is true as this would break `npm link` usages.
+                ignored.push('**/node_modules/**');
+                watcher.add(packageWatchFiles
+                    .map((file) => node_path_1.default.join(workspaceRoot, file))
+                    .filter((file) => (0, node_fs_1.existsSync)(file)));
+            }
             watcher.add(projectRoot);
         }
-        watcher.add(packageWatchFiles
-            .map((file) => node_path_1.default.join(workspaceRoot, file))
-            .filter((file) => (0, node_fs_1.existsSync)(file)));
         // Watch locations provided by the initial build result
         watcher.add(result.watchFiles);
     }

package/src/builders/application/chunk-optimizer.js

@@ -83,10 +83,7 @@ async function optimizeChunks(original, sourcemap) {
         const result = await bundle.generate({
             compact: true,
             sourcemap,
-            chunkFileNames(chunkInfo) {
-                // Do not add hash to file name if already present
-                return /-[a-zA-Z0-9]{8}$/.test(chunkInfo.name) ? '[name].js' : '[name]-[hash].js';
-            },
+            chunkFileNames: (chunkInfo) => `${chunkInfo.name.replace(/-[a-zA-Z0-9]{8}$/, '')}-[hash].js`,
         });
         optimizedOutput = result.output;
     }

package/src/builders/application/execute-build.js

@@ -41,18 +41,42 @@ async function executeBuild(options, context, rebuildState) {
         await (0, i18n_1.loadActiveTranslations)(context, i18nOptions);
     }
     // Reuse rebuild state or create new bundle contexts for code and global stylesheets
-    let bundlerContexts = rebuildState?.rebuildContexts;
-    const codeBundleCache = rebuildState?.codeBundleCache ??
-        new source_file_cache_1.SourceFileCache(cacheOptions.enabled ? cacheOptions.path : undefined);
-    if (bundlerContexts === undefined) {
-        bundlerContexts = (0, setup_bundling_1.setupBundlerContexts)(options, browsers, codeBundleCache);
+    let bundlerContexts;
+    let componentStyleBundler;
+    let codeBundleCache;
+    if (rebuildState) {
+        bundlerContexts = rebuildState.rebuildContexts;
+        componentStyleBundler = rebuildState.componentStyleBundler;
+        codeBundleCache = rebuildState.codeBundleCache;
+    }
+    else {
+        const target = (0, utils_1.transformSupportedBrowsersToTargets)(browsers);
+        codeBundleCache = new source_file_cache_1.SourceFileCache(cacheOptions.enabled ? cacheOptions.path : undefined);
+        componentStyleBundler = (0, setup_bundling_1.createComponentStyleBundler)(options, target);
+        bundlerContexts = (0, setup_bundling_1.setupBundlerContexts)(options, target, codeBundleCache, componentStyleBundler);
     }
     let bundlingResult = await bundler_context_1.BundlerContext.bundleAll(bundlerContexts, rebuildState?.fileChanges.all);
+    if (rebuildState && options.externalRuntimeStyles) {
+        const invalidatedStylesheetEntries = componentStyleBundler.invalidate(rebuildState.fileChanges.all);
+        if (invalidatedStylesheetEntries?.length) {
+            const componentResults = [];
+            for (const stylesheetFile of invalidatedStylesheetEntries) {
+                // externalId is already linked in the bundler context so only enabling is required here
+                const result = await componentStyleBundler.bundleFile(stylesheetFile, true, true);
+                componentResults.push(result);
+            }
+            bundlingResult = bundler_context_1.BundlerContext.mergeResults([bundlingResult, ...componentResults]);
+        }
+    }
     if (options.optimizationOptions.scripts && environment_options_1.shouldOptimizeChunks) {
         bundlingResult = await (0, profiling_1.profileAsync)('OPTIMIZE_CHUNKS', () => (0, chunk_optimizer_1.optimizeChunks)(bundlingResult, options.sourcemapOptions.scripts ? !options.sourcemapOptions.hidden || 'hidden' : false));
     }
-    const executionResult = new bundler_execution_result_1.ExecutionResult(bundlerContexts, codeBundleCache);
+    const executionResult = new bundler_execution_result_1.ExecutionResult(bundlerContexts, componentStyleBundler, codeBundleCache);
     executionResult.addWarnings(bundlingResult.warnings);
+    // Add used external component style referenced files to be watched
+    if (options.externalRuntimeStyles) {
+        executionResult.extraWatchFiles.push(...componentStyleBundler.collectReferencedFiles());
+    }
     // Return if the bundling has errors
     if (bundlingResult.errors) {
         executionResult.addErrors(bundlingResult.errors);
@@ -115,6 +139,10 @@ async function executeBuild(options, context, rebuildState) {
     if (serverEntryPoint) {
         executionResult.addOutputFile(manifest_1.SERVER_APP_ENGINE_MANIFEST_FILENAME, (0, manifest_1.generateAngularServerAppEngineManifest)(i18nOptions, baseHref, undefined), bundler_context_1.BuildOutputFileType.ServerRoot);
     }
+    // Override auto-CSP settings if we are serving through Vite middleware.
+    if (context.builder.builderName === 'dev-server' && options.security) {
+        options.security.autoCsp = false;
+    }
     // Perform i18n translation inlining if enabled
     if (i18nOptions.shouldInline) {
         const result = await (0, i18n_1.inlineI18n)(options, executionResult, initialFiles);

package/src/builders/application/execute-post-bundle.js

@@ -71,7 +71,15 @@ async function executePostBundleSteps(options, outputFiles, assetFiles, initialF
             // Update the index contents with the app shell under these conditions:
             // - Replace 'index.html' with the app shell only if it hasn't been prerendered yet.
             // - Always replace 'index.csr.html' with the app shell.
-            const filePath = appShellRoute && !indexHasBeenPrerendered ? indexHtmlOptions.output : path;
+            let filePath = path;
+            if (appShellRoute && !indexHasBeenPrerendered) {
+                if (outputMode !== schema_1.OutputMode.Server && indexHtmlOptions.output === options_1.INDEX_HTML_CSR) {
+                    filePath = 'index.html';
+                }
+                else {
+                    filePath = indexHtmlOptions.output;
+                }
+            }
             additionalHtmlOutputFiles.set(filePath, (0, utils_1.createOutputFile)(filePath, content, bundler_context_1.BuildOutputFileType.Browser));
         }
         const serializableRouteTreeNodeForManifest = [];

package/src/builders/application/index.d.ts

@@ -6,7 +6,6 @@
  * found in the LICENSE file at https://angular.dev/license
  */
 import { BuilderContext, BuilderOutput } from '@angular-devkit/architect';
-import type { Plugin } from 'esbuild';
 import { BuildOutputFile } from '../../tools/esbuild/bundler-context';
 import { ApplicationBuilderExtensions, ApplicationBuilderInternalOptions } from './options';
 import { Result } from './results';
@@ -22,21 +21,6 @@ export interface ApplicationBuilderOutput extends BuilderOutput {
         destination: string;
     }[];
 }
-/**
- * Builds an application using the `application` builder with the provided
- * options.
- *
- * Usage of the `plugins` parameter is NOT supported and may cause unexpected
- * build output or build failures.
- *
- * @experimental Direct usage of this function is considered experimental.
- *
- * @param options The options defined by the builder's schema to use.
- * @param context An Architect builder context instance.
- * @param plugins An array of plugins to apply to the main code bundling.
- * @returns The build output results of the build.
- */
-export declare function buildApplication(options: ApplicationBuilderOptions, context: BuilderContext, plugins?: Plugin[]): AsyncIterable<ApplicationBuilderOutput>;
 /**
  * Builds an application using the `application` builder with the provided
  * options.

package/src/builders/application/index.js

@@ -100,16 +100,21 @@ context, extensions) {
         signal,
     });
 }
-async function* buildApplication(options, context, pluginsOrExtensions) {
-    let extensions;
-    if (pluginsOrExtensions && Array.isArray(pluginsOrExtensions)) {
-        extensions = {
-            codePlugins: pluginsOrExtensions,
-        };
-    }
-    else {
-        extensions = pluginsOrExtensions;
-    }
+/**
+ * Builds an application using the `application` builder with the provided
+ * options.
+ *
+ * Usage of the `extensions` parameter is NOT supported and may cause unexpected
+ * build output or build failures.
+ *
+ * @experimental Direct usage of this function is considered experimental.
+ *
+ * @param options The options defined by the builder's schema to use.
+ * @param context An Architect builder context instance.
+ * @param extensions An object contain extension points for the build.
+ * @returns The build output results of the build.
+ */
+async function* buildApplication(options, context, extensions) {
     let initial = true;
     for await (const result of buildApplicationInternal(options, context, extensions)) {
         const outputOptions = result.detail?.['outputOptions'];

package/src/builders/application/options.d.ts

@@ -9,7 +9,7 @@ import type { BuilderContext } from '@angular-devkit/architect';
 import type { Plugin } from 'esbuild';
 import { I18nOptions } from '../../utils/i18n-options';
 import { IndexHtmlTransform } from '../../utils/index-file/index-html-generator';
-import { Schema as ApplicationBuilderOptions, I18NTranslation, OutputMode, OutputPathClass } from './schema';
+import { Schema as ApplicationBuilderOptions, ExperimentalPlatform, I18NTranslation, OutputMode, OutputPathClass } from './schema';
 /**
  * The filename for the client-side rendered HTML template.
  * This template is used for client-side rendering (CSR) in a web application.
@@ -119,8 +119,10 @@ export declare function normalizeOptions(context: BuilderContext, projectName: s
     outputMode: OutputMode | undefined;
     ssrOptions: {
         entry?: undefined;
+        platform?: undefined;
     } | {
         entry: string | undefined;
+        platform: ExperimentalPlatform;
     } | undefined;
     verbose: boolean | undefined;
     watch: boolean | undefined;
@@ -181,6 +183,7 @@ export declare function normalizeOptions(context: BuilderContext, projectName: s
     partialSSRBuild: boolean;
     externalRuntimeStyles: boolean | undefined;
     instrumentForCoverage: ((filename: string) => boolean) | undefined;
+    security: import("./schema").Security | undefined;
 }>;
 export declare function getLocaleBaseHref(baseHref: string | undefined, i18n: NormalizedApplicationBuildOptions['i18nOptions'], locale: string): string | undefined;
 export {};

package/src/builders/application/options.js

@@ -116,14 +116,12 @@ async function normalizeOptions(context, projectName, options, extensions) {
         if (!options.server) {
             options.ssr = false;
         }
-        if (options.prerender) {
-            context.logger.warn('The "prerender" option is no longer needed when "outputMode" is specified.');
+        if (options.prerender !== undefined) {
+            context.logger.warn('The "prerender" option is not considered when "outputMode" is specified.');
         }
-        else {
-            options.prerender = !!options.server;
-        }
-        if (options.appShell) {
-            context.logger.warn('The "appShell" option is no longer needed when "outputMode" is specified.');
+        options.prerender = !!options.server;
+        if (options.appShell !== undefined) {
+            context.logger.warn('The "appShell" option is not considered when "outputMode" is specified.');
         }
     }
     // A configuration file can exist in the project or workspace root
@@ -153,9 +151,10 @@ async function normalizeOptions(context, projectName, options, extensions) {
         ssrOptions = {};
     }
     else if (typeof options.ssr === 'object') {
-        const { entry } = options.ssr;
+        const { entry, experimentalPlatform = schema_1.ExperimentalPlatform.Node } = options.ssr;
         ssrOptions = {
             entry: entry && node_path_1.default.join(workspaceRoot, entry),
+            platform: experimentalPlatform,
         };
     }
     let appShellOptions;
@@ -199,10 +198,16 @@ async function normalizeOptions(context, projectName, options, extensions) {
              * If SSR is activated, create a distinct entry file for the `index.html`.
              * This is necessary because numerous server/cloud providers automatically serve the `index.html` as a static file
              * if it exists (handling SSG).
+             *
              * For instance, accessing `foo.com/` would lead to `foo.com/index.html` being served instead of hitting the server.
+             *
+             * This approach can also be applied to service workers, where the `index.csr.html` is served instead of the prerendered `index.html`.
              */
             const indexBaseName = node_path_1.default.basename(options.index);
-            indexOutput = ssrOptions && indexBaseName === 'index.html' ? exports.INDEX_HTML_CSR : indexBaseName;
+            indexOutput =
+                (ssrOptions || prerenderOptions) && indexBaseName === 'index.html'
+                    ? exports.INDEX_HTML_CSR
+                    : indexBaseName;
         }
         else {
             indexOutput = options.index.output || 'index.html';
@@ -231,7 +236,7 @@ async function normalizeOptions(context, projectName, options, extensions) {
         }
     }
     // Initial options to keep
-    const { allowedCommonJsDependencies, aot, baseHref, crossOrigin, externalDependencies, extractLicenses, inlineStyleLanguage = 'css', outExtension, serviceWorker, poll, polyfills, statsJson, outputMode, stylePreprocessorOptions, subresourceIntegrity, verbose, watch, progress = true, externalPackages, namedChunks, budgets, deployUrl, clearScreen, define, partialSSRBuild = false, externalRuntimeStyles, instrumentForCoverage, } = options;
+    const { allowedCommonJsDependencies, aot, baseHref, crossOrigin, externalDependencies, extractLicenses, inlineStyleLanguage = 'css', outExtension, serviceWorker, poll, polyfills, statsJson, outputMode, stylePreprocessorOptions, subresourceIntegrity, verbose, watch, progress = true, externalPackages, namedChunks, budgets, deployUrl, clearScreen, define, partialSSRBuild = false, externalRuntimeStyles, instrumentForCoverage, security, } = options;
     // Return all the normalized options
     return {
         advancedOptimizations: !!aot && optimizationOptions.scripts,
@@ -290,6 +295,7 @@ async function normalizeOptions(context, projectName, options, extensions) {
         partialSSRBuild: environment_options_1.usePartialSsrBuild || partialSSRBuild,
         externalRuntimeStyles,
         instrumentForCoverage,
+        security,
     };
 }
 async function getTailwindConfig(searchDirectories, workspaceRoot, context) {

package/src/builders/application/results.d.ts

@@ -61,7 +61,9 @@ export interface ResultMessage {
 }
 export interface ComponentUpdateResult extends BaseResult {
     kind: ResultKind.ComponentUpdate;
-    id: string;
-    type: 'style' | 'template';
-    content: string;
+    updates: {
+        id: string;
+        type: 'style' | 'template';
+        content: string;
+    }[];
 }

package/src/builders/application/schema.d.ts

@@ -153,6 +153,10 @@ export interface Schema {
      * Global scripts to be included in the build.
      */
     scripts?: ScriptElement[];
+    /**
+     * Security features to protect against XSS and other common attacks
+     */
+    security?: Security;
     /**
      * The full path for the server entry point to the application, relative to the current
      * workspace.
@@ -464,6 +468,31 @@ export interface ScriptClass {
      */
     input: string;
 }
+/**
+ * Security features to protect against XSS and other common attacks
+ */
+export interface Security {
+    /**
+     * Enables automatic generation of a hash-based Strict Content Security Policy
+     * (https://web.dev/articles/strict-csp#choose-hash) based on scripts in index.html. Will
+     * default to true once we are out of experimental/preview phases.
+     */
+    autoCsp?: AutoCspUnion;
+}
+/**
+ * Enables automatic generation of a hash-based Strict Content Security Policy
+ * (https://web.dev/articles/strict-csp#choose-hash) based on scripts in index.html. Will
+ * default to true once we are out of experimental/preview phases.
+ */
+export type AutoCspUnion = boolean | AutoCspClass;
+export interface AutoCspClass {
+    /**
+     * Include the `unsafe-eval` directive (https://web.dev/articles/strict-csp#remove-eval) in
+     * the auto-CSP. Please only enable this if you are absolutely sure that you need to, as
+     * allowing calls to eval will weaken the XSS defenses provided by the auto-CSP.
+     */
+    unsafeEval?: boolean;
+}
 /**
  * Generates a service worker configuration.
  */
@@ -500,6 +529,37 @@ export interface SsrClass {
      * The server entry-point that when executed will spawn the web server.
      */
     entry?: string;
+    /**
+     * Specifies the platform for which the server bundle is generated. This affects the APIs
+     * and modules available in the server-side code.
+     *
+     * - `node`:  (Default) Generates a bundle optimized for Node.js environments.
+     * - `neutral`: Generates a platform-neutral bundle suitable for environments like edge
+     * workers, and other serverless platforms. This option avoids using Node.js-specific APIs,
+     * making the bundle more portable.
+     *
+     * Please note that this feature does not provide polyfills for Node.js modules.
+     * Additionally, it is experimental, and the schematics may undergo changes in future
+     * versions.
+     */
+    experimentalPlatform?: ExperimentalPlatform;
+}
+/**
+ * Specifies the platform for which the server bundle is generated. This affects the APIs
+ * and modules available in the server-side code.
+ *
+ * - `node`:  (Default) Generates a bundle optimized for Node.js environments.
+ * - `neutral`: Generates a platform-neutral bundle suitable for environments like edge
+ * workers, and other serverless platforms. This option avoids using Node.js-specific APIs,
+ * making the bundle more portable.
+ *
+ * Please note that this feature does not provide polyfills for Node.js modules.
+ * Additionally, it is experimental, and the schematics may undergo changes in future
+ * versions.
+ */
+export declare enum ExperimentalPlatform {
+    Neutral = "neutral",
+    Node = "node"
 }
 /**
  * Options to pass to style preprocessors.
@@ -509,6 +569,32 @@ export interface StylePreprocessorOptions {
      * Paths to include. Paths will be resolved to workspace root.
      */
     includePaths?: string[];
+    /**
+     * Options to pass to the sass preprocessor.
+     */
+    sass?: Sass;
+}
+/**
+ * Options to pass to the sass preprocessor.
+ */
+export interface Sass {
+    /**
+     * A set of deprecations to treat as fatal. If a deprecation warning of any provided type is
+     * encountered during compilation, the compiler will error instead. If a Version is
+     * provided, then all deprecations that were active in that compiler version will be treated
+     * as fatal.
+     */
+    fatalDeprecations?: string[];
+    /**
+     * A set of future deprecations to opt into early. Future deprecations passed here will be
+     * treated as active by the compiler, emitting warnings as necessary.
+     */
+    futureDeprecations?: string[];
+    /**
+     * A set of active deprecations to ignore. If a deprecation warning of any provided type is
+     * encountered during compilation, the compiler will ignore it instead.
+     */
+    silenceDeprecations?: string[];
 }
 export type StyleElement = StyleClass | string;
 export interface StyleClass {

