Bump the npm_and_yarn group across 1 directory with 20 updates #8

dependabot · 2025-05-19T12:07:31Z

Bumps the npm_and_yarn group with 12 updates in the /angular-src directory:

Package	From	To
minimist	`1.2.0`	`1.2.8`
mkdirp	`0.5.1`	`0.5.6`
karma	`2.0.2`	`6.4.4`
handlebars	`4.0.11`	`4.7.8`
protractor	`5.3.1`	`5.4.4`
elliptic	`6.4.0`	`6.6.1`
ini	`1.3.4`	`1.3.8`
ini	`1.3.5`	`1.3.8`
stringstream	`0.0.5`	`0.0.6`
tar	`2.2.1`	`6.2.1`
@angular/cli	`1.7.4`	`19.2.12`
fsevents	`1.1.2`	`1.2.13`
js-yaml	`3.7.0`	`3.14.1`

Updates minimist from 1.2.0 to 1.2.8

Changelog

Sourced from minimist's changelog.

v1.2.8 - 2023-02-09

Merged

[Fix] Fix long option followed by single dash [#17](https://github.com/minimistjs/minimist/issues/17)

[Tests] Remove duplicate test [#12](https://github.com/minimistjs/minimist/issues/12)

[Fix] opt.string works with multiple aliases [#10](https://github.com/minimistjs/minimist/issues/10)

Fixed

[Fix] Fix long option followed by single dash (#17) [#15](https://github.com/minimistjs/minimist/issues/15)

[Tests] Remove duplicate test (#12) [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] Fix long option followed by single dash [#15](https://github.com/minimistjs/minimist/issues/15)

[Fix] opt.string works with multiple aliases (#10) [#9](https://github.com/minimistjs/minimist/issues/9)

[Fix] Fix handling of short option with non-trivial equals [#5](https://github.com/minimistjs/minimist/issues/5)

[Tests] Remove duplicate test [#8](https://github.com/minimistjs/minimist/issues/8)

[Fix] opt.string works with multiple aliases [#9](https://github.com/minimistjs/minimist/issues/9)

Commits

Merge tag 'v0.2.3' a026794

[eslint] fix indentation and whitespace 5368ca4

[eslint] fix indentation and whitespace e5f5067

[eslint] more cleanup 62fde7d

[eslint] more cleanup 36ac5d0

[meta] add auto-changelog 73923d2

[actions] add reusable workflows d80727d

[eslint] add eslint; rules to enable later are warnings 48bc06a

[eslint] fix indentation 34b0f1c

[readme] rename and add badges 5df0fe4

[Dev Deps] switch from covert to nyc a48b128

[Dev Deps] update covert, tape; remove unnecessary tap f0fb958

[meta] create FUNDING.yml; add funding in package.json 3639e0c

[meta] use npmignore to autogenerate an npmignore file be2e038

Only apps should have lockfiles 282b570

isConstructorOrProto adapted from PR ef9153f

[Dev Deps] update @ljharb/eslint-config, aud 098873c

[Dev Deps] update @ljharb/eslint-config, aud 3124ed3

[meta] add safe-publish-latest 4b927de

[Tests] add aud in posttest b32d9bd

[meta] update repo URLs f9fdfc0

[actions] Avoid 0.6 tests due to build failures ba92fe6

[Dev Deps] update tape 950eaa7

[Dev Deps] add missing npmignore dev dep 3226afa

Merge tag 'v0.2.2' 980d7ac

v1.2.7 - 2022-10-10

Commits

... (truncated)

Commits

6901ee2 v1.2.8
a026794 Merge tag 'v0.2.3'
c0b2661 v0.2.3
63b8fee [Fix] Fix long option followed by single dash (#17)
72239e6 [Tests] Remove duplicate test (#12)
34b0f1c [eslint] fix indentation
3226afa [Dev Deps] add missing npmignore dev dep
098873c [Dev Deps] update @ljharb/eslint-config, aud
9ec4d27 [Fix] Fix long option followed by single dash
ba92fe6 [actions] Avoid 0.6 tests due to build failures
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ljharb, a new releaser for minimist since your current version.

Updates mkdirp from 0.5.1 to 0.5.6

Commits

92f086d 0.5.6
2a28125 clean up tests
c905d65 update minimist
049cf18 0.5.5
bea6382 Remove unnecessary umask calls
42a012c 0.5.4
2867920 fix infinite loop on windows machines
d784e70 0.5.3
d612c5d add files list so this package isn't a monster
b2e7ba0 0.5.2
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for mkdirp since your current version.

Updates karma from 2.0.2 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

add build commits for patch release (d7f2d69)

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

few typos (c6a4271)

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

pass integrity value (63d86be)

v6.4.0

6.4.0 (2022-06-14)

Features

support SRI verification of link tags (dc51a2e)

support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

add build commits for patch release (d7f2d69)

6.4.2 (2023-04-21)

Bug Fixes

few typos (c6a4271)

6.4.1 (2022-09-19)

Bug Fixes

pass integrity value (63d86be)

6.4.0 (2022-06-14)

Features

support SRI verification of link tags (dc51a2e)

support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

... (truncated)

Commits

84f85e7 chore(release): 6.4.4 [skip ci]
a4d1284 build(deps-dev): bump ws from 6.2.1 to 6.2.3
d8cf806 chore(release): 6.4.3 [skip ci]
d7f2d69 fix: add build commits for patch release
85a2eeb build(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.2
0bffce2 build(deps): updated socket.io version to fix security issues with socket.io-...
86667ab build(deps): bump follow-redirects from 1.11.0 to 1.15.4
450fdfd docs: Add deprecation notice to Karma README
9de3c00 chore(release): 6.4.2 [skip ci]
c6a4271 fix: few typos
Additional commits viewable in compare view

Updates handlebars from 4.0.11 to 4.7.8

Release notes

Sourced from handlebars's releases.

v4.7.8

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.8 - July 27th, 2023

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

v4.7.7 - February 15th, 2021

fix weird error in integration tests - eb860c0

fix: check prototype property access in strict-mode (#1736) - b6d3de7

fix: escape property names in compat mode (#1736) - f058970

refactor: In spec tests, use expectTemplate over equals and shouldThrow (#1683) - 77825f8

chore: start testing on Node.js 12 and 13 - 3789a30

(POSSIBLY) BREAKING CHANGES:

the changes from version 4.6.0 now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See #1633 for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.

That is why we only bump the patch version despite mentioning breaking changes.

Commits

v4.7.6 - April 3rd, 2020

Chore/Housekeeping:

#1672 - Switch cmd parser to latest minimist (@dougwilson

Compatibility notes:

Restored Node.js compatibility

Commits

v4.7.5 - April 2nd, 2020

Chore/Housekeeping:

~~Node.js version support has been changed to v6+~~ Reverted in 4.7.6

Compatibility notes:

... (truncated)

Commits

8dc3d25 v4.7.8
668c4fb Fix browser tests in CI pipeline
c65c6cc Test on Node 18
3d3796c Make library compatible with workers
075b354 Fix sync issue with npm lock-file
30dbf04 Fix compiling of each block params in strict mode
e3a5448 Fix bundler issue with webpack 5
8e23642 Fix integration-tests issue with npm >= 7
88ac068 use https instead of git for mustache submodule
c68bc08 Fix typo
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.

Updates protractor from 5.3.1 to 5.4.4

Release notes

Sourced from protractor's releases.

5.4.3

typescript 3.7 compatibility

Resolves #5348 which was causing incompatibility with TypeScript 3.7

Changelog

Sourced from protractor's changelog.

5.4.4

Fixes

fix: security prototype pollution

5.4.3

Fixes

fix(index.ts): Fix exports to unbreak TypeScript 3.7 build

5.4.2

Features
(db1b638) feat(saucelabs): add sauceRegion support for eu datacenters (#5083)

This change allows user to define the backend region from sauce via the sauceRegion property, e.g.
   sauceUser: process.env.SAUCE_USERNAME,
   sauceKey: process.env.SAUCE_ACCESS_KEY,
   sauceRegion: 'eu',
Will run the test against https://ondemand.eu-central-1.saucelabs.com:443/wd/hub/.
   sauceUser: process.env.SAUCE_USERNAME,
   sauceKey: process.env.SAUCE_ACCESS_KEY,
   sauceRegion: 'us',
// the default
sauceUser: process.env.SAUCE_USERNAME,
sauceKey: process.env.SAUCE_ACCESS_KEY,
Will run the test against https://ondemand.saucelabs.com:443/wd/hub/
Fixes

(f5dbe13) fix(deps): @types/node is now a dev dependency

5.4.1

Features

(7b08083)

... (truncated)

Commits

a0ffa9b release: 5.4.4
8b3ebf8 fix: security prototype pollution
162f9e5 ci: Log sauce connect proxy to stdout, remove travis_wait, upgrade proxy to 4...
eb1d0fc docs(release): Update release docs for 5.4 series.
6c46098 chore(release): Update changelog
faf0895 fix(ci): Don't update webdriver in pretest
d77731c fix(release): Pin CircleCI to Chrome v74
efe7fdd chore(dependencies): Update natives, so we can continue to run Gulp on
0442e51 chore(release): Bugfix release 5.4.3
7999a08 fix(index.ts): Fix exports to unbreak TypeScript 3.7 build
Additional commits viewable in compare view

Updates adm-zip from 0.4.4 to 0.4.9

Changelog

Sourced from adm-zip's changelog.

0.4.9 / 2018-04-25

Update package.json (The Brain)

Update README.md (The Brain)

fix: resolve both target and entry path (Danny Grander)

0.4.8 / 2018-04-23

Update package.json (The Brain)

Update package.json (The Brain)

Update package.json (The Brain)

fix: prevent extracting archived files outside of target path (Aviad Reich)

add try-catch around fs.writeSync (olya)

Fix data accessing example in README (Philipp Muens)

Remove buffers noAssert argument (Ruben Bridgewater)

Fix license expression to be compatible to SPDX. (Golo Roden)

Added travis ci support (Amila Welihinda)

add bug fix on special character in filename that are allowed in linux but not in windows (Ygal Bellaiche)

Change project name for publishing to npm (David Kadlecek)

Added support for electron original-fs (David Kadlecek)

fixed #130: ensure buffer (lloiser)

fix Issue: cthackers/adm-zip#102 (mygoare)

Update license attribute (Peter deHaan)

lowcase for the function name (Changyu Geng)

Add a test function (Changyu Geng)

Under windows, the path should be normalize first, otherwise the localPath will still use back slash (Shauk Wu)

Update adm-zip.js (MikeNerevarin)

Fix adm-zip.addFile default attributes for files and directories (Pavel Strashkin)

Fixed CRC bug (The Brain)

0.4.7 / 2015-02-09

Update zipEntry.js (The Brain)

Update package.json (The Brain)

0.4.5 / 2015-02-09

Bumped library version for a a npm push (cthackers)

Merged pull request (cthackers)

Use files property in package.json (Kevin Martensson)

preserve attr in entry headers (João Moreno)

when overwrite flag is set, should check if the target exists, rather than the targetPath (Shauk Wu)

manage cases where paths 'C:/' and 'c:/' are the same (IvanDimanov)

writeZip now calles provided callback if given (Adam Booth)

Fixed a bug where empty ZIP files were being treated as invalid. (Max Sorensen)

Add path.normalize to addLocalFolder (aomurbekov)

add an optional filter to addLocalFolder (Gregg Tavares)

Bail out after an error (XeonCore)

Fix indentation (XeonCore)

Add async versions of extractAllTo (XeonCore)

... (truncated)

Commits

89b6f67 Update package.json
9592298 Update README.md
ce59e5a Merge pull request #215 from grnd/master
38cb4a4 fix: resolve both target and entry path
18c3d31 Update package.json
666adec Update package.json
499d59b Update package.json
62f6400 Merge pull request #212 from aviadatsnyk/master
6f4dfeb fix: prevent extracting archived files outside of target path
e116bc1 Merge pull request #208 from pmuens/patch-1
Additional commits viewable in compare view

Updates elliptic from 6.4.0 to 6.6.1

Commits

9b77436 6.6.1
04cb6f5 Merge commit from fork
b8a7edd 6.6.0
34c8534 fix: signature verification due to leading zeros
3e46a48 6.5.7
accb61e lib: DER signature decoding correction
03e06e1 6.5.6
7ac5360 Merge commit from fork
7570078 6.5.5
206da2e lib: lint
Additional commits viewable in compare view

Updates ini from 1.3.4 to 1.3.8

Commits

a2c5da8 1.3.8
af5c6bb Do not use Object.create(null)
8b648a1 don't test where our devdeps don't even work
c74c8af 1.3.7
024b8b5 update deps, add linting
032fbaf Use Object.create(null) to avoid default object property hazards
2da9039 1.3.6
cfea636 better git push script, before publish instead of after
56d2805 do not allow invalid hazardous string as section name
738eca5 v1.3.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for ini since your current version.

Updates ini from 1.3.5 to 1.3.8

Commits

a2c5da8 1.3.8
af5c6bb Do not use Object.create(null)
8b648a1 don't test where our devdeps don't even work
c74c8af 1.3.7
024b8b5 update deps, add linting
032fbaf Use Object.create(null) to avoid default object property hazards
2da9039 1.3.6
cfea636 better git push script, before publish instead of after
56d2805 do not allow invalid hazardous string as section name
738eca5 v1.3.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for ini since your current version.

Updates stringstream from 0.0.5 to 0.0.6

Commits

fee31c5 0.0.6
2f4a9d4 Merge pull request #9 from mhart/fix-buffer-constructor-vuln
afbc744 Ensure data is not a number in Buffer constructor
See full diff in compare view

Updates tar from 2.2.1 to 6.2.1

Release notes

Sourced from tar's releases.

v6.1.13

6.1.13 (2022-12-07)

Dependencies

cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

57493ee #332 ensuring close event is emited after stream has ended (@webark)

b003c64 #314 replace deprecated String.prototype.substr() (#314) (@CommanderRoot, @lukekarrys)

Documentation

f129929 #313 remove dead link to benchmarks (#313) (@yetzt)

c1faa9f add examples/explanation of using tar.t (@isaacs)

Changelog

Sourced from tar's changelog.

Changelog

7.4

Deprecate onentry in favor of onReadEntry for clarity.

7.3

Add onWriteEntry option

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

Add support for brotli compression

Add maxDepth option to prevent extraction into excessively deep folders.

6.1

remove dead link to benchmarks (#313) (@yetzt)

add examples/explanation of using tar.t (@isaacs)

ensure close event is emited after stream has ended (@webark)

... (truncated)

Commits

bef7b1e 6.2.1
fe8cd57 prevent extraction in excessively deep subfolders
fe7ebfd remove security.md
5bc9d40 6.2.0
fe1ef5e changelog 6.2
e483220 get rid of npm lint stuff
689928a ci that works outside of npm org
db6f539 file inference improvements for .tbr and .tgz
336fa8f refactor: dry and other pr comments
eeba222 chore: lint fixes
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Updates @angular/cli from 1.7.4 to 19.2.12

Release notes

Sourced from @angular/cli's releases.

19.2.12

@angular/cli

Commit Description

properly handle Node.js require() errors with ESM modules

19.2.11

@angular-devkit/build-angular

Commit Description

correctly set i18n subPath in webpack browser builder

@angular/build

Commit Description

avoid attempting to watch bundler internal files

avoid internal karma request cache for assets

fix unnecessary esbuild rebuilds

19.2.10

@angular/build

Commit Description

update vite to 6.2.7

19.2.9

@angular-devkit/build-angular

Commit Description

update http-proxy-middleware to v3.0.5

@angular/build

Commit Description

pass preserveSymlinks option to Karma esbuild builder

@angular/ssr

Commit Description

support getPrerenderParams for wildcard routes

19.2.8

@angular/build

Commit Description

include module value check when adding custom conditions

prevent nested CSS in components

properly resolve transitive external dependencies in vite-dev-server

update vite to 6.2.6

19.2.7

@angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

19.2.12 (2025-05-14)

@angular/cli

Commit Type Description

0098c38c6 fix properly handle Node.js require() errors with ESM modules

20.0.0-rc.0 (2025-05-07)

@angular/cli

Commit Type Description

e513cd4aa fix add Node.js 24 as supported version

@schematics/angular

Commit Type Description

901ab60d9 fix remove explicit index option from new applications

@angular-devkit/build-angular

Commit Type Description

635999d4e fix correctly set i18n subPath in webpack browser builder

@angular/build

Commit Type Description

f36a27272 fix allow a default application browser option

f42f5c14c fix allow component HMR for templates with i18n

ffaf8aa19 fix avoid attempting to watch bundler internal files

ba844ae16 fix avoid internal karma request cache for assets

7bb1f8747 fix enable unit-test reporters option

1cd65a08d fix perform testing module cleanup when using Vitest

22ba07444 perf fix unnecessary esbuild rebuilds

@angular/pwa

Commit Type Description

fa0a06f9f fix support using default index option when not present

... (truncated)

Commits

72b2d16 release: cut the v19.2.12 release
cf1ab3e ci: skip e2e-snapshots on non-main branches
0098c38 fix(@angular/cli): properly handle Node.js require() errors with ESM modules
7720741 release: cut the v19.2.11 release
78ab131 build: update esbuild to v0.25.4
9eaf344 fix(@angular-devkit/build-angular): correctly set i18n subPath in webpack bro...
cba66a8 fix(@angular/build): avoid attempting to watch bundler internal files
009fc37 fix(@angular/build): avoid internal karma request cache for assets
3e3abf4 build: improve stability of windows jobs further
b43da39 perf(@angular/build): fix unnecessary esbuild rebuilds
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @angular/cli since your current version.

Updates fsevents from 1.1.2 to 1.2.13

Release notes

Sourced from fsevents's releases.

Release v1.2.13

Only build on Mac-OSX

Release v1.2.11

Removing node-pre-gyp so that building fsevents becomes easier and enabled without the download of binaries.

The credentials to the AWS store have been lost. Releasing to AWS is both insecure and no longer possible due to the lost credentials.

Intermediate Release

No release notes provided.

Release v1.2.9 - Node v12 compatibility

No release notes provided.

Release Pre-NAPI v1.2.8

No release notes provided.

Version Bump (bundle node-pre-gyp)

No release notes provided.

Prebuilt v11.x

No release notes provided.

v1.2.3

Added node v10 for pre-built binaries

C++ tuning to fix potential SIGILL and cyclic dependency (#204)

v1.2.2

Fixed node-pre-gyp bundling issue

v1.2.1

[unpublished because of errors during publish process]

v1.2.0

BREAKING: End support for Node v0.12. If you are using Node v0.12 please pin your fsevents dependencies to v1.1.3. Not bumping semver major for this release was a compromise solution discussed in #199 and #201.

Node v0.10 should continue to work with local compilation for now, but hosted pre-built binaries will no longer be provided. If this is a constraint for you, please pin to an earlier version.

Fixed security vulnerability warnings by updating node-pre-gyp to ^0.9.0

Compatibility updates for nan v2.9.0

v1.1.3

Added node v9 for pre-built binaries

Fixed bug related to using --no-bin-links option on install

Updated node-pre-gyp to latest version (0.6.39)

Commits

844a05d Version Bump
f393f2a Only build fsevents on macOS (#322)
6a281a7 [publish binary]
acc2bce [publish binary]
f532b6e [publish binary]
4c6a1c0 Add node 13 to travis matrix.
92e40aa Release 1.2.12.
909af26 Release v1.2.11
7074adb Release v1.2.10
0a052f6 Node.js v12 support for v1.x (#274)
Additional commits viewable in compare view

Updates tunnel-agent from 0.4.3 to 0.6.0

Commits

67df643 0.6.0
9ca95ec Use .from
8a7c86e 0.5.1
5fe6221 0.5.0
5bbaf62 Merge pull request #25 from request/safe-buffer
cdc47b9 Migrating to safe-buffer for security reasons.
See full diff in compare view

Updates handlebars from 4.0.11 to 4.7.8

Release notes

Sourced from handlebars's releases.

v4.7.8

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.8 - July 27th, 2023

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global ob...
Description has been truncated

Bumps the npm_and_yarn group with 12 updates in the /angular-src directory: | Package | From | To | | --- | --- | --- | | [minimist](https://github.com/minimistjs/minimist) | `1.2.0` | `1.2.8` | | [mkdirp](https://github.com/isaacs/node-mkdirp) | `0.5.1` | `0.5.6` | | [karma](https://github.com/karma-runner/karma) | `2.0.2` | `6.4.4` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.0.11` | `4.7.8` | | [protractor](https://github.com/angular/protractor) | `5.3.1` | `5.4.4` | | [elliptic](https://github.com/indutny/elliptic) | `6.4.0` | `6.6.1` | | [ini](https://github.com/npm/ini) | `1.3.4` | `1.3.8` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [stringstream](https://github.com/mhart/StringStream) | `0.0.5` | `0.0.6` | | [tar](https://github.com/isaacs/node-tar) | `2.2.1` | `6.2.1` | | [@angular/cli](https://github.com/angular/angular-cli) | `1.7.4` | `19.2.12` | | [fsevents](https://github.com/fsevents/fsevents) | `1.1.2` | `1.2.13` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.7.0` | `3.14.1` | Updates `minimist` from 1.2.0 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.0...v1.2.8) Updates `mkdirp` from 0.5.1 to 0.5.6 - [Changelog](https://github.com/isaacs/node-mkdirp/blob/main/CHANGELOG.md) - [Commits](isaacs/node-mkdirp@0.5.1...v0.5.6) Updates `karma` from 2.0.2 to 6.4.4 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v2.0.2...v6.4.4) Updates `handlebars` from 4.0.11 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.11...v4.7.8) Updates `protractor` from 5.3.1 to 5.4.4 - [Release notes](https://github.com/angular/protractor/releases) - [Changelog](https://github.com/angular/protractor/blob/5.4.4/CHANGELOG.md) - [Commits](angular/protractor@5.3.1...5.4.4) Updates `adm-zip` from 0.4.4 to 0.4.9 - [Release notes](https://github.com/cthackers/adm-zip/releases) - [Changelog](https://github.com/cthackers/adm-zip/blob/master/history.md) - [Commits](cthackers/adm-zip@v0.4.4...v0.4.9) Updates `elliptic` from 6.4.0 to 6.6.1 - [Commits](indutny/elliptic@v6.4.0...v6.6.1) Updates `ini` from 1.3.4 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.4...v1.3.8) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.4...v1.3.8) Updates `stringstream` from 0.0.5 to 0.0.6 - [Commits](mhart/StringStream@v0.0.5...v0.0.6) Updates `tar` from 2.2.1 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v2.2.1...v6.2.1) Updates `@angular/cli` from 1.7.4 to 19.2.12 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v1.7.4...19.2.12) Updates `fsevents` from 1.1.2 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.1.2...v1.2.13) Updates `tunnel-agent` from 0.4.3 to 0.6.0 - [Commits](request/tunnel-agent@v0.4.3...v0.6.0) Updates `handlebars` from 4.0.11 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.0.11...v4.7.8) Updates `http-proxy` from 1.16.2 to 1.18.1 - [Release notes](https://github.com/http-party/node-http-proxy/releases) - [Changelog](https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md) - [Commits](http-party/node-http-proxy@1.16.2...1.18.1) Updates `https-proxy-agent` from 1.0.0 to 2.2.4 - [Release notes](https://github.com/TooTallNate/proxy-agents/releases) - [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/https-proxy-agent/CHANGELOG.md) - [Commits](https://github.com/TooTallNate/proxy-agents/commits/2.2.4/packages/https-proxy-agent) Updates `js-yaml` from 3.7.0 to 3.14.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.7.0...3.14.1) Updates `lodash` from 4.17.10 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.10...4.17.21) Updates `socket.io` from 2.0.4 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `y18n` from 3.2.1 to 4.0.0 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](yargs/y18n@v3.2.1...v4.0.0) Updates `yargs-parser` from 4.2.1 to 11.1.1 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/docs/CHANGELOG-full.md) - [Commits](yargs/yargs-parser@v4.2.1...v11.1.1) --- updated-dependencies: - dependency-name: minimist dependency-version: 1.2.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: mkdirp dependency-version: 0.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: karma dependency-version: 6.4.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: protractor dependency-version: 5.4.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: adm-zip dependency-version: 0.4.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: elliptic dependency-version: 6.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-version: 1.3.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-version: 1.3.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: stringstream dependency-version: 0.0.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 6.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular/cli" dependency-version: 19.2.12 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: fsevents dependency-version: 1.2.13 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tunnel-agent dependency-version: 0.6.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: handlebars dependency-version: 4.7.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy dependency-version: 1.18.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: https-proxy-agent dependency-version: 2.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-version: 4.17.21 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-version: 4.8.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-version: 4.0.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-version: 11.1.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 19, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 20 updates #8

