Bump the npm_and_yarn group across 1 directory with 12 updates #2

dependabot · 2025-01-21T22:51:29Z

Bumps the npm_and_yarn group with 6 updates in the / directory:

Package	From	To
vite	`5.1.5`	`removed`
@angular-devkit/build-angular	`17.3.2`	`19.1.3`
cookie	`0.4.2`	`0.7.2`
socket.io	`4.7.5`	`4.8.1`
ws	`8.11.0`	`8.17.1`
socket.io-adapter	`2.5.4`	`2.5.5`

Removes vite

Updates @angular-devkit/build-angular from 17.3.2 to 19.1.3

Release notes

Sourced from @angular-devkit/build-angular's releases.

v19.1.3

19.1.3 (2025-01-20)

@angular/build

Commit Description

allow asset changes to reload page on incremental updates

handle relative @ng/components

perform full reload for templates with $localize usage

v19.1.2

19.1.2 (2025-01-17)

@angular/build

Commit Description

perform incremental background file updates with component updates

prevent full page reload on HMR updates with SSR enabled

reset component updates on dev-server index request

v19.1.1

19.1.1 (2025-01-16)

@angular/build

Commit Description

resolve HMR-prefixed files in SSR with Vite

v19.1.0

19.1.0 (2025-01-15)

@schematics/angular

Commit Description

use @angular/build package in library generation schematic

application migration should migrate ng-packagr builder package

@angular-devkit/architect

Commit Description

require build schemas from modules

avoid Node.js resolution for relative builder schema

@angular-devkit/core

Commit Description

handle Windows drive letter case insensitivity in path functions

@angular-devkit/schematics

Commit Description

update Rule type to support returning a Promise of Tree

@angular/build

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

19.1.3 (2025-01-20)

@angular/build

Commit Type Description

7d8c34172 fix allow asset changes to reload page on incremental updates

9fa29af37 fix handle relative @ng/components

c4de34703 fix perform full reload for templates with $localize usage

19.1.2 (2025-01-17)

@angular/build

Commit Type Description

939d1612a fix perform incremental background file updates with component updates

304027207 fix prevent full page reload on HMR updates with SSR enabled

148acbd58 fix reset component updates on dev-server index request

19.1.1 (2025-01-16)

@angular/build

Commit Type Description

298506751 fix resolve HMR-prefixed files in SSR with Vite

19.1.0 (2025-01-15)

Deprecations

@angular/build

The baseHref option under i18n.locales and i18n.sourceLocale in angular.json is deprecated in favor of subPath.

The subPath defines the URL segment for the locale, serving as both the HTML base HREF and the directory name for output. By default, if not specified, subPath will use the locale code.

... (truncated)

Commits

4508725 release: cut the v19.1.3 release
3ce086a test: improve stability of strategy tests
2114f02 build: ensure source maps are used for jasmine stack traces
e5e0947 build: migrate @angular-devkit/architect-cli tests to rules_js
4700c5d build: migrate @angular-devkit/schematics tests to rules_js
c9bf07d build: migrate @angular-devkit/core tests to rules_js
d278d94 build: migrate @angular/cli tests to use rules_js
676ce57 build: ensure package substitutions work with pnpm workspace:* links
7afc051 test(@angular/build): enable i18n localize watch test for dev-server
c4de347 fix(@angular/build): perform full reload for templates with $localize usage
Additional commits viewable in compare view

Updates body-parser from 1.20.2 to 1.20.3

Release notes

Sourced from body-parser's releases.

1.20.3

What's Changed

Important

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

Other changes

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/body-parser#522

ci: fix errors in ci github action for node 8 and 9 by @inigomarquinez in expressjs/body-parser#523

fix: pin to node@22.4.1 by @wesleytodd in expressjs/body-parser#527

deps: qs@6.12.3 by @melikhov-dev in expressjs/body-parser#521

Add OSSF Scorecard badge by @bjohansebas in expressjs/body-parser#531

Linter by @UlisesGascon in expressjs/body-parser#534

Release: 1.20.3 by @UlisesGascon in expressjs/body-parser#535

New Contributors

@inigomarquinez made their first contribution in expressjs/body-parser#522

@melikhov-dev made their first contribution in expressjs/body-parser#521

@bjohansebas made their first contribution in expressjs/body-parser#531

@UlisesGascon made their first contribution in expressjs/body-parser#534

Full Changelog: expressjs/body-parser@1.20.2...1.20.3

Changelog

Sourced from body-parser's changelog.

1.20.3 / 2024-09-10

deps: qs@6.13.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Commits

1752951 1.20.3
39744cf chore: linter (#534)
b2695c4 Merge commit from fork
ade0f3f add scorecard to readme (#531)
99a1bd6 deps: qs@6.12.3 (#521)
9478591 fix: pin to node@22.4.1
83db46a ci: fix errors in ci github action for node 8 and 9 (#523)
9d4e212 chore: add support for OSSF scorecard reporting (#522)
See full diff in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.

Updates cookie from 0.4.2 to 0.7.2

Release notes

Sourced from cookie's releases.

v0.7.2

Fixed

Fix object assignment of hasOwnProperty (#177) bc38ffd

jshttp/cookie@v0.7.1...v0.7.2

0.7.1

Fixed

Allow leading dot for domain (#174)

Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec

Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#172)

jshttp/cookie@v0.7.0...v0.7.1

0.7.0

perf: parse cookies ~10% faster (#144 by @kurtextrem and #170)

fix: narrow the validation of cookies to match RFC6265 (#167 by @bewinsnw)

fix: add main to package.json for rspack (#166 by @proudparrot2)

jshttp/cookie@v0.6.0...v0.7.0

0.6.0

Add partitioned option

0.5.0

Add priority option

Fix expires option to reject invalid dates

pref: improve default decode speed

pref: remove slow string split in parse

Commits

d19eaa1 0.7.2
bc38ffd Fix object assignment of hasOwnProperty (#177)
cf4658f 0.7.1
6a8b8f5 Allow leading dot for domain (#174)
58015c0 Remove more code and perf wins (#172)
ab057d6 0.7.0
5f02ca8 Migrate history to GitHub releases
a5d591c Migrate history to GitHub releases
51968f9 Skip isNaN
9e7ca51 perf(parse): cache length, return early (#144)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by blakeembrey, a new releaser for cookie since your current version.

Updates socket.io from 4.7.5 to 4.8.1

Release notes

Sourced from socket.io's releases.

socket.io@4.8.1

Due to a change in the bundler configuration, the production bundle (socket.io.min.js) did not support sending and receiving binary data in version 4.8.0. This is now fixed.

Dependencies

engine.io@~6.6.0 (no change)

ws@~8.17.1 (no change)

socket.io-client@4.8.1

Bug Fixes

bundle: do not mangle the "_placeholder" attribute (ca9e994)

Dependencies

engine.io-client@~6.6.1 (no change)

ws@~8.17.1 (no change)

socket.io-client@4.8.0

Features

Custom transport implementations

The transports option now accepts an array of transport implementations:
import { io } from "socket.io-client";
import { XHR, WebSocket } from "engine.io-client";
const socket = io({
transports: [XHR, WebSocket]
});
Here is the list of provided implementations:

Transport Description

Fetch HTTP long-polling based on the built-in fetch() method.

NodeXHR HTTP long-polling based on the XMLHttpRequest object provided by the xmlhttprequest-ssl package.

XHR HTTP long-polling based on the built-in XMLHttpRequest object.

NodeWebSocket WebSocket transport based on the WebSocket object provided by the ws package.

WebSocket WebSocket transport based on the built-in WebSocket object.

WebTransport WebTransport transport based on the built-in WebTransport object.

Usage:

Transport browser Node.js Deno Bun

... (truncated)

Commits

91e1c8b chore(release): socket.io@4.8.1
8d5528a chore(release): socket.io-client@4.8.1
71387e5 refactor(sio-client): reexport transports from the engine
aead835 refactor(sio): make Namespace._fns private (#5196)
029e010 chore(release): engine.io-client@6.6.2
4ca6ddb docs(nuxt): update example with latest version
ca9e994 fix(sio-client): do not mangle the "_placeholder" attribute
4865f2e fix(eio-client): prevent infinite loop with Node.js built-in WebSocket
d4b3dde ci: use Node.js 22
3b68658 chore: bump @fails-components/webtransport to version 1.1.4 (dev)
Additional commits viewable in compare view

Updates express from 4.19.2 to 4.21.2

Release notes

Sourced from express's releases.

4.21.2

What's Changed

Add funding field (v4) by @bjohansebas in expressjs/express#6065

deps: path-to-regexp@0.1.11 by @blakeembrey in expressjs/express#5956

deps: bump path-to-regexp@0.1.12 by @jonchurch in expressjs/express#6209

Release: 4.21.2 by @UlisesGascon in expressjs/express#6094

Full Changelog: expressjs/express@4.21.1...4.21.2

4.21.1

What's Changed

Backport a fix for CVE-2024-47764 to the 4.x branch by @joshbuker in expressjs/express#6029

Release: 4.21.1 by @UlisesGascon in expressjs/express#6031

Full Changelog: expressjs/express@4.21.0...4.21.1

4.21.0

What's Changed

Deprecate "back" magic string in redirects by @blakeembrey in expressjs/express#5935

finalhandler@1.3.1 by @wesleytodd in expressjs/express#5954

fix(deps): serve-static@1.16.2 by @wesleytodd in expressjs/express#5951

Upgraded dependency qs to 6.13.0 to match qs in body-parser by @agadzinski93 in expressjs/express#5946

New Contributors

@agadzinski93 made their first contribution in expressjs/express#5946

Full Changelog: expressjs/express@4.20.0...4.21.0

4.20.0

What's Changed

Important

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

Other Changes

4.19.2 Staging by @wesleytodd in expressjs/express#5561

remove duplicate location test for data uri by @wesleytodd in expressjs/express#5562

feat: document beta releases expectations by @marco-ippolito in expressjs/express#5565

Cut down on duplicated CI runs by @jonchurch in expressjs/express#5564

Add a Threat Model by @UlisesGascon in expressjs/express#5526

Assign captain of encodeurl by @blakeembrey in expressjs/express#5579

Nominate jonchurch as repo captain for http-errors, expressjs.com, morgan, cors, body-parser by @jonchurch in expressjs/express#5587

docs: update Security.md by @inigomarquinez in expressjs/express#5590

docs: update triage nomination policy by @UlisesGascon in expressjs/express#5600

Add CodeQL (SAST) by @UlisesGascon in expressjs/express#5433

docs: add UlisesGascon as triage initiative captain by @UlisesGascon in expressjs/express#5605

... (truncated)

Changelog

Sourced from express's changelog.

4.21.2 / 2024-11-06

deps: path-to-regexp@0.1.12

Fix backtracking protection

deps: path-to-regexp@0.1.11

Throws an error on invalid path values

4.21.1 / 2024-10-08

Backported a fix for CVE-2024-47764

4.21.0 / 2024-09-11

Deprecate res.location("back") and res.redirect("back") magic string

deps: serve-static@1.16.2

includes send@0.19.0

deps: finalhandler@1.3.1

deps: qs@6.13.0

4.20.0 / 2024-09-10

deps: serve-static@0.16.0

Remove link renderization in html while redirecting

deps: send@0.19.0

Remove link renderization in html while redirecting

deps: body-parser@0.6.0

add depth option to customize the depth level in the parser

IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

Remove link renderization in html while using res.redirect

deps: path-to-regexp@0.1.10

Adds support for named matching groups in the routes using a regex

Adds backtracking protection to parameters without regexes defined

deps: encodeurl@~2.0.0

Removes encoding of \, |, and ^ to align better with URL spec

Deprecate passing options.maxAge and options.expires to res.clearCookie

Will be ignored in v5, clearCookie will set a cookie with an expires in the past to instruct clients to delete the cookie

Commits

1faf228 4.21.2
2e0fb64 deps: bump path-to-regexp@0.1.12 (#6209)
59fc270 deps: path-to-regexp@0.1.11 (#5956)
51fc39c docs: add funding (#6065)
8e229f9 4.21.1
a024c8a fix(deps): cookie@0.7.1
7e562c6 4.21.0
1bcde96 fix(deps): qs@6.13.0 (#5946)
7d36477 fix(deps): serve-static@1.16.2 (#5951)
40d2d8f fix(deps): finalhandler@1.3.1
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jonchurch, a new releaser for express since your current version.

Updates rollup from 4.13.2 to 4.30.1

Release notes

Sourced from rollup's releases.

v4.30.1

4.30.1

2025-01-07

Bug Fixes

Prevent invalid code when simplifying unary expressions in switch cases (#5786)

Pull Requests

#5786: fix: consider that literals cannot following switch case. (@TrickyPi)

v4.30.0

4.30.0

2025-01-06

Features

Inline values of resolvable unary expressions for improved tree-shaking (#5775)

Pull Requests

#5775: feat: enhance the treehshaking for unary expression (@TrickyPi)

#5783: Improve CI caching for node_modules (@lukastaegert)

v4.29.2

4.29.2

2025-01-05

Bug Fixes

Keep import attributes when using dynamic ESM import() expressions from CommonJS (#5781)

Pull Requests

#5772: Improve caching on CI (@lukastaegert)

#5773: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#5780: feat: use picocolors instead of colorette (@re-taro)

#5781: fix: keep import attributes for cjs format (@TrickyPi)

v4.29.1

4.29.1

2024-12-21

Bug Fixes

... (truncated)

Changelog

Sourced from rollup's changelog.

4.30.1

2025-01-07

Bug Fixes

Prevent invalid code when simplifying unary expressions in switch cases (#5786)

Pull Requests

#5786: fix: consider that literals cannot following switch case. (@TrickyPi)

4.30.0

2025-01-06

Features

Inline values of resolvable unary expressions for improved tree-shaking (#5775)

Pull Requests

#5775: feat: enhance the treehshaking for unary expression (@TrickyPi)

#5783: Improve CI caching for node_modules (@lukastaegert)

4.29.2

2025-01-05

Bug Fixes

Keep import attributes when using dynamic ESM import() expressions from CommonJS (#5781)

Pull Requests

#5772: Improve caching on CI (@lukastaegert)

#5773: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#5780: feat: use picocolors instead of colorette (@re-taro)

#5781: fix: keep import attributes for cjs format (@TrickyPi)

4.29.1

2024-12-21

Bug Fixes

Fix crash from deoptimized logical expressions (#5771)

Pull Requests

... (truncated)

Commits

9491708 4.30.1
39b6a17 fix: consider that literals cannot following switch case. (#5786)
958d5eb 4.30.0
d3e2bf7 feat: enhance the treehshaking for unary expression (#5775)
27216d8 Improve CI caching for node_modules (#5783)
f5c349e 4.29.2
37c5166 feat: use picocolors instead of colorette (#5780)
0c70b6b fix: keep import attributes for cjs format (#5781)
15f72a8 Align CI Node versions
6b2c841 fix(deps): lock file maintenance minor/patch updates (#5773)
Additional commits viewable in compare view

Updates send from 0.18.0 to 0.19.0

Release notes

Sourced from send's releases.

0.19.0

What's Changed

Remove link renderization in html while redirecting (pillarjs/send#235)

New Contributors

@UlisesGascon made their first contribution in pillarjs/send#235

Full Changelog: pillarjs/send@0.18.0...0.19.0

Changelog

Sourced from send's changelog.

0.19.0 / 2024-09-10

Remove link renderization in html while redirecting

Commits

9d2db99 0.19.0
ae4f298 Merge commit from fork
See full diff in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for send since your current version.

Updates serve-static from 1.15.0 to 1.16.2

Release notes

Sourced from serve-static's releases.

v1.16.2

What's Changed

encodeurl@~2.0.0 by @wesleytodd in expressjs/serve-static#180

Full Changelog: expressjs/serve-static@v1.16.1...v1.16.2

v1.16.1

What's Changed

bump send to 0.19 by @tommasini in expressjs/serve-static#176

New Contributors

@tommasini made their first contribution in expressjs/serve-static#176

Full Changelog: expressjs/serve-static@1.16.0...v1.16.1

1.16.0

What's Changed

Remove link renderization in html while redirecting (expressjs/serve-static#173)

New Contributors

@UlisesGascon made their first contribution in expressjs/serve-static#173

Full Changelog: expressjs/serve-static@v1.15.0...1.16.0

Changelog

Sourced from serve-static's changelog.

1.16.2 / 2024-09-11

deps: encodeurl@~2.0.0

1.16.1 / 2024-09-11

deps: send@0.19.0

1.16.0 / 2024-09-10

Remove link renderization in html while redirecting

Commits

ec9c5ec 1.16.2
f454d37 fix(deps): encodeurl@~2.0.0
77a8255 1.16.1
4263f49 fix(deps): send@0.19.0
48c7397 1.16.0
0c11fad Merge commit from fork
See full diff in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for serve-static since your current version.

Updates webpack from 5.90.3 to 5.97.1

Release notes

Sourced from webpack's releases.

v5.97.1

Bug Fixes

Performance regression

Sub define key should't be renamed when it's a defined variable

v5.97.0

Bug Fixes

Don't crash with filesystem cache and unknown scheme

Generate a valid code when output.iife is true and output.library.type is umd

Fixed conflict variable name with concatenate modules and runtime code

Merge duplicate chunks before

Collisions in ESM library

Use recursive search for versions of shared dependencies

[WASM] Don't crash WebAssembly with Reference Types (sync and async)

[WASM] Fixed wasm loading for sync and async webassembly

[CSS] Don't add [uniqueName] to localIdentName when it is empty

[CSS] Parsing strings on Windows

[CSS] Fixed CSS local escaping

New Features

Added support for injecting debug IDs

Export the MergeDuplicateChunks plugin

Added universal loading for JS chunks and JS worker chunks (only ES modules)

[WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)

[CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted

[CSS] Added universal loading for CSS chunks

[CSS] Parse ICSS @value at-rules in CSS modules

[CSS] Parse ICSS :import rules in CSS modules

[CSS] Added the url and import options for CSS

[CSS] Allow to import custom properties in CSS modules

Performance

Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal

v5.96.1

Bug Fixes

[Types] Add @types/eslint-scope to dependencieS

[Types] Fixed regression in validate

v5.96.0

Bug Fixes

Fixed Module Federation should track all referenced chunks

Handle Data URI without base64 word

HotUpdateChunk have correct runtime when modified with new runtime

... (truncated)

Commits

3612d36 chore(release): 5.97.1
eb7ac6f fix: perf regression
554be24 fix: sub define key should't be renamed when it's a defined variable
5e0e780 refactor: issue #19030
58fb035 fix: sub define key should't be renamed when it's a defined variable
af1fd12 perf: regression
34f19cb fix: package.json
0ec7f5d refactor: issue #19030
5e7b8a2 fix: package.json
644f1d1 refactor: no extra work for CSS unescaping
Additional commits viewable in compare view

Updates ws from 8.11.0 to 8.17.1

Release notes

Sourced from ws's releases.

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.
const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});
The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

Reduce the maximum allowed length of the request headers using the [--max-http-header-size=size][] and/or the [maxHeaderSize][] options so that no more headers than the server.maxHeadersCount limit can be sent.

... (truncated)

Commits

3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
934c9d6 [ci] Test on node 22
1817bac [ci] Do not test on node 21
96c9b3d [major] Flip the default value of allowSynchronousEvents (#2221)
e5f32c7 [fix] Emit at most one event per event loop iteration (#2218)
Additional commits viewable in compare view

Updates socket.io-adapter from 2.5.4 to 2.5.5

Changelog

Sourced from socket.io-adapter's changelog.

2.5.5 (2024-06-18)

This release contains a bump of the ws dependency, which includes an important security fix.

Advisory: GHSA-3h5v-q93c-6h6q

Commits

05a190a chore(release): 6.5.5
93fe190 chore(deps): bump ws from 8.11.0 to 8.17.1 (#93)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.1.5` | `removed` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `17.3.2` | `19.1.3` | | [cookie](https://github.com/jshttp/cookie) | `0.4.2` | `0.7.2` | | [socket.io](https://github.com/socketio/socket.io) | `4.7.5` | `4.8.1` | | [ws](https://github.com/websockets/ws) | `8.11.0` | `8.17.1` | | [socket.io-adapter](https://github.com/socketio/socket.io-adapter) | `2.5.4` | `2.5.5` | Removes `vite` Updates `@angular-devkit/build-angular` from 17.3.2 to 19.1.3 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@17.3.2...19.1.3) Updates `body-parser` from 1.20.2 to 1.20.3 - [Release notes](https://github.com/expressjs/body-parser/releases) - [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md) - [Commits](expressjs/body-parser@1.20.2...1.20.3) Updates `cookie` from 0.4.2 to 0.7.2 - [Release notes](https://github.com/jshttp/cookie/releases) - [Commits](jshttp/cookie@v0.4.2...v0.7.2) Updates `socket.io` from 4.7.5 to 4.8.1 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](https://github.com/socketio/socket.io/compare/socket.io@4.7.5...socket.io@4.8.1) Updates `express` from 4.19.2 to 4.21.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/4.21.2/History.md) - [Commits](expressjs/express@4.19.2...4.21.2) Updates `rollup` from 4.13.2 to 4.30.1 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.13.2...v4.30.1) Updates `send` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/pillarjs/send/releases) - [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md) - [Commits](pillarjs/send@0.18.0...0.19.0) Updates `serve-static` from 1.15.0 to 1.16.2 - [Release notes](https://github.com/expressjs/serve-static/releases) - [Changelog](https://github.com/expressjs/serve-static/blob/v1.16.2/HISTORY.md) - [Commits](expressjs/serve-static@v1.15.0...v1.16.2) Updates `webpack` from 5.90.3 to 5.97.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.90.3...v5.97.1) Updates `ws` from 8.11.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.11.0...8.17.1) Updates `socket.io-adapter` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/socketio/socket.io-adapter/releases) - [Changelog](https://github.com/socketio/socket.io-adapter/blob/2.5.5/CHANGELOG.md) - [Commits](socketio/socket.io-adapter@2.5.4...2.5.5) --- updated-dependencies: - dependency-name: vite dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: body-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cookie dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: rollup dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: send dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: serve-static dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-adapter dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2025-01-21T22:51:32Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
devmappouras	❌ Failed (Inspect)			Jan 21, 2025 10:52pm

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 21, 2025

vercel bot had a problem deploying to Preview January 21, 2025 22:52 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 12 updates #2

Bump the npm_and_yarn group across 1 directory with 12 updates #2

Uh oh!

dependabot bot commented on behalf of github Jan 21, 2025

Uh oh!

vercel bot commented Jan 21, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	allow asset changes to reload page on incremental updates
	handle relative `@ng/components`
	perform full reload for templates with `$localize` usage

Commit	Description
	perform incremental background file updates with component updates
	prevent full page reload on HMR updates with SSR enabled
	reset component updates on dev-server index request

Commit	Description
	use `@angular/build` package in library generation schematic
	application migration should migrate ng-packagr builder package

Commit	Description
	require build schemas from modules
	avoid Node.js resolution for relative builder schema

Commit	Type	Description
7d8c34172	fix	allow asset changes to reload page on incremental updates
9fa29af37	fix	handle relative `@ng/components`
c4de34703	fix	perform full reload for templates with `$localize` usage

Commit	Type	Description
939d1612a	fix	perform incremental background file updates with component updates
304027207	fix	prevent full page reload on HMR updates with SSR enabled
148acbd58	fix	reset component updates on dev-server index request

Transport	Description
`Fetch`	HTTP long-polling based on the built-in `fetch()` method.
`NodeXHR`	HTTP long-polling based on the `XMLHttpRequest` object provided by the `xmlhttprequest-ssl` package.
`XHR`	HTTP long-polling based on the built-in `XMLHttpRequest` object.
`NodeWebSocket`	WebSocket transport based on the `WebSocket` object provided by the `ws` package.
`WebSocket`	WebSocket transport based on the built-in `WebSocket` object.
`WebTransport`	WebTransport transport based on the built-in `WebTransport` object.

Bump the npm_and_yarn group across 1 directory with 12 updates #2

Are you sure you want to change the base?

Bump the npm_and_yarn group across 1 directory with 12 updates #2

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 21, 2025

v19.1.3

19.1.3 (2025-01-20)

@​angular/build

v19.1.2

19.1.2 (2025-01-17)

@​angular/build

v19.1.1

19.1.1 (2025-01-16)

@​angular/build

v19.1.0

19.1.0 (2025-01-15)

@​schematics/angular

@​angular-devkit/architect

@​angular-devkit/core

@​angular-devkit/schematics

@​angular/build

19.1.3 (2025-01-20)

@​angular/build

19.1.2 (2025-01-17)

@​angular/build

19.1.1 (2025-01-16)

@​angular/build

19.1.0 (2025-01-15)

Deprecations

@​angular/build

1.20.3

What's Changed

Important

Other changes

New Contributors

1.20.3 / 2024-09-10

v0.7.2

0.7.1

0.7.0

0.6.0

0.5.0

socket.io@4.8.1

Dependencies

socket.io-client@4.8.1

Bug Fixes

Dependencies

socket.io-client@4.8.0

Features

Custom transport implementations

4.21.2

What's Changed

4.21.1

What's Changed

4.21.0

What's Changed

New Contributors

4.20.0

What's Changed

Important

Other Changes

4.21.2 / 2024-11-06

4.21.1 / 2024-10-08

4.21.0 / 2024-09-11

4.20.0 / 2024-09-10

v4.30.1

4.30.1

Bug Fixes

Pull Requests

v4.30.0

4.30.0

Features

Pull Requests

v4.29.2

4.29.2

Bug Fixes

Pull Requests

v4.29.1

4.29.1

Bug Fixes

`@angular/build`

`@angular/build`

`@angular/build`

`@schematics/angular`

`@angular-devkit/architect`

`@angular-devkit/core`

`@angular-devkit/schematics`

`@angular/build`

`@angular/build`

`@angular/build`

`@angular/build`

`@angular/build`

vercel bot commented Jan 21, 2025 •

edited

Loading