build: update all non-major dependencies

.github/workflows/assistant-to-the-branch-manager.yml

@@ -13,7 +13,7 @@ jobs:
   assistant_to_the_branch_manager:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
         with:
           persist-credentials: false
       - uses: angular/dev-infra/github-actions/branch-manager@c23beeeb736ed82282f3c46698f5bbfa08c2b992

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
     outputs:
       snapshots: ${{ steps.filter.outputs.snapshots }}
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
         with:
           persist-credentials: false
       - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
@@ -86,7 +86,7 @@ jobs:
         run: yarn ng-dev release build
       - name: Store PR release packages
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
         with:
           name: packages
           path: dist/releases/*.tgz
@@ -192,7 +192,7 @@ jobs:
           ./scripts/saucelabs/wait-for-tunnel.sh
           yarn bazel test --config=saucelabs //tests/legacy-cli:e2e.saucelabs
           ./scripts/saucelabs/stop-tunnel.sh
-      - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
         if: ${{ failure() }}
         with:
           name: sauce-connect-log

.github/workflows/dev-infra.yml

@@ -12,14 +12,14 @@ jobs:
   labels:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
       - uses: angular/dev-infra/github-actions/commit-message-based-labels@c23beeeb736ed82282f3c46698f5bbfa08c2b992
         with:
           angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}
   post_approval_changes:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
       - uses: angular/dev-infra/github-actions/post-approval-changes@c23beeeb736ed82282f3c46698f5bbfa08c2b992
         with:
           angular-robot-key: ${{ secrets.ANGULAR_ROBOT_PRIVATE_KEY }}

WORKSPACE

@@ -115,9 +115,9 @@ yarn_install(
 
 http_archive(
     name = "aspect_bazel_lib",
-    sha256 = "357dad9d212327c35d9244190ef010aad315e73ffa1bed1a29e20c372f9ca346",
-    strip_prefix = "bazel-lib-2.7.0",
-    url = "https://github.com/aspect-build/bazel-lib/releases/download/v2.7.0/bazel-lib-v2.7.0.tar.gz",
+    sha256 = "b554eb7942a5ab44c90077df6a0c76fc67c5874c9446a007e9ba68be82bd4796",
+    strip_prefix = "bazel-lib-2.7.1",
+    url = "https://github.com/aspect-build/bazel-lib/releases/download/v2.7.1/bazel-lib-v2.7.1.tar.gz",
 )
 
 load("@aspect_bazel_lib//lib:repositories.bzl", "aspect_bazel_lib_dependencies", "aspect_bazel_lib_register_toolchains")

package.json

@@ -112,8 +112,8 @@
     "@types/yargs": "^17.0.20",
     "@types/yargs-parser": "^21.0.0",
     "@types/yarnpkg__lockfile": "^1.1.5",
-    "@typescript-eslint/eslint-plugin": "7.7.0",
-    "@typescript-eslint/parser": "7.7.0",
+    "@typescript-eslint/eslint-plugin": "7.7.1",
+    "@typescript-eslint/parser": "7.7.1",
     "@vitejs/plugin-basic-ssl": "1.1.0",
     "@web/test-runner": "^0.18.0",
     "@yarnpkg/lockfile": "1.1.0",
@@ -182,9 +182,9 @@
     "prettier": "^3.0.0",
     "protractor": "~7.0.0",
     "puppeteer": "18.2.1",
-    "quicktype-core": "23.0.146",
+    "quicktype-core": "23.0.151",
     "resolve-url-loader": "5.0.0",
-    "rollup": "~4.14.0",
+    "rollup": "~4.16.0",
     "rollup-plugin-sourcemaps": "^0.6.0",
     "rxjs": "7.8.1",
     "sass": "1.75.0",
@@ -198,15 +198,15 @@
     "spdx-satisfies": "^5.0.0",
     "symbol-observable": "4.0.0",
     "tar": "^6.1.6",
-    "terser": "5.30.3",
+    "terser": "5.30.4",
     "tree-kill": "1.2.2",
     "ts-node": "^10.9.1",
     "tslib": "2.6.2",
     "typescript": "5.4.5",
-    "undici": "6.13.0",
+    "undici": "6.14.1",
     "verdaccio": "5.30.3",
     "verdaccio-auth-memory": "^10.0.0",
-    "vite": "5.2.9",
+    "vite": "5.2.10",
     "watchpack": "2.4.1",
     "webpack": "5.91.0",
     "webpack-dev-middleware": "7.2.1",

packages/angular/build/package.json

@@ -39,7 +39,7 @@
     "postcss": "8.4.38",
     "sass": "1.75.0",
     "semver": "7.6.0",
-    "undici": "6.13.0",
+    "undici": "6.14.1",
     "vite": "5.2.10",
     "watchpack": "2.4.1"
   },

packages/angular_devkit/build_angular/package.json

@@ -59,11 +59,11 @@
     "semver": "7.6.0",
     "source-map-loader": "5.0.0",
     "source-map-support": "0.5.21",
-    "terser": "5.30.3",
+    "terser": "5.30.4",
     "tree-kill": "1.2.2",
     "tslib": "2.6.2",
-    "undici": "6.13.0",
-    "vite": "5.2.9",
+    "undici": "6.14.1",
+    "vite": "5.2.10",
     "watchpack": "2.4.1",
     "webpack": "5.91.0",
     "webpack-dev-middleware": "7.2.1",