build(deps): bump the npm_and_yarn group across 1 directory with 30 updates by dependabot[bot] · Pull Request #9 · flowup/entry-task

dependabot · 2026-03-25T23:07:17Z

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package	From	To
@angular/common	`13.3.11`	`21.2.6`
@angular/compiler	`13.3.11`	`21.2.6`
@angular/core	`13.3.11`	`21.2.6`
@tootallnate/once	`1.1.2`	`removed`
loader-utils	`2.0.2`	`2.0.4`
lodash	`4.17.21`	`4.17.23`

Updates @angular/common from 13.3.11 to 21.2.6

Release notes

Sourced from @angular/common's releases.

21.2.6

common

Commit Description

avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description

prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description

fixes a regression with animate.leave and reordering

migrations

Commit Description

inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description

ensure generated code compiles

parse named HTML entities containing digits

compiler-cli

Commit Description

escape template literal in TCB

generic types not filled out correctly in type check block

core

Commit Description

clean up dehydrated views during HMR component replacement

run linked signal equality check without reactive consumer

migrations

Commit Description

prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description

disallow translations of iframe src

core

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/common's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description

b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description

880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description

ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description

73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

Leave animations are no longer limited to the element being removed.

ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description

412788fac9 fix ensure generated code compiles

75560ce43d fix parse named HTML entities containing digits

d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description

2bd708fb6b fix escape template literal in TCB

9769560da7 fix generic types not filled out correctly in type check block

7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description

df659b8d0c feat re-introduce nested leave animations scoped to component boundaries

dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation

dc0446552a fix clean up dehydrated views during HMR component replacement

523d69a768 fix run linked signal equality check without reactive consumer

69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description

3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits

b4ab6ba fix(common): avoid redundant image fetch on destroy with auto sizes
adda6c5 build: update aspect_rules_js to 3.0.2
93c6dc6 Revert "refactor(http): Improves base64 encoding/decoding with feature detect...
76431ed Revert "fix(http): correctly cache blob responses in transfer cache (#67002)"
277ade9 fix(http): correctly cache blob responses in transfer cache (#67002)
aeb9b81 refactor(http): Improves base64 encoding/decoding with feature detection (#67...
ecf0bb4 test(http): refactors HTTP client tests to use TestBed and providers
e2e9a9a fix(core): adds transfer cache to httpResource to fix hydration
70e4c7f refactor(common): log a warning when a KeyValuePipe receives a signal
2eeeabb fix(common): fix LCP image detection with duplicate URLs
Additional commits viewable in compare view

Updates @angular/compiler from 13.3.11 to 21.2.6

Release notes

Sourced from @angular/compiler's releases.

21.2.6

common

Commit Description

avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description

prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description

fixes a regression with animate.leave and reordering

migrations

Commit Description

inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description

ensure generated code compiles

parse named HTML entities containing digits

compiler-cli

Commit Description

escape template literal in TCB

generic types not filled out correctly in type check block

core

Commit Description

clean up dehydrated views during HMR component replacement

run linked signal equality check without reactive consumer

migrations

Commit Description

prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description

disallow translations of iframe src

core

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description

b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description

880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description

ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description

73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

Leave animations are no longer limited to the element being removed.

ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description

412788fac9 fix ensure generated code compiles

75560ce43d fix parse named HTML entities containing digits

d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description

2bd708fb6b fix escape template literal in TCB

9769560da7 fix generic types not filled out correctly in type check block

7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description

df659b8d0c feat re-introduce nested leave animations scoped to component boundaries

dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation

dc0446552a fix clean up dehydrated views during HMR component replacement

523d69a768 fix run linked signal equality check without reactive consumer

69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description

3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits

880a57d fix(compiler): prevent shimCssText from adding extra blank lines per CSS comment
23ea431 fix(compiler): parse named HTML entities containing digits
334ae10 fix(compiler): ensure generated code compiles
ed2d324 fix(compiler): disallow translations of iframe src
1df1697 fix(compiler): prevent mutation of children array in RecursiveVisitor
95b3f37 feat(compiler): Exhaustive checks for switch blocks
9c5658a refactor(compiler): clean up pipeline compatibility distinction
6e0d783 refactor(compiler): Add info about unclosed element.
06d94ac Revert "refactor(compiler): Add info about unclosed element."
0972084 refactor(compiler): Add info about unclosed element.
Additional commits viewable in compare view

Updates @angular/core from 13.3.11 to 21.2.6

Release notes

Sourced from @angular/core's releases.

21.2.6

common

Commit Description

avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description

prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description

fixes a regression with animate.leave and reordering

migrations

Commit Description

inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description

ensure generated code compiles

parse named HTML entities containing digits

compiler-cli

Commit Description

escape template literal in TCB

generic types not filled out correctly in type check block

core

Commit Description

clean up dehydrated views during HMR component replacement

run linked signal equality check without reactive consumer

migrations

Commit Description

prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description

disallow translations of iframe src

core

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/core's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description

b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description

880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description

ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description

73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

Leave animations are no longer limited to the element being removed.

ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description

412788fac9 fix ensure generated code compiles

75560ce43d fix parse named HTML entities containing digits

d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description

2bd708fb6b fix escape template literal in TCB

9769560da7 fix generic types not filled out correctly in type check block

7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description

df659b8d0c feat re-introduce nested leave animations scoped to component boundaries

dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation

dc0446552a fix clean up dehydrated views during HMR component replacement

523d69a768 fix run linked signal equality check without reactive consumer

69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description

3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits

c157916 build: consolidate domino bundling in platform-server
9be5e2c docs: fix typo in Input decorator
a21be36 refactor: prepare for required changeDetection prop on G3.
831746e docs: Add callout about the Component interface.
ad0156e fix(core): fixes a regression with animate.leave and reordering
73d6b01 fix(migrations): inject migration not work in multi-project workspace with op...
3838554 build: update cross-repo angular dependencies to v21.2.3
851ef77 Revert "refactor(core): Ensure determineLongestAnimation is run synchronously...
076d41c fix(migrations): prevent trailing comma syntax errors after removing NgStyle
a8f80c1 refactor(core): declare explicit reactive node prototypes types
Additional commits viewable in compare view

Updates body-parser from 1.20.0 to 1.20.4

Release notes

Sourced from body-parser's releases.

1.20.4

What's Changed

Remove redundant depth check by @blakeembrey in expressjs/body-parser#538

ci: add support for Node.js v23 by @Phillip9587 in expressjs/body-parser#553

ci: restore CI for 1.x branch by @bjohansebas in expressjs/body-parser#665

deps: qs@^6.14.0 by @bjohansebas in expressjs/body-parser#664

deps: use tilde notation and update certain dependencies by @Phillip9587 in expressjs/body-parser#668

chore: remove SECURITY.md by @Phillip9587 in expressjs/body-parser#669

ci: add CodeQL (SAST) by @Phillip9587 in expressjs/body-parser#670

Release: 1.20.4 by @UlisesGascon in expressjs/body-parser#672

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

Changelog

Sourced from body-parser's changelog.

1.20.4 / 2025-12-01

deps: qs@~6.14.0

deps: use tilde notation for dependencies

deps: http-errors@~2.0.1

deps: raw-body@~2.5.3

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: raw-body@2.5.2

1.20.1 / 2022-10-06

deps: qs@6.11.0

perf: remove unnecessary object clone

Commits

7db202c 1.20.4 (#672)
d8f8adb ci: add CodeQL (SAST) (#670)
6d133c1 chore: remove SECURITY.md (#669)
fcd1535 deps: use tilde notation and update certain dependencies (#668)
ec5fa29 deps: qs@~6.14.0 (#664)
ffb95c1 ci: restore CI for 1.x branch (#665)
48a5f07 ci: add support for Node.js v23 (#553)
f20f6ad Remove redundant depth check (#538)
1752951 1.20.3
39744cf chore: linter (#534)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates express from 4.18.1 to 4.22.1

Release notes

Sourced from express's releases.

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Release: 4.22.1 by @UlisesGascon in expressjs/express#6934

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

What's Changed

Refactor: improve readability by @sazk07 in expressjs/express#6190

ci: add support for Node.js@23.0 by @UlisesGascon in expressjs/express#6080

Method functions with no path should error by @wesleytodd in expressjs/express#5957

ci: updated github actions ci workflow by @Phillip9587 in expressjs/express#6323

ci: reorder npm i steps to fix ci for older node versions by @Phillip9587 in expressjs/express#6336

Backport: ci: add node.js 24 to test matrix by @Phillip9587 in expressjs/express#6506

chore(4.x): wider range for query test skip by @jonchurch in expressjs/express#6513

use tilde notation for certain dependencies by @UlisesGascon in expressjs/express#6905

deps: qs@6.14.0 by @UlisesGascon in expressjs/express#6909

deps: use tilde notation for qs by @Phillip9587 in expressjs/express#6919

Release: 4.22.0 by @UlisesGascon in expressjs/express#6921

Full Changelog: expressjs/express@4.21.2...4.22.0

4.21.2

What's Changed

Add funding field (v4) by @bjohansebas in expressjs/express#6065

deps: path-to-regexp@0.1.11 by @blakeembrey in expressjs/express#5956

deps: bump path-to-regexp@0.1.12 by @jonchurch in expressjs/express#6209

Release: 4.21.2 by @UlisesGascon in expressjs/express#6094

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: expressjs/express@4.21.0...4.21.1

... (truncated)

Changelog

Sourced from express's changelog.

4.22.1 / 2025-12-01

Revert security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

4.22.0 / 2025-12-01

Security fix for CVE-2024-51999 (GHSA-pj86-cfqh-vqx6)

deps: use tilde notation for dependencies

deps: qs@6.14.0

4.21.2 / 2024-11-06

deps: path-to-regexp@0.1.12

Fix backtracking protection

deps: path-to-regexp@0.1.11

Throws an error on invalid path values

4.21.1 / 2024-10-08

Backported a fix for CVE-2024-47764

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

... (truncated)

Commits

12fae14 4.22.1
5ddf311 Revert "sec: security patch for CVE-2024-51999"
49744ab 4.22.0 (#6921)
6e97452 sec: security patch for CVE-2024-51999
6a23d34 deps: use tilde notation for qs (#6919)
8c12cdf deps: qs@6.14.0 (#6909)
7fea74f deps: use tilde notation for certain dependencies (#6905)
dac7a04 chore: wider range for query test skip (#6513)
997919b ci: add node.js 24 to test matrix (#6506)
36fb59c fix(ci): reorder npm i steps to fix ci for older node versions (#6336)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.

Updates postcss from 7.0.5 to 8.5.6

Release notes

Sourced from postcss's releases.

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@romainmenke during his work on Stylelint added Input#document in additional to Input#css.
root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"
Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

Tidelift with a Spotify-like subscription model supporting all projects from your lock file.

Direct donations at GitHub Sponsors or Open Collective.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.5.6

Fixed ContainerWithChildren type discriminating (by @Goodwine).

8.5.5

Fixed package.json→exports compatibility with some tools (by @JounQin).

8.5.4

Fixed Parcel compatibility issue (by @git-sumitchaudhary).

8.5.3

Added more details to Unknown word error (by @hiepxanh).

Fixed types (by @romainmenke).

Fixed docs (by @catnipan).

8.5.2

Fixed end position of rules with semicolon (by @romainmenke).

8.5.1

Fixed backwards compatibility for complex cases (by @romainmenke).

8.5 “Duke Alloces”

Added Input#document for sources like CSS-in-JS or HTML (by @romainmenke).

8.4.49

Fixed custom syntax without source.offset (by @romainmenke).

8.4.48

Fixed position calculation in error/warnings methods (by @romainmenke).

8.4.47

Removed debug code.

8.4.46

Fixed Cannot read properties of undefined (reading 'before').

8.4.45

Removed unnecessary fix which could lead to infinite loop.

8.4.44

Another way to fix markClean is not a function error.

8.4.43

Fixed markClean is not a function error.

8.4.42

Fixed CSS syntax error on long minified files (by @varpstar).

8.4.41

Fixed types (by @nex3 and @querkmachine).

Cleaned up RegExps (by @bluwy).

... (truncated)

Commits

91d6eb5 Release 8.5.6 version
65ffc55 Update dependencies
ecd20eb Fix ContainerWithChildren to allow discriminating the node type by comparing ...
c181597 Release 8.5.5 version
c5523fb Update dependencies
2e3450c refactor: import should be listed before require (#2052)
4d720bd Update EM text
6cb4a66 Release 8.5.4 version
ec5c1e0 Update dependencies
e85e938 Fix code format
Additional commits viewable in compare view

Updates @babel/traverse from 7.18.5 to 7.29.0

Release notes

Sourced from @babel/traverse's releases.

v7.29.0 (2026-01-31)

Than...
Description has been truncated

…pdates Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `13.3.11` | `21.2.6` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `13.3.11` | `21.2.6` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `13.3.11` | `21.2.6` | | [@tootallnate/once](https://github.com/TooTallNate/once) | `1.1.2` | `removed` | | [loader-utils](https://github.com/webpack/loader-utils) | `2.0.2` | `2.0.4` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | Updates `@angular/common` from 13.3.11 to 21.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/common) Updates `@angular/compiler` from 13.3.11 to 21.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/compiler) Updates `@angular/core` from 13.3.11 to 21.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/core) Updates `body-parser` from 1.20.0 to 1.20.4 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.0...1.20.4) Updates `express` from 4.18.1 to 4.22.1 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/v4.22.1/History.md) - [Commits](expressjs/express@4.18.1...v4.22.1) Updates `postcss` from 7.0.5 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.5...8.5.6) Updates `@babel/traverse` from 7.18.5 to 7.29.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.0/packages/babel-traverse) Removes `@tootallnate/once` Updates `loader-utils` from 2.0.2 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v2.0.2...v2.0.4) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cookie` from 0.5.0 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.5.0...v0.7.2) Updates `esbuild` from 0.14.22 to 0.27.3 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2022.md) - [Commits](evanw/esbuild@v0.14.22...v0.27.3) Updates `follow-redirects` from 1.15.1 to 1.15.11 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.15.1...v1.15.11) Updates `http-proxy-middleware` from 2.0.6 to 2.0.9 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.6...v2.0.9) Updates `immutable` from 4.1.0 to 5.1.5 - [Release notes](https://github.com/immutable-js/immutable-js/releases) - [Changelog](https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md) - [Commits](immutable-js/immutable-js@v4.1.0...v5.1.5) Updates `js-yaml` from 3.14.1 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...4.1.1) Updates `json5` from 2.2.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.2.1...v2.2.3) Updates `lodash` from 4.17.21 to 4.17.23 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.21...4.17.23) Updates `minimatch` from 3.0.5 to 10.2.4 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.5...v10.2.4) Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `path-to-regexp` from 0.1.7 to 0.1.12 - [Release notes](https://github.com/pillarjs/path-to-regexp/releases) - [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md) - [Commits](pillarjs/path-to-regexp@v0.1.7...v0.1.12) Updates `qs` from 6.10.3 to 6.14.2 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.10.3...v6.14.2) Updates `send` from 0.18.0 to 0.19.2 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.2) Updates `serialize-javascript` from 6.0.0 to 7.0.5 - [Release notes](https://github.com/yahoo/serialize-javascript/releases) - [Commits](yahoo/serialize-javascript@v6.0.0...v7.0.5) Updates `serve-static` from 1.15.0 to 1.16.3 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.3) Updates `tar` from 6.1.11 to 7.5.13 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.11...v7.5.13) Updates `webpack` from 5.70.0 to 5.105.2 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.70.0...v5.105.2) Updates `webpack-dev-middleware` from 5.3.0 to 7.4.5 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.0...v7.4.5) Updates `webpack-dev-server` from 4.7.3 to 5.2.3 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v4.7.3...v5.2.3) Updates `ws` from 8.8.0 to 8.20.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.8.0...8.20.0) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 21.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 1.20.4 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: express dependency-version: 4.22.1 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-version: 7.29.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@tootallnate/once" dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-version: 2.0.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.27.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.15.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: immutable dependency-version: 5.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-version: 2.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.23 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-version: 10.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-to-regexp dependency-version: 0.1.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-version: 0.19.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serialize-javascript dependency-version: 7.0.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-version: 5.105.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-version: 7.4.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.20.0 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 25, 2026

This was referenced Mar 25, 2026

build(deps): bump qs, body-parser and express #3

Closed

build(deps-dev): bump immutable from 4.1.0 to 4.3.8 #4

Closed

build(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2 #6

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the npm_and_yarn group across 1 directory with 30 updates#9

build(deps): bump the npm_and_yarn group across 1 directory with 30 updates#9
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/npm_and_yarn-4b65fb888b

dependabot bot commented on behalf of github Mar 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	ensure generated code compiles
	parse named HTML entities containing digits

Commit	Description
	escape template literal in TCB
	generic types not filled out correctly in type check block

Commit	Description
	clean up dehydrated views during HMR component replacement
	run linked signal equality check without reactive consumer

Commit	Type	Description
412788fac9	fix	ensure generated code compiles
75560ce43d	fix	parse named HTML entities containing digits
d99ab0e040	fix	stop generating unused field

Commit	Type	Description
2bd708fb6b	fix	escape template literal in TCB
9769560da7	fix	generic types not filled out correctly in type check block
7a0d6b8df2	fix	transform dropping exclamationToken from properties

Commit	Type	Description
df659b8d0c	feat	re-introduce nested leave animations scoped to component boundaries
dc3131c639	feat	TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a	fix	clean up dehydrated views during HMR component replacement
523d69a768	fix	run linked signal equality check without reactive consumer
69fb1614ef	refactor	remove `checkNoChanges` from the public API.

Conversation

dependabot bot commented on behalf of github Mar 25, 2026

21.2.6

common

compiler

core

migrations

21.2.5

compiler

compiler-cli

core

migrations

service-worker

21.2.4

compiler

core

21.2.6 (2026-03-25)

common

compiler

core

migrations

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

compiler

compiler-cli

core

forms

21.2.6

common

compiler

core

migrations

21.2.5

compiler

compiler-cli

core

migrations

service-worker

21.2.4

compiler

core

21.2.6 (2026-03-25)

common

compiler

core

migrations

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

compiler

compiler-cli

core

forms

21.2.6

common

compiler

core

migrations

21.2.5

compiler

compiler-cli

core

migrations

service-worker

21.2.4

compiler

core

21.2.6 (2026-03-25)

common

compiler

core

migrations

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

compiler

compiler-cli

core

forms