Bump the npm_and_yarn group across 1 directory with 14 updates #8

dependabot · 2025-04-29T02:24:52Z

Bumps the npm_and_yarn group with 11 updates in the / directory:

Package	From	To
@angular/core	`13.2.5`	`13.2.6`
esbuild	`0.14.22`	`0.25.1`
@angular-builders/custom-webpack	`18.0.0`	`19.0.1`
@angular-devkit/build-angular	`18.2.11`	`19.2.9`
semver	`5.7.1`	`5.7.2`
braces	`2.3.2`	`3.0.3`
@storybook/addon-essentials	`6.5.16`	`8.6.12`
ip	`1.1.5`	`removed`
socks	`2.6.2`	`2.8.4`
prismjs	`1.29.0`	`1.30.0`
store2	`2.13.1`	`2.14.4`

Updates @angular/core from 13.2.5 to 13.2.6

Commits

8227eb9 refactor(migrations): update isReferenceToImport to not use `valueDeclarati...
8390e12 docs: update flush description to include microtasks (#45237)
See full diff in compare view

Updates esbuild from 0.14.22 to 0.25.1

Release notes

Sourced from esbuild's releases.

v0.25.1
Fix incorrect paths in inline source maps (#4070, #4075, #4105)

This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline sourceMappingURL data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the sourceMappingURL comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.

Fix invalid generated source maps (#4080, #4082, #4104, #4107)

This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of "null" entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.

This fix was contributed by @jridgewell.

Fix a regression with non-file source map paths (#4078)

The format of paths in source maps that aren't in the file namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from file paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a : character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.
Fix a crash with switch optimization (#4088)

The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:
switch (x) {
  case '':
    return y.map(z => z.value)
  case y.map(z => z.key).join(','):
    return []
}
Update Go from 1.23.5 to 1.23.7 (#4076, #4077)

This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.

This PR was contributed by @MikeWillCook.
v0.25.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.24.0 or ~0.24.0. See npm's documentation about semver for more information.

Restrict access to esbuild's development server (GHSA-67mh-4wv8-2f99)

This change addresses esbuild's first security vulnerability report. Previously esbuild set the Access-Control-Allow-Origin header to * to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in the report.

Starting with this release, CORS will now be disabled, and requests will now be denied if the host does not match the one provided to --serve=. The default host is 0.0.0.0, which refers to all of the IP addresses that represent the local machine (e.g. both 127.0.0.1 and 192.168.0.1). If you want to customize anything about esbuild's development server, you can put a proxy in front of esbuild and modify the incoming and/or outgoing requests.

In addition, the serve() API call has been changed to return an array of hosts instead of a single host string. This makes it possible to determine all of the hosts that esbuild's development server will accept.

Thanks to @sapphi-red for reporting this issue.

Delete output files when a build fails in watch mode (#3643)

It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2022

This changelog documents all esbuild versions published in the year 2022 (versions 0.14.11 through 0.16.12).

0.16.12
Loader defaults to js for extensionless files (#2776)

Certain packages contain files without an extension. For example, the yargs package contains the file yargs/yargs which has no extension. Node, Webpack, and Parcel can all understand code that imports yargs/yargs because they assume that the file is JavaScript. However, esbuild was previously unable to understand this code because it relies on the file extension to tell it how to interpret the file. With this release, esbuild will now assume files without an extension are JavaScript files. This can be customized by setting the loader for "" (the empty string, representing files without an extension) to another loader. For example, if you want files without an extension to be treated as CSS instead, you can do that like this:
CLI:
esbuild --bundle --loader:=css
JS:
esbuild.build({
  bundle: true,
  loader: { '': 'css' },
})
Go:
api.Build(api.BuildOptions{
  Bundle: true,
  Loader: map[string]api.Loader{"": api.LoaderCSS},
})
In addition, the "type" field in package.json files now only applies to files with an explicit .js, .jsx, .ts, or .tsx extension. Previously it was incorrectly applied by esbuild to all files that had an extension other than .mjs, .mts, .cjs, or .cts including extensionless files. So for example an extensionless file in a "type": "module" package is now treated as CommonJS instead of ESM.
0.16.11
Avoid a syntax error in the presence of direct eval (#2761)

The behavior of nested function declarations in JavaScript depends on whether the code is run in strict mode or not. It would be problematic if esbuild preserved nested function declarations in its output because then the behavior would depend on whether the output was run in strict mode or not instead of respecting the strict mode behavior of the original source code. To avoid this, esbuild transforms nested function declarations to preserve the intended behavior of the original source code regardless of whether the output is run in strict mode or not:
// Original code
if (true) {
  function foo() {}
  console.log(!!foo)
  foo = null
  console.log(!!foo)
}

... (truncated)

Commits

6bfc1c1 publish 0.25.1 to npm
f9b3952 fix #4078: prepend namespaces to source map paths
ccf3dd7 add "contributed by" in changelog
48cd7a9 Update Go from 1.23.5 to 1.23.7 (#4077)
1f04fa4 fix absolute windows paths in source maps
9ca03f6 also add test case from #4075
2f244c0 add test case from #4104
1dde994 fix incorrect test names
9f008c5 fix #4070: file namespace for sourceMappingURL
cbd5eb8 release notes and tests for #4082
Additional commits viewable in compare view

Updates @angular-builders/custom-webpack from 18.0.0 to 19.0.1

Changelog

Sourced from @angular-builders/custom-webpack's changelog.

19.0.1 (2025-04-07)

Note: Version bump only for package @angular-builders/custom-webpack

19.0.1-beta.1 (2025-04-06)

Note: Version bump only for package @angular-builders/custom-webpack

19.0.1-beta.0 (2025-04-03)

Note: Version bump only for package @angular-builders/custom-webpack

19.0.0 (2025-01-05)

Note: Version bump only for package @angular-builders/custom-webpack

19.0.0-beta.0 (2024-12-05)

⚠ BREAKING CHANGES

deps: update to Angular 19 (#1871)

Miscellaneous Chores

deps: update to Angular 19 (#1871) (d3b17ed)

18.0.1-beta.0 (2024-07-24)

Note: Version bump only for package @angular-builders/custom-webpack

Commits

dbc033f ci(release): publish
9e0f777 ci(release): publish
484a807 chore(deps): update dependency typescript to v5.8.3 (#1814)
fa42409 ci(release): publish
f8aec9a deps: change schemes.ts to trigger schema regeneration
8bb2a95 ci(release): publish
4095a1f ci(release): publish
d3b17ed chore(deps)!: update to Angular 19 (#1871)
a05bf0a ci(release): publish
d306471 chore(deps): update dependency webpack-merge to v6 (#1824)
See full diff in compare view

Updates @angular-devkit/build-angular from 18.2.11 to 19.2.9

Release notes

Sourced from @angular-devkit/build-angular's releases.

19.2.9

@angular-devkit/build-angular

Commit Description

update http-proxy-middleware to v3.0.5

@angular/build

Commit Description

pass preserveSymlinks option to Karma esbuild builder

@angular/ssr

Commit Description

support getPrerenderParams for wildcard routes

19.2.8

@angular/build

Commit Description

include module value check when adding custom conditions

prevent nested CSS in components

properly resolve transitive external dependencies in vite-dev-server

update vite to 6.2.6

19.2.7

@angular/build

Commit Description

include component test metadata in development builds

skip normalization of relative externals

19.2.6

@angular-devkit/schematics

Commit Description

properly resolve relative schematics when executed from a nested directory

@angular/build

Commit Description

correctly handle false value in server option

update vite to 6.2.4 due to a security issues

19.2.5

@angular/build

Commit Description

correct handling of response/request errors

handle undefined getOrCreateAngularServerApp during error compilation

normalize karma asset paths before lookup

update vite to 6.2.3

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

19.2.9 (2025-04-23)

@angular-devkit/build-angular

Commit Type Description

de52cc2c8 fix update http-proxy-middleware to v3.0.5

@angular/build

Commit Type Description

cc5229a45 fix pass preserveSymlinks option to Karma esbuild builder

@angular/ssr

Commit Type Description

a4e415ea6 fix support getPrerenderParams for wildcard routes

18.2.19 (2025-04-23)

@angular-devkit/build-angular

Commit Type Description

01cc617bc fix update http-proxy-middleware to v3.0.5

20.0.0-next.6 (2025-04-16)

@schematics/angular

Commit Type Description

d6f594fe0 feat generate applications using TypeScript project references

8654b3fea fix application migration should migrate karma builder package

be6f13ec1 fix remove setting files tsconfig field with SSR/Server generation

@angular/build

Commit Type Description

... (truncated)

Commits

2a7cb6e release: cut the v19.2.9 release
a4e415e fix(@angular/ssr): support getPrerenderParams for wildcard routes
de52cc2 fix(@angular-devkit/build-angular): update http-proxy-middleware to v3.0.5
36d2644 refactor: replace usage of ng_package with new ng_package from rules_angular
cc5229a fix(@angular/build): pass preserveSymlinks option to Karma esbuild builder
450dc45 release: cut the v19.2.8 release
03a420b refactor(@angular/build): use ngHmrMode define for Vite prebundling
00cd0d1 fix(@angular/build): prevent nested CSS in components
8ab033e fix(@angular/build): update vite to 6.2.6
4a8a4a0 fix(@angular/build): include module value check when adding custom conditions
Additional commits viewable in compare view

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

2f8fd41 #585 better handling of whitespace (#585) (@joaomoreno, @lukekarrys)

5.7

Add minVersion method

5.6

Move boolean loose param to an options object, with backwards-compatibility protection.

Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

Add version coercion capabilities

5.4

Add intersection checking

5.3

Add minSatisfying method

5.2

Add prerelease(v) that returns prerelease components

5.1

Add Backus-Naur for ranges

Remove excessively cute inspection methods

5.0

Remove AMD/Browserified build artifacts

Fix ltr and gtr when using the * range

Fix for range * with a prerelease identifier

Commits

f8cc313 chore: release 5.7.2
2f8fd41 fix: better handling of whitespace (#585)
deb5ad5 chore: @npmcli/template-oss@4.16.0
See full diff in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates vite from 5.4.6 to 6.2.6

Release notes

Sourced from vite's releases.

v6.2.6

Please refer to CHANGELOG.md for details.

v6.2.5

Please refer to CHANGELOG.md for details.

v6.2.4

Please refer to CHANGELOG.md for details.

v6.2.3

Please refer to CHANGELOG.md for details.

v6.2.2

Please refer to CHANGELOG.md for details.

create-vite@6.2.1

Please refer to CHANGELOG.md for details.

v6.2.1

Please refer to CHANGELOG.md for details.

create-vite@6.2.0

Please refer to CHANGELOG.md for details.

v6.2.0

Please refer to CHANGELOG.md for details.

v6.2.0-beta.1

Please refer to CHANGELOG.md for details.

v6.2.0-beta.0

Please refer to CHANGELOG.md for details.

v6.1.5

Please refer to CHANGELOG.md for details.

v6.1.4

Please refer to CHANGELOG.md for details.

v6.1.3

Please refer to CHANGELOG.md for details.

v6.1.2

Please refer to CHANGELOG.md for details.

create-vite@6.1.1

Please refer to CHANGELOG.md for details.

v6.1.1

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

6.2.6 (2025-04-10)

fix: reject requests with # in request-target (#19830) (3bb0883), closes #19830

6.2.5 (2025-04-03)

fix: backport #19782, fs check with svg and relative paths (fdb196e), closes #19782

6.2.4 (2025-03-31)

fix: fs check in transform middleware (#19761) (7a4faba), closes #19761

6.2.3 (2025-03-24)

fix: fs raw query with query separators (#19702) (f234b57), closes #19702

6.2.2 (2025-03-14)

fix: await client buildStart on top level buildStart (#19624) (b31faab), closes #19624

fix(css): inline css correctly for double quote use strict (#19590) (d0aa833), closes #19590

fix(deps): update all non-major dependencies (#19613) (363d691), closes #19613

fix(indexHtml): ensure correct URL when querying module graph (#19601) (dc5395a), closes #19601

fix(preview): use preview https config, not server (#19633) (98b3160), closes #19633

fix(ssr): use optional chaining to prevent "undefined is not an object" happening in `ssrRewriteStac (4309755), closes #19612

feat: show friendly error for malformed base (#19616) (2476391), closes #19616

feat(worker): show asset filename conflict warning (#19591) (367d968), closes #19591

chore: extend commit hash correctly when ambigious with a non-commit object (#19600) (89a6287), closes #19600

6.2.1 (2025-03-07)

refactor: remove isBuild check from preAliasPlugin (#19587) (c9e086d), closes #19587

refactor: restore endsWith usage (#19554) (6113a96), closes #19554

refactor: use applyToEnvironment in internal plugins (#19588) (f678442), closes #19588

fix(css): stabilize css module hashes with lightningcss in dev mode (#19481) (92125b4), closes #19481

fix(deps): update all non-major dependencies (#19555) (f612e0f), closes #19555

fix(reporter): fix incorrect bundle size calculation with non-ASCII characters (#19561) (437c0ed), closes #19561

fix(sourcemap): combine sourcemaps with multiple sources without matched source (#18971) (e3f6ae1), closes #18971

fix(ssr): named export should overwrite export all (#19534) (2fd2fc1), closes #19534

feat: add *?url&no-inline type and warning for .json?inline / .json?no-inline (#19566) (c0d3667), closes #19566

test: add glob import test case (#19516) (aa1d807), closes #19516

... (truncated)

Commits

d3dbf25 release: v6.2.6
3bb0883 fix: reject requests with # in request-target (#19830)
c176acf release: v6.2.5
fdb196e fix: backport #19782, fs check with svg and relative paths
037f801 release: v6.2.4
7a4faba fix: fs check in transform middleware (#19761)
16869d7 release: v6.2.3
f234b57 fix: fs raw query with query separators (#19702)
b12911e release: v6.2.2
98b3160 fix(preview): use preview https config, not server (#19633)
Additional commits viewable in compare view

Updates @babel/helpers from 7.26.0 to 7.27.0

Release notes

Sourced from @babel/helpers's releases.

v7.27.0 (2025-03-24)

Thanks @ishchhabra and @vovkasm for your first PRs!

👓 Spec Compliance

babel-generator, babel-parser

#16977 Default importAttributesKeyword to with (@JLHwung)

🚀 New Feature

babel-helper-create-class-features-plugin, babel-traverse, babel-types

#17169 Allow traverseFast to exit early (@liuxingbaoyu)

babel-parser, babel-types

#17110 Add ImportAttributes to Standardized and move its parser test fixtures (@JLHwung)

babel-generator

#17100 fix(babel-generator): add named export of generate function (@vovkasm)

babel-parser, babel-template

#17149 Add allowYieldOutsideFunction to parser (@liuxingbaoyu)

babel-plugin-transform-typescript, babel-traverse

#17102 feat: Add upToScope parameter to hasBinding (@liuxingbaoyu)

babel-parser

#17082 Support ESTree AccessorProperty (@JLHwung)

babel-types

#17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@ishchhabra)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16816 fix: Class reference in type throws error (@liuxingbaoyu)

babel-traverse

#17170 fix: Reset child scopes when scope.crawl() (@liuxingbaoyu)

babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17118 Fix: align behaviour to tsc rewriteRelativeImportExtensions (@JLHwung)

babel-cli

#17182 fix: @babel/cli generates duplicate inline source maps (@liuxingbaoyu)

babel-plugin-transform-named-capturing-groups-regex, babel-types

#17175 Generate computed proto key (@JLHwung)

🏃‍♀️ Performance

babel-types

#16870 perf: Improve builders of @babel/types (@liuxingbaoyu)

babel-helper-create-regexp-features-plugin

#17176 fix: improve duplicate named groups check (@JLHwung)

Committers: 5

Babel Bot (@babel-bot)

Huáng Jùnliàng (@JLHwung)

Ish Chhabra (@ishchhabra)

Vladimir Timofeev (@vovkasm)

@liuxingbaoyu

v7.26.10 (2025-03-11)

... (truncated)

Changelog

Sourced from @babel/helpers's changelog.

v7.27.0 (2025-03-24)

👓 Spec Compliance

babel-generator, babel-parser

#16977 Default importAttributesKeyword to with (@JLHwung)

🚀 New Feature

babel-helper-create-class-features-plugin, babel-traverse, babel-types

#17169 Allow traverseFast to exit early (@liuxingbaoyu)

babel-parser, babel-types

#17110 Add ImportAttributes to Standardized and move its parser test fixtures (@JLHwung)

babel-generator

#17100 fix(babel-generator): add named export of generate function (@vovkasm)

babel-parser, babel-template

#17149 Add allowYieldOutsideFunction to parser (@liuxingbaoyu)

babel-plugin-transform-typescript, babel-traverse

#17102 feat: Add upToScope parameter to hasBinding (@liuxingbaoyu)

babel-parser

#17082 Support ESTree AccessorProperty (@JLHwung)

babel-types

#17162 feat(babel-types): Add support for BigInt literal conversion in valueToNode (@ishchhabra)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16816 fix: Class reference in type throws error (@liuxingbaoyu)

babel-traverse

#17170 fix: Reset child scopes when scope.crawl() (@liuxingbaoyu)

babel-helpers, babel-preset-typescript, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#17118 Fix: align behaviour to tsc rewriteRelativeImportExtensions (@JLHwung)

babel-cli

#17182 fix: @babel/cli generates duplicate inline source maps (@liuxingbaoyu)

babel-plugin-transform-named-capturing-groups-regex, babel-types

#17175 Generate computed proto key (@JLHwung)

🏃‍♀️ Performance

babel-types

#16870 perf: Improve builders of @babel/types (@liuxingbaoyu)

babel-helper-create-regexp-features-plugin

#17176 fix: improve duplicate named groups check (@JLHwung)

v7.26.10 (2025-03-11)

👓 Spec Compliance

babel-parser

#17159 Disallow decorator in array pattern (@JLHwung)

🐛 Bug Fix

babel-parser, babel-template

#17164 Fix: always initialize ExportDeclaration attributes (@JLHwung)

babel-core

#17142 fix: "Map maximum size exceeded" in deepClone (@liuxingbaoyu)

... (truncated)

Commits

5c350ea v7.27.0
ca4865a Fix: align behaviour to tsc rewriteRelativeImportExtensions (#17118)
e1ce99d v7.26.10
d5952e8 Fix processing of replacement pattern with named capture groups (#17173)
64bca7b v7.26.9
4cf5c9e [babel 8] Use @babel/types for parser's return type (#17117)
2d95140 v7.26.7
0e6199b Make "object without properties" helpers ES6-compatible (#17086)
cd24cc0 chore: Update TS 5.7 (#17053)
See full diff in compare view

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

The undocumented .makeRe method was removed

Require Node.js >= 8.3

Non-breaking changes

Caching was removed

Commits

See full diff in compare view

Updates @storybook/addon-essentials from 6.5.16 to 8.6.12

Release notes

Sourced from @storybook/addon-essentials's releases.

v8.6.12

8.6.12

CLI: Only install Visual Test Addon if test feature is selected - #30966, thanks @ghengeveld!

Core: Fix telemetry error on Storybook UI - #30953, thanks @yannbf!

Ember: Fix ember-template-compiler import for ember 6+ - #30682, thanks @leoeuclids!

Next: Upgrade vite-plugin-storybook-nextjs for Next v14 compatibility - #30997, thanks @kasperpeulen!

Svelte: Exclude node_modules from docgen - #30981, thanks @JReinhold!

v8.6.11

8.6.11

Angular: Fix zone.js support for Angular libraries - #30941, thanks @valentinpalkovic!

v8.6.10

8.6.10

Addon-docs: Fix non-string handling in Stories block - #30913, thanks @JamesIves!

Nextjs: Fix styled-jsx optimize vite warnings - #30932, thanks @kasperpeulen!

React: Fix actImplementation is not a function - #30929, thanks @kasperpeulen!

v8.6.9

8.6.9

Next: Fix react aliases in next vite plugin - #30914, thanks @kasperpeulen... Description has been truncated

Bumps the npm_and_yarn group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `13.2.5` | `13.2.6` | | [esbuild](https://github.com/evanw/esbuild) | `0.14.22` | `0.25.1` | | [@angular-builders/custom-webpack](https://github.com/just-jeb/angular-builders/tree/HEAD/packages/custom-webpack) | `18.0.0` | `19.0.1` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `18.2.11` | `19.2.9` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `5.7.2` | | [braces](https://github.com/micromatch/braces) | `2.3.2` | `3.0.3` | | [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials) | `6.5.16` | `8.6.12` | | [ip](https://github.com/indutny/node-ip) | `1.1.5` | `removed` | | [socks](https://github.com/JoshGlazebrook/socks) | `2.6.2` | `2.8.4` | | [prismjs](https://github.com/PrismJS/prism) | `1.29.0` | `1.30.0` | | [store2](https://github.com/nbubna/store) | `2.13.1` | `2.14.4` | Updates `@angular/core` from 13.2.5 to 13.2.6 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/13.2.6/packages/core) Updates `esbuild` from 0.14.22 to 0.25.1 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2022.md) - [Commits](evanw/esbuild@v0.14.22...v0.25.1) Updates `@angular-builders/custom-webpack` from 18.0.0 to 19.0.1 - [Release notes](https://github.com/just-jeb/angular-builders/releases) - [Changelog](https://github.com/just-jeb/angular-builders/blob/master/packages/custom-webpack/CHANGELOG.md) - [Commits](https://github.com/just-jeb/angular-builders/commits/@angular-builders/custom-webpack@19.0.1/packages/custom-webpack) Updates `@angular-devkit/build-angular` from 18.2.11 to 19.2.9 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@18.2.11...19.2.9) Updates `semver` from 5.7.1 to 5.7.2 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md) - [Commits](npm/node-semver@v5.7.1...v5.7.2) Updates `vite` from 5.4.6 to 6.2.6 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v6.2.6/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v6.2.6/packages/vite) Updates `@babel/helpers` from 7.26.0 to 7.27.0 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.27.0/packages/babel-helpers) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `@storybook/addon-essentials` from 6.5.16 to 8.6.12 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.12/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.6.12/code/addons/essentials) Updates `http-proxy-middleware` from 2.0.7 to 2.0.9 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.7...v2.0.9) Removes `ip` Updates `socks` from 2.6.2 to 2.8.4 - [Release notes](https://github.com/JoshGlazebrook/socks/releases) - [Commits](https://github.com/JoshGlazebrook/socks/commits/2.8.4) Updates `prismjs` from 1.29.0 to 1.30.0 - [Release notes](https://github.com/PrismJS/prism/releases) - [Changelog](https://github.com/PrismJS/prism/blob/v2/CHANGELOG.md) - [Commits](PrismJS/prism@v1.29.0...v1.30.0) Updates `store2` from 2.13.1 to 2.14.4 - [Commits](nbubna/store@2.13.1...2.14.4) --- updated-dependencies: - dependency-name: "@angular/core" dependency-version: 13.2.6 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: esbuild dependency-version: 0.25.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular-builders/custom-webpack" dependency-version: 19.0.1 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-version: 19.2.9 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: semver dependency-version: 5.7.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: vite dependency-version: 6.2.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/helpers" dependency-version: 7.27.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-version: 3.0.3 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@storybook/addon-essentials" dependency-version: 8.6.12 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip dependency-version: dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socks dependency-version: 2.8.4 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: prismjs dependency-version: 1.30.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: store2 dependency-version: 2.14.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

semanticdiff-com · 2025-04-29T02:24:56Z

Review changes with

Changed Files

File	Status
package.json	27% smaller
package-lock.json	Unsupported file format

restack-app · 2025-04-29T02:24:57Z

No applications have been configured for previews targeting branch: master. To do so go to restack console and configure your applications for previews.

coderabbitai · 2025-04-29T02:24:59Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>, please review it.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 29, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 14 updates #8

Bump the npm_and_yarn group across 1 directory with 14 updates #8

Uh oh!

dependabot bot commented on behalf of github Apr 29, 2025

Uh oh!

semanticdiff-com bot commented Apr 29, 2025 •

edited

Loading

Uh oh!

restack-app bot commented Apr 29, 2025

Uh oh!

coderabbitai bot commented Apr 29, 2025

Review skipped

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	include `module` value check when adding custom conditions
	prevent nested CSS in components
	properly resolve transitive external dependencies in vite-dev-server
	update vite to 6.2.6

Commit	Description
	include component test metadata in development builds
	skip normalization of relative externals

Commit	Description
	correctly handle `false` value in server option
	update vite to 6.2.4 due to a security issues

Commit	Description
	correct handling of response/request errors
	handle undefined `getOrCreateAngularServerApp` during error compilation
	normalize karma asset paths before lookup
	update vite to 6.2.3

Commit	Type	Description
d6f594fe0	feat	generate applications using TypeScript project references
8654b3fea	fix	application migration should migrate karma builder package
be6f13ec1	fix	remove setting files tsconfig field with SSR/Server generation

Bump the npm_and_yarn group across 1 directory with 14 updates #8

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 14 updates #8

Uh oh!

Conversation

dependabot bot commented on behalf of github Apr 29, 2025

v0.25.1

v0.25.0

Changelog: 2022

0.16.12

0.16.11

19.0.1 (2025-04-07)

19.0.1-beta.1 (2025-04-06)

19.0.1-beta.0 (2025-04-03)

19.0.0 (2025-01-05)

19.0.0-beta.0 (2024-12-05)

⚠ BREAKING CHANGES

Miscellaneous Chores

18.0.1-beta.0 (2024-07-24)

19.2.9

@​angular-devkit/build-angular

@​angular/build

@​angular/ssr

19.2.8

@​angular/build

19.2.7

@​angular/build

19.2.6

@​angular-devkit/schematics

@​angular/build

19.2.5

@​angular/build

19.2.9 (2025-04-23)

@​angular-devkit/build-angular

@​angular/build

@​angular/ssr

18.2.19 (2025-04-23)

@​angular-devkit/build-angular

20.0.0-next.6 (2025-04-16)

@​schematics/angular

@​angular/build

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

5.7.2 (2023-07-10)

Bug Fixes

5.7

5.6

5.5

5.4

5.3

5.2

5.1

5.0

v6.2.6

v6.2.5

v6.2.4

v6.2.3

v6.2.2

create-vite@6.2.1

v6.2.1

create-vite@6.2.0

v6.2.0

v6.2.0-beta.1

v6.2.0-beta.0

v6.1.5

v6.1.4

v6.1.3

v6.1.2

create-vite@6.1.1

v6.1.1

6.2.6 (2025-04-10)

6.2.5 (2025-04-03)

6.2.4 (2025-03-31)

6.2.3 (2025-03-24)

6.2.2 (2025-03-14)

6.2.1 (2025-03-07)

v7.27.0 (2025-03-24)

👓 Spec Compliance

🚀 New Feature

`@angular-devkit/build-angular`

`@angular/build`

`@angular/ssr`

`@angular/build`

`@angular/build`

`@angular-devkit/schematics`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/ssr`

`@angular-devkit/build-angular`

`@schematics/angular`

`@angular/build`

semanticdiff-com bot commented Apr 29, 2025 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)