build(deps): bump the npm_and_yarn group across 1 directory with 34 updates #50

dependabot · 2025-11-18T18:36:30Z

Bumps the npm_and_yarn group with 15 updates in the /web directory:

Package	From	To
@angular/core	`9.1.12`	`20.3.12`
@angular/core	`10.1.5`	`10.2.5`
karma	`5.0.9`	`6.4.4`
@babel/traverse	`7.11.0`	`7.28.5`
json5	`2.1.3`	`2.2.3`
json5	`1.0.1`	`1.0.2`
loader-utils	`1.4.0`	`3.3.1`
async	`2.6.3`	`2.6.4`
qs	`6.5.2`	`6.5.3`
follow-redirects	`1.13.0`	`1.15.11`
ini	`1.3.5`	`1.3.6`
ip	`1.1.5`	`removed`
js-yaml	`3.14.0`	`3.14.2`
json-schema	`0.2.3`	`0.4.0`
jszip	`3.5.0`	`3.10.1`
minimist	`1.2.5`	`1.2.8`
y18n	`4.0.0`	`4.0.3`

Updates @angular/core from 9.1.12 to 20.3.12

Release notes

Sourced from @angular/core's releases.

20.3.12

No release notes provided.

20.3.11

common

Commit Description

remove placeholder image listeners once view is removed

compiler

Commit Description

support arbitrary nesting in :host-context()

support commas in :host() argument

support complex selectors in :nth-child()

support one additional level of nesting in :host()

core

Commit Description

skip leave animations on view swaps

20.3.10

compiler-cli

Commit Description

make required inputs diagnostic less noisy

migrations

Commit Description

Prevent removal of templates referenced with preceding whitespace characters

20.3.9

No release notes provided.

20.3.8

common

Commit Description

Blocks IPv6 localhost from preconnect checks

core

Commit Description

Clear lView from IcuIteratorState when stack is empty to prevent memory leak

migrations

Commit Description

Do not remove a template if it is referenced even with a trailing semilocon

router

Commit Description

handle parenthesized outlets without a name in DefaultUrlSerializer (#64507)

... (truncated)

Changelog

Sourced from @angular/core's changelog.

20.3.12 (2025-11-14)

21.0.0-rc.2 (2025-11-12)

common

Commit Type Description

ab98e71c41 fix remove placeholder image listeners once view is removed

compiler

Commit Type Description

f54cc4f28a fix support commas in :host() argument

814b2713f5 fix support complex selectors in :nth-child()

aad6ced0ef fix support one additional level of nesting in :host()

compiler-cli

Commit Type Description

5b55200edf fix allow value to be set on radio fields

bd322ca410 fix do not flag custom control required inputs as missing when field is present

71ab11ccf0 fix make field detection logic more robust

01290ab275 fix use any when checking field interface conformance

core

Commit Type Description

c9f977833e fix skip Angular formatting when formatting signals recursively

forms

Commit Type Description

a278ee358c feat add debounce() rule for signal forms

781a3299f9 perf only update interop controls when bound field changes

language-server

Commit Type Description

3f7111a9c3 fix fix directory renaming on Windows

... (truncated)

Commits

a02b957 refactor(core): remove resource flag.
41466a7 refactor(core): move profile_types.ts to primtives
1dcecdf refactor(platform-browser): remove unused Platform ID dependency from DomRend...
ee578d3 build: format md files
dcdd1bc fix(core): skip leave animations on view swaps
d6ef181 refactor(core): export types from primitives
a45e6b2 fix(migrations): Prevent removal of templates referenced with preceding white...
7438b9c refactor(core): Removes unused flag for onDestroy
1572baf refactor(core): Replace usages of the Function type for animations
2edc82a fix(migrations): Do not remove a template if it is referenced even with a tra...
Additional commits viewable in compare view

Updates @angular/core from 10.1.5 to 10.2.5

Release notes

Sourced from @angular/core's releases.

20.3.12

No release notes provided.

20.3.11

common

Commit Description

remove placeholder image listeners once view is removed

compiler

Commit Description

support arbitrary nesting in :host-context()

support commas in :host() argument

support complex selectors in :nth-child()

support one additional level of nesting in :host()

core

Commit Description

skip leave animations on view swaps

20.3.10

compiler-cli

Commit Description

make required inputs diagnostic less noisy

migrations

Commit Description

Prevent removal of templates referenced with preceding whitespace characters

20.3.9

No release notes provided.

20.3.8

common

Commit Description

Blocks IPv6 localhost from preconnect checks

core

Commit Description

Clear lView from IcuIteratorState when stack is empty to prevent memory leak

migrations

Commit Description

Do not remove a template if it is referenced even with a trailing semilocon

router

Commit Description

handle parenthesized outlets without a name in DefaultUrlSerializer (#64507)

... (truncated)

Changelog

Sourced from @angular/core's changelog.

20.3.12 (2025-11-14)

21.0.0-rc.2 (2025-11-12)

common

Commit Type Description

ab98e71c41 fix remove placeholder image listeners once view is removed

compiler

Commit Type Description

f54cc4f28a fix support commas in :host() argument

814b2713f5 fix support complex selectors in :nth-child()

aad6ced0ef fix support one additional level of nesting in :host()

compiler-cli

Commit Type Description

5b55200edf fix allow value to be set on radio fields

bd322ca410 fix do not flag custom control required inputs as missing when field is present

71ab11ccf0 fix make field detection logic more robust

01290ab275 fix use any when checking field interface conformance

core

Commit Type Description

c9f977833e fix skip Angular formatting when formatting signals recursively

forms

Commit Type Description

a278ee358c feat add debounce() rule for signal forms

781a3299f9 perf only update interop controls when bound field changes

language-server

Commit Type Description

3f7111a9c3 fix fix directory renaming on Windows

... (truncated)

Commits

a02b957 refactor(core): remove resource flag.
41466a7 refactor(core): move profile_types.ts to primtives
1dcecdf refactor(platform-browser): remove unused Platform ID dependency from DomRend...
ee578d3 build: format md files
dcdd1bc fix(core): skip leave animations on view swaps
d6ef181 refactor(core): export types from primitives
a45e6b2 fix(migrations): Prevent removal of templates referenced with preceding white...
7438b9c refactor(core): Removes unused flag for onDestroy
1572baf refactor(core): Replace usages of the Function type for animations
2edc82a fix(migrations): Do not remove a template if it is referenced even with a tra...
Additional commits viewable in compare view

Updates karma from 5.0.9 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

add build commits for patch release (d7f2d69)

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

few typos (c6a4271)

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

pass integrity value (63d86be)

v6.4.0

6.4.0 (2022-06-14)

Features

support SRI verification of link tags (dc51a2e)

support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

add build commits for patch release (d7f2d69)

6.4.2 (2023-04-21)

Bug Fixes

few typos (c6a4271)

6.4.1 (2022-09-19)

Bug Fixes

pass integrity value (63d86be)

6.4.0 (2022-06-14)

Features

support SRI verification of link tags (dc51a2e)

support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

... (truncated)

Commits

84f85e7 chore(release): 6.4.4 [skip ci]
a4d1284 build(deps-dev): bump ws from 6.2.1 to 6.2.3
d8cf806 chore(release): 6.4.3 [skip ci]
d7f2d69 fix: add build commits for patch release
85a2eeb build(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.2
0bffce2 build(deps): updated socket.io version to fix security issues with socket.io-...
86667ab build(deps): bump follow-redirects from 1.11.0 to 1.15.4
450fdfd docs: Add deprecation notice to Karma README
9de3c00 chore(release): 6.4.2 [skip ci]
c6a4271 fix: few typos
Additional commits viewable in compare view

Updates @babel/traverse from 7.11.0 to 7.28.5

Release notes

Sourced from @babel/traverse's releases.

v7.28.5 (2025-10-23)

Thank you @CO0Ki3, @Olexandr88, and @youthfulhps for your first PRs!

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

#17519 fix: rest correctly returns plain array (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types

#17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)

babel-traverse

#17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types

#17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core

#17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

Committers: 8

Babel Bot (@babel-bot)

Byeongho Yoo (@youthfulhps)

Huáng Jùnliàng (@JLHwung)

Hyeon Dokko (@CO0Ki3)

Nicolò Ribaudo (@nicolo-ribaudo)

@Olexandr88

@liuxingbaoyu

fisker Cheung (@fisker)

v7.28.4 (2025-09-05)

Thanks @gwillen and @mrginglymus for your first PRs!

🏠 Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types

#17493 Update Jest to v30.1.1 (@JLHwung)

babel-plugin-transform-regenerator

#17455 chore: Clean up transform-regenerator (@liuxingbaoyu)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.28.5 (2025-10-23)

👓 Spec Compliance

babel-parser

#17446 Allow Runtime Errors for Function Call Assignment Targets (@liuxingbaoyu)

babel-helper-validator-identifier

#17501 fix: update identifier to unicode 17 (@fisker)

🐛 Bug Fix

babel-plugin-proposal-destructuring-private

#17534 Allow mixing private destructuring and rest (@CO0Ki3)

babel-parser

#17521 Improve @babel/parser error typing (@JLHwung)

#17491 fix: improve ts-only declaration parsing (@JLHwung)

babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring

#17519 fix: rest correctly returns plain array (@liuxingbaoyu)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types

#17503 Fix JSXIdentifier handling in isReferencedIdentifier (@JLHwung)

babel-traverse

#17504 fix: ensure scope.push register in anonymous fn (@JLHwung)

🏠 Internal

babel-types

#17494 Type checking babel-types scripts (@JLHwung)

🏃‍♀️ Performance

babel-core

#17490 Faster finding of locations in buildCodeFrameError (@liuxingbaoyu)

v7.28.4 (2025-09-05)

🏠 Internal

babel-core, babel-helper-check-duplicate-nodes, babel-traverse, babel-types

#17493 Update Jest to v30.1.1 (@JLHwung)

babel-plugin-transform-regenerator

#17455 chore: Clean up transform-regenerator (@liuxingbaoyu)

babel-core

#17474 Switch to @jridgewell/remapping (@mrginglymus)

v7.28.3 (2025-08-14)

👓 Spec Compliance

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env

#17443 [static blocks] Do not inject new static fields after static code (@nicolo-ribaudo)

🐛 Bug Fix

babel-parser

#17465 fix(parser/typescript): parse import("./a", {with:{},}) (@easrng)

#17478 fix(parser): stop subscript parsing on async arrow (@JLHwung)

💅 Polish

babel-plugin-transform-regenerator, babel-plugin-transform-runtime

... (truncated)

Commits

61647ae v7.28.5
e579cb0 Enable strictNullChecks for traverse (#17499)
7385eae [Babel 8] Improve scope information collection performance (#17043)
26bc651 [Babel 8] Better node type definitions for computed (#17500)
e626523 Fix JSXIdentifier handling in isReferencedIdentifier (#17503)
19c9126 fix: ensure scope.push register in anonymous fn (#17504)
35055e3 v7.28.4
b41f8cd Update Jest to v30.1.1 (#17493)
22493b6 Improve @babel/traverse typings (#17485)
18d88b8 Improve @babel/core typings (#17471)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @babel/traverse since your current version.

Updates json5 from 2.1.3 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

Commits

c3a7524 2.2.3
94fd06d docs: update CHANGELOG for v2.2.3
3b8cebf docs(security): use GitHub security advisories
f0fd9e1 docs: publish a security policy
6a91a05 docs(template): bug -> bug report
14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
Additional commits viewable in compare view

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

Commits

c3a7524 2.2.3
94fd06d docs: update CHANGELOG for v2.2.3
3b8cebf docs(security): use GitHub security advisories
f0fd9e1 docs: publish a security policy
6a91a05 docs(template): bug -> bug report
14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
Additional commits viewable in compare view

Updates loader-utils from 1.4.0 to 3.3.1

Release notes

Sourced from loader-utils's releases.

v3.3.1

3.3.1 (2024-06-05)

Bug Fixes

base64safe regex (3b2d3b1)

v3.3.0

3.3.0 (2024-06-04)

Features

add digestType 'base64safe' (#259) (af15793)

v3.2.2

3.2.2 (2024-05-29)

Bug Fixes

unreachable code for directories (128f945)

v3.2.1

3.2.1 (2022-11-11)

Bug Fixes

ReDoS problem (#224) (d2d752d)

v3.2.0

3.2.0 (2021-11-11)

Features

hash uniformity for base digests (451858b)

v3.1.3

3.1.3 (2021-11-04)

Bug Fixes

crash with md4 hash (#198) (ef084d4)

v3.1.2

3.1.2 (2021-11-04)

... (truncated)

Changelog

Sourced from loader-utils's changelog.

3.3.1 (2024-06-05)

Bug Fixes

base64safe regex (3b2d3b1)

3.3.0 (2024-06-04)

Features

add digestType 'base64safe' (#259) (af15793)

3.2.2 (2024-05-29)

Bug Fixes

unreachable code for directories (128f945)

3.2.1 (2022-11-11)

Bug Fixes

ReDoS problem (#224) (d2d752d)

3.2.0 (2021-11-11)

Features

hash uniformity for base digests (451858b)

3.1.3 (2021-11-04)

Bug Fixes

crash with md4 hash (#198) (ef084d4)

3.1.2 (2021-11-04)

Bug Fixes

bug with unicode characters (#196) (0426405)

3.1.1 (2021-11-04)

... (truncated)

Commits

06fcc0a chore(release): 3.3.1
3b2d3b1 fix: base64safe regex
2d6ed3c chore(release): 3.3.0
af15793 feat: add digestType 'base64safe' (#259)
977b28d chore(release): 3.2.2
83e1c68 style: fix (#258)
128f945 fix: unreachable code for directories
50890cd docs: add missing security policy (#251)
62e12f1 chore(deps): bump word-wrap from 1.2.3 to 1.2.4 (#247)
9e20ec8 chore(deps): bump semver from 5.7.1 to 5.7.2 (#246)
Additional commits viewable in compare view

Updates async from 2.6.3 to 2.6.4

Changelog

Sourced from async's changelog.

v2.6.4

Fix potential prototype pollution exploit (#1828)

Commits

c6bdaca Version 2.6.4
8870da9 Update built files
4df6754 update changelog
8f7f903 Fix prototype pollution vulnerability (#1828)
See full diff in compare view

Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.

Updates body-parser from 1.19.0 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to [email protected] by @wesleytodd in expressjs/body-parser#527

deps: [email protected] by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

perf: skip value escaping when unnecessary

deps: [email protected]

1.20.1

deps: [email protected]

perf: remove unnecessary object clone

1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: [email protected]

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: [email protected]

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

Fix strict json error message on Node.js 19+Description has been truncated

…pdates Bumps the npm_and_yarn group with 15 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `9.1.12` | `20.3.12` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `10.1.5` | `10.2.5` | | [karma](https://github.com/karma-runner/karma) | `5.0.9` | `6.4.4` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.11.0` | `7.28.5` | | [json5](https://github.com/json5/json5) | `2.1.3` | `2.2.3` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | | [loader-utils](https://github.com/webpack/loader-utils) | `1.4.0` | `3.3.1` | | [async](https://github.com/caolan/async) | `2.6.3` | `2.6.4` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.13.0` | `1.15.11` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.6` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `removed` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.0` | `3.14.2` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jszip](https://github.com/Stuk/jszip) | `3.5.0` | `3.10.1` | | [minimist](https://github.com/minimistjs/minimist) | `1.2.5` | `1.2.8` | | [y18n](https://github.com/yargs/y18n) | `4.0.0` | `4.0.3` | Updates `@angular/core` from 9.1.12 to 20.3.12 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/20.3.12/packages/core) Updates `@angular/core` from 10.1.5 to 10.2.5 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/20.3.12/packages/core) Updates `karma` from 5.0.9 to 6.4.4 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v5.0.9...v6.4.4) Updates `@babel/traverse` from 7.11.0 to 7.28.5 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.28.5/packages/babel-traverse) Updates `json5` from 2.1.3 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.1.3...v2.2.3) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v2.1.3...v2.2.3) Updates `loader-utils` from 1.4.0 to 3.3.1 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/master/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.4.0...v3.3.1) Updates `async` from 2.6.3 to 2.6.4 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md) - [Commits](caolan/async@v2.6.3...v2.6.4) Updates `body-parser` from 1.19.0 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.19.0...1.20.3) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `cookie` from 0.3.1 to 0.7.1 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.3.1...v0.7.1) Updates `dns-packet` from 1.3.1 to 5.6.1 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v5.6.1) Updates `ws` from 6.1.4 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@6.1.4...8.17.1) Updates `express` from 4.17.1 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.17.1...4.21.2) Updates `follow-redirects` from 1.13.0 to 1.15.11 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.13.0...v1.15.11) Updates `ini` from 1.3.5 to 1.3.6 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.6) Removes `ip` Updates `js-yaml` from 3.14.0 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.0...3.14.2) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jszip` from 3.5.0 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.5.0...v3.10.1) Updates `log4js` from 6.3.0 to 6.9.1 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v6.3.0...v6.9.1) Updates `minimist` from 1.2.5 to 1.2.8 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v1.2.5...v1.2.8) Updates `node-forge` from 0.10.0 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.3.1) Updates `on-headers` from 1.0.2 to 1.1.0 - [Release notes](https://github.com/jshttp/on-headers/releases) - [Changelog](https://github.com/jshttp/on-headers/blob/master/HISTORY.md) - [Commits](jshttp/on-headers@v1.0.2...v1.1.0) Updates `tar` from 4.4.13 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v4.4.13...v6.2.1) Updates `postcss` from 7.0.27 to 8.5.6 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.27...8.5.6) Updates `rollup` from 2.1.0 to 4.52.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG-2.md) - [Commits](rollup/rollup@v2.1.0...v4.52.3) Updates `send` from 0.17.1 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.17.1...0.19.0) Updates `serve-static` from 1.14.1 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.14.1...v1.16.2) Updates `socket.io` from 2.3.0 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/[email protected]) Updates `socket.io-parser` from 3.3.0 to 4.2.4 - [Release notes](https://github.com/Automattic/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/4.2.4/CHANGELOG.md) - [Commits](socketio/socket.io-parser@3.3.0...4.2.4) Updates `webpack-dev-middleware` from 3.7.2 to 7.4.2 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.2...v7.4.2) Updates `webpack-dev-server` from 3.11.0 to 5.2.2 - [Release notes](https://github.com/webpack/webpack-dev-server/releases) - [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md) - [Commits](webpack/webpack-dev-server@v3.11.0...v5.2.2) Updates `webpack-subresource-integrity` from 1.4.0 to 5.1.0 - [Release notes](https://github.com/waysact/webpack-subresource-integrity/releases) - [Changelog](https://github.com/waysact/webpack-subresource-integrity/blob/main/CHANGELOG.md) - [Commits](waysact/webpack-subresource-integrity@v1.4.0...v5.1.0) Updates `y18n` from 4.0.0 to 4.0.3 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/y18n-v4.0.3/CHANGELOG.md) - [Commits](yargs/y18n@v4.0.0...y18n-v4.0.3) --- updated-dependencies: - dependency-name: "@angular/core" dependency-version: 20.3.12 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 10.2.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: karma dependency-version: 6.4.4 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-version: 7.28.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-version: 2.2.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-version: 1.0.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-version: 3.3.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: async dependency-version: 2.6.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: body-parser dependency-version: 1.20.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-version: 6.5.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-version: 0.7.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-version: 5.6.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-version: 8.17.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-version: 4.21.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-version: 1.15.11 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-version: 1.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-version: 0.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-version: 3.10.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-version: 6.9.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-version: 1.2.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.3.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 6.2.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-version: 4.52.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-version: 0.19.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-version: 1.16.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-version: 4.8.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-version: 4.2.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-version: 7.4.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-server dependency-version: 5.2.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-subresource-integrity dependency-version: 5.1.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: y18n dependency-version: 4.0.3 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-11-18T21:57:53Z

Superseded by #57.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 18, 2025

dependabot bot closed this Nov 18, 2025

dependabot bot deleted the dependabot/npm_and_yarn/web/npm_and_yarn-e3998ac8d2 branch November 18, 2025 21:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the npm_and_yarn group across 1 directory with 34 updates #50

build(deps): bump the npm_and_yarn group across 1 directory with 34 updates #50

Uh oh!

dependabot bot commented on behalf of github Nov 18, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Nov 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	support arbitrary nesting in :host-context()
	support commas in :host() argument
	support complex selectors in :nth-child()
	support one additional level of nesting in :host()

Commit	Type	Description
f54cc4f28a	fix	support commas in :host() argument
814b2713f5	fix	support complex selectors in :nth-child()
aad6ced0ef	fix	support one additional level of nesting in :host()

Commit	Type	Description
5b55200edf	fix	allow value to be set on radio fields
bd322ca410	fix	do not flag custom control required inputs as missing when field is present
71ab11ccf0	fix	make field detection logic more robust
01290ab275	fix	use any when checking field interface conformance

Commit	Type	Description
a278ee358c	feat	add `debounce()` rule for signal forms
781a3299f9	perf	only update interop controls when bound field changes

Uh oh!

build(deps): bump the npm_and_yarn group across 1 directory with 34 updates #50

build(deps): bump the npm_and_yarn group across 1 directory with 34 updates #50

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

20.3.12

20.3.11

common

compiler

core

20.3.10

compiler-cli

migrations

20.3.9

20.3.8

common

core

migrations

router

20.3.12 (2025-11-14)

21.0.0-rc.2 (2025-11-12)

common

compiler

compiler-cli

core

forms

language-server

20.3.12

20.3.11

common

compiler

core

20.3.10

compiler-cli

migrations

20.3.9

20.3.8

common

core

migrations

router

20.3.12 (2025-11-14)

21.0.0-rc.2 (2025-11-12)

common

compiler

compiler-cli

core

forms

language-server

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

v6.4.0

6.4.0 (2022-06-14)

Features

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

6.4.2 (2023-04-21)

Bug Fixes

6.4.1 (2022-09-19)

Bug Fixes

6.4.0 (2022-06-14)

Features

dependabot bot commented on behalf of github Nov 18, 2025 •

edited

Loading