chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates by dependabot[bot] · Pull Request #166 · GoogleCloudPlatform/gcc-creative-studio

dependabot · 2026-04-22T19:00:57Z

Bumps the npm_and_yarn group with 16 updates in the /frontend directory:

Package	From	To
@angular/common	`18.2.14`	`21.2.9`
@angular/platform-server	`18.2.14`	`21.2.9`
@angular/ssr	`18.2.21`	`21.2.8`
@angular/compiler	`18.2.14`	`21.2.9`
@angular/core	`18.2.14`	`21.2.9`
ajv	`6.12.6`	`6.14.0`
minimatch	`3.1.2`	`3.1.5`
basic-ftp	`5.1.0`	`5.3.0`
flatted	`3.3.3`	`3.4.2`
follow-redirects	`1.15.11`	`1.16.0`
lodash	`4.17.21`	`4.18.1`
path-to-regexp	`0.1.12`	`0.1.13`
path-to-regexp	`8.3.0`	`8.4.2`
protobufjs	`7.5.4`	`7.5.5`
qs	`6.14.1`	`6.14.2`
tar	`6.2.1`	`7.5.13`
serialize-javascript	`6.0.2`	`removed`

Updates @angular/common from 18.2.14 to 21.2.9

Release notes

Sourced from @angular/common's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description

handle nested brackets in host object bindings

compiler-cli

Commit Description

error for type parameter declarations

core

Commit Description

handle missing serialized container hydration data

remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description

get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit Description

register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description

prevent recursive scope checks for invalid NgModule imports

core

Commit Description

... (truncated)

Changelog

Sourced from @angular/common's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

540536c fix(http): add CSP nonce support to JsonpClientBackend
8102331 test(http): disable XSRF and mock location in HttpClient tests to avoid Domin...
13f050d test: construct local Date objects to fix timezone flakiness
d0cf299 test: remove unsupported timezone from formatDate tests
b4ab6ba fix(common): avoid redundant image fetch on destroy with auto sizes
adda6c5 build: update aspect_rules_js to 3.0.2
93c6dc6 Revert "refactor(http): Improves base64 encoding/decoding with feature detect...
76431ed Revert "fix(http): correctly cache blob responses in transfer cache (#67002)"
277ade9 fix(http): correctly cache blob responses in transfer cache (#67002)
aeb9b81 refactor(http): Improves base64 encoding/decoding with feature detection (#67...
Additional commits viewable in compare view

Updates @angular/platform-server from 18.2.14 to 21.2.9

Release notes

Sourced from @angular/platform-server's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description

handle nested brackets in host object bindings

compiler-cli

Commit Description

error for type parameter declarations

core

Commit Description

handle missing serialized container hydration data

remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description

get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit Description

register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description

prevent recursive scope checks for invalid NgModule imports

core

Commit Description

... (truncated)

Changelog

Sourced from @angular/platform-server's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

e0b5078 fix(platform-server): prevent SSRF bypasses via protocol-relative and backsla...
f603d47 fix(core): escape forward slashes in transfer state to prevent crawler indexing
04f5841 test(platform-server): fix race condition in incremental hydration test
958fc6a test(platform-server): replace fixed timeout with polling in event replay test
c157916 build: consolidate domino bundling in platform-server
81cabc1 feat(core): add support for TypeScript 6
08ea105 refactor(platform-server): split zone/zoneless tests.
11767ca build: update Jasmine to 6.0.0
30e9c62 fix(core): fix memory leak with event replay
6270bba ci: reformat files
Additional commits viewable in compare view

Updates @angular/ssr from 18.2.21 to 21.2.8

Release notes

Sourced from @angular/ssr's releases.

21.2.8

@angular/cli

Commit Description

dynamically resolve project Angular CLI executable inside MCP tools

ignore EBADF file system errors during MCP project scan

use headless option in MCP test tool

@angular-devkit/build-angular

Commit Description

ensure route has leading slash in prerender builder

fix app-shell route format and

@angular/build

Commit Description

use rootDir for HMR component updates path resolution

validate V8 coverage support for browsers in Vitest

21.2.7

@angular/cli

Commit Description

handle missing package manager during analytics initialization

@angular/build

Commit Description

preserve coverage ignore comments in development

show clear error when styleUrl points to a TypeScript file

21.2.6

@angular/cli

Commit Description

fix sourceRoot resolution for MCP projects tool

@angular/build

Commit Description

ensure transitive SCSS partial errors are tracked in watch mode

ensure Vitest mock patching is executed only once

preserve error stack traces during prerendering

scope CHROME_BIN executable path to individual playwright instances

21.2.5

@angular/cli

Commit Description

support custom port in MCP devserver start tool

@angular/ssr

Commit Description

... (truncated)

Changelog

Sourced from @angular/ssr's changelog.

21.2.8 (2026-04-22)

@angular/cli

Commit Type Description

e91280c05 fix dynamically resolve project Angular CLI executable inside MCP tools

01af6741b fix ignore EBADF file system errors during MCP project scan

f7a3e6ed8 fix use headless option in MCP test tool

@angular-devkit/build-angular

Commit Type Description

00336c037 fix ensure route has leading slash in prerender builder

e87d302d6 fix fix app-shell route format and

@angular/build

Commit Type Description

c93140a54 fix use rootDir for HMR component updates path resolution

6df2b1488 fix validate V8 coverage support for browsers in Vitest

21.2.7 (2026-04-08)

@angular/cli

Commit Type Description

971041aa1 fix handle missing package manager during analytics initialization

@angular/build

Commit Type Description

365cce81d fix preserve coverage ignore comments in development

9f74660c3 fix show clear error when styleUrl points to a TypeScript file

21.2.6 (2026-04-01)

@angular/cli

... (truncated)

Commits

46c98ea release: cut the v21.2.8 release
1883121 build: update cross-repo angular dependencies
2974563 build: lock file maintenance
4f57582 build: update babel monorepo to v7.29.2
a8a4b1d refactor(@angular/build): use t.buildUndefinedNode instead of `Scope#buildU...
fb0c4bd build: update cross-repo angular dependencies
c93140a fix(@angular/build): use rootDir for HMR component updates path resolution
e87d302 fix(@angular-devkit/build-angular): fix app-shell route format and
0787786 refactor: remove debugger statement
30e4e9a build: update all github actions
Additional commits viewable in compare view

Updates @angular/compiler from 18.2.14 to 21.2.9

Release notes

Sourced from @angular/compiler's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description

handle nested brackets in host object bindings

compiler-cli

Commit Description

error for type parameter declarations

core

Commit Description

handle missing serialized container hydration data

remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description

get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit Description

register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description

prevent recursive scope checks for invalid NgModule imports

core

Commit Description

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

a4f3120 refactor(compiler): require a reference in DirectiveMeta
de533fe refactor(compiler-cli): move ClassPropertyMapping into compiler
ea1e34c refactor(compiler): move matchSource into base metadata
e40d378 fix(compiler): handle nested brackets in host object bindings
d04ddd7 fix(core): prevent binding unsafe attributes on SVG animation elements (#67797)
fea25d1 fix(compiler): register SVG animation attributes in URL security context (#67...
880a57d fix(compiler): prevent shimCssText from adding extra blank lines per CSS comment
23ea431 fix(compiler): parse named HTML entities containing digits
334ae10 fix(compiler): ensure generated code compiles
ed2d324 fix(compiler): disallow translations of iframe src
Additional commits viewable in compare view

Updates @angular/core from 18.2.14 to 21.2.9

Release notes

Sourced from @angular/core's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description

handle nested brackets in host object bindings

compiler-cli

Commit Description

error for type parameter declarations

core

Commit Description

handle missing serialized container hydration data

remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description

get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit Description

register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description

prevent recursive scope checks for invalid NgModule imports

core

Commit Description

... (truncated)

Changelog

Sourced from @angular/core's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

17cae6a docs: fix bootstraping link
f603d47 fix(core): escape forward slashes in transfer state to prevent crawler indexing
05d9b97 build: update cross-repo angular dependencies
d4c8a9a refactor(compiler-cli): decouple SymbolBuilder from BoundTarget and minimize ...
057cc6d fix(core): remove obsolete iOS cursor pointer hack in event delegation
c9f8f3a test(core): add missing import of ChangeDetectionStrategy in query_spec
910dcb6 refactor(compiler-cli): decouple TemplateSymbolBuilder from ts.TypeChecker
82192de fix(core): handle missing serialized container hydration data
2ae0912 refactor(core): address review comments on NG0750 error message
e583f4c refactor(core): Add more detail to NG0750 error message
Additional commits viewable in compare view

Updates @angular/platform-server from 18.2.14 to 21.2.9

Release notes

Sourced from @angular/platform-server's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

Description has been truncated

…pdates Bumps the npm_and_yarn group with 16 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `18.2.14` | `21.2.9` | | [@angular/platform-server](https://github.com/angular/angular/tree/HEAD/packages/platform-server) | `18.2.14` | `21.2.9` | | [@angular/ssr](https://github.com/angular/angular-cli) | `18.2.21` | `21.2.8` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `18.2.14` | `21.2.9` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `18.2.14` | `21.2.9` | | [ajv](https://github.com/ajv-validator/ajv) | `6.12.6` | `6.14.0` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` | | [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.1.0` | `5.3.0` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.3` | `3.4.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.15.11` | `1.16.0` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.18.1` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `0.1.12` | `0.1.13` | | [path-to-regexp](https://github.com/pillarjs/path-to-regexp) | `8.3.0` | `8.4.2` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `7.5.4` | `7.5.5` | | [qs](https://github.com/ljharb/qs) | `6.14.1` | `6.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.13` | | [serialize-javascript](https://github.com/yahoo/serialize-javascript) | `6.0.2` | `removed` | Updates `@angular/common` from 18.2.14 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/common) Updates `@angular/platform-server` from 18.2.14 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/platform-server) Updates `@angular/ssr` from 18.2.21 to 21.2.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/v21.2.8/CHANGELOG.md) - [Commits](angular/angular-cli@18.2.21...v21.2.8) Updates `@angular/compiler` from 18.2.14 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/compiler) Updates `@angular/core` from 18.2.14 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/core) Updates `@angular/platform-server` from 18.2.14 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/platform-server) Updates `@angular/ssr` from 18.2.21 to 21.2.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/v21.2.8/CHANGELOG.md) - [Commits](angular/angular-cli@18.2.21...v21.2.8) Updates `ajv` from 6.12.6 to 6.14.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v6.14.0) Updates `minimatch` from 3.1.2 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.1.2...v3.1.5) Updates `basic-ftp` from 5.1.0 to 5.3.0 - [Release notes](https://github.com/patrickjuchli/basic-ftp/releases) - [Changelog](https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md) - [Commits](patrickjuchli/basic-ftp@v5.1.0...v5.3.0) Updates `esbuild` from 0.21.5 to 0.27.3 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.21.5...v0.27.3) Updates `flatted` from 3.3.3 to 3.4.2 - [Commits](WebReflection/flatted@v3.3.3...v3.4.2) Updates `follow-redirects` from 1.15.11 to 1.16.0 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.11...v1.16.0) Updates `immutable` from 4.3.7 to 5.1.5 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.3.7...v5.1.5) Updates `lodash` from 4.17.21 to 4.18.1 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.18.1) Updates `path-to-regexp` from 0.1.12 to 0.1.13 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.12...v.0.1.13) Updates `path-to-regexp` from 8.3.0 to 8.4.2 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/v.0.1.13/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.12...v.0.1.13) Updates `protobufjs` from 7.5.4 to 7.5.5 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.5.4...protobufjs-v7.5.5) Updates `qs` from 6.14.1 to 6.14.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.1...v6.14.2) Updates `tar` from 6.2.1 to 7.5.13 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.13) Updates `rollup` from 4.22.4 to 4.60.2 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.22.4...v4.60.2) Removes `serialize-javascript` Updates `undici` from 6.19.7 to 6.25.0 - [Release notes](https://github.com/nodejs/undici/releases) - [Commits](nodejs/undici@v6.19.7...v6.25.0) Updates `vite` from 5.4.21 to 7.3.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite) Updates `webpack` from 5.94.0 to 5.105.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.94.0...v5.105.2) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 21.2.9 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/platform-server" dependency-version: 21.2.9 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/ssr" dependency-version: 21.2.8 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.9 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.9 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/platform-server" dependency-version: 21.2.9 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/ssr" dependency-version: 21.2.8 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 6.14.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: basic-ftp dependency-version: 5.3.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.27.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.16.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 0.1.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 8.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protobufjs dependency-version: 7.5.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.60.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: undici dependency-version: 6.25.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.105.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates#166

chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates#166
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm_and_yarn-b7c1706e24

dependabot Bot commented on behalf of github Apr 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	add CSP nonce support to JsonpClientBackend
	Don't on Passthru outside of reactive context

Commit	Description
	handle missing serialized container hydration data
	remove obsolete iOS cursor pointer hack in event delegation

Commit	Type	Description
540536c386	fix	add CSP nonce support to JsonpClientBackend
63a857b874	fix	Don't on Passthru outside of reactive context

Commit	Type	Description
7f9450219f	feat	Adds warning for prefetch without main defer trigger
ab061a7610	fix	error for type parameter declarations
9218140348	fix	resolve TCB mapping failure for safe property reads with as any

Commit	Type	Description
a0aa8304cd	feat	bootstrap via `ApplicationRef` with config
9c55fcb3e6	feat	de-duplicate host directives
8fe025f514	feat	drop support for TypeScript 5.9
77f1ca08e4	fix	handle missing serialized container hydration data

Commit	Description
	dynamically resolve project Angular CLI executable inside MCP tools
	ignore EBADF file system errors during MCP project scan
	use headless option in MCP test tool

Commit	Description
	ensure route has leading slash in prerender builder
	fix app-shell route format and

Commit	Description
	use rootDir for HMR component updates path resolution
	validate V8 coverage support for browsers in Vitest

Commit	Description
	preserve coverage ignore comments in development
	show clear error when styleUrl points to a TypeScript file

Commit	Description
	ensure transitive SCSS partial errors are tracked in watch mode
	ensure Vitest mock patching is executed only once
	preserve error stack traces during prerendering
	scope CHROME_BIN executable path to individual playwright instances

Commit	Type	Description
e91280c05	fix	dynamically resolve project Angular CLI executable inside MCP tools
01af6741b	fix	ignore EBADF file system errors during MCP project scan
f7a3e6ed8	fix	use headless option in MCP test tool

Commit	Type	Description
00336c037	fix	ensure route has leading slash in prerender builder
e87d302d6	fix	fix app-shell route format and

Commit	Type	Description
c93140a54	fix	use rootDir for HMR component updates path resolution
6df2b1488	fix	validate V8 coverage support for browsers in Vitest

Commit	Type	Description
365cce81d	fix	preserve coverage ignore comments in development
9f74660c3	fix	show clear error when styleUrl points to a TypeScript file

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 22, 2026

21.2.9

core

http

platform-server

router

21.2.8

compiler

compiler-cli

core

language-service

21.2.7

compiler

compiler-cli

core

21.2.9 (2026-04-15)

core

http

platform-server

router

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

platform-browser

router

compiler

compiler-cli

core

21.2.9

core

http

platform-server

router

21.2.8

compiler

compiler-cli

core

language-service

21.2.7

compiler

compiler-cli

core

21.2.9 (2026-04-15)

core

http

platform-server

router

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

platform-browser

router

compiler

compiler-cli

core

21.2.8

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

21.2.7

@​angular/cli

@​angular/build

21.2.6

@​angular/cli

@​angular/build

21.2.5

@​angular/cli

@​angular/ssr

21.2.8 (2026-04-22)

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

21.2.7 (2026-04-08)

@​angular/cli

@​angular/build

21.2.6 (2026-04-01)

@​angular/cli

21.2.9

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/ssr`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`