build: update all non-major dependencies (main) by angular-robot · Pull Request #33631 · angular/angular-cli

angular-robot · 2026-07-23T06:17:04Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@listr2/prompt-adapter-inquirer	`4.2.4` → `4.2.5`
@oxc-project/types (source)	`0.140.0` → `0.141.0`
@typescript-eslint/eslint-plugin (source)	`8.64.0` → `8.65.0`
@typescript-eslint/parser (source)	`8.64.0` → `8.65.0`
less (source)	`4.6.7` → `4.8.0`
magic-string	`1.0.0` → `1.1.0`
oxc-parser (source)	`0.140.0` → `0.141.0`
piscina	`5.2.0` → `5.3.0`
postcss (source)	`8.5.19` → `8.5.22`
sass	`1.101.0` → `1.101.6`
source-map	`0.7.6` → `0.8.0`
undici (source)	`8.7.0` → `8.8.0`
webpack-dev-middleware	`8.0.3` → `8.0.4`

If you want to rebase/retry this PR, check this box

Release Notes

listr2/listr2 (@listr2/prompt-adapter-inquirer)

`v4.2.5`

Compare Source

@listr2/prompt-adapter-inquirer 4.2.5 (2026-07-21)

Bug Fixes

renderer: serialize the cancelled state in the test renderer (f703f09)

Dependencies

listr2: upgraded to 11.0.0

oxc-project/oxc (@oxc-project/types)

`v0.141.0`

💥 BREAKING CHANGES

54cc121 ast: [BREAKING] Split MetaProperty into ImportMeta and NewTarget (#24557) (camc314)

typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)

`v8.65.0`

Compare Source

🚀 Features

eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
add warning when TS 7 is detected (#12529)
eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

🩹 Fixes

eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)
eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

❤️ Thank You

Evyatar Daud @StyleShit
Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger
Serhii Leniv @Serhii-Leniv
송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@typescript-eslint/parser)

`v8.65.0`

Compare Source

🚀 Features

add warning when TS 7 is detected (#12529)
parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

Evyatar Daud @StyleShit
Josh Goldberg ✨
Kirk Waiblinger @kirkwaiblinger
송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

less/less.js (less)

`v4.8.0`

Compare Source

Changes

#4473 fix(mixing): resolves issue #4234 (@puckowski)
#4472 Fix boolean() parsing for comparisons between inline condition expressions (@app/copilot-swe-agent)

Deprecation Warnings

#4475 Deprecate numeric-leading and dash-only variable names, dash-only mixin names, and dynamic @charset interpolation for removal in Less 5.x. Less 4 preserves the existing output while warning; migrate names to valid identifiers and use a static quoted @charset declaration. (@matthew-dean)

`v4.7.0`

Compare Source

Changes

#4469 Follow-up to #4462: migrate remaining @var fixtures, DRY the prelude bare-@var scan, add warnings coverage (@matthew-dean)
#4462 feat: deprecate bare @variable in non-value at-rule positions (@matthew-dean)
#4461 Fix #4460: parse comparison/range syntax in container style() queries (@dweep-js)
#4459 refactor: extract shared ESLint config and add lint scripts (@JessenReinhart)
#4456 Replace image-size with probe-image-size (@priyamkarn)

Rich-Harris/magic-string (magic-string)

`v1.1.0`

Compare Source

Bug Fixes

trim replacements longer than the range they replace (#312) (ec1a139)

Performance Improvements

use a Map for tracking chunks (#313) (25d7461)

oxc-project/oxc (oxc-parser)

`v0.141.0`

💥 BREAKING CHANGES

54cc121 ast: [BREAKING] Split MetaProperty into ImportMeta and NewTarget (#24557) (camc314)

🚀 Features

7b045cd minfier: Drop last break from last switch case (#24673) (Armano)
3d22307 parser: Add ParseOptions::enable_ident_hashes (#24491) (Boshen)

piscinajs/piscina (piscina)

`v5.3.0`

Compare Source

What's Changed

chore(deps): Bump shell-quote from 1.8.3 to 1.8.4 in /docs in the npm_and_yarn group across 1 directory by @github-actions[bot] in #1075
chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates by @github-actions[bot] in #1081
chore: update sponsors by @github-actions[bot] in #1084
[Backport v5] chore: Enhance SECURITY.md with detailed security policy by @github-actions[bot] in #1092
chore(deps): Bump websocket-driver from 0.7.4 to 0.7.5 in /docs in the npm_and_yarn group across 1 directory by @github-actions[bot] in #1110
feat: add stricterFIFO option for queue fairness (#1100) by @metcoder95 in #1113

Full Changelog: piscinajs/piscina@v5.2.0...v5.3.0

postcss/postcss (postcss)

`v8.5.22`

Compare Source

Fixed custom property losing semicolon before a comment (by @sarathfrancis90).

`v8.5.21`

Compare Source

Fixed childless at-rule losing semicolon before comment (by @sarathfrancis90).
Fixed docs (by @isker).

`v8.5.20`

Compare Source

Fixed missing space if AtRule#params is set after (by @sarathfrancis90).
Fixed mixing AST error on warnings (by @MahinAnowar).

sass/dart-sass (sass)

`v1.101.6`

Compare Source

No user-visible changes.

`v1.101.5`

Compare Source

No user-visible changes.

`v1.101.4`

Compare Source

Avoid emitting rgb() or rgba() functions with non-percent decimal
channels. Older browsers only support integer values or (potentially decimal)
percentages for these functions, so in order to preserve
backwards-compatibility while retaining full precision for modern browsers,
legacy colors that contain at least one non-integer channel will now use
percentages for their channels (for example, rgb(0%, 100%, 50%) rather than
rgb(0, 255, 127.5)).
Fix a bug where the values of plain-CSS if() expressions were emitted using
their meta.inspect() format rather than their CSS serialization format.

`v1.101.3`

Compare Source

No user-visible changes.

mozilla/source-map (source-map)

`v0.8.0`

Compare Source

[#528] #528
Adding security policy
[#525] #525
Use Object.create for sourceContents
[#520] #520
Fixes types for SourceMapConsumer.initialize

nodejs/undici (undici)

`v8.8.0`

Compare Source

What's Changed

fetch: use ReadableStreamTee for cloning streams by @KhafraDev in #5517
fix(benchmarks): adjust got after v15 upgrade by @slagiewka in #5526
feat(mock): support asynchronous reply options callbacks by @Develop-KIM in #5534
docs: clarify proxy threat model by @mcollina in #5530
docs: clarify MockAgent pool usage by @vibhor-aggr in #5542
docs: clarify parser timeout precision by @vibhor-aggr in #5543
fix: handle flat alternating header arrays in cache normalizeHeaders by @mcollina in #5536
chore(benchmarks): require(esm) on ESM-only packages by @slagiewka in #5527
fix: run idle socket validation off setImmediate instead of setTimeout by @carlotestor in #5499
docs: add custom interceptor example by @vibhor-aggr in #5548
fix(h1): ignore type of service errors by @mcollina in #5547
fix(fetch): convert null init in Response.json by @Ram-blip in #5540
fix(redirect): remove body headers after POST-to-GET by @Ram-blip in #5551
build(deps-dev): bump fast-check from 4.8.0 to 4.9.0 by @dependabot[bot] in #5556
fix(h2): allow stream-bodied requests to multiplex on a busy session by @GiHoon1123 in #5538
fix(h2): destroy aborted stream synchronously instead of via setImmediate by @staylor in #5559
fix(decompress): skip HEAD responses by @Ram-blip in #5564
ci: build undici with node.js v26 by @shivarm in #5237
docs: clarify top-level request option url fields by @vibhor-aggr in #5545
test: add unexpected disconnect guards to http2 tests by @Develop-KIM in #5533
fix: track origins by client map key in Agent teardown by @emmayusufu in #5537
fix: enforce must-revalidate and proxy-revalidate over max-stale and stale-if-error by @jeswr in #5511
fix(retry): handle Retry-After zero delay by @Ram-blip in #5519
fix: honor stale-if-error on connection errors during revalidation by @jeswr in #5513
fix: store revalidation-only responses so etag revalidation can engage by @jeswr in #5515
fix(h2): prevent uncaughtException from onHttp2SocketError accessing undefined kClient by @mcollina in #5546
fix(h2): complete request stream on 'end' instead of waiting for 'close' by @staylor in #5560
fix: invalidate Location and Content-Location URIs on unsafe methods by @jeswr in #5514
test: deflake invalid websocket close status test by @mcollina in #5550
refactor: replace tspl with node:test t.plan in connect-timeout tests by @mcollina in #5518
fix(h2): release completed requests from queue by @staylor in #5569

New Contributors

@Develop-KIM made their first contribution in #5534
@carlotestor made their first contribution in #5499
@GiHoon1123 made their first contribution in #5538
@emmayusufu made their first contribution in #5537

Full Changelog: nodejs/undici@v8.7.0...v8.8.0

webpack/webpack-dev-middleware (webpack-dev-middleware)

`v8.0.4`

Compare Source

Patch Changes

Replace the on-finished dependency with Node.js built-in stream.finished. (by @bjohansebas in #2346)

gemini-code-assist

Code Review

This pull request updates various dependencies across multiple package.json files in the workspace, including @typescript-eslint/eslint-plugin, undici, oxc-parser, piscina, sass, @oxc-project/types, less, postcss, and source-map. The review highlights that updating oxc-parser and @oxc-project/types to 0.141.0 introduces breaking changes (splitting MetaProperty into ImportMeta and NewTarget) which could break AST traversal or manipulation logic relying on MetaProperty.

See associated pull request for more information.

angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Jul 23, 2026

gemini-code-assist Bot reviewed Jul 23, 2026

View reviewed changes

Comment thread packages/angular/build/package.json

Comment thread packages/angular/build/package.json

angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch from 6f73469 to f7f0941 Compare July 23, 2026 09:13

alan-agius4 approved these changes Jul 23, 2026

View reviewed changes

angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch 8 times, most recently from 3aaa02c to f9b9998 Compare July 24, 2026 09:10

build: update all non-major dependencies

83dda27

See associated pull request for more information.

angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch from f9b9998 to 83dda27 Compare July 24, 2026 11:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build: update all non-major dependencies (main)#33631

build: update all non-major dependencies (main)#33631
angular-robot wants to merge 1 commit into
angular:mainfrom
angular-robot:ng-renovate/main-all-non-major-dependencies

angular-robot commented Jul 23, 2026 •

edited

Loading

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

angular-robot commented Jul 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

@​listr2/prompt-adapter-inquirer 4.2.5 (2026-07-21)

Bug Fixes

Dependencies

💥 BREAKING CHANGES

🚀 Features

🩹 Fixes

❤️ Thank You

🚀 Features

❤️ Thank You

Changes

Deprecation Warnings

Changes

Bug Fixes

Performance Improvements

💥 BREAKING CHANGES

🚀 Features

What's Changed

What's Changed

New Contributors

Patch Changes

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

angular-robot commented Jul 23, 2026 •

edited

Loading

@listr2/prompt-adapter-inquirer 4.2.5 (2026-07-21)