Skip to content

Bump serialize-javascript, @angular-devkit/build-angular and @nx/angular in /nifi-frontend/src/main/frontend#11068

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/nifi-frontend/src/main/frontend/multi-956f8a8b74
Closed

Bump serialize-javascript, @angular-devkit/build-angular and @nx/angular in /nifi-frontend/src/main/frontend#11068
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/nifi-frontend/src/main/frontend/multi-956f8a8b74

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2026

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, @angular-devkit/build-angular and @nx/angular. These dependencies need to be updated together.

Updates serialize-javascript from 7.0.4 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

Commits

Updates @angular-devkit/build-angular from 21.1.5 to 21.2.5

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.5

@​angular/cli

Commit Description
feat - cadf9b201 support custom port in MCP devserver start tool

@​angular/ssr

Commit Description
fix - bbc255419 allow underscores in host validation
fix - b1fe66a7f patch Headers.forEach in cloneRequestAndPatchHeaders

21.2.4

@​angular/cli

Commit Description
fix - a7787d092 restore console methods after logger completes

@​angular/build

Commit Description
fix - 7170599ab deduplicate and merge coverage excludes with vitest
fix - c73f13797 prevent reporter duplicates by explicitly overriding Vitest configuration
fix - 956ccaa71 remove default for unit-test coverage option
fix - 36978db7e warn about performance of test.exclude in vitest configuration
fix - 6ec36f5be warn when vitest watch config conflicts with builder

@​angular/ssr

Commit Description
fix - 9bdf782c8 apply forwarded prefix and vary header in accept-language redirects
fix - 628c58672 support '*' in allowedHosts and warn about security risks

21.2.3

@​angular/cli

Commit Description
fix - 1505164bb use parsed package name for migrate-only updates

@​angular/build

Commit Description
fix - 75fa94cad alias createRequire banner import to avoid duplicate binding
fix - d009aa1ec only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Description
fix - f3e0e82c2 disallow x-forwarded-prefix starting with a backslash
fix - b8bcd59b4 ensure unique values in redirect response Vary header
fix - 84385411d support custom headers in redirect responses

21.2.2

@​angular/cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.5 (2026-03-27)

@​angular/cli

Commit Type Description
cadf9b201 feat support custom port in MCP devserver start tool

@​angular/ssr

Commit Type Description
bbc255419 fix allow underscores in host validation
b1fe66a7f fix patch Headers.forEach in cloneRequestAndPatchHeaders

20.3.22 (2026-03-27)

@​angular-devkit/build-angular

Commit Type Description
5978eeeff fix update picomatch to 4.0.4

@​angular-devkit/core

Commit Type Description
6e9b92612 fix update picomatch to 4.0.4

@​angular/build

Commit Type Description
6f209c26d fix update picomatch to 4.0.4

19.2.23 (2026-03-27)

@​angular/cli

Commit Type Description
67cfbe32f fix update picomatch to 4.0.4

... (truncated)

Commits
  • 3018612 release: cut the v21.2.5 release
  • 349bd43 build: update dependency picomatch to v4.0.4
  • cadf9b2 feat(@​angular/cli): support custom port in MCP devserver start tool
  • bbc2554 fix(@​angular/ssr): allow underscores in host validation
  • 88ac998 build: update cross-repo angular dependencies
  • 022e0ef build: update github/codeql-action action to v4.34.1
  • c363f19 build: update dependency node to v22.22.2
  • b1fe66a fix(@​angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders
  • 2aa93fc release: cut the v21.2.4 release
  • f33826e build: update cross-repo angular dependencies
  • Additional commits viewable in compare view

Updates @nx/angular from 22.5.4 to 22.6.3

Release notes

Sourced from @​nx/angular's releases.

22.6.3 (2026-03-27)

🚀 Features

  • misc: a/b test cloud prompt copy in create-nx-workspace (#35039)

🩹 Fixes

  • js: add {projectRoot} prefix to d.ts fileset in typescript plugin (#35037)
  • misc: use namespace import for chalk v4 compatibility (7c9f873bd1)
  • misc: handle non-interactive mode and add template shorthand names for CNW (#35045)

❤️ Thank You

22.6.2 (2026-03-26)

🚀 Features

  • core: auto-open browser for Cloud setup URL during create-nx-workspace (#35014)
  • repo: add nx-labs repo target and use glob pattern for update-all-repos (#34999)

🩹 Fixes

  • angular: update duplicate migration keys (#34961)
  • angular-rspack: ensure rebuild chunks emitted summary accurate (#34979, #34936)
  • bundling: disable swc input source map resolution (#35010, #32671)
  • core: split-target should handle projects with colons in name better (#34725)
  • core: prevent TUI crash when task output arrives after completion (#34785, #34677)
  • core: respect --parallel limit for discrete task concurrency (#34721, #34117, #31494)
  • core: use scroll-offset-based scrollbar positioning in TUI (#34689)
  • core: skip import-equals namespace aliases in native scanner (#34947, #34644)
  • core: include command name on all telemetry events (#34949)
  • core: skip workspace context setup when global bin hands off to local (#34953, #34914)
  • core: use upsert to prevent FK constraint violations in task DB (#34977)
  • core: runtime inputs shouldn't be cached at task_hasher layer and filesets should be in the hash_plans layer (#34971, #30170)
  • core: show better log message when isolated plugin shuts down after hook completion (#34922)
  • core: handle owners and conformance project refs on move/remove (#34815)
  • core: resolve published nx migrate package resolution (#35013, #34111)
  • core: prevent batch executor error on prematurely completed tasks (#35015)
  • core: add timeouts to GitHub push flow to prevent CLI hangs (#35011, #34482)
  • devkit: prevent double install in generators for TS solution workspaces (#34891)
  • devkit: add startTime and endTime to TaskResult interface (#34996)
  • gradle: ignore test enums when atomizing (#34974)
  • js: pass configName to typecheck command in TS plugin (#34989, #34274)
  • js: add input on .d.ts files within dependency projects (#34968)
  • linter: prepend framework configs before baseConfig in flat config generation (#34898, #28381, #32923)

... (truncated)

Commits
  • ed5cd20 chore(repo): ensure Cypress CT unit tests use Vite 7 since 8 is unsupported (...
  • c96a9d4 fix(vite): add support for Vite 8 (#34850)
  • 23bb49e cleanup(angular): remove postcss-url dependency (#34976)
  • 5f46af1 fix(angular): update duplicate migration keys (#34961)
  • dbd2ace fix(linter): prepend framework configs before baseConfig in flat config gener...
  • fb8884e fix(vitest): handle zoneless Angular apps in vitest configuration generator (...
  • cb6452c fix(misc): address security CVE cluster (copy-webpack-plugin, koa, minimatch)...
  • f60f1c6 fix(angular): preserve skipLibCheck in tsconfig.json for standalone projects ...
  • f48bf31 fix(repo): remove redundant inputs override for build-base target (#34649)
  • b1614d7 feat(angular): add support for Angular v21.2 (#34592)
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 29, 2026
Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [@nx/angular](https://github.com/nrwl/nx/tree/HEAD/packages/angular). These dependencies need to be updated together.


Updates `serialize-javascript` from 7.0.4 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v7.0.4...v7.0.5)

Updates `@angular-devkit/build-angular` from 21.1.5 to 21.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.1.5...v21.2.5)

Updates `@nx/angular` from 22.5.4 to 22.6.3
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.6.3/packages/angular)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.5
  dependency-type: direct:development
- dependency-name: "@nx/angular"
  dependency-version: 22.6.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/nifi-frontend/src/main/frontend/multi-956f8a8b74 branch from 8863fd2 to c49f403 Compare March 31, 2026 19:08
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 2, 2026

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Apr 2, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/nifi-frontend/src/main/frontend/multi-956f8a8b74 branch April 2, 2026 17:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants