Bump tar, @angular/cli and electron-builder by dependabot[bot] · Pull Request #3212 · visualengineers/reflex

dependabot · 2026-06-15T21:38:53Z

Bumps tar to 7.5.16 and updates ancestor dependencies tar, @angular/cli and electron-builder. These dependencies need to be updated together.

Updates tar from 7.5.15 to 7.5.16

Commits

cf21338 7.5.16
21a8220 do not apply PAX header fields to meta entries
52632cf update project deps
302f51f fix inconsequential typo in PENDINGLINKS symbol name
55dbb99 remove some uses of mutate-fs
See full diff in compare view

Updates @angular/cli from 19.1.5 to 22.0.1

Release notes

Sourced from @angular/cli's releases.

22.0.1

@schematics/angular

Commit Description

fix browserMode option mapping in refactor-jasmine-vitest

safely comment out multiline statements in refactor-jasmine-vitest

use null objects and callbacks in karma-to-vitest migration

@angular/cli

Commit Description

do not sort migrations of the same version alphabetically

fallback to local package.json for schematic detection on first run

isolate temporary package installation from parent pnpm workspace

remove forceAuth and unscoped credential parsing

validate registry option is a valid URL in ng add

optimize update schematic registry query counts by fetching package metadata lazily

@angular/build

Commit Description

allow disabling Vitest isolation from builder

exclude JSON imports from Vite dependency optimization

prevent concurrent stylesheet bundling esbuild context leaks

restrict application builder output paths to output directory

22.0.0

@schematics/angular

Commit Description

add migrate-karma-to-vitest update migration

add migration to add istanbul-lib-instrument

conditionally install istanbul coverage provider for Vitest migration

migrate fake async to Vitest fake timers

migrate fakeAsync's flush behavior when used in beforeEach

rely on strict template default in generated workspaces

set up fake timers in beforeEach instead of beforeAll

stabilize refactor-jasmine-vitest schematic

update TSConfig globals during karma to vitest migration

add istanbul-lib-instrument to application/library generator dependencies

add trusted-proxy-headers migration

default components to OnPush change detection

defer karma config deletion in Karma to Vitest migration

preserve Jasmine stub-by-default semantics for bare spies

replace deprecated ChangeDetectionStrategy.Default with Eager

support spy call arguments migration in refactor-jasmine-vitest

use service decorator in ng generate

@angular/cli

Commit Description

add support for Node.js 26.0.0

reflect new minimum supported Node version in ng.js

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.0.1 (2026-06-10)

@angular/cli

Commit Type Description

b54e9a549 fix do not sort migrations of the same version alphabetically

d33311612 fix fallback to local package.json for schematic detection on first run

918102a93 fix isolate temporary package installation from parent pnpm workspace

b048b5f4a fix remove forceAuth and unscoped credential parsing

277934035 fix validate registry option is a valid URL in ng add

4510dae02 perf optimize update schematic registry query counts by fetching package metadata lazily

@schematics/angular

Commit Type Description

c80012294 fix fix browserMode option mapping in refactor-jasmine-vitest

a9b6bd904 fix safely comment out multiline statements in refactor-jasmine-vitest

12199df00 fix use null objects and callbacks in karma-to-vitest migration

@angular/build

Commit Type Description

89d1be979 fix allow disabling Vitest isolation from builder

d45b84be9 fix exclude JSON imports from Vite dependency optimization

e3cab4ddd fix prevent concurrent stylesheet bundling esbuild context leaks

bd413b0eb fix restrict application builder output paths to output directory

22.0.0 (2026-06-03)

Breaking Changes

Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

The @angular-devkit/architect-cli package is no longer available. The architect CLI tool has been moved to the @angular-devkit/architect package.

The experimental @angular-devkit/build-angular:jest and @angular-devkit/build-angular:web-test-runner builders have been removed.

@angular/build

The @angular/build:dev-server (ng serve) now assigns the highest priority to the PORT environment variable. This value will override any port configurations specified in angular.json or via the --port command-line flag. This includes the default port 4200.

istanbul-lib-instrument is now an optional peer dependency. Projects using karma with code coverage enabled will need to ensure that istanbul-lib-instrument is installed. Note: ng update will automatically add this dependency during the update process.

... (truncated)

Commits

5a64af9 release: cut the v22.0.1 release
b54e9a5 fix(@angular/cli): do not sort migrations of the same version alphabetically
b048b5f fix(@angular/cli): remove forceAuth and unscoped credential parsing
3275b45 test(@angular/cli): remove unscoped authentication test cases from registry t...
da81e55 build: update cross-repo angular dependencies
56ac348 build: lock file maintenance
12199df fix(@schematics/angular): use null objects and callbacks in karma-to-vitest m...
918102a fix(@angular/cli): isolate temporary package installation from parent pnpm wo...
e9b106e build: update cross-repo angular dependencies
e3cab4d fix(@angular/build): prevent concurrent stylesheet bundling esbuild context l...
Additional commits viewable in compare view

Updates electron-builder from 24.13.3 to 26.15.3

Release notes

Sourced from electron-builder's releases.

electron-builder@26.15.3

What's Changed

fix: add ELECTRON_BUILDER_BINARIES_ALLOW_HTTP opt-in for parsing env vars targeting non-localhost HTTP by @mmaietta in electron-userland/electron-builder#9856

docs: update docs and add build lifecycle page by @mmaietta in electron-userland/electron-builder#9857

chore(test): update vitest by @mmaietta in electron-userland/electron-builder#9859

fix(download): persist toolset archives in a predictable cache path by @mmaietta in electron-userland/electron-builder#9861

fix(publish): set x-amz-content-sha256: UNSIGNED-PAYLOAD before SigV4 signing by @mmaietta in electron-userland/electron-builder#9863

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9858

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.2...electron-builder@26.15.3

electron-builder@26.15.2

What's Changed

fix(mac): use native zip for macOS zip target to preserve .framework symlinks by @mmaietta in electron-userland/electron-builder#9847

fix: retry package install on transient network errors by @mmaietta in electron-userland/electron-builder#9850

fix(icons): replace png2icons with wasm-vips Lanczos3 resampling for high-quality icon conversion by @mmaietta in electron-userland/electron-builder#9851

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9848

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.1...electron-builder@26.15.2

electron-builder@26.15.1

What's Changed

fix: validate packages by @regnete in electron-userland/electron-builder#9838

chore: ci:validate, ci:test:fetch-cache simplification, and code cleanup by @mmaietta in electron-userland/electron-builder#9840

chore(tests): embed platform markers in generated test filenames to eliminate "unknown" timing in shard plan by @mmaietta in electron-userland/electron-builder#9843

chore(deps): update and unpin @electron/rebuild package by @mmaietta in electron-userland/electron-builder#9845

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9842

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.0...electron-builder@26.15.1

electron-builder@26.15.0

What's Changed

chore(pr-labeler): force run to only pull_request on core repo (ignore forks) by @mmaietta in electron-userland/electron-builder#9821

fix(mac): skip signing when no certificate found; warn on ad-hoc + hardenedRuntime by @mmaietta in electron-userland/electron-builder#9822

fix: use bash instead of sh in package.json by @mmaietta in electron-userland/electron-builder#9823

chore: replace app-builder-bin node-dep-tree and rebuild-node-modules by @mmaietta in electron-userland/electron-builder#9828

feat(node-module-collector): invoke package managers via PowerShell -EncodedCommand on Windows by @mmaietta in electron-userland/electron-builder#9827

feat(migration): fully replace Go binary app-builder-bin with TS implementation by @mmaietta in electron-userland/electron-builder#9829

chore(test): print out shard duration calculation results during shard-count step by @mmaietta in electron-userland/electron-builder#9831

feat(linux): add syncDesktopName option to align installed .desktop filename with StartupWMClass by @mmaietta in electron-userland/electron-builder#9832

fix(smart-cache): deep-merge shard caches so linux timing data survives across runs by @mmaietta in electron-userland/electron-builder#9833

fix: holistic field detection for <text> (sha256 hash) redaction by @mmaietta in electron-userland/electron-builder#9834

fix(mac/pkg): explicitly pass --version to pkgbuild by @mmaietta in electron-userland/electron-builder#9835

chore(deploy): Release (next) by @electron-builder-release-bot[bot] in electron-userland/electron-builder#9825

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.14.0...electron-builder@26.15.0

... (truncated)

Changelog

Sourced from electron-builder's changelog.

26.15.3

Patch Changes

35bfdeb 9097daf

builder-util@26.15.3

app-builder-lib@26.15.3

dmg-builder@26.15.3

26.15.2

Patch Changes

e25f967 f5ae163 3951024

app-builder-lib@26.15.2

dmg-builder@26.15.2

26.15.1

Patch Changes

588ff48 db5d2f4

app-builder-lib@26.15.1

dmg-builder@26.15.1

... (truncated)

