Bump the npm_and_yarn group across 1 directory with 23 updates #1431

dependabot · 2025-02-05T18:11:43Z

Bumps the npm_and_yarn group with 11 updates in the /client-rest directory:

Package	From	To
@angular/core	`11.2.14`	`12.0.0`
postcss	`7.0.39`	`8.4.49`
@angular-devkit/build-angular	`0.1102.13`	`19.1.5`
qs	`6.5.2`	`6.5.3`
cookie	`0.4.2`	`0.7.1`
socket.io	`4.5.0`	`4.8.1`
follow-redirects	`1.14.8`	`1.15.9`
ip	`1.1.9`	`removed`
socks	`2.6.2`	`2.8.3`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`

Updates @angular/core from 11.2.14 to 12.0.0

Changelog

Sourced from @angular/core's changelog.

19.2.0-next.1 (2025-01-29)

core

Commit Type Description

168516462a9 feat support default value in resource() (#59655)

6c92d653493 fix add hasValue narrowing to ResourceRef (#59708)

96e602ebe9c fix cancel in-progress request when same value is assigned (#59280)

cf9054248d1 fix check whether application is destroyed before printing hydration stats (#59716)

82876242e55 fix ensure type is preserved during HMR (#59700)

127fc0dc847 fix fix resource()'s previous.state (#59708)

f862ace1819 fix fixes test timer-based test flakiness in CI (#59674)

elements

Commit Type Description

0c1ecb453c8 fix not setting initial value on signal-based input (#59773)

platform-browser

Commit Type Description

e6cb411e439 fix automatically disable animations on the server (#59762)

6b09716754b fix prepend baseHref to sourceMappingURL in CSS content (#59730)

fd7ee47bf70 fix Update pseudoevent created by createMouseSpecialEvent to populate _originalEvent property (#59690)

65cf061feb4 fix Update pseudoevent created by createMouseSpecialEvent to populate _originalEvent property (#59690)

af9d74710c4 fix Update pseudoevent created by createMouseSpecialEvent to populate _originalEvent property (#59690)

platform-server

Commit Type Description

fc5d187da5e fix decouple server from animations module (#59762)

router

Commit Type Description

c7b6e1107c6 fix prevent error handling when injector is destroyed (#59457)

service-worker

Commit Type Description

e2987a1d4ab fix add missing rxjs peer dependency (#59747)

19.1.4 (2025-01-29)

core

Commit Type Description

544b9ee7ca0 fix check whether application is destroyed before printing hydration stats (#59716)

d6e78c072dc fix ensure type is preserved during HMR (#59700)

c2436702df9 fix fixes test timer-based test flakiness in CI (#59674)

elements

Commit Type Description

... (truncated)

Commits

0a2191f Revert "refactor(core): optimize calls to split and slice while computing...
d555555 fix(platform-browser): prevent memory leak of style nodes if shadow DOM encap...
1449c5c fix(core): do not retain dynamically compiled components and modules (#42003)
effde9d refactor(core): remove unnecessary cast (#41960)
6bec2d4 refactor(core): optimize calls to split and slice while computing version...
e9ddc57 fix(core): invoke profiler around ngOnDestroy lifecycle hooks (#41969)
e218a8b refactor(common): change missing NgSwitch provider error message (#41704)
3361c19 docs: Remove references to protractor from documentation (#41731)
73c6c64 fix(core): handle multiple i18n attributes with expression bindings (#41882)
01cc995 fix(animations): ensure consistent transition namespace ordering (#19854)
Additional commits viewable in compare view

Updates postcss from 7.0.39 to 8.4.49

Release notes

Sourced from postcss's releases.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by @tim-we).

Cleaned up code (by @DrKiraDmitry).

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

8.4.40

Moved to getter/setter in nodes types to help Sass team (by @nex3).

8.4.39

Fixed CssSyntaxError types (by @romainmenke).

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by Tim Weißenfels).

Cleaned up code (by Dmitry Kirillov).

... (truncated)

Commits

aed8b89 Release 8.4.49 version
3450630 Fix position calculations when offset is missing (#1983)
77420d6 Release 8.4.48 version
341529f Update dependencies
66fa667 Add Node.js 23 to CI
1a8b261 fix inconsistent position calculations (#1980)
1cc6ac3 Clarify usage in docs
5e6fd13 Release 8.4.47 version
714bc10 Typo
439d20e Release 8.4.46 version
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 0.1102.13 to 19.1.5

Release notes

Sourced from @angular-devkit/build-angular's releases.

v19.1.5

19.1.5 (2025-01-29)

@schematics/angular

Commit Description

update library schematic to use @angular-devkit/build-angular:ng-packagr

@angular/build

Commit Description

allow tailwindcss 4.x as a peer dependency

disable TypeScript removeComments option

handle empty module case to avoid TypeError

keep background referenced HMR update chunks

support template updates that also trigger global stylesheet changes

update vite to version 6.0.11

@angular/ssr

Commit Description

enhance dynamic route matching for better performance and accuracy

redirect to locale pathname instead of full URL

rename provideServerRoutesConfig to provideServerRouting

v19.1.4

19.1.4 (2025-01-22)

@angular-devkit/schematics

Commit Description

ensure collections can be resolved via test runner in pnpm workspaces

@angular/build

Commit Description

correct path for /@ng/components on Windows

include extracted routes in the manifest during prerendering

only issue invalid i18n config error for duplicate subPaths with inlined locales

replace deprecation of i18n.baseHref with a warning

@angular/ssr

Commit Description

prevent route matcher error when SSR routing is not used

properly manage catch-all routes with base href

unblock route extraction with withEnabledBlockingInitialNavigation

v19.1.3

19.1.3 (2025-01-20)

@angular/build

Commit Description

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

19.1.5 (2025-01-29)

@schematics/angular

Commit Type Description

14e3a71e4 fix update library schematic to use @angular-devkit/build-angular:ng-packagr

@angular/build

Commit Type Description

d53d25fc1 fix allow tailwindcss 4.x as a peer dependency

bd9d379f0 fix disable TypeScript removeComments option

e73e9102e fix handle empty module case to avoid TypeError

bb413456e fix keep background referenced HMR update chunks

2011d3428 fix support template updates that also trigger global stylesheet changes

688019946 fix update vite to version 6.0.11

@angular/ssr

Commit Type Description

94643d54d fix enhance dynamic route matching for better performance and accuracy

747557aa0 fix redirect to locale pathname instead of full URL

bbbc1eb7a fix rename provideServerRoutesConfig to provideServerRouting

18.2.14 (2025-01-29)

@angular-devkit/build-angular

Commit Type Description

9d34d28ec fix remove unused vite dependency

18.2.13 (2025-01-29)

@angular/cli

Commit Type Description

deeaf1883 fix correctly select package versions in descending order during ng add

... (truncated)

Commits

See full diff in compare view

Updates json5 from 1.0.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

v2.1.0

New: The index.mjs and index.min.mjs browser builds in the dist directory support ES6 modules. (#187)

v2.0.1

Fix: The browser builds in the dist directory support ES5. (#182)

v2.0.0

Major: JSON5 officially supports Node.js v6 and later. Support for Node.js v4 has been dropped. Since Node.js v6 supports ES5 features, the code has been rewritten in native ES5, and the dependence on Babel has been eliminated.

New: Support for Unicode 10 has been added.

New: The test framework has been migrated from Mocha to Tap.

New: The browser build at dist/index.js is no longer minified by default. A minified version is available at dist/index.min.js. (#181)

Fix: The warning has been made clearer when line and paragraph separators are

... (truncated)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1 [code, [diff][d2.1.1]]

... (truncated)

Commits

c3a7524 2.2.3
94fd06d docs: update CHANGELOG for v2.2.3
3b8cebf docs(security): use GitHub security advisories
f0fd9e1 docs: publish a security policy
6a91a05 docs(template): bug -> bug report
14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
Additional commits viewable in compare view

Updates loader-utils from 1.4.2 to 2.0.4

Release notes

Sourced from loader-utils's releases.

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

v2.0.2

2.0.2 (2021-11-04)

Bug Fixes

base64 generation and unicode characters (#197) (8c2d24e)

v2.0.1

2.0.1 (2021-10-29)

Bug Fixes

md4 support on Node.js v17 (#193) (1069f61)

v2.0.0

2.0.0 (2020-03-17)

⚠ BREAKING CHANGES

minimum required Node.js version is 8.9.0 (#166) (c937e8c)

the getOptions method returns empty object on empty query (#167) (b595cfb)

Use md4 by default

Changelog

Sourced from loader-utils's changelog.

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

2.0.2 (2021-11-04)

Bug Fixes

base64 generation and unicode characters (#197) (8c2d24e)

2.0.1 (2021-10-29)

Bug Fixes

md4 support on Node.js v17 (#193) (1069f61)

2.0.0 (2020-03-17)

⚠ BREAKING CHANGES

minimum required Node.js version is 8.9.0 (#166) (c937e8c)

the getOptions method returns empty object on empty query (#167) (b595cfb)

Use md4 by default

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

... (truncated)

Commits

6688b50 chore(release): 2.0.4
ac09944 fix: ReDoS problem (#225)
7162619 chore(release): 2.0.3
a93cf6f fix(security): prototype polution exploit (#217)
90c7c4b chore(release): 2.0.2
8c2d24e fix: base64 generation and unicode characters (#197)
5fb5562 chore(release): 2.0.1
1069f61 fix: md4 support on Node.js v17 (#193)
d9f4e23 chore(release): 2.0.0
865dc03 refactor: switch to md4 by default (#168)
Additional commits viewable in compare view

Updates body-parser from 1.20.0 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to [email protected] by @wesleytodd in expressjs/body-parser#527

deps: [email protected] by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: [email protected]

1.20.1

deps: [email protected]

perf: remove unnecessary object clone

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: [email protected]

1.20.1 / 2022-10-06

deps: [email protected]

perf: remove unnecessary object clone

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: [email protected] (#521)
9478591 fix: pin to [email protected]
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
ee91374 1.20.2
368a93a Fix strict json error message on Node.js 19+
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates qs from 6.5.2 to 6.5.3

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3
ed0f5dc [Fix] parse: ignore __proto__ keys (#428)
691e739 [Robustness] stringify: avoid relying on a global undefined (#427)
1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs
12ac1c4 [meta] fix README.md (#399)
0338716 [actions] backport actions from main
5639c20 Clean up license text so it’s properly detected as BSD-3-Clause
51b8a0b add FUNDING.yml
45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...
f814a7f [Dev Deps] backport from main
Additional commits viewable in compare view

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

The undocumented .makeRe method was removed

Require Node.js >= 8.3

Non-breaking changes

Caching was removed

Commits

See full diff in compare view

Updates cookie from 0.4.2 to 0.7.1

Release notes

Sourced from cookie's releases.

0.7.1

Fixed

Allow leading dot for domain (#174)

Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec

Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

perf: parse cookies ~10% faster (#144 by @kurtextrem and #170)

fix: narrow the validation of cookies to match RFC6265 (#167 by @bewinsnw)

fix: add main to package.json for rspack (#166 by @proudparrot2)

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

Add partitioned option

0.5.0

Add priority option

Fix expires option to reject invalid dates

pref: improve default decode speed

pref: remove slow string split in parse

Commits

cf4658f 0.7.1
6a8b8f5 Allow leading dot for domain (#174)
58015c0 Remove more code and perf wins (#172)
ab057d6 0.7.0
5f02ca8 Migrate history to GitHub releases
a5d591c Migrate history to GitHub releases
51968f9 Skip isNaN
9e7ca51 perf(parse): cache length, return early (#144)
d6f39b0 Fix tests for old node
6bb701f Remove failing scorecard
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.

Updates socket.io from 4.5.0 to 4.8.1

Release notes

Sourced from socket.io's releases.

[email protected]

Due to a change in the bundler configuration, the production bundle (socket.io.min.js) did not support sending and receiving binary data in version 4.8.0. This is now fixed.

Dependencies

engine.io@~6.6.0 (no change)

ws@~8.17.1 (no change)

[email protected]

Bug Fixes

bundle: do not mangle the "_placeholder" attribute (ca9e994)

Dependencies

engine.io-client@~6.6.1 (no change)

ws@~8.17.1 (no change)

[email protected]

Features

Custom transport implementations

The transports option now accepts an array of transport implementations:
import { io } from "socket.io-client";
import { XHR, WebSocket } from "engine.io-client";
const socket = io({
transports: [XHR, WebSocket]
});
Here is the list of provided implementations:

Transport Description

Fetch HTTP long-polling based on the built-in fetch() method.

NodeXHR HTTP long-polling based on the XMLHttpRequest object provided by the xmlhttprequest-ssl package.

XHR HTTP long-polling based on the built-in XMLHttpRequest object.

NodeWebSocket WebSocket transport based on the WebSocket object provided by the ws package.

WebSocket WebSocket transport based on the built-in WebSocket object.

WebTransport WebTransport transport based on the built-in WebTransport object.

Usage:

Transport browser Node.js Deno Bun

... (truncated)

Commits

91e1c8b chore(release): [email protected]
8d5528a chore(release): [email protected]
71387e5 refactor(sio-client): reexport transports from the engine
aead835 refactor(sio): make Namespace._fns private (#5196Description has been truncated

Bumps the npm_and_yarn group with 11 updates in the /client-rest directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `11.2.14` | `12.0.0` | | [postcss](https://github.com/postcss/postcss) | `7.0.39` | `8.4.49` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `0.1102.13` | `19.1.5` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `0.7.1` | | [socket.io](https://github.com/socketio/socket.io) | `4.5.0` | `4.8.1` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.8` | `1.15.9` | | [ip](https://github.com/indutny/node-ip) | `1.1.9` | `removed` | | [socks](https://github.com/JoshGlazebrook/socks) | `2.6.2` | `2.8.3` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | Updates `@angular/core` from 11.2.14 to 12.0.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/12.0.0/packages/core) Updates `postcss` from 7.0.39 to 8.4.49 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.39...8.4.49) Updates `@angular-devkit/build-angular` from 0.1102.13 to 19.1.5 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/19.1.5) Updates `json5` from 1.0.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v2.2.3) Updates `loader-utils` from 1.4.2 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.4.2...v2.0.4) Updates `body-parser` from 1.20.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.0...1.20.3) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `cookie` from 0.4.2 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.2...v0.7.1) Updates `socket.io` from 4.5.0 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `express` from 4.18.1 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.18.1...4.21.2) Updates `follow-redirects` from 1.14.8 to 1.15.9 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.8...v1.15.9) Removes `ip` Updates `socks` from 2.6.2 to 2.8.3 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](https://github.com/JoshGlazebrook/socks/commits/2.8.3) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `node-forge` from 0.10.0 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.3.1) Updates `rollup` from 2.38.4 to 4.30.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v2.38.4...v4.30.1) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `socket.io` from 4.5.0 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `socket.io-parser` from 4.0.4 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@4.0.4...4.2.4) Updates `webpack-dev-middleware` from 3.7.2 to 7.4.2 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.2...v7.4.2) Updates `ws` from 6.2.2 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.2...8.17.1) --- updated-dependencies: - dependency-name: "@angular/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

CLAassistant · 2025-02-05T18:11:52Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 5, 2025

dependabot bot mentioned this pull request Feb 5, 2025

Bump the npm_and_yarn group across 1 directory with 16 updates #1378

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group across 1 directory with 23 updates #1431

Bump the npm_and_yarn group across 1 directory with 23 updates #1431

dependabot bot commented on behalf of github Feb 5, 2025

CLAassistant commented Feb 5, 2025

Commit	Type	Description
168516462a9	feat	support default value in `resource()` (#59655)
6c92d653493	fix	add `hasValue` narrowing to `ResourceRef` (#59708)
96e602ebe9c	fix	cancel in-progress request when same value is assigned (#59280)
cf9054248d1	fix	check whether application is destroyed before printing hydration stats (#59716)
82876242e55	fix	ensure type is preserved during HMR (#59700)
127fc0dc847	fix	fix `resource()`'s `previous.state` (#59708)
f862ace1819	fix	fixes test timer-based test flakiness in CI (#59674)

Commit	Type	Description
e6cb411e439	fix	automatically disable animations on the server (#59762)
6b09716754b	fix	prepend `baseHref` to `sourceMappingURL` in CSS content (#59730)
fd7ee47bf70	fix	Update pseudoevent created by createMouseSpecialEvent to populate `_originalEvent` property (#59690)
65cf061feb4	fix	Update pseudoevent created by createMouseSpecialEvent to populate `_originalEvent` property (#59690)
af9d74710c4	fix	Update pseudoevent created by createMouseSpecialEvent to populate `_originalEvent` property (#59690)

Commit	Type	Description
544b9ee7ca0	fix	check whether application is destroyed before printing hydration stats (#59716)
d6e78c072dc	fix	ensure type is preserved during HMR (#59700)
c2436702df9	fix	fixes test timer-based test flakiness in CI (#59674)

Commit	Description
	allow tailwindcss 4.x as a peer dependency
	disable TypeScript `removeComments` option
	handle empty module case to avoid TypeError
	keep background referenced HMR update chunks
	support template updates that also trigger global stylesheet changes
	update vite to version 6.0.11

Commit	Description
	enhance dynamic route matching for better performance and accuracy
	redirect to locale pathname instead of full URL
	rename `provideServerRoutesConfig` to `provideServerRouting`

Commit	Description
	correct path for `/@ng/components` on Windows
	include extracted routes in the manifest during prerendering
	only issue invalid i18n config error for duplicate `subPaths` with inlined locales
	replace deprecation of `i18n.baseHref` with a warning

Commit	Description
	prevent route matcher error when SSR routing is not used
	properly manage catch-all routes with base href
	unblock route extraction with `withEnabledBlockingInitialNavigation`

Commit	Type	Description
d53d25fc1	fix	allow tailwindcss 4.x as a peer dependency
bd9d379f0	fix	disable TypeScript `removeComments` option
e73e9102e	fix	handle empty module case to avoid TypeError
bb413456e	fix	keep background referenced HMR update chunks
2011d3428	fix	support template updates that also trigger global stylesheet changes
688019946	fix	update vite to version 6.0.11

Commit	Type	Description
94643d54d	fix	enhance dynamic route matching for better performance and accuracy
747557aa0	fix	redirect to locale pathname instead of full URL
bbbc1eb7a	fix	rename `provideServerRoutesConfig` to `provideServerRouting`

Transport	Description
`Fetch`	HTTP long-polling based on the built-in `fetch()` method.
`NodeXHR`	HTTP long-polling based on the `XMLHttpRequest` object provided by the `xmlhttprequest-ssl` package.
`XHR`	HTTP long-polling based on the built-in `XMLHttpRequest` object.
`NodeWebSocket`	WebSocket transport based on the `WebSocket` object provided by the `ws` package.
`WebSocket`	WebSocket transport based on the built-in `WebSocket` object.
`WebTransport`	WebTransport transport based on the built-in `WebTransport` object.

Bump the npm_and_yarn group across 1 directory with 23 updates #1431

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 23 updates #1431

Conversation

dependabot bot commented on behalf of github Feb 5, 2025

19.2.0-next.1 (2025-01-29)

core

elements

platform-browser

platform-server

router

service-worker

19.1.4 (2025-01-29)

core

elements

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.49

8.4.48

8.4.47

8.4.46

8.4.45

8.4.44

8.4.43

8.4.42

8.4.41

8.4.40

8.4.39

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

v19.1.5

19.1.5 (2025-01-29)

@​schematics/angular

@​angular/build

@​angular/ssr

v19.1.4

19.1.4 (2025-01-22)

@​angular-devkit/schematics

@​angular/build

@​angular/ssr

v19.1.3

19.1.3 (2025-01-20)

@​angular/build

19.1.5 (2025-01-29)

@​schematics/angular

@​angular/build

@​angular/ssr

18.2.14 (2025-01-29)

@​angular-devkit/build-angular

18.2.13 (2025-01-29)

@​angular/cli

v2.2.3

v2.2.2

v2.2.1

v2.2.0

v2.1.3 [code, diff]

v2.1.2

v2.1.1

v2.1.0

v2.0.1

v2.0.0

v2.2.3 [code, diff]

v2.2.2 [code, diff]

`@schematics/angular`

`@angular/build`

`@angular/ssr`

`@angular-devkit/schematics`

`@angular/build`

`@angular/ssr`

`@angular/build`

`@schematics/angular`

`@angular/build`

`@angular/ssr`

`@angular-devkit/build-angular`

`@angular/cli`