Skip to content

Bump picomatch, @angular-eslint/schematics and @angular/cli#461

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2ffde38216
Open

Bump picomatch, @angular-eslint/schematics and @angular/cli#461
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2ffde38216

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 8, 2026 •
edited
Loading

Bumps picomatch to 2.3.2 and updates ancestor dependencies picomatch, @angular-eslint/schematics and @angular/cli. These dependencies need to be updated together.

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates picomatch from 4.0.2 to 4.0.4

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates @angular-eslint/schematics from 18.3.1 to 21.3.1

Release notes

Sourced from @​angular-eslint/schematics's releases.

v21.3.1

21.3.1 (2026-03-17)

🩹 Fixes

  • update dependency @​angular/compiler to v21.2.1 (#2934)
  • narrow build target cache outputs to avoid clobbering compile artifacts (#2940)
  • narrow build target cache outputs to avoid clobbering compile artifacts" (#2943)
  • update dependency eslint to v10.0.3 (#2949)
  • update dependency @​angular/compiler to v21.2.2 (#2954)
  • eslint-plugin: [no-uncalled-signals] properly handle statements with unary operators (#2926)
  • prefer-self-closing-tags: add selectedcontent nonAriaElements (#2939)

❤️ Thank You

v21.3.0

21.3.0 (2026-03-05)

🚀 Features

  • add support for ESLint v10 (#2903)
  • eslint-plugin: add computed-must-return rule (#2882)
  • eslint-plugin: [no-uncalled-signals] detect Signal member access (#2848)
  • eslint-plugin-template: add no-non-null-assertion rule (#2885)

🩹 Fixes

  • update dependency @​angular/compiler to v21.1.4 (#2891)
  • update dependency @​angular/compiler to v21.2.0 (#2915)
  • eslint-plugin: [no-uncalled-signals] add check InputSignalWithTransform (#2879)
  • eslint-plugin: [no-uncalled-signals] detect Signal type correctly (#2907)
  • eslint-plugin-template: [prefer-template-literal] preserve nested non string binary + operation (#2902)

❤️ Thank You

v21.2.0

21.2.0 (2026-01-29)

🚀 Features

... (truncated)

Changelog

Sourced from @​angular-eslint/schematics's changelog.

21.3.1 (2026-03-17)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.3.0 (2026-03-05)

🚀 Features

  • add support for ESLint v10 (#2903)

❤️ Thank You

  • Jason Weinzierl

21.2.0 (2026-01-29)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.1.0 (2025-12-08)

🩹 Fixes

  • reference @​angular/cli peer in addition to direct dependencies (#2820)

❤️ Thank You

21.0.1 (2025-11-23)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.0.0 (2025-11-22)

🚀 Features

  • schematics: generate new projects using eslint defineConfig (5aa8171b)
  • ⚠️ update Angular dependencies to v21 (6a6b671e)

⚠️ Breaking Changes

  • ⚠️ update Angular dependencies to v21 (6a6b671e)

❤️ Thank You

20.7.0 (2025-11-22)

This was a version bump only for schematics to align it with other projects, there were no code changes.

... (truncated)

Commits
  • 8f2afdc chore(release): publish 21.3.1
  • a959e4d chore(release): publish 21.3.0
  • 3ef7fb1 feat: add support for ESLint v10 (#2903)
  • 6fa321d chore(release): publish 21.2.0
  • 4fa7889 chore(release): publish 21.1.0
  • e7bb47b fix: reference @​angular/cli peer in addition to direct dependencies (#2820)
  • b19b1f6 chore(release): publish 21.0.1
  • 9ae353f chore(release): publish 21.0.0
  • 5aa8171 feat(schematics): generate new projects using eslint defineConfig
  • 6a6b671 feat!: update Angular dependencies to v21
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​angular-eslint/schematics since your current version.


Updates @angular/cli from 18.2.4 to 21.2.10

Release notes

Sourced from @​angular/cli's releases.

21.2.10

@​angular/cli

Commit Description
fix - bb8611913 restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit Description
fix - e7abeb5c7 add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

Commit Description
fix - 233deef01 fix broken img ref in ai-tutor
fix - 7cea9885c introduce initial package manager workspace awareness
fix - 5b1a5b743 remove standalone true ref in ai tutor

@​angular/ssr

Commit Description
fix - 94023f62c introduce trustProxyHeaders option to safely validate and sanitize proxy headers
fix - 5ffe5c309 add support for configuring trusted proxy headers via environment variable
fix - 930ada9b7 decode route segments when building and matching route tree
fix - 0dc8a440c use router to normalize URLs for comparison

21.2.8

@​angular/cli

Commit Description
fix - e91280c05 dynamically resolve project Angular CLI executable inside MCP tools
fix - 01af6741b ignore EBADF file system errors during MCP project scan
fix - f7a3e6ed8 use headless option in MCP test tool

@​angular-devkit/build-angular

Commit Description
fix - 00336c037 ensure route has leading slash in prerender builder
fix - e87d302d6 fix app-shell route format and

@​angular/build

Commit Description
fix - c93140a54 use rootDir for HMR component updates path resolution
fix - 6df2b1488 validate V8 coverage support for browsers in Vitest

21.2.7

@​angular/cli

Commit Description
fix - 971041aa1 handle missing package manager during analytics initialization

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

21.2.10 (2026-05-06)

@​angular/cli

Commit Type Description
bb8611913 fix restrict MCP workspace access to allowed client roots during resolution

19.2.25 (2026-04-30)

@​angular-devkit/build-angular

Commit Type Description
49ae0ad2d fix upgrade postcss to 8.5.12

@​angular/build

Commit Type Description
2d53feca5 fix update esbuild to 0.28.0

@​angular/ssr

Commit Type Description
02ce8bf26 fix introduce trustProxyHeaders option to safely validate and sanitize proxy headers

22.0.0-next.7 (2026-04-29)

@​angular/cli

Commit Type Description
0572df064 fix fix broken img ref in ai-tutor
d6121b5e8 fix introduce initial package manager workspace awareness
48eab1fc0 fix remove standalone true ref in ai tutor

@​schematics/angular

Commit Type Description

... (truncated)

Commits
  • 64cbd62 release: cut the v21.2.10 release
  • 6f26f4f build: lock file maintenance
  • 111dcc3 refactor(@​angular/cli): re-add resolveModule for find examples tool
  • 5418ebb build: update cross-repo angular dependencies
  • a2c8029 refactor: configure Gemini reviewer to ignore lockfile and changelog
  • 7130c92 refactor(@​angular/cli): integrate MCP roots into Host abstraction
  • bb86119 fix(@​angular/cli): restrict MCP workspace access to allowed client roots duri...
  • 564b108 release: cut the v21.2.9 release
  • dbda92b build: update cross-repo angular dependencies
  • 828c175 build: update pnpm to v10.33.2
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 8, 2026
@dependabot
Bump picomatch, @angular-eslint/schematics and @angular/cli
c25c953 
Bumps [picomatch](https://github.com/micromatch/picomatch) to 2.3.2 and updates ancestor dependencies [picomatch](https://github.com/micromatch/picomatch), [@angular-eslint/schematics](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/schematics) and [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `picomatch` from 4.0.2 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `@angular-eslint/schematics` from 18.3.1 to 21.3.1
- [Release notes](https://github.com/angular-eslint/angular-eslint/releases)
- [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/schematics/CHANGELOG.md)
- [Commits](https://github.com/angular-eslint/angular-eslint/commits/v21.3.1/packages/schematics)

Updates `@angular/cli` from 18.2.4 to 21.2.10
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.4...v21.2.10)

---
updated-dependencies:
- dependency-name: "@angular-eslint/schematics"
  dependency-version: 21.3.1
  dependency-type: direct:development
- dependency-name: "@angular/cli"
  dependency-version: 21.2.10
  dependency-type: direct:development
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2ffde38216 branch from 8b6ae97 to c25c953 Compare May 10, 2026 19:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants