Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the npm_and_yarn group across 2 directories with 4 updates #3186

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2025

Bumps the npm_and_yarn group with 3 updates in the /angular-workspace/test-ng15 directory: serialize-javascript, webpack and @angular-devkit/build-angular.
Bumps the npm_and_yarn group with 1 update in the /react-workspace/test-react-v18 directory: webpack.

Updates serialize-javascript from 6.0.1 to 6.0.2

Release notes

Sourced from serialize-javascript's releases.

v6.0.2

  • fix: serialize URL string contents to prevent XSS (#173) f27d65d
  • Bump @​babel/traverse from 7.10.1 to 7.23.7 (#171) 02499c0
  • docs: update readme with URL support (#146) 0d88527
  • chore: update node version and lock file e2a3a91
  • fix typo (#164) 5a1fa64

yahoo/serialize-javascript@v6.0.1...v6.0.2

Commits

Updates webpack from 5.76.1 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

  • Performance regression
  • Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

  • Don't crash with filesystem cache and unknown scheme
  • Generate a valid code when output.iife is true and output.library.type is umd
  • Fixed conflict variable name with concatenate modules and runtime code
  • Merge duplicate chunks before
  • Collisions in ESM library
  • Use recursive search for versions of shared dependencies
  • [WASM] Don't crash WebAssembly with Reference Types (sync and async)
  • [WASM] Fixed wasm loading for sync and async webassembly
  • [CSS] Don't add [uniqueName] to localIdentName when it is empty
  • [CSS] Parsing strings on Windows
  • [CSS] Fixed CSS local escaping

New Features

  • Added support for injecting debug IDs
  • Export the MergeDuplicateChunks plugin
  • Added universal loading for JS chunks and JS worker chunks (only ES modules)
  • [WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)
  • [CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted
  • [CSS] Added universal loading for CSS chunks
  • [CSS] Parse ICSS @value at-rules in CSS modules
  • [CSS] Parse ICSS :import rules in CSS modules
  • [CSS] Added the url and import options for CSS
  • [CSS] Allow to import custom properties in CSS modules

Performance

  • Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

  • [Types] Add @types/eslint-scope to dependencieS
  • [Types] Fixed regression in validate

v5.96.0

Bug Fixes

  • Fixed Module Federation should track all referenced chunks
  • Handle Data URI without base64 word
  • HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

Updates @angular-devkit/build-angular from 15.2.11 to 19.1.8

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v19.1.8

19.1.8 (2025-02-19)

@​angular/cli

Commit Description
fix - f76cee637 correctly parse and resolve relative schematic collection names on Windows
fix - ceba7739c prefer installed package as fallback when listing package groups

@​angular-devkit/build-angular

Commit Description
fix - c54b9996a pass missing options to Karma esbuild builder

@​angular/build

Commit Description
fix - 2f60a24dd suppress asset missing warning for /index.html requests
fix - b8f7952b7 update critical CSS inlining to support autoCsp

v19.1.7

19.1.7 (2025-02-12)

@​schematics/angular

Commit Description
fix - de73b1c0c include default export for Express app

@​angular/build

Commit Description
fix - 8890a5f76 always provide Vite client helpers with development server
fix - df1d38846 configure Vite CORS option
fix - a13a49d95 exclude unmodified files from logs with --localize
fix - 0826315fa handle unlocalizable files correctly in localized prerender
perf - d2e1c8e9f cache translated i18n bundles for faster builds

@​angular/ssr

Commit Description
fix - f5d974576 accurately calculate content length for static pages with \r\n
fix - c26ea1619 properly handle baseHref with protocol

v19.1.6

19.1.6 (2025-02-05)

@​schematics/angular

Commit Description
fix - 3f7042672 remove additional newline after standalone property
fix - e9778dba0 skip ssr migration when @angular/ssr is not a dependency

@​angular/build

Commit Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

19.1.8 (2025-02-19)

@​angular/cli

Commit Type Description
f76cee637 fix correctly parse and resolve relative schematic collection names on Windows
ceba7739c fix prefer installed package as fallback when listing package groups

@​angular-devkit/build-angular

Commit Type Description
c54b9996a fix pass missing options to Karma esbuild builder

@​angular/build

Commit Type Description
2f60a24dd fix suppress asset missing warning for /index.html requests
b8f7952b7 fix update critical CSS inlining to support autoCsp

19.2.0-next.2 (2025-02-12)

@​schematics/angular

Commit Type Description
aa0ae457b fix include default export for Express app
4a5b76a8e fix remove additional newline after standalone property
c716ce152 fix skip ssr migration when @angular/ssr is not a dependency

@​angular-devkit/build-angular

Commit Type Description
ef7ea536f feat add aot option to jest
523d539c6 feat add aot option to karma

@​angular/build

Commit Type Description
beefed839 fix always provide Vite client helpers with development server
5c1360179 fix avoid pre-transform errors with Vite pre-bundling
be15b886c fix configure Vite CORS option

... (truncated)

Commits
  • 64be376 release: cut the v19.1.8 release
  • c2cbc0f build: add @​types/node to assorted locations where node types are being relie...
  • b8f7952 fix(@​angular/build): update critical CSS inlining to support autoCsp
  • 415c02e refactor: move builtin module imports to use node: prefix imports
  • c54b999 fix(@​angular-devkit/build-angular): pass missing options to Karma esbuild bui...
  • 0d6cda2 test: use esbuild-based karma builder for e2e tests in esbuild suite
  • 2f60a24 fix(@​angular/build): suppress asset missing warning for /index.html requests
  • a70c3dc test: reduce flakiness of reuse-dep-optimization-cache e2e test
  • ceba773 fix(@​angular/cli): prefer installed package as fallback when listing package ...
  • 5c56cdb refactor(@​angular/cli): handle undefined ng add collection name
  • Additional commits viewable in compare view

Updates webpack-dev-middleware from 5.3.4 to 7.4.2

Release notes

Sourced from webpack-dev-middleware's releases.

v7.4.2

7.4.2 (2024-08-21)

Bug Fixes

v7.4.1

7.4.1 (2024-08-20)

Bug Fixes

v7.4.0

7.4.0 (2024-08-15)

Features

  • added the cacheImmutable option to cache immutable assets (assets with a hash in file name like image.e12ab567.jpg) (5ed629d)
  • allow to configure the Cache-Control header (#1923) (f7529c3)

Bug Fixes

  • support devServer: false (b443f4d)

v7.3.0

7.3.0 (2024-07-18)

Features

v7.2.1

7.2.1 (2024-04-02)

Bug Fixes

  • avoid extra log

v7.2.0

7.2.0 (2024-03-29)

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

7.4.2 (2024-08-21)

Bug Fixes

7.4.1 (2024-08-20)

Bug Fixes

7.4.0 (2024-08-15)

Features

  • added the cacheImmutable option to cache immutable assets (assets with a hash in file name like image.e12ab567.jpg) (5ed629d)
  • allow to configure the Cache-Control header (#1923) (f7529c3)

Bug Fixes

  • support devServer: false (b443f4d)

7.3.0 (2024-07-18)

Features

7.2.1 (2024-04-02)

Bug Fixes

  • avoid extra log

7.2.0 (2024-03-29)

Features

... (truncated)

Commits
  • 5a916d8 chore(release): 7.4.2
  • c20f1d9 fix: no crash when headers are already sent (#1929)
  • 0f9a6c9 chore(deps-dev): bump the dependencies group with 4 updates (#1928)
  • 99e9b77 chore(release): 7.4.1
  • 8f9aa16 chore: ignore Rspack word
  • 21f1797 fix: assetsInfo may be undefined (rspack) (#1927)
  • 0034dd9 test: fix (#1926)
  • 60a2bc4 chore(deps-dev): bump the dependencies group with 4 updates (#1925)
  • 792ab65 chore(release): 7.4.0
  • 5ed629d feat: added the cacheImmutable option to cache immutable assets (assets with ...
  • Additional commits viewable in compare view

Updates webpack from 5.97.1 to 5.98.0

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

  • Performance regression
  • Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

  • Don't crash with filesystem cache and unknown scheme
  • Generate a valid code when output.iife is true and output.library.type is umd
  • Fixed conflict variable name with concatenate modules and runtime code
  • Merge duplicate chunks before
  • Collisions in ESM library
  • Use recursive search for versions of shared dependencies
  • [WASM] Don't crash WebAssembly with Reference Types (sync and async)
  • [WASM] Fixed wasm loading for sync and async webassembly
  • [CSS] Don't add [uniqueName] to localIdentName when it is empty
  • [CSS] Parsing strings on Windows
  • [CSS] Fixed CSS local escaping

New Features

  • Added support for injecting debug IDs
  • Export the MergeDuplicateChunks plugin
  • Added universal loading for JS chunks and JS worker chunks (only ES modules)
  • [WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)
  • [CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted
  • [CSS] Added universal loading for CSS chunks
  • [CSS] Parse ICSS @value at-rules in CSS modules
  • [CSS] Parse ICSS :import rules in CSS modules
  • [CSS] Added the url and import options for CSS
  • [CSS] Allow to import custom properties in CSS modules

Performance

  • Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

  • [Types] Add @types/eslint-scope to dependencieS
  • [Types] Fixed regression in validate

v5.96.0

Bug Fixes

  • Fixed Module Federation should track all referenced chunks
  • Handle Data URI without base64 word
  • HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
@angular-devkit/build-angular [> 15.2.11]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 3 updates in the /angular-workspace/test-ng15 directory: [serialize-javascript](https://github.com/yahoo/serialize-javascript), [webpack](https://github.com/webpack/webpack) and [@angular-devkit/build-angular](https://github.com/angular/angular-cli).
Bumps the npm_and_yarn group with 1 update in the /react-workspace/test-react-v18 directory: [webpack](https://github.com/webpack/webpack).


Updates `serialize-javascript` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.1...v6.0.2)

Updates `webpack` from 5.76.1 to 5.97.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.76.1...v5.97.1)

Updates `@angular-devkit/build-angular` from 15.2.11 to 19.1.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@15.2.11...19.1.8)

Updates `webpack-dev-middleware` from 5.3.4 to 7.4.2
- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)
- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md)
- [Commits](webpack/webpack-dev-middleware@v5.3.4...v7.4.2)

Updates `webpack` from 5.97.1 to 5.98.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.76.1...v5.97.1)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-middleware
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner February 23, 2025 19:31
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 23, 2025
Copy link

netlify bot commented Feb 23, 2025

Deploy Preview for moduswebcomponents canceled.

Name Link
🔨 Latest commit a2d5084
🔍 Latest deploy log https://app.netlify.com/sites/moduswebcomponents/deploys/67bb7788ace08600087171fc

@coliff
Copy link
Member

coliff commented Feb 24, 2025

@dependabot ignore @angular-devkit/build-angular

@coliff coliff closed this Feb 24, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 24, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 24, 2025

OK, I won't notify you about @angular-devkit/build-angular again, unless you unignore it.

Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 24, 2025

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/angular-workspace/test-ng15/npm_and_yarn-32cc47776e branch February 24, 2025 02:12
@coliff
Copy link
Member

coliff commented Feb 24, 2025

@dependabot unignore serialize-javascript

Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 24, 2025

No dependency name (serialize-javascript) or ignore conditions found to unignore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant