Skip to content

chore(deps): bump the npm-minor group across 1 directory with 9 updates - #100

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-minor-4a84a628c1
Closed

chore(deps): bump the npm-minor group across 1 directory with 9 updates#100
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/npm-minor-4a84a628c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor group with 9 updates in the /frontend directory:

Package From To
@angular/common 21.2.23 21.2.25
@angular/compiler 21.2.23 21.2.25
@angular/core 21.2.23 21.2.25
@angular/forms 21.2.23 21.2.25
@angular/platform-browser 21.2.23 21.2.25
@angular/router 21.2.23 21.2.25
@angular/compiler-cli 21.2.23 21.2.25
jsdom 30.1.0 30.1.1
prettier 3.9.8 3.9.9

Updates @angular/common from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/common's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/common's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits

Updates @angular/compiler from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/compiler's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/compiler's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits

Updates @angular/core from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/core's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/core's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits
  • 6489ca5 fix(router): reject duplicate outlets in production builds
  • 03872a8 fix(router): avoid dense elements allocation for numeric URL keys
  • See full diff in compare view

Updates @angular/forms from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/forms's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/forms's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits

Updates @angular/platform-browser from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/platform-browser's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/platform-browser's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits

Updates @angular/router from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/router's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/router's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits
  • a83f811 fix(router): require outlets to match a route before processing child segments
  • 6489ca5 fix(router): reject duplicate outlets in production builds
  • 4bc11a5 fix(router): do not copy URL-sized objects into every route snapshot
  • a131f77 perf(router): do not retain UrlTree instances in RouterLink
  • 03872a8 fix(router): avoid dense elements allocation for numeric URL keys
  • See full diff in compare view

Updates @angular/compiler-cli from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/compiler-cli's releases.

21.2.25

platform-server

Commit Description
fix - 450af9c813 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 4bc11a546b do not copy URL-sized objects into every route snapshot
fix - 6489ca5d84 reject duplicate outlets in production builds
fix - a83f8119ac require outlets to match a route before processing child segments
perf - a131f77d92 do not retain UrlTree instances in RouterLink

21.2.24

router

Commit Description
fix - 03872a80bc avoid dense elements allocation for numeric URL keys
Changelog

Sourced from @​angular/compiler-cli's changelog.

21.2.25 (2026-09-30)

platform-server

Commit Type Description
450af9c813 fix reject protocol-relative paths in resolveUrl

router

Commit Type Description
4bc11a546b fix do not copy URL-sized objects into every route snapshot
6489ca5d84 fix reject duplicate outlets in production builds
a83f8119ac fix require outlets to match a route before processing child segments
a131f77d92 perf do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit Type Description
03872a80bc fix avoid dense elements allocation for numeric URL keys

Commits

Updates jsdom from 30.1.0 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
  • Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
  • Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
  • Fixed the storageQuota option being ignored by frames.
  • Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
  • Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
  • Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
  • Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
  • Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)
Commits
  • 0a117f4 30.1.1
  • 103f67d Remove unnecessary window cleanup from API tests
  • cdda00a Test HTTP/2 document and subresource loading
  • 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
  • d940c20 Share jsdom settings across descendant windows
  • 6ba40cb Fix and simplify option propagation
  • 3b3be70 Preserve CSS priorities across declaration updates
  • 97b2758 Align focusing and unfocusing with HTML
  • b7b460b Update w3c-xmlserializer to v6
  • 71d562f Update html-encoding-sniffer to v7
  • Additional commits viewable in compare view

Updates prettier from 3.9.8 to 3.9.9

Release notes

Sourced from prettier's releases.

3.9.9

  • Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.9

diff

Markdown: Fix text with $ been incorrectly parsed as math syntax (#20140 by @​fisker)

<!-- Input -->
**Uses $FOO** from `a.sh` and `b.sh`, plus `$BAR` from `c.sh`, before anything else runs here.
<!-- Prettier 3.9.8 -->
Uses $FOO from a.sh and b.sh, plus $BARfromc.sh, before anything else runs here.
<!-- Prettier 3.9.9 -->
Uses $FOO from a.sh and b.sh, plus $BAR from c.sh, before anything else runs here.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026
@0xMMA 0xMMA mentioned this pull request Oct 4, 2026
Merged
@0xMMA

0xMMA commented Oct 10, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps): bump the npm-minor group in /frontend with 9 updates chore(deps): bump the npm-minor group across 1 directory with 9 updates Oct 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/npm-minor-4a84a628c1 branch from e7baaa1 to c363fde Compare October 10, 2026 11:14
@0xMMA 0xMMA mentioned this pull request Oct 10, 2026
Merged
@dependabot
chore(deps): bump the npm-minor group across 1 directory with 9 updates
bc96be2 
Bumps the npm-minor group with 9 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.23` | `21.2.25` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.23` | `21.2.25` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.23` | `21.2.25` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.23` | `21.2.25` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.23` | `21.2.25` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.23` | `21.2.25` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.23` | `21.2.25` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.0` | `30.1.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.8` | `3.9.9` |



Updates `@angular/common` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/common)

Updates `@angular/compiler` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/compiler)

Updates `@angular/core` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/core)

Updates `@angular/forms` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/forms)

Updates `@angular/platform-browser` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/platform-browser)

Updates `@angular/router` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/router)

Updates `@angular/compiler-cli` from 21.2.23 to 21.2.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.25/packages/compiler-cli)

Updates `jsdom` from 30.1.0 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.0...v30.1.1)

Updates `prettier` from 3.9.8 to 3.9.9
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.8...3.9.9)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.2.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@angular/compiler-cli"
  dependency-version: 21.2.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@angular/core"
  dependency-version: 21.2.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@angular/forms"
  dependency-version: 21.2.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.2.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: "@angular/router"
  dependency-version: 21.2.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
- dependency-name: prettier
  dependency-version: 3.9.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/npm-minor-4a84a628c1 branch from c363fde to bc96be2 Compare October 10, 2026 13:34
0xMMA added a commit that referenced this pull request Oct 10, 2026
@0xMMA
chore(deps): October bumps — Angular 21.2.25, SDKs, dotenv 18 (#117)
c7684bf 
* chore(deps): October bumps — Angular 21.2.25, SDKs, dotenv 18

Folds Dependabot #100, #101 and #102 into one change. Angular moves to
21.2.25 as a whole (21.2.24 left animations behind and npm refused the
mixed peer set). Versions younger than the 7-day cooldown were held at
the last older release, transitive ones included.

openai-go stays at 3.68.0: 3.69.0 refuses plain HTTP for requests that
carry a key, which breaks the Ollama provider (#116). Dependabot ignores
>= 3.69.0 until that is fixed.

* chore(deps): regenerate lockfile, keep security updates for openai-go

Address review of #117: the hand-held lockfile was internally invalid
(express 5.2.1 with a nested content-type 2.x). Regenerated from main's
lockfile with a release-date cutoff instead, so every pinned version is
consistent; npm ls --all --package-lock-only is clean. source-map-js
moves to 1.2.2 (GHSA-68fv-2mgg-jv7q).

The openai-go ignore drops its version range: an explicit range would
also block security updates, a bare name does not.

---------

Co-authored-by: Michael <0xMMA@users.noreply.github.com>
@0xMMA

0xMMA commented Oct 10, 2026

Copy link
Copy Markdown
Owner

Superseded by #117 (merged): the bumps landed there together, with Angular moved as a whole set and openai-go held at 3.68.0 (#116).

@0xMMA 0xMMA closed this Oct 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/npm-minor-4a84a628c1 branch October 10, 2026 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@0xMMA