Commits

512a57e chore(deploy): Release v26.15.3 (#9858)
a6117b3 chore(deploy): Release v26.15.2 (#9848)
d57f094 chore(deploy): Release v26.15.1 (#9842)
bed3a9c chore(deploy): Release v26.15.0 (electron-updater@6.8.9) (#9825)
198c10c chore: replace app-builder-bin node-dep-tree and rebuild-node-modules (#9...
e236392 chore(deploy): Release v26.14.0 (#9812)
72d298c chore(deploy): Release v26.13.1 (#9805)
ffd11c7 chore(deploy): Release v26.13.0 (electron-updater@6.8.8) (#9793)
2c8c71a chore(deploy): Release v26.12.1 (electron-updater@6.8.7) (#9782)
d6a5aee fix: harden generated-file output, argument construction, and download valida...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for electron-builder since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.16 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular/cli](https://github.com/angular/angular-cli) and [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder). These dependencies need to be updated together. Updates `tar` from 7.5.15 to 7.5.16 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.15...v7.5.16) Updates `@angular/cli` from 19.1.5 to 22.0.1 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@19.1.5...v22.0.1) Updates `electron-builder` from 24.13.3 to 26.15.3 - [Release notes](https://github.com/electron-userland/electron-builder/releases) - [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-builder/CHANGELOG.md) - [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.15.3/packages/electron-builder) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.16 dependency-type: indirect - dependency-name: "@angular/cli" dependency-version: 22.0.1 dependency-type: direct:development - dependency-name: electron-builder dependency-version: 26.15.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 15, 2026

dependabot Bot mentioned this pull request Jun 15, 2026

Bump tar, @angular/cli and electron-builder #2813

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump tar, @angular/cli and electron-builder#3212

Bump tar, @angular/cli and electron-builder#3212
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-079ad1cbad

dependabot Bot commented on behalf of github Jun 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	fix browserMode option mapping in refactor-jasmine-vitest
	safely comment out multiline statements in refactor-jasmine-vitest
	use null objects and callbacks in karma-to-vitest migration

Commit	Description
	do not sort migrations of the same version alphabetically
	fallback to local package.json for schematic detection on first run
	isolate temporary package installation from parent pnpm workspace
	remove forceAuth and unscoped credential parsing
	validate registry option is a valid URL in ng add
	optimize update schematic registry query counts by fetching package metadata lazily

Commit	Description
	allow disabling Vitest isolation from builder
	exclude JSON imports from Vite dependency optimization
	prevent concurrent stylesheet bundling esbuild context leaks
	restrict application builder output paths to output directory

Commit	Description
	add migrate-karma-to-vitest update migration
	add migration to add istanbul-lib-instrument
	conditionally install istanbul coverage provider for Vitest migration
	migrate fake async to Vitest fake timers
	migrate fakeAsync's flush behavior when used in beforeEach
	rely on strict template default in generated workspaces
	set up fake timers in beforeEach instead of beforeAll
	stabilize refactor-jasmine-vitest schematic
	update TSConfig globals during karma to vitest migration
	add istanbul-lib-instrument to application/library generator dependencies
	add trusted-proxy-headers migration
	default components to OnPush change detection
	defer karma config deletion in Karma to Vitest migration
	preserve Jasmine stub-by-default semantics for bare spies
	replace deprecated `ChangeDetectionStrategy.Default` with `Eager`
	support spy call arguments migration in refactor-jasmine-vitest
	use service decorator in ng generate

Commit	Description
	add support for Node.js 26.0.0
	reflect new minimum supported Node version in ng.js

Commit	Type	Description
b54e9a549	fix	do not sort migrations of the same version alphabetically
d33311612	fix	fallback to local package.json for schematic detection on first run
918102a93	fix	isolate temporary package installation from parent pnpm workspace
b048b5f4a	fix	remove forceAuth and unscoped credential parsing
277934035	fix	validate registry option is a valid URL in ng add
4510dae02	perf	optimize update schematic registry query counts by fetching package metadata lazily

Commit	Type	Description
c80012294	fix	fix browserMode option mapping in refactor-jasmine-vitest
a9b6bd904	fix	safely comment out multiline statements in refactor-jasmine-vitest
12199df00	fix	use null objects and callbacks in karma-to-vitest migration

Commit	Type	Description
89d1be979	fix	allow disabling Vitest isolation from builder
d45b84be9	fix	exclude JSON imports from Vite dependency optimization
e3cab4ddd	fix	prevent concurrent stylesheet bundling esbuild context leaks
bd413b0eb	fix	restrict application builder output paths to output directory

Conversation

dependabot Bot commented on behalf of github Jun 15, 2026

22.0.1

@​schematics/angular

@​angular/cli

@​angular/build

22.0.0

@​schematics/angular

@​angular/cli

22.0.1 (2026-06-10)

@​angular/cli

@​schematics/angular

@​angular/build

22.0.0 (2026-06-03)

Breaking Changes

@​angular/build

electron-builder@26.15.3

What's Changed

electron-builder@26.15.2

What's Changed

electron-builder@26.15.1

What's Changed

electron-builder@26.15.0

What's Changed

26.15.3

Patch Changes

26.15.2

Patch Changes

26.15.1

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular/cli`

`@schematics/angular`

`@angular/build`

`@angular/build`