package/src/builders/application/schema.js

@@ -2,7 +2,7 @@
 // THIS FILE IS AUTOMATICALLY GENERATED. TO UPDATE THIS FILE YOU NEED TO CHANGE THE
 // CORRESPONDING JSON SCHEMA FILE, THEN RUN devkit-admin build (or bazel build ...).
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OutputMode = exports.OutputHashing = exports.InlineStyleLanguage = exports.I18NTranslation = exports.CrossOrigin = exports.Type = void 0;
+exports.ExperimentalPlatform = exports.OutputMode = exports.OutputHashing = exports.InlineStyleLanguage = exports.I18NTranslation = exports.CrossOrigin = exports.Type = void 0;
 /**
  * The type of budget.
  */
@@ -66,3 +66,21 @@ var OutputMode;
     OutputMode["Server"] = "server";
     OutputMode["Static"] = "static";
 })(OutputMode || (exports.OutputMode = OutputMode = {}));
+/**
+ * Specifies the platform for which the server bundle is generated. This affects the APIs
+ * and modules available in the server-side code.
+ *
+ * - `node`:  (Default) Generates a bundle optimized for Node.js environments.
+ * - `neutral`: Generates a platform-neutral bundle suitable for environments like edge
+ * workers, and other serverless platforms. This option avoids using Node.js-specific APIs,
+ * making the bundle more portable.
+ *
+ * Please note that this feature does not provide polyfills for Node.js modules.
+ * Additionally, it is experimental, and the schematics may undergo changes in future
+ * versions.
+ */
+var ExperimentalPlatform;
+(function (ExperimentalPlatform) {
+    ExperimentalPlatform["Neutral"] = "neutral";
+    ExperimentalPlatform["Node"] = "node";
+})(ExperimentalPlatform || (exports.ExperimentalPlatform = ExperimentalPlatform = {}));

package/src/builders/application/schema.json

@@ -18,7 +18,18 @@
     },
     "server": {
       "type": "string",
-      "description": "The full path for the server entry point to the application, relative to the current workspace."
+      "description": "The full path for the server entry point to the application, relative to the current workspace.",
+      "oneOf": [
+        {
+          "type": "string",
+          "description": "The full path for the server entry point to the application, relative to the current workspace."
+        },
+        {
+          "const": false,
+          "type": "boolean",
+          "description": "Indicates that a server entry point is not provided."
+        }
+      ]
     },
     "polyfills": {
       "description": "A list of polyfills to include in the build. Can be a full path for a file, relative to the current workspace or module specifier. Example: 'zone.js'.",
@@ -37,6 +48,33 @@
       "type": "string",
       "description": "Customize the base path for the URLs of resources in 'index.html' and component stylesheets. This option is only necessary for specific deployment scenarios, such as with Angular Elements or when utilizing different CDN locations."
     },
+    "security": {
+      "description": "Security features to protect against XSS and other common attacks",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "autoCsp": {
+          "description": "Enables automatic generation of a hash-based Strict Content Security Policy (https://web.dev/articles/strict-csp#choose-hash) based on scripts in index.html. Will default to true once we are out of experimental/preview phases.",
+          "default": false,
+          "oneOf": [
+            {
+              "type": "object",
+              "properties": {
+                "unsafeEval": {
+                  "type": "boolean",
+                  "description": "Include the `unsafe-eval` directive (https://web.dev/articles/strict-csp#remove-eval) in the auto-CSP. Please only enable this if you are absolutely sure that you need to, as allowing calls to eval will weaken the XSS defenses provided by the auto-CSP.",
+                  "default": false
+                }
+              },
+              "additionalProperties": false
+            },
+            {
+              "type": "boolean"
+            }
+          ]
+        }
+      }
+    },
     "scripts": {
       "description": "Global scripts to be included in the build.",
       "type": "array",
@@ -125,6 +163,34 @@
             "type": "string"
           },
           "default": []
+        },
+        "sass": {
+          "description": "Options to pass to the sass preprocessor.",
+          "type": "object",
+          "properties": {
+            "fatalDeprecations": {
+              "description": "A set of deprecations to treat as fatal. If a deprecation warning of any provided type is encountered during compilation, the compiler will error instead. If a Version is provided, then all deprecations that were active in that compiler version will be treated as fatal.",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "silenceDeprecations": {
+              "description": " A set of active deprecations to ignore. If a deprecation warning of any provided type is encountered during compilation, the compiler will ignore it instead.",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "futureDeprecations": {
+              "description": "A set of future deprecations to opt into early. Future deprecations passed here will be treated as active by the compiler, emitting warnings as necessary.",
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false
@@ -481,7 +547,6 @@
     },
     "prerender": {
       "description": "Prerender (SSG) pages of your application during build time.",
-      "default": false,
       "oneOf": [
         {
           "type": "boolean",
@@ -518,6 +583,11 @@
             "entry": {
               "type": "string",
               "description": "The server entry-point that when executed will spawn the web server."
+            },
+            "experimentalPlatform": {
+              "description": "Specifies the platform for which the server bundle is generated. This affects the APIs and modules available in the server-side code. \n\n- `node`:  (Default) Generates a bundle optimized for Node.js environments. \n- `neutral`: Generates a platform-neutral bundle suitable for environments like edge workers, and other serverless platforms. This option avoids using Node.js-specific APIs, making the bundle more portable. \n\nPlease note that this feature does not provide polyfills for Node.js modules. Additionally, it is experimental, and the schematics may undergo changes in future versions.",
+              "default": "node",
+              "enum": ["node", "neutral"]
             }
           },
           "additionalProperties": false
@@ -526,8 +596,7 @@
     },
     "appShell": {
       "type": "boolean",
-      "description": "Generates an application shell during build time.",
-      "default": false
+      "description": "Generates an application shell during build time."
     },
     "outputMode": {
       "type": "string",

package/src/builders/application/setup-bundling.d.ts

@@ -5,6 +5,7 @@
  * Use of this source code is governed by an MIT-style license that can be
  * found in the LICENSE file at https://angular.dev/license
  */
+import { ComponentStylesheetBundler } from '../../tools/esbuild/angular/component-stylesheets';
 import { SourceFileCache } from '../../tools/esbuild/angular/source-file-cache';
 import { BundlerContext } from '../../tools/esbuild/bundler-context';
 import { NormalizedApplicationBuildOptions } from './options';
@@ -16,4 +17,5 @@ import { NormalizedApplicationBuildOptions } from './options';
  * @param codeBundleCache An instance of the TypeScript source file cache.
  * @returns An array of BundlerContext objects.
  */
-export declare function setupBundlerContexts(options: NormalizedApplicationBuildOptions, browsers: string[], codeBundleCache: SourceFileCache): BundlerContext[];
+export declare function setupBundlerContexts(options: NormalizedApplicationBuildOptions, target: string[], codeBundleCache: SourceFileCache, stylesheetBundler: ComponentStylesheetBundler): BundlerContext[];
+export declare function createComponentStyleBundler(options: NormalizedApplicationBuildOptions, target: string[]): ComponentStylesheetBundler;