build(deps): bump the npm_and_yarn group across 2 directories with 33 updates by dependabot[bot] · Pull Request #150 · flowup/api-client-generator

dependabot · 2026-03-25T23:17:07Z

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package	From	To
@angular/common	`11.0.3`	`19.2.16`
@angular/core	`11.0.3`	`21.2.6`
js-yaml	`4.1.0`	`4.1.1`
js-yaml	`3.13.1`	`3.14.2`
@babel/traverse	`7.17.9`	`7.29.0`
@tootallnate/once	`1.1.2`	`removed`
minimatch	`3.0.4`	`3.1.5`
lodash	`4.17.21`	`4.17.23`
picomatch	`2.3.1`	`2.3.2`

Bumps the npm_and_yarn group with 9 updates in the /tests/test-angular-project directory:

Package	From	To
@angular/common	`11.0.5`	`19.2.16`
@angular/core	`11.0.5`	`21.2.6`
js-yaml	`3.14.0`	`3.14.2`
braces	`3.0.2`	`3.0.3`
form-data	`2.3.3`	`removed`
minimatch	`3.0.4`	`3.1.5`
minimist	`1.2.5`	`1.2.8`
@angular/compiler	`11.0.5`	`21.2.6`
find-exec	`1.0.1`	`1.0.3`

Updates @angular/common from 11.0.3 to 19.2.16

Release notes

Sourced from @angular/common's releases.

19.2.16

http

Commit Description

prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit Description

introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core
The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

Before:
const bootstrap = () => bootstrapApplication(AppComponent, config);
After:
const bootstrap = (context: BootstrapContext) =>
  bootstrapApplication(AppComponent, config, context);
A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.
For more information please see: GHSA-68x2-mx4q-78m7

18.2.14

core

Commit Description

introduce BootstrapContext for improved server bootstrapping (#63640)

Breaking Changes

core
The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

Before:
const bootstrap = () => bootstrapApplication(AppComponent, config);
After:
const bootstrap = (context: BootstrapContext) =>

... (truncated)

Changelog

Sourced from @angular/common's changelog.

19.2.16 (2025-11-26)

http

Commit Type Description

05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

20.3.14 (2025-11-25)

http

Commit Type Description

0276479e7d fix prevent XSRF token leakage to protocol-relative URLs

21.0.1 (2025-11-25)

compiler-cli

Commit Type Description

39c577bc36 fix do not type check native controls with ControlValueAccessor

8d3a89a477 fix escape angular control flow in jsdoc

bc34083d34 fix ignore non-existent files

core

Commit Type Description

0ea1e07174 fix apply bootstrap-options migration to platformBrowserDynamic

70507b8c1c fix debug data causing memory leak for root effects

a55482fca3 fix notify profiler events in case of errors

49ad7c6508 fix use injected DOCUMENT for CSP_NONCE

cc1ec09931 perf avoid repeat searches for field directive

forms

Commit Type Description

7d5c7cf99a feat add DI option for classes on Field directive

8acf5d2756 fix allow dynamic type bindings on signal form controls

... (truncated)

Commits

05fe668 fix(http): prevent XSRF token leakage to protocol-relative URLs
12e2302 build: update common's locales to use rules_js (#61630)
9701047 test(common): Add circular deps test to 19.2.x (#61651)
2c876b4 fix(common): avoid injecting ApplicationRef in FetchBackend (#61649)
8e54b57 build: move private testing helpers outside platform-browser/testing (#61571)
2b1b14f fix(core): cleanup rxResource abort listener (#58306)
126efc9 fix(common): cancel reader when app is destroyed (#61528)
efda872 fix(common): prevent reading chunks if app is destroyed (#61354)
c43fd3a build: migrate common to use rules_js based toolchain (#61434)
185b780 build: migrate packages/core/schematics to ts_project (#61420)
Additional commits viewable in compare view

Updates @angular/core from 11.0.3 to 21.2.6

Release notes

Sourced from @angular/core's releases.

