Bump ajv and @schematics/angular by dependabot[bot] · Pull Request #334 · Napster2210/ngx-spinner

dependabot · 2026-03-13T08:07:24Z

Bumps ajv to 8.18.0 and updates ancestor dependency @schematics/angular. These dependencies need to be updated together.

Updates ajv from 6.12.6 to 8.18.0

Release notes

Sourced from ajv's releases.

v8.18.0

What's Changed

feat: allow tree-shaking by adding "sideEffects": false to package.json by @josdejong in ajv-validator/ajv#2480

fix: #2482 Infinity and NaN serialise to null by @jasoniangreen in ajv-validator/ajv#2487

fix: small grammatical error in managing-schemas.md by @monteiro-renato in ajv-validator/ajv#2508

fix: typos in schema-language.md by @monteiro-renato in ajv-validator/ajv#2507

fix(pattern): use configured RegExp engine with $data keyword to mitigate ReDoS attacks (CVE-2025-69873) by @epoberezkin in ajv-validator/ajv#2586

New Contributors

@josdejong made their first contribution in ajv-validator/ajv#2480

@monteiro-renato made their first contribution in ajv-validator/ajv#2508

Full Changelog: ajv-validator/ajv@v8.17.1...v8.18.0

v8.17.1

What's Changed

bump version to 8.17.1 by @jasoniangreen in ajv-validator/ajv#2472

Full Changelog: ajv-validator/ajv@v8.17.0...v8.17.1

Plus everything in 8.17.0 which failed to release

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (ajv-validator/ajv#2444)" by @gurgunday in ajv-validator/ajv#2448 fix: ignore new eslint error for @typescript-eslint/no-extraneous-class by @jasoniangreen in ajv-validator/ajv#2455 docs: clarify behaviour of addVocabulary by @jasoniangreen in ajv-validator/ajv#2454 docs: refactor to improve legibility by @blottn in ajv-validator/ajv#2432 Fix grammatical typo in managing-schemas.md by @wetneb in ajv-validator/ajv#2305 docs: Fix broken strict-mode link by @alexanderjsx in ajv-validator/ajv#2459 feat: add test for encoded refs and bump fast-uri by @jasoniangreen in ajv-validator/ajv#2449 fix: changes for @typescript-eslint/array-type rule by @jasoniangreen in ajv-validator/ajv#2467 fixes ajv-validator/ajv#2217 - clarify custom keyword naming by @jasoniangreen in ajv-validator/ajv#2457

v8.17.0

What's Changed

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (#2444)" by @gurgunday in ajv-validator/ajv#2448

fix: ignore new eslint error for @typescript-eslint/no-extraneous-class by @jasoniangreen in ajv-validator/ajv#2455

docs: clarify behaviour of addVocabulary by @jasoniangreen in ajv-validator/ajv#2454

docs: refactor to improve legibility by @blottn in ajv-validator/ajv#2432

Fix grammatical typo in managing-schemas.md by @wetneb in ajv-validator/ajv#2305

docs: Fix broken strict-mode link by @alexanderjsx in ajv-validator/ajv#2459

feat: add test for encoded refs and bump fast-uri by @jasoniangreen in ajv-validator/ajv#2449

fix: changes for @typescript-eslint/array-type rule by @jasoniangreen in ajv-validator/ajv#2467

fixes #2217 - clarify custom keyword naming by @jasoniangreen in ajv-validator/ajv#2457

... (truncated)

Commits

142ce84 8.18.0
720a23f fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...
82735a1 fix: typos in schema-language.md (#2507)
b17ec32 fix: small grammatical error in managing-schemas.md (#2508)
69568d0 fix: #2482 Infinity and NaN serialise to null (#2487)
f06766f feat: allow tree-shaking by adding ``"sideEffects": falsetopackage.json` ...
9050ba1 bump version to 8.17.1 (#2472)
f7831b4 fixes #2217 - clarify custom keyword naming (#2457)
a523784 fix: changes for @typescript-eslint/array-type rule (#2467)
595fe58 feat: add test for encoded refs and bump fast-uri (#2449)
Additional commits viewable in compare view

Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.

Updates @schematics/angular from 11.2.19 to 21.2.2

Release notes

Sourced from @schematics/angular's releases.

21.2.2

@angular/cli

Commit Description

conditionally quote package names when adding dependencies based on host requirements

preserve exact version in ng add when requested

avoid redundant package version resolution in ng add

@angular/build

Commit Description

allow any CHROME_BIN for vitest playwright provider

normalize line endings for CSP hash generation

pass process environment variables to prerender workers

resolve assets correctly during i18n prerendering

21.2.1

@schematics/angular

Commit Description

prevent adding test dependencies when minimal option is enabled

@angular/cli

Commit Description

correct dev dependency detection logic in ng add

disable npm update notifier in package manager host

ensure group members are updated to targeted version

ignore unknown files when formatting schematic changes

@angular-devkit/build-angular

Commit Description

update copy-webpack-plugin to v14.0.0

@angular/build

Commit Description

bundle polyfills to preserve execution order in dev server

conditionally allow vi.mock for non-relative imports

resolve style include paths relative to ng-package.json in unit-test builder

treat empty browsers array as undefined in unit-test builder

fix memory leak in ng serve with i18n

@angular/ssr

Commit Description

improve header validation logic

introduce DI token to signal route discovery process

21.2.0

@schematics/angular

Commit Description

add a '.prettierrc' file to generated workspaces and add Prettier as dev dependency

... (truncated)

Changelog

Sourced from @schematics/angular's changelog.

21.2.2 (2026-03-11)

@angular/cli

Commit Type Description

8447d9132 fix conditionally quote package names when adding dependencies based on host requirements

d2f209823 fix preserve exact version in ng add when requested

28f4d684a perf avoid redundant package version resolution in ng add

@angular/build

Commit Type Description

06010294f fix allow any CHROME_BIN for vitest playwright provider

8dec0c62b fix normalize line endings for CSP hash generation

58688ebd7 fix pass process environment variables to prerender workers

4ca61647f fix resolve assets correctly during i18n prerendering

20.3.20 (2026-03-11)

@angular/build

Commit Type Description

0fd6823af fix pass process environment variables to prerender workers

22.0.0-next.0 (2026-03-05)

Breaking Changes

Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

The @angular-devkit/architect-cli package is no longer available. The architect CLI tool has been moved to the @angular-devkit/architect package.

The experimental @angular-devkit/build-angular:jest and @angular-devkit/build-angular:web-test-runner builders have been removed.

@angular/ssr

The server no longer falls back to Client-Side Rendering (CSR) when a request fails host validation. Requests with unrecognized 'Host' headers will now return a 400 Bad Request status code. Users must ensure all valid hosts are correctly configured in the 'allowedHosts' option.

@angular/cli

... (truncated)

Commits

bebe7d6 release: cut the v21.2.2 release
58688eb fix(@angular/build): pass process environment variables to prerender workers
a92ed61 ci: re-enable renovate for less package
42180e5 refactor: remove @angular-devkit/core logger and its dependencies from the ...
790e18d build: update cross-repo angular dependencies
6255c20 build: update pnpm to v10.31.0
e8599f1 build: lock file maintenance
8447d91 fix(@angular/cli): conditionally quote package names when adding dependencies...
58e2e56 build: update github/codeql-action action to v4.32.6
d2f2098 fix(@angular/cli): preserve exact version in ng add when requested
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [ajv](https://github.com/ajv-validator/ajv) to 8.18.0 and updates ancestor dependency [@schematics/angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `ajv` from 6.12.6 to 8.18.0 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.12.6...v8.18.0) Updates `@schematics/angular` from 11.2.19 to 21.2.2 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@11.2.19...v21.2.2) --- updated-dependencies: - dependency-name: ajv dependency-version: 8.18.0 dependency-type: indirect - dependency-name: "@schematics/angular" dependency-version: 21.2.2 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 13, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump ajv and @schematics/angular#334

Bump ajv and @schematics/angular#334
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-350085231e

dependabot Bot commented on behalf of github Mar 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	conditionally quote package names when adding dependencies based on host requirements
	preserve exact version in ng add when requested
	avoid redundant package version resolution in ng add

Commit	Description
	allow any `CHROME_BIN` for vitest playwright provider
	normalize line endings for CSP hash generation
	pass process environment variables to prerender workers
	resolve assets correctly during i18n prerendering

Commit	Description
	correct dev dependency detection logic in `ng add`
	disable npm update notifier in package manager host
	ensure group members are updated to targeted version
	ignore unknown files when formatting schematic changes

Commit	Description
	bundle polyfills to preserve execution order in dev server
	conditionally allow `vi.mock` for non-relative imports
	resolve style include paths relative to `ng-package.json` in unit-test builder
	treat empty browsers array as undefined in unit-test builder
	fix memory leak in `ng serve` with i18n

Commit	Description
	improve header validation logic
	introduce DI token to signal route discovery process

Commit	Type	Description
8447d9132	fix	conditionally quote package names when adding dependencies based on host requirements
d2f209823	fix	preserve exact version in ng add when requested
28f4d684a	perf	avoid redundant package version resolution in ng add

Commit	Type	Description
06010294f	fix	allow any `CHROME_BIN` for vitest playwright provider
8dec0c62b	fix	normalize line endings for CSP hash generation
58688ebd7	fix	pass process environment variables to prerender workers
4ca61647f	fix	resolve assets correctly during i18n prerendering

Conversation

dependabot Bot commented on behalf of github Mar 13, 2026

v8.18.0

What's Changed

New Contributors

v8.17.1

What's Changed

Plus everything in 8.17.0 which failed to release

v8.17.0

What's Changed

21.2.2

@​angular/cli

@​angular/build

21.2.1

@​schematics/angular

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

@​angular/ssr

21.2.0

@​schematics/angular

21.2.2 (2026-03-11)

@​angular/cli

@​angular/build

20.3.20 (2026-03-11)

@​angular/build

22.0.0-next.0 (2026-03-05)

Breaking Changes

@​angular/ssr

@​angular/cli

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/ssr`

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/ssr`

`@angular/cli`