Bump the npm_and_yarn group across 1 directory with 20 updates #8

Uh oh!

dependabot bot commented on behalf of github May 19, 2025

Uh oh!

Uh oh!

Commit	Description
	avoid attempting to watch bundler internal files
	avoid internal karma request cache for assets
	fix unnecessary esbuild rebuilds

Commit	Description
	include `module` value check when adding custom conditions
	prevent nested CSS in components
	properly resolve transitive external dependencies in vite-dev-server
	update vite to 6.2.6

Commit	Type	Description
f36a27272	fix	allow a default application `browser` option
f42f5c14c	fix	allow component HMR for templates with i18n
ffaf8aa19	fix	avoid attempting to watch bundler internal files
ba844ae16	fix	avoid internal karma request cache for assets
7bb1f8747	fix	enable unit-test reporters option
1cd65a08d	fix	perform testing module cleanup when using Vitest
22ba07444	perf	fix unnecessary esbuild rebuilds

Bump the npm_and_yarn group across 1 directory with 20 updates #8

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 20 updates #8

Uh oh!

Conversation

dependabot bot commented on behalf of github May 19, 2025

v1.2.8 - 2023-02-09

Merged

Fixed

Commits

v1.2.7 - 2022-10-10

Commits

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

v6.4.0

6.4.0 (2022-06-14)

Features

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

6.4.2 (2023-04-21)

Bug Fixes

6.4.1 (2022-09-19)

Bug Fixes

6.4.0 (2022-06-14)

Features

6.3.20 (2022-05-13)

Bug Fixes

6.3.19 (2022-04-19)

Bug Fixes

6.3.18 (2022-04-13)

Bug Fixes

v4.7.8

v4.7.8 - July 27th, 2023

v4.7.7 - February 15th, 2021

v4.7.6 - April 3rd, 2020

v4.7.5 - April 2nd, 2020

5.4.3

typescript 3.7 compatibility

5.4.4

Fixes

5.4.3

Fixes

5.4.2

Features

Fixes

5.4.1

Features

0.4.9 / 2018-04-25

0.4.8 / 2018-04-23

0.4.7 / 2015-02-09

0.4.5 / 2015-02-09

v6.1.13

6.1.13 (2022-12-07)

Dependencies

v6.1.12

6.1.12 (2022-10-31)

Bug Fixes

Documentation

Changelog

7.4

7.3

7.2

7.1

7.0

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/ssr`

`@angular/build`

`@angular/build`

`@angular/cli`

`@angular/cli`

`@schematics/angular`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/pwa`