21.2.6

common

Commit Description

avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description

prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description

fixes a regression with animate.leave and reordering

migrations

Commit Description

inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description

ensure generated code compiles

parse named HTML entities containing digits

compiler-cli

Commit Description

escape template literal in TCB

generic types not filled out correctly in type check block

core

Commit Description

clean up dehydrated views during HMR component replacement

run linked signal equality check without reactive consumer

migrations

Commit Description

prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description

disallow translations of iframe src

core

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/core's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description

b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description

880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description

ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description

73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

Leave animations are no longer limited to the element being removed.

ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description

412788fac9 fix ensure generated code compiles

75560ce43d fix parse named HTML entities containing digits

d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description

2bd708fb6b fix escape template literal in TCB

9769560da7 fix generic types not filled out correctly in type check block

7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description

df659b8d0c feat re-introduce nested leave animations scoped to component boundaries

dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation

dc0446552a fix clean up dehydrated views during HMR component replacement

523d69a768 fix run linked signal equality check without reactive consumer

69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description

3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits

c157916 build: consolidate domino bundling in platform-server
9be5e2c docs: fix typo in Input decorator
a21be36 refactor: prepare for required changeDetection prop on G3.
831746e docs: Add callout about the Component interface.
ad0156e fix(core): fixes a regression with animate.leave and reordering
73d6b01 fix(migrations): inject migration not work in multi-project workspace with op...
3838554 build: update cross-repo angular dependencies to v21.2.3
851ef77 Revert "refactor(core): Ensure determineLongestAnimation is run synchronously...
076d41c fix(migrations): prevent trailing comma syntax errors after removing NgStyle
a8f80c1 refactor(core): declare explicit reactive node prototypes types
Additional commits viewable in compare view

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

Fix prototype pollution issue in yaml merge (<<) operator.

Commits

cc482e7 4.1.1 released
50968b8 dist rebuild
d092d86 lint fix
383665f fix prototype pollution in merge (<<)
0d3ca7a README.md: HTTP => HTTPS (#678)
49baadd doc: 'empty' style option for !!null
ba3460e Fix demo link (#618)
See full diff in compare view

Updates js-yaml from 3.13.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

Fix prototype pollution issue in yaml merge (<<) operator.

Commits

cc482e7 4.1.1 released
50968b8 dist rebuild
d092d86 lint fix
383665f fix prototype pollution in merge (<<)
0d3ca7a README.md: HTTP => HTTPS (#678)
49baadd doc: 'empty' style option for !!null
ba3460e Fix demo link (#618)
See full diff in compare view

Updates @babel/traverse from 7.17.9 to 7.29.0

Release notes

Sourced from @babel/traverse's releases.

v7.29.0 (2026-01-31)

Thanks @simbahax for your first PR!

🚀 New Feature

babel-types

#17750 [7.x backport] Add attributes import declaration builder (@JLHwung)

babel-standalone

#17663 [7.x backport] feat(standalone): export async transform (@JLHwung)

#17725 [7.x backport] feat: read standalone targets from data-targets (@JLHwung)

🐛 Bug Fix

babel-parser

#17765 fix(parser): correctly parse type assertions in extends clause (@nicolo-ribaudo)

#17723 [7.x backport] fix(parser): improve super type argument parsing (@JLHwung)

babel-traverse

#17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@simbahax)

babel-plugin-transform-block-scoping, babel-traverse

#17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@magic-akari)

🏃‍♀️ Performance

babel-generator, babel-runtime-corejs3

#17642 [Babel 7] Improve generator performance (@liuxingbaoyu)

Committers: 6

David (@simbahax)

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

@liuxingbaoyu

@magic-akari

v7.28.6 (2026-01-12)

Thanks @kadhirash and @kolvian for your first PRs!

🐛 Bug Fix

babel-cli, babel-code-frame, babel-core, babel-helper-check-duplicate-nodes, babel-helper-fixtures, babel-helper-plugin-utils, babel-node, babel-plugin-transform-flow-comments, babel-plugin-transform-modules-commonjs, babel-plugin-transform-property-mutators, babel-preset-env, babel-traverse, babel-types

#17589 Improve Unicode handling in code-frame tokenizer (@JLHwung)

babel-plugin-transform-regenerator

#17556 fix: transform-regenerator correctly handles scope (@liuxingbaoyu)

babel-plugin-transform-react-jsx

#17538 fix: Keep jsx comments (@liuxingbaoyu)

💅 Polish

babel-core, babel-standalone

#17606 Polish(standalone): improve message on invalid preset/plugin (@JLHwung)

🏠 Internal

babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-proposal-decorators, babel-plugin-proposal-import-attributes-to-assertions, babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-async-do-expressions, babel-plugin-syntax-decorators, babel-plugin-syntax-destructuring-private, babel-plugin-syntax-do-expressions, babel-plugin-syntax-explicit-resource-management, babel-plugin-syntax-export-default-from, babel-plugin-syntax-flow, babel-plugin-syntax-function-bind, babel-plugin-syntax-function-sent, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-plugin-syntax-import-defer, babel-plugin-syntax-import-source, babel-plugin-syntax-jsx, babel-plugin-syntax-module-blocks, babel-plugin-syntax-optional-chaining-assign, babel-plugin-syntax-partial-application, babel-plugin-syntax-pipeline-operator, babel-plugin-syntax-throw-expressions, babel-plugin-syntax-typescript, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-dotall-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-regexp-modifiers, babel-plugin-transform-unicode-property-regex, babel-plugin-transform-unicode-sets-regex

#17580 Allow Babel 8 in compatible Babel 7 plugins (@nicolo-ribaudo)

... (truncated)

Commits

aa8394e v7.29.0
84366a8 fix(traverse): provide a hub when traversing a File or Program and no parentP...
229eb45 [7.x backport] fix: Rename switch discriminant references when body creates s...
d7f4008 v7.28.6
905bc22 fix: lint errors in main branch (#17612)
a03e2b6 fix: path.evaluate correctly returns confident (#17584)
aac2c37 chore: Use Gulpfile.mts (#17579)
65c4a6b [Babel 8] fix: Improve traverse types (#17574)
99dcba5 chore: enable some ts-eslint rules (#17592)
c92c491 Improve Unicode handling in code-frame tokenizer (#17589)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/traverse since your current version.

Removes @tootallnate/once

Updates minimatch from 3.0.4 to 3.1.5

Commits

7bba978 3.1.5
bd25942 docs: add warning about ReDoS
1a9c27c fix partial matching of globstar patterns
1a2e084 3.1.4
ae24656 update lockfile
b100374 limit recursion for **, improve perf considerably
26ffeaa lockfile update
9eca892 lock node version to 14
00c323b 3.1.3
30486b2 update CI matrix and actions
Additional commits viewable in compare view

Updates json5 from 2.2.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

Commits

c3a7524 2.2.3
94fd06d docs: update CHANGELOG for v2.2.3
3b8cebf docs(security): use GitHub security advisories
f0fd9e1 docs: publish a security policy
6a91a05 docs(template): bug -> bug report
14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
Additional commits viewable in compare view

Updates lodash from 4.17.21 to 4.17.23

Commits

dec55b7 Bump main to v4.17.23 (#6088)
19c9251 fix: setCacheHas JSDoc return type should be boolean (#6071)
b5e6729 jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)
edadd45 Prevent prototype pollution on baseUnset function
4879a7a doc: fix autoLink function, conversion of source links (#6056)
9648f69 chore: remove yarn.lock file (#6053)
dfa407d ci: remove legacy configuration files (#6052)
156e196 feat: add renovate setup (#6039)
933e106 ci: add pipeline for Bun (#6023)
072a807 docs: update links related to Open JS Foundation (#5968)
Additional commits viewable in compare view

Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

fix: exception when glob pattern contains constructor by @Jason3S in micromatch/picomatch#144

Fix for CVE-2026-33671

Fix for CVE-2026-33672

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Fix bad text values in parse #126, thanks to @connor4312

Changed

Remove process global to work outside of node #129, thanks to @styfle

Add sideEffects to package.json #128, thanks to @frandiox

Removed os, make compatible browser environment. See #124, thanks to @gwsbhqt

3.0.1

Fixes

... (truncated)

Commits

81cba8d Publish 2.3.2
fc1f6b6 Merge commit from fork
eec17ae Merge commit from fork
78f8ca4 Merge pull request #156 from micromatch/backport-144
3f4f10e Merge pull request #144 from Jason3S/jdent-object-properties
See full diff in compare view

Updates @angular/common from 11.0.5 to 19.2.16

Release notes

Sourced from @angular/common's releases.

19.2.16

http

Commit Description

prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit Description

introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core
The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

Before:
const bootstrap = () => bootstrapApplication(AppComponent, config);
After:
const bootstrap = (context: BootstrapContext) =>
  bootstrapApplication(AppComponent, config, context);
A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.
For more information please see: GHSA-68x2-mx4q-78m7

18.2.14

core

Commit Description

introduce BootstrapContext for improved server bootstrapping (#63640)

Breaking Changes

core
The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

Before:
const bootstrap = () => bootstrapApplication(AppComponent, config);
After:
const bootstrap = (context: BootstrapContext) =>

... (truncated)

Changelog

Sourced from @angular/common's changelog.

19.2.16 (2025-11-26)

http

Commit Type Description

05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

20.3.14 (2025-11-25)

http

Commit Type Description

0276479e7d fix prevent XSRF token leakage to protocol-relative URLs

21.0.1 (2025-11-25)

compiler-cli

Commit Type Description

39c577bc36 fix do not type check native controls with ControlValueAccessor

8d3a89a477 fix escape angular control flow in jsdoc

bc34083d34 fix ignore non-existent files

core

Commit Type Description

0ea1e07174 fix apply bootstrap-options migration to platformBrowserDynamic

70507b8c1c fix debug data causing memory leak for root effects

a55482fca3 fix notify profiler events in case of errors

49ad7c6508 fix use injected DOCUMENT for CSP_NONCE

cc1ec09931 perf avoid repeat searches for field directive

forms

Commit Type Description

7d5c7cf99a feat add DI option for classes on Field directive

8acf5d2756 fix allow dynamic type bindings on signal form controls

... (truncated)

Commits

05fe668 fix(http): prevent XSRF token leakage to protocol-relative URLs
12e2302 build: update common's locales to use rules_js (#61630)
9701047 test(common): Add circular deps test to 19.2.x (#61651)
2c876b4 fix(common): avoid injecting ApplicationRef in FetchBackend (#61649)
8e54b57 build: move private testing helpers outside platform-browser/testing (#61571)
2b1b14f fix(core): cleanup rxResource abort listener (#58306)
126efc9 fix(common): cancel reader when app is destroyed (#61528)
efda872 fix(common): prevent reading chunks if app is destroyed (#61354)
c43fd3a build: migrate common to use rules_js based toolchain (#61434)
185b780 build: migrate packages/core/schematics to ts_project (#61420)
Additional commits viewable in compare view

Updates @angular/core from 11.0.5 to 21.2.6

Release notes

Sourced from @angular/core's releases.

21.2.6

common

Commit Description

avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description

prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description

fixes a regression with animate.leave and reordering

migrations

Commit Description

inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description

ensure generated code compiles

parse named HTML entities containing digits

compiler-cli

Commit Description

escape template literal in TCB

generic types not filled out correctly in type check block

core

Commit Description

clean up dehydrated views during HMR component replacement

run linked signal equality check without reactive consumer

migrations

Commit Description

prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description

disallow translations of iframe src

core

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/core's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description

b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description

880a57d4b3 fix p...
Description has been truncated

… updates Bumps the npm_and_yarn group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `11.0.3` | `19.2.16` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `11.0.3` | `21.2.6` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.13.1` | `3.14.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.17.9` | `7.29.0` | | [@tootallnate/once](https://github.com/TooTallNate/once) | `1.1.2` | `removed` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.5` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | Bumps the npm_and_yarn group with 9 updates in the /tests/test-angular-project directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `11.0.5` | `19.2.16` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `11.0.5` | `21.2.6` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.0` | `3.14.2` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [form-data](https://github.com/form-data/form-data) | `2.3.3` | `removed` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.5` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `11.0.5` | `21.2.6` | | [find-exec](https://github.com/shime/find-exec) | `1.0.1` | `1.0.3` | Updates `@angular/common` from 11.0.3 to 19.2.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.2.16/packages/common) Updates `@angular/core` from 11.0.3 to 21.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/core) Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `js-yaml` from 3.13.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `@babel/traverse` from 7.17.9 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-traverse) Removes `@tootallnate/once` Updates `minimatch` from 3.0.4 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.5) Updates `json5` from 2.2.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.1...v2.2.3) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `@angular/common` from 11.0.5 to 19.2.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.2.16/packages/common) Updates `@angular/core` from 11.0.5 to 21.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/core) Updates `js-yaml` from 3.14.0 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Removes `form-data` Updates `minimatch` from 3.0.4 to 3.1.5 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.5) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `json5` from 1.0.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.1...v2.2.3) Updates `tough-cookie` from 2.5.0 to 6.0.1 - [Release notes](https://github.com/salesforce/tough-cookie/releases) - [Changelog](https://github.com/salesforce/tough-cookie/blob/master/CHANGELOG.md) - [Commits](salesforce/tough-cookie@v2.5.0...v6.0.1) Updates `ws` from 6.2.1 to 8.20.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.2.1...8.20.0) Updates `@angular/compiler` from 11.0.5 to 21.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/compiler) Updates `ajv` from 6.12.0 to 8.18.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.0...v8.18.0) Updates `loader-utils` from 1.2.3 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v2.0.4) Updates `body-parser` from 1.19.0 to 1.20.4 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.4) Updates `qs` from 6.5.2 to 6.14.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.14.2) Updates `cookie` from 0.4.0 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.0...v0.7.2) Updates `eventsource` from 1.0.7 to 3.0.7 - [Release notes](https://github.com/EventSource/eventsource/releases) - [Changelog](https://github.com/EventSource/eventsource/blob/main/CHANGELOG.md) - [Commits](EventSource/eventsource@v1.0.7...v3.0.7) Updates `express` from 4.17.1 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.17.1...v4.22.1) Updates `find-exec` from 1.0.1 to 1.0.3 - [Commits](shime/find-exec@v1.0.1...v1.0.3) Updates `follow-redirects` from 1.13.1 to 1.15.11 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.13.1...v1.15.11) Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `tar` from 4.4.13 to 7.5.13 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.13...v7.5.13) Updates `postcss` from 7.0.21 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.21...8.5.6) Updates `rollup` from 2.32.1 to 4.60.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md) - [Commits](rollup/rollup@v2.32.1...v4.60.0) Updates `send` from 0.17.1 to 0.19.2 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.17.1...0.19.2) Updates `serialize-javascript` from 4.0.0 to 7.0.5 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v4.0.0...v7.0.5) Updates `serve-static` from 1.14.1 to 1.16.3 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md) - [Commits](expressjs/serve-static@v1.14.1...v1.16.3) Updates `webpack-dev-middleware` from 3.7.2 to 7.4.5 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.2...v7.4.5) Updates `webpack-dev-server` from 3.11.0 to 5.2.3 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.11.0...v5.2.3) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 19.2.16 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-version: 7.29.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-version: 2.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 19.2.16 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: form-data dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-version: 1.2.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-version: 2.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tough-cookie dependency-version: 6.0.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.20.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: ajv dependency-version: 8.18.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-version: 2.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 1.20.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: eventsource dependency-version: 3.0.7 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-version: 4.22.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: find-exec dependency-version: 1.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.15.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.60.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-version: 0.19.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-version: 7.0.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-version: 7.4.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026

This was referenced Mar 25, 2026

build(deps): bump lodash from 4.17.15 to 4.17.21 in /tests/test-angular-project #121

Closed

build(deps): bump ws from 6.2.1 to 6.2.2 in /tests/test-angular-project #127

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 2 directories with 33 updates#150

build(deps): bump the npm_and_yarn group across 2 directories with 33 updates#150
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-f558f95400

dependabot bot commented on behalf of github Mar 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Type	Description
39c577bc36	fix	do not type check native controls with ControlValueAccessor
8d3a89a477	fix	escape angular control flow in jsdoc
bc34083d34	fix	ignore non-existent files

Commit	Type	Description
0ea1e07174	fix	apply bootstrap-options migration to `platformBrowserDynamic`
70507b8c1c	fix	debug data causing memory leak for root effects
a55482fca3	fix	notify profiler events in case of errors
49ad7c6508	fix	use injected `DOCUMENT` for `CSP_NONCE`
cc1ec09931	perf	avoid repeat searches for field directive

Commit	Type	Description
7d5c7cf99a	feat	add DI option for classes on `Field` directive
8acf5d2756	fix	allow dynamic `type` bindings on signal form controls

Commit	Description
	ensure generated code compiles
	parse named HTML entities containing digits

Commit	Description
	escape template literal in TCB
	generic types not filled out correctly in type check block

Commit	Description
	clean up dehydrated views during HMR component replacement
	run linked signal equality check without reactive consumer

Commit	Type	Description
412788fac9	fix	ensure generated code compiles
75560ce43d	fix	parse named HTML entities containing digits
d99ab0e040	fix	stop generating unused field

Commit	Type	Description
2bd708fb6b	fix	escape template literal in TCB
9769560da7	fix	generic types not filled out correctly in type check block
7a0d6b8df2	fix	transform dropping exclamationToken from properties

Commit	Type	Description
df659b8d0c	feat	re-introduce nested leave animations scoped to component boundaries
dc3131c639	feat	TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a	fix	clean up dehydrated views during HMR component replacement
523d69a768	fix	run linked signal equality check without reactive consumer
69fb1614ef	refactor	remove `checkNoChanges` from the public API.

Conversation

dependabot bot commented on behalf of github Mar 25, 2026

19.2.16

http

19.2.15

core

Breaking Changes

core

18.2.14

core

Breaking Changes

core

19.2.16 (2025-11-26)

http

20.3.14 (2025-11-25)

http

21.0.1 (2025-11-25)

compiler-cli

core

forms

21.2.6

common

compiler

core

migrations

21.2.5

compiler

compiler-cli

core

migrations

service-worker

21.2.4

compiler

core

21.2.6 (2026-03-25)

common

compiler

core

migrations

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

compiler

compiler-cli

core

forms

[4.1.1] - 2025-11-12

Security

[4.1.1] - 2025-11-12

Security

v7.29.0 (2026-01-31)

🚀 New Feature

🐛 Bug Fix

🏃‍♀️ Performance

Committers: 6

v7.28.6 (2026-01-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

v2.2.3

v2.2.2

v2.2.3 [code, diff]

v2.2.2 [code, diff]

2.3.2

What's Changed

Release history

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

19.2.16

http

19.2.15

core

Breaking Changes

core

18.2.14

core

Breaking Changes