chore(deps-dev): bump the development-minor-patch group across 1 directory with 27 updates by dependabot[bot] · Pull Request #534 · dutchhackers/codeheroes

dependabot · 2026-05-29T05:27:54Z

Bumps the development-minor-patch group with 27 updates in the / directory:

Package	From	To
@angular-devkit/build-angular	`21.2.11`	`21.2.13`
@angular-devkit/core	`21.2.11`	`21.2.13`
@angular-devkit/schematics	`21.2.11`	`21.2.13`
@angular/cli	`21.2.11`	`21.2.13`
@angular/compiler-cli	`21.2.13`	`21.2.15`
@angular/language-service	`21.2.13`	`21.2.15`
@nx/angular	`22.7.2`	`22.7.5`
@nx/devkit	`22.7.2`	`22.7.5`
@nx/esbuild	`22.7.2`	`22.7.5`
@nx/eslint	`22.7.2`	`22.7.5`
@nx/eslint-plugin	`22.7.2`	`22.7.5`
@nx/jest	`22.7.2`	`22.7.5`
@nx/js	`22.7.2`	`22.7.5`
@nx/node	`22.7.2`	`22.7.5`
@nx/web	`22.7.2`	`22.7.5`
@nx/workspace	`22.7.2`	`22.7.5`
@schematics/angular	`21.2.11`	`21.2.13`
@swc/core	`1.15.33`	`1.15.40`
@swc/helpers	`0.5.21`	`0.5.23`
@types/node	`25.8.0`	`25.9.1`
@typescript-eslint/utils	`8.59.3`	`8.60.0`
eslint-plugin-prettier	`5.5.5`	`5.5.6`
firebase-tools	`15.18.0`	`15.19.0`
nx	`22.7.2`	`22.7.5`
ts-jest	`29.4.9`	`29.4.11`
typescript-eslint	`8.59.3`	`8.60.0`
verdaccio	`6.7.1`	`6.7.2`

Updates @angular-devkit/build-angular from 21.2.11 to 21.2.13

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.13

@angular-devkit/build-angular

Commit Description

remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Description

assert that asset input paths are within workspace root

21.2.12

@angular/build

Commit Description

ignore virtual esbuild paths with (disabled):

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.13 (2026-05-27)

@angular-devkit/build-angular

Commit Type Description

3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Type Description

2b3e95517 fix assert that asset input paths are within workspace root

22.0.0-rc.1 (2026-05-21)

@schematics/angular

Commit Type Description

a7ac8e5f0 fix support spy call arguments migration in refactor-jasmine-vitest

@angular/build

Commit Type Description

327cc2414 fix assert that asset input paths are within workspace root

93d352798 fix ignore virtual esbuild paths with (disabled):

21.2.12 (2026-05-20)

@angular/build

Commit Type Description

cbad57579 fix ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

... (truncated)

Commits

287e4e8 release: cut the v21.2.13 release
3c6d26a fix(@angular-devkit/build-angular): remove unconditional CORS wildcard from w...
2b3e955 fix(@angular/build): assert that asset input paths are within workspace root
9dcef4d release: cut the v21.2.12 release
feec5bf refactor(@angular/build): add missing OutputFile import
48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
cbad575 fix(@angular/build): ignore virtual esbuild paths with (disabled):
6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
See full diff in compare view

Updates @angular-devkit/core from 21.2.11 to 21.2.13

Release notes

Sourced from @angular-devkit/core's releases.

21.2.13

@angular-devkit/build-angular

Commit Description

remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Description

assert that asset input paths are within workspace root

21.2.12

@angular/build

Commit Description

ignore virtual esbuild paths with (disabled):

Changelog

Sourced from @angular-devkit/core's changelog.

21.2.13 (2026-05-27)

@angular-devkit/build-angular

Commit Type Description

3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Type Description

2b3e95517 fix assert that asset input paths are within workspace root

22.0.0-rc.1 (2026-05-21)

@schematics/angular

Commit Type Description

a7ac8e5f0 fix support spy call arguments migration in refactor-jasmine-vitest

@angular/build

Commit Type Description

327cc2414 fix assert that asset input paths are within workspace root

93d352798 fix ignore virtual esbuild paths with (disabled):

21.2.12 (2026-05-20)

@angular/build

Commit Type Description

cbad57579 fix ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

... (truncated)

Commits

287e4e8 release: cut the v21.2.13 release
3c6d26a fix(@angular-devkit/build-angular): remove unconditional CORS wildcard from w...
2b3e955 fix(@angular/build): assert that asset input paths are within workspace root
9dcef4d release: cut the v21.2.12 release
feec5bf refactor(@angular/build): add missing OutputFile import
48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
cbad575 fix(@angular/build): ignore virtual esbuild paths with (disabled):
6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
See full diff in compare view

Updates @angular-devkit/schematics from 21.2.11 to 21.2.13

Release notes

Sourced from @angular-devkit/schematics's releases.

21.2.13

@angular-devkit/build-angular

Commit Description

remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Description

assert that asset input paths are within workspace root

21.2.12

@angular/build

Commit Description

ignore virtual esbuild paths with (disabled):

Changelog

Sourced from @angular-devkit/schematics's changelog.

21.2.13 (2026-05-27)

@angular-devkit/build-angular

Commit Type Description

3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Type Description

2b3e95517 fix assert that asset input paths are within workspace root

22.0.0-rc.1 (2026-05-21)

@schematics/angular

Commit Type Description

a7ac8e5f0 fix support spy call arguments migration in refactor-jasmine-vitest

@angular/build

Commit Type Description

327cc2414 fix assert that asset input paths are within workspace root

93d352798 fix ignore virtual esbuild paths with (disabled):

21.2.12 (2026-05-20)

@angular/build

Commit Type Description

cbad57579 fix ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

... (truncated)

Commits

287e4e8 release: cut the v21.2.13 release
3c6d26a fix(@angular-devkit/build-angular): remove unconditional CORS wildcard from w...
2b3e955 fix(@angular/build): assert that asset input paths are within workspace root
9dcef4d release: cut the v21.2.12 release
feec5bf refactor(@angular/build): add missing OutputFile import
48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
cbad575 fix(@angular/build): ignore virtual esbuild paths with (disabled):
6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
See full diff in compare view

Updates @angular/cli from 21.2.11 to 21.2.13

Release notes

Sourced from @angular/cli's releases.

21.2.13

@angular-devkit/build-angular

Commit Description

remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Description

assert that asset input paths are within workspace root

21.2.12

@angular/build

Commit Description

ignore virtual esbuild paths with (disabled):

Changelog

Sourced from @angular/cli's changelog.

21.2.13 (2026-05-27)

@angular-devkit/build-angular

Commit Type Description

3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server

@angular/build

Commit Type Description

2b3e95517 fix assert that asset input paths are within workspace root

22.0.0-rc.1 (2026-05-21)

@schematics/angular

Commit Type Description

a7ac8e5f0 fix support spy call arguments migration in refactor-jasmine-vitest

@angular/build

Commit Type Description

327cc2414 fix assert that asset input paths are within workspace root

93d352798 fix ignore virtual esbuild paths with (disabled):

21.2.12 (2026-05-20)

@angular/build

Commit Type Description

cbad57579 fix ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

... (truncated)

Commits

287e4e8 release: cut the v21.2.13 release
3c6d26a fix(@angular-devkit/build-angular): remove unconditional CORS wildcard from w...
2b3e955 fix(@angular/build): assert that asset input paths are within workspace root
9dcef4d release: cut the v21.2.12 release
feec5bf refactor(@angular/build): add missing OutputFile import
48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
cbad575 fix(@angular/build): ignore virtual esbuild paths with (disabled):
6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
See full diff in compare view

Updates @angular/compiler-cli from 21.2.13 to 21.2.15

Release notes

Sourced from @angular/compiler-cli's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

21.2.14

compiler

Commit Description

strip namespaced SVG script elements during template compilation

core

Commit Description

do not insert todo when migrating void @Output

makes resource URL sanitizer lookup case-insensitive

reject script element as a dynamic component host

visit ICU expressions in signal migration schematics

router

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/compiler-cli's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

29ceeff docs: fix typos in source code comments
68282df fix(compiler): strip namespaced SVG script elements during template compilation
d1736ef docs(docs-infra): Show function args
fc434c1 refactor(compiler-cli): Remove unused properties of IndexedComponent interface
See full diff in compare view

Updates @angular/language-service from 21.2.13 to 21.2.15

Release notes

Sourced from @angular/language-service's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

21.2.14

compiler

Commit Description

strip namespaced SVG script elements during template compilation

core

Commit Description

do not insert todo when migrating void @Output

makes resource URL sanitizer lookup case-insensitive

reject script element as a dynamic component host

visit ICU expressions in signal migration schematics

router

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/language-service's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

See full diff in compare view

Updates @nx/angular from 22.7.2 to 22.7.5

Release notes

Sourced from @nx/angular's releases.

22.7.5 (2026-05-27)

🩹 Fixes

core: update tmp to 0.2.6 due to CVE-2026-44705 (#35813)

❤️ Thank You

Jack Hsu @jaysoo

22.7.4 (2026-05-25)

🩹 Fixes

core: update brace-expansion and yaml (#35790)

❤️ Thank You

Jack Hsu @jaysoo

22.7.3 (2026-05-22)

🚀 Features

js: support pnpm 11.2.2 (#35772)

🩹 Fixes

angular: only add @oxc-project/runtime on the vitest-analog path (#35734)

angular-rspack: exclude eslint config from tailwind v4 source scan (#35663)

core: warn before installing unknown npm packages as preset (#35644)

core: preserve input order in createNodes plugin results (#35595)

core: resolve local plugin subpath imports from source (#35631)

core: treat undefined task parallelism as parallel when scheduling (#35736)

core: handle object form of bin field in getPrettierPath (#35680)

core: detect vscode copilot ai agent (#35757)

core: allow local plugin subpath imports without custom conditions (#35751, #35631)

dotnet: include Directory.. files in inputs (#35738)

gradle: add transitive:true to all tasks (#35677)

gradle: pin generated e2e project toolchain to installed JDK (#35703)

js: fall back to npm publish when bun publish fails with auth error (#35756)

linter: improve convert-to-flat-config output fidelity (#35330)

linter: only rewrite workspace-package peer deps to workspace:* (#35423, #35318, #33417)

misc: stop inferring projects: 'self' in dependsOn entries (#35686)

misc: skip $ escaping in file paths on windows (#35692)

repo: run dotnet restore before publish (#35771)

repo: run dotnet restore before macos e2e job (#35774)

rsbuild: infer build outputs from distPath.root directly (#35707)

rsbuild: lazy-require @rsbuild/core in plugin so spec mocks work after jest.resetModules (#35707)

testing: correct yargs-parser import in getJestProjectsAsync (#35672, #35654)

... (truncated)

Commits

19dbbb0 fix(angular): only add @oxc-project/runtime on the vitest-analog path (#35734)
See full diff in compare view

Updates @nx/devkit from 22.7.2 to 22.7.5

Release notes

Sourced from @nx/devkit's releases.

22.7.5 (2026-05-27)

🩹 Fixes

core: update tmp to 0.2.6 due to CVE-2026-44705 (#35813)

❤️ Thank You

Jack Hsu @jaysoo

22.7.4 (2026-05-25)

🩹 Fixes

core: update brace-expansion and yaml (#35790)

❤️ Thank You

Jack Hsu @jaysoo

22.7.3 (2026-05-22)

🚀 Features

js: support pnpm 11.2.2 (#35772)

🩹 Fixes

angular: only add @oxc-project/runtime on the vitest-analog path (#35734)

angular-rspack: exclude eslint config from tailwind v4 source scan (#35663)

core: warn before installing unknown npm packages as preset (#35644)

core: preserve input order in createNodes plugin results (#35595)

core: resolve local plugin subpath imports from source (#35631)

core: treat undefined task parallelism as parallel when scheduling (#35736)

core: handle object form of bin field in getPrettierPath (#35680)

core: detect vscode copilot ai agent (#35757)

core: allow local plugin subpath imports without custom conditions (#35751, #35631)

dotnet: include Directory.. files in inputs (#35738)

gradle: add transitive:true to all tasks (#35677)

gradle: pin generated e2e project toolchain to installed JDK (#35703)

js: fall back to npm publish when bun publish fails with auth error (#35756)

linter: improve convert-to-flat-config output fidelity (#35330)

linter: only rewrite workspace-package peer deps to workspace:* (#35423, #35318, #33417)

misc: stop inferring projects: 'self' in dependsOn entries (#35686)

misc: skip $ escaping in file paths on windows (#35692)

repo: run dotnet restore before publish (#35771)

repo: run dotnet restore before macos e2e job (#35774)

rsbuild: infer build outputs from distPath.root directly (#35707)

rsbuild: lazy-require @rsbuild/core in plugin so spec mocks work after jest.resetModules (#35707)

testing: correct yargs-parser import in getJestProjectsAsync (#35672, #35654)

... (truncated)

Commits

e9e447b chore(core): remove unused replaceNrwlPackageWithNxPackage devkit utility (#3...
See full diff in compare view

Updates @nx/esbuild from 22.7.2 to 22.7.5

Release notes

Sourced from @nx/esbuild's releases.

22.7.5 (2026-05-27)

🩹 Fixes

core: update tmp to 0.2.6 due to CVE-2026-44705 (#35813)

❤️ Thank You

Jack Hsu @jaysoo

22.7.4 (2026-05-25)

🩹 Fixes

core: update brace-expansion and yam...
Description has been truncated

…ctory with 27 updates Bumps the development-minor-patch group with 27 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.11` | `21.2.13` | | [@angular-devkit/core](https://github.com/angular/angular-cli) | `21.2.11` | `21.2.13` | | [@angular-devkit/schematics](https://github.com/angular/angular-cli) | `21.2.11` | `21.2.13` | | [@angular/cli](https://github.com/angular/angular-cli) | `21.2.11` | `21.2.13` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.13` | `21.2.15` | | [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) | `21.2.13` | `21.2.15` | | [@nx/angular](https://github.com/nrwl/nx/tree/HEAD/packages/angular) | `22.7.2` | `22.7.5` | | [@nx/devkit](https://github.com/nrwl/nx/tree/HEAD/packages/devkit) | `22.7.2` | `22.7.5` | | [@nx/esbuild](https://github.com/nrwl/nx/tree/HEAD/packages/esbuild) | `22.7.2` | `22.7.5` | | [@nx/eslint](https://github.com/nrwl/nx/tree/HEAD/packages/eslint) | `22.7.2` | `22.7.5` | | [@nx/eslint-plugin](https://github.com/nrwl/nx/tree/HEAD/packages/eslint-plugin) | `22.7.2` | `22.7.5` | | [@nx/jest](https://github.com/nrwl/nx/tree/HEAD/packages/jest) | `22.7.2` | `22.7.5` | | [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js) | `22.7.2` | `22.7.5` | | [@nx/node](https://github.com/nrwl/nx/tree/HEAD/packages/node) | `22.7.2` | `22.7.5` | | [@nx/web](https://github.com/nrwl/nx/tree/HEAD/packages/web) | `22.7.2` | `22.7.5` | | [@nx/workspace](https://github.com/nrwl/nx/tree/HEAD/packages/workspace) | `22.7.2` | `22.7.5` | | [@schematics/angular](https://github.com/angular/angular-cli) | `21.2.11` | `21.2.13` | | [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.15.33` | `1.15.40` | | [@swc/helpers](https://github.com/swc-project/swc/tree/HEAD/packages/helpers) | `0.5.21` | `0.5.23` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.8.0` | `25.9.1` | | [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.59.3` | `8.60.0` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.5` | `5.5.6` | | [firebase-tools](https://github.com/firebase/firebase-tools) | `15.18.0` | `15.19.0` | | [nx](https://github.com/nrwl/nx/tree/HEAD/packages/nx) | `22.7.2` | `22.7.5` | | [ts-jest](https://github.com/kulshekhar/ts-jest) | `29.4.9` | `29.4.11` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.3` | `8.60.0` | | [verdaccio](https://github.com/verdaccio/verdaccio) | `6.7.1` | `6.7.2` | Updates `@angular-devkit/build-angular` from 21.2.11 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.11...v21.2.13) Updates `@angular-devkit/core` from 21.2.11 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.11...v21.2.13) Updates `@angular-devkit/schematics` from 21.2.11 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.11...v21.2.13) Updates `@angular/cli` from 21.2.11 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.11...v21.2.13) Updates `@angular/compiler-cli` from 21.2.13 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/compiler-cli) Updates `@angular/language-service` from 21.2.13 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/language-service) Updates `@nx/angular` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/angular) Updates `@nx/devkit` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/devkit) Updates `@nx/esbuild` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/esbuild) Updates `@nx/eslint` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/eslint) Updates `@nx/eslint-plugin` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/eslint-plugin) Updates `@nx/jest` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/jest) Updates `@nx/js` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/js) Updates `@nx/node` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/node) Updates `@nx/web` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/web) Updates `@nx/workspace` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/workspace) Updates `@schematics/angular` from 21.2.11 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.11...v21.2.13) Updates `@swc/core` from 1.15.33 to 1.15.40 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits/v1.15.40/packages/core) Updates `@swc/helpers` from 0.5.21 to 0.5.23 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG-CORE.md) - [Commits](https://github.com/swc-project/swc/commits/HEAD/packages/helpers) Updates `@types/node` from 25.8.0 to 25.9.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript-eslint/utils` from 8.59.3 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/utils/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/utils) Updates `eslint-plugin-prettier` from 5.5.5 to 5.5.6 - [Release notes](https://github.com/prettier/eslint-plugin-prettier/releases) - [Changelog](https://github.com/prettier/eslint-plugin-prettier/blob/main/CHANGELOG.md) - [Commits](prettier/eslint-plugin-prettier@v5.5.5...v5.5.6) Updates `firebase-tools` from 15.18.0 to 15.19.0 - [Release notes](https://github.com/firebase/firebase-tools/releases) - [Commits](firebase/firebase-tools@v15.18.0...v15.19.0) Updates `nx` from 22.7.2 to 22.7.5 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/22.7.5/packages/nx) Updates `ts-jest` from 29.4.9 to 29.4.11 - [Release notes](https://github.com/kulshekhar/ts-jest/releases) - [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md) - [Commits](kulshekhar/ts-jest@v29.4.9...v29.4.11) Updates `typescript-eslint` from 8.59.3 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/typescript-eslint) Updates `verdaccio` from 6.7.1 to 6.7.2 - [Release notes](https://github.com/verdaccio/verdaccio/releases) - [Changelog](https://github.com/verdaccio/verdaccio/blob/v6.7.2/CHANGELOG.md) - [Commits](verdaccio/verdaccio@v6.7.1...v6.7.2) --- updated-dependencies: - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@angular-devkit/core" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@angular-devkit/schematics" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@angular/cli" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@angular/compiler-cli" dependency-version: 21.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@angular/language-service" dependency-version: 21.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/angular" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/devkit" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/esbuild" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/eslint" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/eslint-plugin" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/jest" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/js" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/node" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/web" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@nx/workspace" dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@schematics/angular" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@swc/core" dependency-version: 1.15.40 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@swc/helpers" dependency-version: 0.5.23 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@types/node" dependency-version: 25.9.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: "@typescript-eslint/utils" dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: eslint-plugin-prettier dependency-version: 5.5.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: firebase-tools dependency-version: 15.19.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: nx dependency-version: 22.7.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: ts-jest dependency-version: 29.4.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: typescript-eslint dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: verdaccio dependency-version: 6.7.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

mschilling · 2026-05-29T13:32:24Z

@dependabot rebase

dependabot · 2026-05-29T13:42:04Z

Oh no! Something went wrong on our end. Please try again later.

If the problem persists, please contact GitHub support for assistance 🙇

dependabot Bot added the dependencies Pull requests that update a dependency file label May 29, 2026

mschilling merged commit 78c4324 into main May 29, 2026
1 check passed

mschilling deleted the dependabot/npm_and_yarn/development-minor-patch-28a1f6987f branch May 29, 2026 13:37

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the development-minor-patch group across 1 directory with 27 updates#534

chore(deps-dev): bump the development-minor-patch group across 1 directory with 27 updates#534
mschilling merged 1 commit into
mainfrom
dependabot/npm_and_yarn/development-minor-patch-28a1f6987f

dependabot Bot commented on behalf of github May 29, 2026 •

edited

Loading

Uh oh!

mschilling commented May 29, 2026

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github May 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Type	Description
327cc2414	fix	assert that asset input paths are within workspace root
93d352798	fix	ignore virtual esbuild paths with (disabled):

Commit	Description
	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)
	prevent namespaced SVG elements from being stripped
	sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)
	strip namespaced SVG script elements during template compilation (#68925)

Commit	Description
	normalize tag names in runtime i18n attribute security context lookup (#68925)
	sanitize meta selectors
	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)
	synchronize core sanitization schema with compiler (#68925)

Commit	Description
	exclude withCredentials requests from transfer cache
	skip TransferCache for cookie-bearing requests by default

Commit	Description
	prevent SSRF bypasses via backslash URLs in HttpClient
	secure location and document initialization against SSRF and path hijack

Commit	Description
	Preserves explicit 'credentials: omit' in asset requests
	Preserves HTTP cache mode in asset group requests

Commit	Description
	do not insert todo when migrating void `@Output`
	makes resource URL sanitizer lookup case-insensitive
	reject script element as a dynamic component host
	visit ICU expressions in signal migration schematics

Commit	Type	Description
7f4ac78994	fix	add upper bounds for digitsInfo
300f61feb3	fix	sanitize placeholder

Commit	Type	Description
0b07f47bd6	fix	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)
eb1cbbf2eb	fix	prevent namespaced SVG elements from being stripped
cc1378d54b	fix	sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)
782e01594e	fix	strip namespaced SVG script elements during template compilation (#68925)

Commit	Type	Description
ff12fe55ac	fix	normalize tag names in runtime i18n attribute security context lookup (#68925)
e6fe77cc97	fix	sanitize meta selectors
daaf32937f	fix	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)
dada86e43d	fix	synchronize core sanitization schema with compiler (#68925)

Commit	Type	Description
582a417bd2	fix	exclude withCredentials requests from transfer cache
5c6d6df34b	fix	skip TransferCache for cookie-bearing requests by default

Commit	Type	Description
37e8aadf87	fix	prevent SSRF bypasses via backslash URLs in HttpClient
72696e244e	fix	secure location and document initialization against SSRF and path hijack

Commit	Type	Description
b8bd49341d	fix	Preserves explicit 'credentials: omit' in asset requests
ca32fc1000	fix	Preserves HTTP cache mode in asset group requests

Conversation

dependabot Bot commented on behalf of github May 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

21.2.13

@​angular-devkit/build-angular

@​angular/build

21.2.12

@​angular/build

21.2.13 (2026-05-27)

@​angular-devkit/build-angular

@​angular/build

22.0.0-rc.1 (2026-05-21)

@​schematics/angular

@​angular/build

21.2.12 (2026-05-20)

@​angular/build

22.0.0-rc.0 (2026-05-13)

21.2.13

@​angular-devkit/build-angular

@​angular/build

21.2.12

@​angular/build

21.2.13 (2026-05-27)

@​angular-devkit/build-angular

@​angular/build

22.0.0-rc.1 (2026-05-21)

@​schematics/angular

@​angular/build

21.2.12 (2026-05-20)

@​angular/build

22.0.0-rc.0 (2026-05-13)

21.2.13

@​angular-devkit/build-angular

@​angular/build

21.2.12

@​angular/build

21.2.13 (2026-05-27)

@​angular-devkit/build-angular

@​angular/build

22.0.0-rc.1 (2026-05-21)

@​schematics/angular

@​angular/build

21.2.12 (2026-05-20)

@​angular/build

22.0.0-rc.0 (2026-05-13)

21.2.13

@​angular-devkit/build-angular

@​angular/build

21.2.12

@​angular/build

21.2.13 (2026-05-27)

@​angular-devkit/build-angular

@​angular/build

22.0.0-rc.1 (2026-05-21)

@​schematics/angular

@​angular/build

21.2.12 (2026-05-20)

@​angular/build

22.0.0-rc.0 (2026-05-13)

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.14

compiler

core

router

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

dependabot Bot commented on behalf of github May 29, 2026 •

edited

Loading

`@angular-devkit/build-angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@schematics/angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@schematics/angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@schematics/angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@schematics/angular`

`@angular/build`

`@angular/build`