Skip to content

chore(deps): Angular 22.2.1 + Analog 2.8.0 (piscina 5.3.2, dev-only) - #39

Merged
DuncanFaulkner merged 1 commit into
mainfrom
chore/angular-22.2-piscina
Oct 4, 2026
Merged

DuncanFaulkner merged 1 commit into
mainfrom
chore/angular-22.2-piscina

Conversation

@DuncanFaulkner

Copy link
Copy Markdown
Contributor

Clears the critical Dependabot alert for piscina (5.2.0 via @angular/build 22.1.8; fixed in 5.3.2).

  • @angular/* devDependencies ^22.1.x → ^22.2.1 (@angular/build 22.2 depends on piscina 5.3.2)
  • @analogjs/vite-plugin-angular + vitest-angular ^2.7.2 → ^2.8.0 (2.7.2 fails on Angular 22.2: cache.has is not a function)
  • Lockfile regenerated with CI's npm (11.17.0); npm ci passes with 11.17.0 and 11.6.1

Dev dependencies only; the published package (dist, bin, CHANGELOG) is unchanged, so no release.

Local: build, typecheck, 315 tests, demo:console all pass; npm audit 0.

🤖 Generated with Claude Code

@angular/build 22.2 pulls piscina 5.3.2, which fixes the critical
Dependabot alert (ThreadPool options prototype pollution). Analog 2.7.2
breaks with Angular 22.2 (cache.has is not a function), so it moves to
2.8.0. Dev dependencies only; the published package is unchanged.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@DuncanFaulkner
DuncanFaulkner merged commit 2f4f1bf into main Oct 4, 2026
1 check passed
@DuncanFaulkner
DuncanFaulkner deleted the chore/angular-22.2-piscina branch October 4, 2026 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant