chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #139 · nest-native/trpc

dependabot · 2026-07-27T12:08:57Z

Bumps the dev-tooling-minor-patch group with 7 updates in the / directory:

Package	From	To
@typescript-eslint/parser	`8.64.0`	`8.65.0`
eslint	`10.7.0`	`10.8.0`
eslint-plugin-sonarjs	`4.1.0`	`4.2.0`
sinon	`22.0.0`	`22.1.0`
@angular/build	`22.0.6`	`22.0.8`
@angular/cli	`22.0.6`	`22.0.8`
@angular/compiler-cli	`22.0.6`	`22.0.8`

Updates @typescript-eslint/parser from 8.64.0 to 8.65.0

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)

eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

add warning when TS 7 is detected (#12529)

parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Goldberg ✨

Kirk Waiblinger @kirkwaiblinger

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

63ba81b chore(release): publish 8.65.0
eaf4576 feat: add warning when TS 7 is detected (#12529)
d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
0d06406 chore: add attw validation to repo (#12437)
c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
See full diff in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)

9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)

e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)

20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)

8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)

b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)

784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)

7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))

92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)

68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)

d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)

eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)

c5963f7 docs: Update README (GitHub Actions Bot)

Chores

4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)

2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)

eccbe7b test: add error locations to no-class-assign (#21123) (devoil)

e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])

e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])

ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)

044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)

fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)

5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)

9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)

a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)

8dde645 test: add error locations to no-ex-assign (#21102) (devoil)

13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)

a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)

c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)

0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)

3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)

dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)

2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))

5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])

d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)

bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

Commits

749dfed 10.8.0
4bd0d75 Build: changelog update for 10.8.0
4fbf46d test: pin webpack version to 5.108.4 (#21137)
6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
784dfbe docs: Clarify no-eq-null description (#21120)
6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
eccbe7b test: add error locations to no-class-assign (#21123)
2fee9bb feat: export ConfigObject from eslint/config (#21082)
e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
Additional commits viewable in compare view

Updates eslint-plugin-sonarjs from 4.1.0 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target Artifact Main workflow Notes

Standard SonarQube analyzer Maven/JAR release artifacts .github/workflows/automated-release.yml This is the normal SonarJS release flow.

SQAA (previously A3S) Docker image for LanguageAnalyzerService .github/workflows/docker-sqaa.yml Manual SQAA-only entry point and fallback.

Terminology

SQAA is the current name for what older docs and repository names still call A3S.

Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:

the Docker repository path a3s/analysis/javascript

packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";

Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

Start .github/workflows/automated-release.yml.

That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.

After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

project name SonarJS

plugin name javascript

Jira project JS

optional SQC and SQS integration PRs

optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow

SLVS, SLVSCODE, SLE, and SLI integration tickets enabled

the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

Freeze the target branch.

Run the releasability checks with SonarSource/gh-action_releasability@v3.

Resolve the release version with get-release-version.

Resolve the Jira version with get-jira-version.

Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.

Create the REL Jira ticket with create-jira-release-ticket.

Publish the GitHub release with publish-github-release.

Unfreeze the branch.

Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

See full diff in compare view

Updates sinon from 22.0.0 to 22.1.0

Changelog

Sourced from sinon's changelog.

22.1.0

d36e921b fix: let returns override returnsArg (王胜)

Signed-off-by: 王胜 2318857637@qq.com

40c4caa0 fix: align restoreObject docs test with idempotent behavior (#2745) (Julia Miller)

restoreObject was made idempotent in #2737 — it no longer throws for objects with no restorable methods. Updates the docs page and its corresponding test to reflect this.

a68dac19 fix: throw a clear error when throwArg index equals the argument count (#2743) (spokodev)

fix: throw a clear error when throwArg index equals the argument count

spyCall.throwArg(pos) guarded with pos > this.args.length, so calling it with pos equal to the number of recorded arguments slipped past the guard and reached throw this.args[pos], throwing undefined instead of the intended TypeError. A thrown undefined cannot be inspected as an Error and is reported by test frameworks as no exception thrown.

Use >= to match ensureArgs in behavior.js and the sibling callArg helpers, which already reject an out-of-range index with a clear error.

9ea504e3 feat: make sinon.restoreObject idempotent (#2737) (Ilia Choly)

Passing an object with no live fakes to restoreObject now restores nothing instead of throwing, giving it symmetry with sinon.restore() and sandbox.restore(). The strict "found no methods" check is retained for spy(object) and stub(object), which now use a dedicated walkObjectStrict export, while restoreObject uses the loose walkObject. Passing a falsy value still throws.

Fixes #2736

4db4feff fix: preserve fake undefined argument validation (Vishal Kumar Singh)

755a40d7 fix: isolate callId counter per sandbox for parallel test support (Vishal Kumar Singh)

The global callId counter in proxy-invoke.js caused calledImmediatelyBefore and calledImmediatelyAfter to fail when tests run in parallel with separate sandboxes. Each sandbox now maintains its own callId counter, passed through the spy/stub/fake creation chain via a context object.

Fixes #2472

Released by Morgan Roderick on 2026-07-20.

Commits

ab289e9 22.1.0
bb3b75a chore: remove Jekyll steps from version hook
bb38f25 chore: run docs tests in preversion hook
d36e921 fix: let returns override returnsArg
11db213 ci: run docs tests on every PR (#2746)
40c4caa fix: align restoreObject docs test with idempotent behavior (#2745)
5ccb7fd build(deps): bump the action-deps group with 4 updates (#2744)
a68dac1 fix: throw a clear error when throwArg index equals the argument count (#2743)
9ea504e feat: make sinon.restoreObject idempotent (#2737)
cf5d9e8 fix: remove dead link and exclude code example URLs from link check
Additional commits viewable in compare view

Updates @angular/build from 22.0.6 to 22.0.8

Release notes

Sourced from @angular/build's releases.

22.0.8

@angular/cli

Commit Description

batch Prettier invocations during migration formatting

update MCP devserver tool names to conform to spec regex

@angular/build

Commit Description

canonicalize drive letter casing for workspace root on Windows

ensure import map integrity keys are valid URL-like specifiers

favor istanbul coverage provider when browser testing is enabled

preserve custom config options in runnerConfig for vitest

remap metafile paths when workspace root is a symlink or junction

skip semantic affected-file walk when type checking is disabled

22.0.7

@angular/cli

Commit Description

copy packageManager field and yarn config for temp installs

support resolving subproject dependencies in pnpm workspaces

Changelog

Sourced from @angular/build's changelog.

22.0.8 (2026-07-23)

@angular/cli

Commit Type Description

41c356256 fix batch Prettier invocations during migration formatting

bc87c85c3 fix update MCP devserver tool names to conform to spec regex

@angular/build

Commit Type Description

5724bf632 fix canonicalize drive letter casing for workspace root on Windows

b8bdbaa1e fix ensure import map integrity keys are valid URL-like specifiers

212a7bb21 fix favor istanbul coverage provider when browser testing is enabled

bc760b005 fix preserve custom config options in runnerConfig for vitest

19cda7415 fix remap metafile paths when workspace root is a symlink or junction

fdcc98c79 perf skip semantic affected-file walk when type checking is disabled

22.1.0-next.4 (2026-07-15)

@angular/cli

Commit Type Description

3789ceee1 fix copy packageManager field and yarn config for temp installs

b0b3a47ae fix support resolving subproject dependencies in pnpm workspaces

@schematics/angular

Commit Type Description

b345bb54d fix remove unused spec tsconfig outDir

@angular/build

Commit Type Description

0c18dc0f6 feat emit debug ids for stable subresource integrity hashes

291caab61 fix prevent stripping nested sourceMappingURL comments

... (truncated)

Commits

beac493 release: cut the v22.0.8 release
1bb2cc5 build: update devinfra digest to 8819f0b
83eede6 build: update all github actions
15b8616 build: update dependency aspect_rules_ts to v3.9.2
bc87c85 fix(@angular/cli): update MCP devserver tool names to conform to spec regex
212a7bb fix(@angular/build): favor istanbul coverage provider when browser testing is...
0c69328 Revert "perf(@angular/build): skip semantic affected-file walk when type chec...
ecc7aba build: update cross-repo angular dependencies
ce5e5d0 build: lock file maintenance
fdcc98c perf(@angular/build): skip semantic affected-file walk when type checking is ...
Additional commits viewable in compare view

Updates @angular/cli from 22.0.6 to 22.0.8

Release notes

Sourced from @angular/cli's releases.

22.0.8

@angular/cli

Commit Description

batch Prettier invocations during migration formatting

update MCP devserver tool names to conform to spec regex

@angular/build

Commit Description

canonicalize drive letter casing for workspace root on Windows

ensure import map integrity keys are valid URL-like specifiers

favor istanbul coverage provider when browser testing is enabled

preserve custom config options in runnerConfig for vitest

remap metafile paths when workspace root is a symlink or junction

skip semantic affected-file walk when type checking is disabled

22.0.7

@angular/cli

Commit Description

copy packageManager field and yarn config for temp installs

support resolving subproject dependencies in pnpm workspaces

Changelog

Sourced from @angular/cli's changelog.

22.0.8 (2026-07-23)

@angular/cli

Commit Type Description

41c356256 fix batch Prettier invocations during migration formatting

bc87c85c3 fix update MCP devserver tool names to conform to spec regex

@angular/build

Commit Type Description

5724bf632 fix canonicalize drive letter casing for workspace root on Windows

b8bdbaa1e fix ensure import map integrity keys are valid URL-like specifiers

212a7bb21 fix favor istanbul coverage provider when browser testing is enabled

bc760b005 fix preserve custom config options in runnerConfig for vitest

19cda7415 fix remap metafile paths when workspace root is a symlink or junction

fdcc98c79 perf skip semantic affected-file walk when type checking is disabled

22.1.0-next.4 (2026-07-15)

@angular/cli

Commit Type Description

3789ceee1 fix copy packageManager field and yarn config for temp installs

b0b3a47ae fix support resolving subproject dependencies in pnpm workspaces

@schematics/angular

Commit Type Description

b345bb54d fix remove unused spec tsconfig outDir

@angular/build

Commit Type Description

0c18dc0f6 feat emit debug ids for stable subresource integrity hashes

291caab61 fix prevent stripping nested sourceMappingURL comments

... (truncated)

Commits

beac493 release: cut the v22.0.8 release
1bb2cc5 build: update devinfra digest to 8819f0b
83eede6 build: update all github actions
15b8616 build: update dependency aspect_rules_ts to v3.9.2
bc87c85 fix(@angular/cli): update MCP devserver tool names to conform to spec regex
212a7bb fix(@angular/build): favor istanbul coverage provider when browser testing is...
0c69328 Revert "perf(@angular/build): skip semantic affected-file walk when type chec...
ecc7aba build: update cross-repo angular dependencies
ce5e5d0 build: lock file maintenance
fdcc98c perf(@angular/build): skip semantic affected-file walk when type checking is ...
Additional commits viewable in compare view

Updates @angular/compiler-cli from 22.0.6 to 22.0.8

Release notes

Sourced from @angular/compiler-cli's releases.

22.0.8

common

Commit Description

preserve crossorigin on image preloads

core

Commit Description

ensure SVG animation attributeName is checked case-insensitively

forms

Commit Description

ensure pending status propagates to the root form in signal forms

http

Commit Description

prevent transfer cache key collisions

migrations

Commit Description

correctly migrate ngClass with mixed space-separated keys

preserve NgClass import on partial migration

22.0.7

common

Commit Description

avoid prototype lookups in date format caches

compiler

Commit Description

parsing of an empty template literal interpolation

compiler-cli

Commit Description

re-tag SourceFiles after TsCreateProgramDriver.updateFiles()

core

Commit Description

allow static attributes for explicit input transforms

ignore processing instruction syntax in templates

preserve explicit input transform write type

forms

Commit Description

allow multiple async validators

preserve intermediate number values in signal forms

prevent stale CVA writeback during debounce

http

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/compiler-cli's changelog.

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.1.0-next.6 (2026-07-15)

common

Commit Type Description

359fb503b8 fix avoid prototype lookups in date format caches

compiler

Commit Type Description

da52137724 fix parsing of an empty template literal interpolation

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

ae0ec7315c fix re-tag SourceFiles after TsCreateProgramDriver.updateFiles()

core

Commit Type Description

9b9b0e93c9 fix allow static attributes for explicit input transforms

68ac204074 fix ignore processing instruction syntax in templates

0ae6d81ed2 fix preserve explicit input transform write type

forms

Commit Type Description

... (truncated)

Commits

7eec520 test(compiler-cli): cover DOM-only vs full instruction set across compilation...
70500e4 fix(core): preserve explicit input transform write type
c88ddde fix(compiler-cli): re-tag SourceFiles after TsCreateProgramDriver.updateFiles()
c82ae67 Revert "fix(core): allow static attributes for explicit input transforms"
94d9591 fix(core): allow static attributes for explicit input transforms
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…oss 1 directory with 7 updates Bumps the dev-tooling-minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.64.0` | `8.65.0` | | [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` | | [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS) | `4.1.0` | `4.2.0` | | [sinon](https://github.com/sinonjs/sinon) | `22.0.0` | `22.1.0` | | [@angular/build](https://github.com/angular/angular-cli) | `22.0.6` | `22.0.8` | | [@angular/cli](https://github.com/angular/angular-cli) | `22.0.6` | `22.0.8` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `22.0.6` | `22.0.8` | Updates `@typescript-eslint/parser` from 8.64.0 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/parser) Updates `eslint` from 10.7.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.7.0...v10.8.0) Updates `eslint-plugin-sonarjs` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/SonarSource/SonarJS/releases) - [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md) - [Commits](https://github.com/SonarSource/SonarJS/commits) Updates `sinon` from 22.0.0 to 22.1.0 - [Release notes](https://github.com/sinonjs/sinon/releases) - [Changelog](https://github.com/sinonjs/sinon/blob/main/CHANGES.md) - [Commits](sinonjs/sinon@v22.0.0...v22.1.0) Updates `@angular/build` from 22.0.6 to 22.0.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.0.6...v22.0.8) Updates `@angular/cli` from 22.0.6 to 22.0.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.0.6...v22.0.8) Updates `@angular/compiler-cli` from 22.0.6 to 22.0.8 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.8/packages/compiler-cli) --- updated-dependencies: - dependency-name: "@typescript-eslint/parser" dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling-minor-patch - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling-minor-patch - dependency-name: eslint-plugin-sonarjs dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling-minor-patch - dependency-name: sinon dependency-version: 22.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling-minor-patch - dependency-name: "@angular/build" dependency-version: 22.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling-minor-patch - dependency-name: "@angular/cli" dependency-version: 22.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling-minor-patch - dependency-name: "@angular/compiler-cli" dependency-version: 22.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-27T12:09:48Z

📊 Coverage Report

Metric		PR	Base	Diff
Statements	`████████████████████`	`660/660` (100%)	`660/660` (100%)	⚪ 0%
Branches	`████████████████████`	`280/280` (100%)	`280/280` (100%)	⚪ 0%
Functions	`████████████████████`	`122/122` (100%)	`122/122` (100%)	⚪ 0%
Lines	`████████████████████`	`635/635` (100%)	`635/635` (100%)	⚪ 0%

_{Updated for b0a94b7 | Compared against base branch}

github-actions · 2026-07-27T12:09:49Z

⏱️ Performance Report


✅ Tests	213 passed, 0 failed, 0 skipped
🧪 Suites	42
⏱️ Total step time	10.00s (install + tests) ⚪ ~0
⚙️ Test execution	3.10s ⚪ ~0

🐢 Slowest test suites

#	Suite	Tests	Duration	vs Base
1	`test/generators/schema-generator.spec.ts`	23	2.25s	⚪ ~0
2	`test/adapter/trpc-client-adapter-e2e.spec.ts`	16	196ms	⚪ ~0
3	`test/adapter/trpc-http-adapter.spec.ts`	19	73ms	⚪ ~0
4	`test/router/trpc-router.spec.ts`	29	37ms	⚪ ~0
5	`test/context/trpc-context-creator.spec.ts`	26	28ms	⚪ ~0
6	`test/adapter/trpc-http-adapter-unit.spec.ts`	22	17ms	⚪ ~0
7	`test/generators/zod-serializer.spec.ts`	38	13ms	⚪ ~0
8	`test/router/trpc-router-lifecycle.spec.ts`	11	7ms	⚪ ~0
9	`test/module/trpc-module.spec.ts`	9	6ms	⚪ ~0
10	`test/decorators/decorators.spec.ts`	11	4ms	⚪ ~0

🐌 Slowest individual tests

#	Suite	Test	Duration	vs Base
1	`schema-generator`	generateSchemaContent (type-level AppRouter contract) should require a link transformer on typed clients when generated with hasTransformer	1.43s	⚪ ~0
2	`schema-generator`	generateSchemaContent (type-level AppRouter contract) should typecheck generated AppRouter with a typed tRPC client	811ms	⚪ ~0
3	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E express handles typed queries, mutations, and context extraction	59ms	⚪ ~0
4	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E express streams subscriptions through the real client	28ms	⚪ ~0
5	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E express runs class-validator DTO validation through ValidationPipe	23ms	⚪ ~0
6	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E fastify handles typed queries, mutations, and context extraction	12ms	⚪ ~0
7	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E fastify runs class-validator DTO validation through ValidationPipe	12ms	⚪ ~0
8	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E express reports Zod input errors through the real client	9ms	⚪ ~0
9	`trpc-http-adapter`	TrpcHttpAdapter edge cases should handle Fastify GET with createContext	8ms	⚪ ~0
10	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E fastify reports Zod input errors through the real client	7ms	⚪ ~0
11	`trpc-client-adapter-e2e`	real @trpc/client adapter E2E fastify streams subscriptions through the real client	7ms	⚪ ~0
12	`trpc-http-adapter`	TrpcHttpAdapter Express handler should map guard-denied execution to FORBIDDEN/403	7ms	⚪ ~0
13	`trpc-http-adapter`	TrpcHttpAdapter (server config passthrough) Express should apply responseMeta headers before streaming SSE responses	7ms	⚪ ~0
14	`trpc-client-adapter-e2e`	real @trpc/client with superjson transformer E2E express round-trips Date instances through SSE subscriptions	6ms	⚪ ~0
15	`trpc-client-adapter-e2e`	real @trpc/client with superjson transformer E2E express exposes the flattened ZodError shape to the real client	6ms	⚪ ~0

_{Updated for b0a94b7 | Compared against base branch}

github-actions · 2026-07-27T12:09:50Z

🧠 Cognitive Complexity Report

Metric	PR	Base	Diff
Total complexity	159	159	⚪ 0
Max function complexity	12	12	⚪ 0
Functions measured	53	53	⚪ 0

🧩 Most complex functions

Function	Location	Complexity	Status
`serializeZodSchema`	`packages/trpc/generators/zod-serializer.ts:9`	12	🟢 OK
`generateSchemaContent`	`packages/trpc/generators/schema-generator.ts:59`	9	🟢 OK
`TrpcContextCreator.extractHttpExceptionMessage`	`packages/trpc/context/trpc-context-creator.ts:467`	7	🟢 OK
`TrpcHttpAdapter.resolveBody`	`packages/trpc/trpc-http-adapter.ts:124`	7	🟢 OK
`TrpcRouter.validateSubscriptionOutput`	`packages/trpc/trpc-router.ts:551`	7	🟢 OK
`(anonymous callback)`	`packages/trpc/context/trpc-context-creator.ts:243`	6	🟢 OK
`TrpcRouter.assertUniqueAliasPath`	`packages/trpc/trpc-router.ts:436`	6	🟢 OK
`TrpcRouter.resolveContextId`	`packages/trpc/trpc-router.ts:504`	6	🟢 OK
`TrpcRouter.createRouterProviderContext`	`packages/trpc/trpc-router.ts:148`	5	🟢 OK
`(anonymous callback)`	`packages/trpc/trpc-router.ts:320`	5	🟢 OK

🧭 Cognitive complexity is reported as a review signal, not a merge gate. Prefer small, intention-revealing refactors when complexity rises.

_{Updated for b0a94b7 | Compared against base branch}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

rodrigobnogueira merged commit 480fb63 into main Jul 30, 2026
10 checks passed

rodrigobnogueira deleted the dependabot/npm_and_yarn/dev-tooling-minor-patch-46fac29734 branch July 30, 2026 03:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group across 1 directory with 7 updates - #139

chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group across 1 directory with 7 updates#139
rodrigobnogueira merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-minor-patch-46fac29734

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

github-actions Bot commented Jul 27, 2026

Uh oh!

github-actions Bot commented Jul 27, 2026

Uh oh!

github-actions Bot commented Jul 27, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Target	Artifact	Main workflow	Notes
Standard SonarQube analyzer	Maven/JAR release artifacts	`.github/workflows/automated-release.yml`	This is the normal SonarJS release flow.
SQAA (previously A3S)	Docker image for `LanguageAnalyzerService`	`.github/workflows/docker-sqaa.yml`	Manual SQAA-only entry point and fallback.

Commit	Description
	batch Prettier invocations during migration formatting
	update MCP devserver tool names to conform to spec regex

Commit	Description
	canonicalize drive letter casing for workspace root on Windows
	ensure import map integrity keys are valid URL-like specifiers
	favor istanbul coverage provider when browser testing is enabled
	preserve custom config options in runnerConfig for vitest
	remap metafile paths when workspace root is a symlink or junction
	skip semantic affected-file walk when type checking is disabled

Commit	Description
	copy packageManager field and yarn config for temp installs
	support resolving subproject dependencies in pnpm workspaces

Commit	Type	Description
41c356256	fix	batch Prettier invocations during migration formatting
bc87c85c3	fix	update MCP devserver tool names to conform to spec regex

Commit	Type	Description
5724bf632	fix	canonicalize drive letter casing for workspace root on Windows
b8bdbaa1e	fix	ensure import map integrity keys are valid URL-like specifiers
212a7bb21	fix	favor istanbul coverage provider when browser testing is enabled
bc760b005	fix	preserve custom config options in runnerConfig for vitest
19cda7415	fix	remap metafile paths when workspace root is a symlink or junction
fdcc98c79	perf	skip semantic affected-file walk when type checking is disabled

Commit	Type	Description
3789ceee1	fix	copy packageManager field and yarn config for temp installs
b0b3a47ae	fix	support resolving subproject dependencies in pnpm workspaces

Commit	Type	Description
0c18dc0f6	feat	emit debug ids for stable subresource integrity hashes
291caab61	fix	prevent stripping nested sourceMappingURL comments

Commit	Description
	correctly migrate ngClass with mixed space-separated keys
	preserve NgClass import on partial migration

Commit	Description
	allow static attributes for explicit input transforms
	ignore processing instruction syntax in templates
	preserve explicit input transform write type

Commit	Description
	allow multiple async validators
	preserve intermediate number values in signal forms
	prevent stale CVA writeback during debounce

Commit	Type	Description
388daea2fc	fix	correctly migrate ngClass with mixed space-separated keys
bb39cda648	fix	preserve NgClass import on partial migration

Commit	Type	Description
da52137724	fix	parsing of an empty template literal interpolation
5bd00add07	fix	support foreign components inside control flow blocks (#69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#69674)

Commit	Type	Description
9b9b0e93c9	fix	allow static attributes for explicit input transforms
68ac204074	fix	ignore processing instruction syntax in templates
0ae6d81ed2	fix	preserve explicit input transform write type

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

🩹 Fixes

❤️ Thank You

8.65.0 (2026-07-20)

🚀 Features

❤️ Thank You

v10.8.0

Features

Bug Fixes

Documentation

Chores

Release Guide

Terminology

Standard SonarQube Analyzer Release

Entry points

What .github/workflows/automated-release.yml does

22.1.0

22.0.8

@​angular/cli

@​angular/build

22.0.7

@​angular/cli

22.0.8 (2026-07-23)

@​angular/cli

@​angular/build

22.1.0-next.4 (2026-07-15)

@​angular/cli

@​schematics/angular

@​angular/build

22.0.8

@​angular/cli

@​angular/build

22.0.7

@​angular/cli

22.0.8 (2026-07-23)

@​angular/cli

@​angular/build

22.1.0-next.4 (2026-07-15)

@​angular/cli

@​schematics/angular

@​angular/build

22.0.8

common

core

forms

http

migrations

22.0.7

common

compiler

compiler-cli

core

forms

http

22.0.8 (2026-07-22)

common

core

forms

http

migrations

22.1.0-next.6 (2026-07-15)

common

compiler

compiler-cli

core

forms

Uh oh!

github-actions Bot commented Jul 27, 2026

📊 Coverage Report

Uh oh!

github-actions Bot commented Jul 27, 2026

⏱️ Performance Report

Uh oh!

github-actions Bot commented Jul 27, 2026

🧠 Cognitive Complexity Report

What `.github/workflows/automated-release.yml` does

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular/build`