Bump the npm_and_yarn group across 1 directory with 13 updates#1192
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the npm_and_yarn group across 1 directory with 13 updates#1192dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the npm_and_yarn group with 7 updates in the /angular-app directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `20.3.2` | `20.3.14` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `20.3.2` | `20.3.16` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.2` | `20.3.18` | | [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) | `1.17.3` | `1.26.0` | | [immutable](https://github.com/immutable-js/immutable-js) | `5.1.3` | `5.1.5` | | [picomatch](https://github.com/micromatch/picomatch) | `4.0.3` | `4.0.4` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.13` | Updates `@angular/common` from 20.3.2 to 20.3.14 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/20.3.14/packages/common) Updates `@angular/compiler` from 20.3.2 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/compiler) Updates `@angular/core` from 20.3.2 to 20.3.18 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.18/packages/core) Updates `@modelcontextprotocol/sdk` from 1.17.3 to 1.26.0 - [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases) - [Commits](modelcontextprotocol/typescript-sdk@1.17.3...v1.26.0) Updates `tar` from 6.2.1 to 7.5.13 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.13) Updates `glob` from 10.4.5 to 13.0.6 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v13.0.6) Updates `immutable` from 5.1.3 to 5.1.5 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v5.1.3...v5.1.5) Updates `picomatch` from 4.0.3 to 4.0.4 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@4.0.3...4.0.4) Updates `minimatch` from 9.0.5 to 10.2.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v9.0.5...v10.2.5) Updates `postcss` from 8.5.6 to 8.5.13 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.13) Updates `qs` from 6.14.0 to 6.15.1 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.14.0...v6.15.1) Updates `rollup` from 4.52.3 to 4.59.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.52.3...v4.59.0) Updates `vite` from 7.1.5 to 7.3.2 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 20.3.14 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.16 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.18 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.26.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 13.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 10.2.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.15.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.59.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 7.3.2 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 7 updates in the /angular-app directory:
20.3.220.3.1420.3.220.3.1620.3.220.3.181.17.31.26.05.1.35.1.54.0.34.0.48.5.68.5.13Updates
@angular/commonfrom 20.3.2 to 20.3.14Release notes
Sourced from
@angular/common's releases.... (truncated)
Changelog
Sourced from
@angular/common's changelog.... (truncated)
Commits
0276479fix(http): prevent XSRF token leakage to protocol-relative URLsa8c577ddocs: add reference to Built-in Pipes in multiple pipe files8922caeRevert "refactor(http): migrate XSRF classes to use inject() function"5047849fix(common): remove placeholder image listeners once view is removed4c66fe4refactor(core): markVERSIONas@__PURE__for better tree-shaking2ad6b72refactor(http): migrate XSRF classes to use inject() functionee578d3build: format md files744cd5crefactor(http): simplifies destruction tracking using destroyed property5ce9d88docs: Adds guide links to HTTP API docs for better discoverability020f176feat(common): Blocks IPv6 localhost from preconnect checksUpdates
@angular/compilerfrom 20.3.2 to 20.3.16Release notes
Sourced from
@angular/compiler's releases.... (truncated)
Changelog
Sourced from
@angular/compiler's changelog.... (truncated)
Commits
c2c2b4afix(core): sanitize sensitive attributes on SVG script elementsd1ca8aefix(compiler): prevent XSS via SVG animationattributeNameand MathML/SVG URLsf689269Revert "fix(compiler): support one additional level of nesting in :host()"7b2e6caRevert "fix(compiler): support arbitrary nesting in :host-context()"6036eefRevert "fix(compiler): support commas in :host() argument"a44658bRevert "fix(compiler): support complex selectors in :nth-child()"9419ea3fix(compiler): support complex selectors in :nth-child()2531863test(compiler): add test for :host:has(> .foo)106b904fix(compiler): support commas in :host() argumentf9d0818fix(compiler): support arbitrary nesting in :host-context()Updates
@angular/corefrom 20.3.2 to 20.3.18Release notes
Sourced from
@angular/core's releases.... (truncated)
Changelog
Sourced from
@angular/core's changelog.... (truncated)
Commits
626bc8bfix(core): sanitize translated form attributes72126f9fix(core): sanitize translated attribute bindings with interpolations7f9de3cfix(core): block creation of sensitive URI attributes from ICU messagesc2c2b4afix(core): sanitize sensitive attributes on SVG script elementsd1ca8aefix(compiler): prevent XSS via SVG animationattributeNameand MathML/SVG URLs820bb39Revert "refactor(core): let the profiler handle asymmetric events leniently"2dccdcdRevert "fix(core): notify profiler events in case of errors"a966ff1refactor(core): let the profiler handle asymmetric events leniently52cf658fix(core): notify profiler events in case of errorsdaae263docs: Adds links to relevant guides for APIs in core packageUpdates
@modelcontextprotocol/sdkfrom 1.17.3 to 1.26.0Release notes
Sourced from
@modelcontextprotocol/sdk's releases.... (truncated)
Commits
fe9c07bchore: bump version to 1.26.0 (#1479)4f01e7efix: add non-null assertions for optional setupServer fields in stateful testa05be17Merge commit from fork50d9fa3Fix #1430: Client Credentials providers scopes support (backported) (#1442)aa81a66fix(deps): resolve npm audit vulnerabilities and bump dependencies (v1.x back...6aba065chore: bump v1.25.3 for backport fixes (#1412)6e8f7e1fix: prevent Hono from overriding global Response object (v1.x) (#1411)12ae856[v1.x backport] Use correct schema for client sampling validation when tools ...b392f02fix: prevent ReDoS in UriTemplate regex patterns (v1.x backport) (#1365)a0c9b13fix: README badges links destinations (#907)Maintainer changes
This version was pushed to npm by pcarleton, a new releaser for
@modelcontextprotocol/sdksince your current version.Updates
tarfrom 6.2.1 to 7.5.13Changelog
Sourced from tar's changelog.
... (truncated)
Commits
d6611ae7.5.13119c401fix(extract): prevent raced symlink writes outside cwd2a294d37.5.1201082a4fix: reject top promise on floating addFilesAsync rejectionsdd1c36alinting35a1ffedoc: more clarity in security warningbf776f67.5.11f48b5faprevent escaping symlinks with drive-relative paths97cff15docs: more security info2b72abc7.5.10Maintainer changes
This version was pushed to npm by isaacs, a new releaser for tar since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
globfrom 10.4.5 to 13.0.6Changelog
Sourced from glob's changelog.
... (truncated)
Commits
e80cb3813.0.69cdbbffrevert tsgo, not ready for test coverage correctness yet89c99bause tsgo compilerb7275d5update deps, expand engines to include node 18942e360update workflows, pull taprc out of package.json4a0d53cupdate tap for mockImport bugfixef94ad2update tap180c2d4update docs37993c8remove stray console.error in test03ae4c213.0.5Maintainer changes
This version was pushed to npm by isaacs, a new releaser for glob since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Updates
immutablefrom 5.1.3 to 5.1.5Release notes
Sourced from immutable's releases.
Changelog
Sourced from immutable's changelog.
Commits
b37b8555.1.516b3313Merge commit from forkfd2ef49fix new proto key injection6734b7bfix Prototype Pollution in mergeDeep, toJS, etc.6f772deMerge pull request #2175 from immutable-js/dependabot/npm_and_yarn/rollup-4.59.05f3dc61Bump rollup from 4.34.8 to 4.59.0049a594Merge pull request #2173 from immutable-js/dependabot/npm_and_yarn/lodash-4.1...2481a77Merge pull request #2172 from mrazauskas/update-tstycheeb04779Bump lodash from 4.17.21 to 4.17.23b973bf3formatMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for immutable since your current version.
Updates
picomatchfrom 4.0.3 to 4.0.4Release notes
Sourced from picomatch's releases.
Commits
e5474fcPublish 4.0.44516eb5Merge commit from fork5eceecdMerge commit from fork0db7dd7Run benchmark again against latest minimatch version (#161)9500377docs: clarify what brace expansion syntax is and isn't supported (#134)2661f23fix typo in globstars.js test name (#138)1798b07docs: fixmakeReexample (#143)9d76bc5chore: undocument removed options (#146)e4d718bRemove unused time-require (#160)38dffebchore(deps): pin dependencies (#158)Updates
minimatchfrom 9.0.5 to 10.2.5Changelog
Sourced from minimatch's changelog.
... (truncated)
Commits
693c82310.2.57953af1do not allow .. to consume drive letter on Windows1caf918lint and format7783ed6ignore docs6d9b356update deps etcc36addb10.2.426b9002docs: add warning about ReDoS3a0d83bfix partial matching of globstar patternsea9484010.2.30873fbaupdate depsUpdates
postcssfrom 8.5.6 to 8.5.13Release notes
Sourced from