Bump the libs group with 19 updates

[dependabot]

Bumps the libs group with 19 updates:

Package	From	To
@angular/cdk	19.1.1	19.2.6
@angular/material	19.1.1	19.2.6
jsonpath-plus	9.0.0	10.3.0
jwt-decode	3.1.2	4.0.0
nofilter	4.0.2	5.0.0
ngx-toastr	16.2.0	19.0.0
@angular/cli	19.1.9	19.2.4
@types/jasmine	4.3.6	5.1.7
@typescript-eslint/eslint-plugin	5.48.2	8.27.0
@typescript-eslint/parser	5.48.2	8.27.0
cypress	12.17.4	14.2.0
eslint	8.57.1	9.23.0
jasmine-core	4.5.0	5.6.0
karma-chrome-launcher	3.1.1	3.2.0
karma-jasmine-html-reporter	2.0.0	2.1.0
stylelint	15.11.0	16.16.0
stylelint-config-standard	33.0.0	37.0.0
stylelint-config-standard-scss	8.0.0	14.0.0
typescript	5.5.4	5.8.2

Updates @angular/cdk from 19.1.1 to 19.2.6

Release notes

Sourced from @​angular/cdk's releases.

v19.2.6

19.2.6 "tellurium-transponder" (2025-03-21)

cdk

Commit	Description
	overlay: ensure re-exported transitive Dir directive can be imported (#30679)

v19.2.5

19.2.5 "argon-planet" (2025-03-20)

material

Commit	Description
	timepicker: TimepickerInput component in shadow DOM (#30642)

cdk

Commit	Description
	tree: retainining previous objects (#30431)

multiple

Commit	Description
	ensure re-exported module symbols can be imported

v19.2.4

19.2.4 "cafetite-cafe" (2025-03-19)

material

Commit	Description
	card: remove alternate token for container-color (#30640)
	chips: adds default placeholder for chips input (#30452)
	core: include alternative tokens (#30633)
	paginator: change tabindex expect in test
	paginator: prevent keyboard nav to disabled buttons (#30627)
	select: use flexible overlay dimensions (#30628)
	timepicker: assertion error if reopened quickly (#30639)

cdk

Commit	Description
	text-field: Long multiline textfield focus issue (#30312)

v19.2.3

19.2.3 "californium-coconut" (2025-03-12)

material

Commit	Description
	autocomplete: incorrectly resolving focused element in shadow DOM (#30619)
	schematics: some options missing from schema (#30602)

... (truncated)

Changelog

Sourced from @​angular/cdk's changelog.

19.2.6 "tellurium-transponder" (2025-03-21)

cdk

Commit	Type	Description
5a7009a50	fix	overlay: ensure re-exported transitive Dir directive can be imported (#30679)

19.2.5 "argon-planet" (2025-03-20)

cdk

Commit	Type	Description
ab70ba5b3	fix	tree: retainining previous objects (#30431)

material

Commit	Type	Description
2bfa5262e	fix	timepicker: TimepickerInput component in shadow DOM (#30642)

multiple

Commit	Type	Description
8d7a0f683	fix	ensure re-exported module symbols can be imported

20.0.0-next.2 "bismite-bomb" (2025-03-19)

Breaking Changes

material

• • ButtonVariant which is returned by MatButtonHarness.getVariant no longer includes the appearance of the button. Use MatButtonHarness.getAppearance instead.

cdk-experimental

Commit	Type	Description
7343657f5	fix	ui-patterns: small fixes for internal compatibi… (#30625)

material

Commit	Type	Description
fb81ab4f2	feat	button: add support for tonal button (#30638)
e79f60558	feat	button: allow appearance to be set dynamically
097f49d90	fix	autocomplete: allow overlay backdrop by setting hasBackdrop option (#30631)
2c7199c02	fix	button: align harness with new terminology
443df2661	fix	card: remove alternate token for container-color (#30640)
09b25a159	fix	chips: adds default placeholder for chips input (#30452)
b4fcae45d	fix	core: include alternative tokens (#30633)
75713b0a0	fix	paginator: prevent keyboard nav to disabled buttons (#30627)
688c430fe	fix	select: close panel on detach output event (#30634)
d5ba63d00	fix	select: use flexible overlay dimensions (#30628)
0e985f2c6	fix	slider: handle null values in slider input (#30621)
43b08600c	fix	timepicker: assertion error if reopened quickly (#30639)

cdk

... (truncated)

Commits

• 4a2bd9f release: cut the v19.2.6 release
• 5a7009a fix(cdk/overlay): ensure re-exported transitive Dir directive can be import...
• 2a3c254 release: cut the v19.2.5 release
• 8d7a0f6 fix(multiple): ensure re-exported module symbols can be imported
• ab70ba5 fix(cdk/tree): retainining previous objects (#30431)
• 2bfa526 fix(material/timepicker): TimepickerInput component in shadow DOM (#30642)
• f1ed784 build: migrate more ts_library targets to rules_js
• 1e4d3af build: improve ts_project interop to work with esbuild bundling
• 2906e18 build: migrate all ts_library targets in tools/
• a4c5de9 build: support linking of Angular libraries with rules_js
• Additional commits viewable in compare view

Updates @angular/material from 19.1.1 to 19.2.6

Release notes

Sourced from @​angular/material's releases.

v19.2.6

19.2.6 "tellurium-transponder" (2025-03-21)

cdk

Commit	Description
	overlay: ensure re-exported transitive Dir directive can be imported (#30679)

v19.2.5

19.2.5 "argon-planet" (2025-03-20)

material

Commit	Description
	timepicker: TimepickerInput component in shadow DOM (#30642)

cdk

Commit	Description
	tree: retainining previous objects (#30431)

multiple

Commit	Description
	ensure re-exported module symbols can be imported

v19.2.4

19.2.4 "cafetite-cafe" (2025-03-19)

material

Commit	Description
	card: remove alternate token for container-color (#30640)
	chips: adds default placeholder for chips input (#30452)
	core: include alternative tokens (#30633)
	paginator: change tabindex expect in test
	paginator: prevent keyboard nav to disabled buttons (#30627)
	select: use flexible overlay dimensions (#30628)
	timepicker: assertion error if reopened quickly (#30639)

cdk

Commit	Description
	text-field: Long multiline textfield focus issue (#30312)

v19.2.3

19.2.3 "californium-coconut" (2025-03-12)

material

Commit	Description
	autocomplete: incorrectly resolving focused element in shadow DOM (#30619)
	schematics: some options missing from schema (#30602)

... (truncated)

Changelog

Sourced from @​angular/material's changelog.

19.2.6 "tellurium-transponder" (2025-03-21)

cdk

Commit	Type	Description
5a7009a50	fix	overlay: ensure re-exported transitive Dir directive can be imported (#30679)

19.2.5 "argon-planet" (2025-03-20)

cdk

Commit	Type	Description
ab70ba5b3	fix	tree: retainining previous objects (#30431)

material

Commit	Type	Description
2bfa5262e	fix	timepicker: TimepickerInput component in shadow DOM (#30642)

multiple

Commit	Type	Description
8d7a0f683	fix	ensure re-exported module symbols can be imported

20.0.0-next.2 "bismite-bomb" (2025-03-19)

Breaking Changes

material

• • ButtonVariant which is returned by MatButtonHarness.getVariant no longer includes the appearance of the button. Use MatButtonHarness.getAppearance instead.

cdk-experimental

Commit	Type	Description
7343657f5	fix	ui-patterns: small fixes for internal compatibi… (#30625)

material

Commit	Type	Description
fb81ab4f2	feat	button: add support for tonal button (#30638)
e79f60558	feat	button: allow appearance to be set dynamically
097f49d90	fix	autocomplete: allow overlay backdrop by setting hasBackdrop option (#30631)
2c7199c02	fix	button: align harness with new terminology
443df2661	fix	card: remove alternate token for container-color (#30640)
09b25a159	fix	chips: adds default placeholder for chips input (#30452)
b4fcae45d	fix	core: include alternative tokens (#30633)
75713b0a0	fix	paginator: prevent keyboard nav to disabled buttons (#30627)
688c430fe	fix	select: close panel on detach output event (#30634)
d5ba63d00	fix	select: use flexible overlay dimensions (#30628)
0e985f2c6	fix	slider: handle null values in slider input (#30621)
43b08600c	fix	timepicker: assertion error if reopened quickly (#30639)

cdk

... (truncated)

Commits

• 4a2bd9f release: cut the v19.2.6 release
• 5a7009a fix(cdk/overlay): ensure re-exported transitive Dir directive can be import...
• 2a3c254 release: cut the v19.2.5 release
• 8d7a0f6 fix(multiple): ensure re-exported module symbols can be imported
• ab70ba5 fix(cdk/tree): retainining previous objects (#30431)
• 2bfa526 fix(material/timepicker): TimepickerInput component in shadow DOM (#30642)
• f1ed784 build: migrate more ts_library targets to rules_js
• 1e4d3af build: improve ts_project interop to work with esbuild bundling
• 2906e18 build: migrate all ts_library targets in tools/
• a4c5de9 build: support linking of Angular libraries with rules_js
• Additional commits viewable in compare view

Updates jsonpath-plus from 9.0.0 to 10.3.0

Release notes

Sourced from jsonpath-plus's releases.

v10.3.0

What's Changed

• fix(eval): rce using non-string prop names by @​80avin in JSONPath-Plus/JSONPath#237
• feat(demo): make demo link shareable by @​80avin in JSONPath-Plus/JSONPath#238

Full Changelog: JSONPath-Plus/JSONPath@v10.2.0...v10.3.0

Changelog

Sourced from jsonpath-plus's changelog.

10.3.0

• fix(eval): rce using non-string prop names (#237)
• feat(demo): make demo link shareable (#238)
• chore: update deps. and devDeps.

10.2.0

• fix(eval): improve security of safe-eval (#233)
• chore: update deps. and devDeps.

10.1.0

• feat: add typeof operator to safe script

10.0.7

• fix(security): prevent constructor access
• docs: add security policy file

10.0.6

• fix(security): prevent call/apply invocation of Function

10.0.5

• fix: remove overly aggressive disabling of native functions but disallow __proto__

10.0.4

• fix(security): further prevent binding of Function calls which may evade detection

10.0.3

• fix(security): prevent binding of Function calls which may evade detection

10.0.2

• fix(security): prevent Function calls outside of member expressions

10.0.1

• fix(security): prohibit Function in "safe" vm

10.0.0

BREAKING CHANGES:

• Require Node 18+

... (truncated)

Commits

• 9754e4b chore: bump version
• f690da1 chore: update deps and devDeps
• 313a9b4 Merge pull request #238 from 80avin/shareable-demo
• 39a0d03 Merge pull request #237 from 80avin/fix-10.2.0-rce
• 1c532fc feat(demo): make demo link shareable
• 3094289 fix(eval): rce using non-string prop names
• 8e4acf8 chore: bump version
• f0708a4 chore: update deps. and devDeps.
• 0bfda55 build(deps): bump @​eslint/plugin-kit from 0.2.0 to 0.2.3 (#234)
• 73ad72e fix(eval): improve security of safe-eval (#233)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by 80avin, a new releaser for jsonpath-plus since your current version.

Updates jwt-decode from 3.1.2 to 4.0.0

Release notes

Sourced from jwt-decode's releases.

v4.0.0

A new version of the library, including a couple of improvements:

• No longer include a polyfill for atob, as this is supported in all major browsers (and node environments > 14).
• Compile to ES2017, dropping support for anything that does not support ES2017 (which should be very limited according to caniuse)
• Use Node's atob when running on node.
• Drop support for Node 14 and 16, add support for Node 20.
• Add support for package.json's exports field, for better CJS/ESM support
• Reorganize build artifacts for better CJS/ESM support (cjs and esm needs to be their own directory with a cjs specific package.json file)
• Drop manual UMD bundle creation in index.standalone.ts, but rely on rollup instead.
• Infer JwtPayload and JwtHeader default types from the header argument by using overloads.

Even though some users might experience breaking changes, mostly because of the exports field, the majority should be able to update without making any changes, assuming the SDK is used in environments with support for atob.

Migration to v4.0.0

The jwtDecode function is now no longer the default export, and is instead provided as a named export. Make sure to update your code in places where you are importing this function:

-import jwtDecodefrom "jwt-decode";
+import { jwtDecode } from "jwt-decode";

v4.0.0-beta.4

Breaking changes

• Raise minimum Node.js version to 18 #209 (jonkoops)

Fixed

• fix default condition should be the last one #199 (frederikprijck)

v4.0.0-beta.3

Breaking changes

• Drop UMD bundle #193 (frederikprijck)

Changed

• Use modern JavaScript syntax #187 (jonkoops)
• Use ESNext as default module system #188 (jonkoops)
• Avoid using any bundlers but use tsc instead #192 (frederikprijck)

v4.0.0-beta.2

Changed

• Avoid using default exports #175 (frederikprijck)
• Make options optional no default function parameter initializer #179 (cristobal)

Fixed

• Ensure types are bundled and correctly linked #174 (jonkoops)

v4.0.0-beta.1

Fixed

• Ensure build is run on prepack #167 (frederikprijck)

... (truncated)

Changelog

Sourced from jwt-decode's changelog.

Version 4.0.0

Full Changelog

A new version of the library, including a couple of improvements:

• No longer include a polyfill for atob, as this is supported in all major browsers (and node environments > 14).
• Compile to ES2017, dropping support for anything that does not support ES2017 (which should be very limited according to caniuse)
• Use Node's atob when running on node.
• Drop support for Node 14 and 16, add support for Node 20.
• Add support for package.json's exports field, for better CJS/ESM support
• Reorganize build artifacts for better CJS/ESM support (cjs and esm needs to be their own directory with a cjs specific package.json file)
• Drop manual UMD bundle creation in index.standalone.ts, but rely on rollup instead.
• Infer JwtPayload and JwtHeader default types from the header argument by using overloads.

Even though some users might experience breaking changes, mostly because of the exports field, the majority should be able to update without making any changes, assuming the SDK is used in environments with support for atob.

Migration to v4.0.0

The jwtDecode function is now no longer the default export, and is instead provided as a named export. Make sure to update your code in places where you are importing this function:

-import jwtDecode from "jwt-decode";
+import { jwtDecode } from "jwt-decode";

Version 4.0.0-beta.4

Full Changelog

Breaking changes

• Raise minimum Node.js version to 18 #209 (jonkoops)

Fixed

• fix default condition should be the last one #199 (frederikprijck)

Version 4.0.0-beta.3

Full Changelog

Breaking changes

• Drop UMD bundle #193 (frederikprijck)

Changed

• Use modern JavaScript syntax #187 (jonkoops)
• Use ESNext as default module system #188 (jonkoops)
• Avoid using any bundlers but use tsc instead #192 (frederikprijck)

Version 4.0.0-beta.2

... (truncated)

Commits

• 3b2d105 Update CHANGELOG.md
• bd50db0 Release v4.0.0 (#232)
• bcfd7da Bump actions/checkout from 3 to 4 (#228)
• 6ec1cba Bump concurrently from 8.2.0 to 8.2.2 (#226)
• 807d123 Bump @​typescript-eslint/eslint-plugin from 6.4.1 to 6.9.0 (#229)
• f68e292 Bump eslint-plugin-import from 2.28.1 to 2.29.0 (#230)
• b2e7489 Bump eslint-import-resolver-typescript from 3.6.0 to 3.6.1 (#225)
• ccb6488 Bump lint-staged from 14.0.1 to 15.0.2 (#231)
• cf3cd4f Bump actions/setup-node from 3 to 4 (#227)
• 0ce8017 pin babel/core to recent version and bump jest
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by auth0-oss, a new releaser for jwt-decode since your current version.

Updates nofilter from 4.0.2 to 5.0.0

Release notes

Sourced from nofilter's releases.

Update dependencies to 2024-09

Latest eslint, and updated all of the nits to the latest coding standard. No substantive changes, but node 18+ is now required; I'm not testing on older versions.

Changelog

Sourced from nofilter's changelog.

[5.0.0] - 2024-09-03

• Updated to eslint flat, fixed ensuing lint issues
• Updated all other dependencies
• [BREAKING] now requires node 18

[4.0.0] - 2023-05-13

Changed

• Now requires use as an ES6 module.
• Now requires Node.js version 16 or greater
• Now generates docs with typedoc
• Now uses c8 for coverage instead of nyc
• Updated all dependencies. Removed unused dependencies.

Commits

• e0c9ed1 5.0.0
• fa6035c Merge pull request #19 from hildjj/update
• 4b5df9c Publish from GHA
• 6eb96ac remove rimraf dependency while still supporting node 18
• e56764d Update changelog
• 924f7a9 Update depdencies, fix new lint issues. Remove docs and types from repo in p...
• See full diff in compare view

Updates ngx-toastr from 16.2.0 to 19.0.0

Release notes

Sourced from ngx-toastr's releases.

v19.0.0

19.0.0 (2024-06-01)

Features

• Angular 18 + enable usage with zoneless change detection (#1017) (5461eb4)

BREAKING CHANGES

• enable usage with zoneless change detection

Switched relevant parts to OnPush + Signals, so this will work with zoneless change detection enabled. I deliberately didn't use any of the new control flow syntax so this should technically still be compatible with Angular 16 (at least in a small test app with 16 it still worked for me)

v18.0.0

18.0.0 (2023-11-16)

Features

• upgrade to angular 17 (#1008) (d6b5e6b)

BREAKING CHANGES

• requires angular 17, typescript 5.2

v17.0.2

17.0.2 (2023-05-15)

Bug Fixes

• Move easeTime to the constructor (e3e4b74), closes #996

v17.0.1

17.0.1 (2023-05-14)

Bug Fixes

• add provenance (fb2720e)

v17.0.0

17.0.0 (2023-05-14)

Features

... (truncated)

Commits

• 5461eb4 feat: Angular 18 + enable usage with zoneless change detection (#1017)
• 3d8ef10 docs: update v17 in readme
• d6b5e6b feat: upgrade to angular 17 (#1008)
• e3e4b74 fix: Move easeTime to the constructor
• fb2720e fix: add provenance
• 38a641d feat: Upgrade to angular 16 (#995)
• c8074d6 docs: update readme to include standalone provider function (#992)
• See full diff in compare view

Updates @angular/cli from 19.1.9 to 19.2.4

Release notes

Sourced from @​angular/cli's releases.

v19.2.4

19.2.4 (2025-03-19)

@​schematics/angular

Commit	Description
	replace @angular/platform-browser-dynamic with @angular/platform-browser

@​angular/build

Commit	Description
	ensure errors for missing component resources
	ensure relative karma stack traces for test failures

v19.2.3

19.2.3 (2025-03-13)

@​angular/build

Commit	Description
	update babel packages

v19.2.2

19.2.2 (2025-03-12)

@​angular/cli

Commit	Description
	record analytics for nested schematics

@​angular/build

Commit	Description
	exclude all entrypoints of a library from prebundling
	handle postcss compilation errors gracefully
	provide extract-i18n does not respect
	remove duplicate prebundling warning

@​angular/ssr

Commit	Description
	prevent stream draining if write does not return a boolean

v19.2.1

19.2.1 (2025-03-05)

@​schematics/angular

Commit	Description
	prevent accidental deletion of main.ts during application builder migration
	prevent error when tsconfig file is missing in application builder migration

@​angular-devkit/architect

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

19.2.4 (2025-03-19)

@​schematics/angular

Commit	Type	Description
0a4e96bda	fix	replace @angular/platform-browser-dynamic with @angular/platform-browser

@​angular/build

Commit	Type	Description
b0b643e46	fix	ensure errors for missing component resources
2cd763e89	fix	ensure relative karma stack traces for test failures

17.3.13 (2025-03-13)

@​angular-devkit/build-angular

Commit	Type	Description
22901df02	fix	update babel packages

19.2.3 (2025-03-13)

@​angular/build

Commit	Type	Description
5a739820b	fix	update babel packages

18.2.15 (2025-03-13)

@​angular-devkit/build-angular

Commit	Type	Description
255c8a50d	fix	update babel packages

... (truncated)

Commits

• 148023a release: cut the v19.2.4 release
• b0b643e fix(@​angular/build): ensure errors for missing component resources
• 0a4e96b fix(@​schematics/angular): replace @angular/platform-browser-dynamic with `@...
• 2cd763e fix(@​angular/build): ensure relative karma stack traces for test failures
• 74d54a9 build: improve debugging mode of e2e test runner
• 43706b3 docs: correct bazel e2e commands
• 7b637fc refactor(@​angular/build): define an internal ngHmrMode value
• 40b228d docs(@​angular-devkit/build-angular): update forceEsbuild option description
• e4d1c2a release: cut the v19.2.3 release
• 5a73982 fix(@​angular/build): update babel packages
• Additional commits viewable in compare view

Updates @types/jasmine from 4.3.6 to 5.1.7

Commits

• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 5.48.2 to 8.27.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.27.0

8.27.0 (2025-03-17)

🚀 Feature...

Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.