Skip to content

Bump the others group across 2 directories with 7 updates#950

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ngx-fudis/others-66541e0334
Open

Bump the others group across 2 directories with 7 updates#950
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/ngx-fudis/others-66541e0334

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the others group with 6 updates in the /ngx-fudis directory:

Package From To
zone.js 0.15.1 0.16.2
@types/node 25.9.1 25.9.3
esbuild 0.27.7 0.28.1
ng-packagr 21.2.3 21.2.5
semver-parser 4.2.0 4.2.1
storybook 10.4.0 10.4.6

Bumps the others group with 2 updates in the /test directory: @types/node and @playwright/test.

Updates zone.js from 0.15.1 to 0.16.2

Changelog

Sourced from zone.js's changelog.

0.16.2 (2026-05-06)

0.16.1 (2026-02-18)

  • fix(zone.js): support passthrough of Promise.try API (fc557f0), closes #67057

0.16.0 (2025-11-19)

BREAKING CHANGE

  • IE/Non-Chromium Edge are not supported anymore.
Commits
  • e3dc87c release: cut the zone.js-0.16.2 release
  • 4f048e7 build: update dependency typescript to v6.0.3
  • 9fa4be9 test(zone.js): vitest patch for testing (#68395)
  • 62c6e3b feat(zone.js): support vitest patching in zone.js/testing (#68395)
  • 7f3f3d7 ci: remove remainings of saucelabs tests
  • 56ff89c build: update all non-major dependencies
  • fc6a7ee fix(zone.js): allow draining microtasks in Promise.then (through flag)
  • 0007723 build: update cross-repo angular dependencies
  • 9ee4f83 build: update to TypeScript 6 stable
  • 621c908 build: update cross-repo angular dependencies
  • Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 25.9.3

Commits

Updates esbuild from 0.27.7 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#4461, #4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.1

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#4461, #4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Commits

Updates ng-packagr from 21.2.3 to 21.2.5

Release notes

Sourced from ng-packagr's releases.

21.2.5

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (2312433)
Changelog

Sourced from ng-packagr's changelog.

21.2.5 (2026-06-02)

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (2312433)

21.2.4 (2026-06-02)

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (2312433)
Commits

Updates semver-parser from 4.2.0 to 4.2.1

Release notes

Sourced from semver-parser's releases.

v4.2.1

What's Changed

Full Changelog: asamuzaK/semverParser@v4.2.0...v4.2.1

Commits

Updates storybook from 10.4.0 to 10.4.6

Release notes

Sourced from storybook's releases.

v10.4.6

10.4.6

v10.4.5

10.4.5

v10.4.4

10.4.4

  • Telemetry: Add timeout to event-log POST to prevent build hang - #35085, thanks @​badams!

v10.4.3

10.4.3

v10.4.2

10.4.2

v10.4.1

10.4.1

Changelog

Sourced from storybook's changelog.

10.4.6

10.4.5

10.4.4

  • Telemetry: Add timeout to event-log POST to prevent build hang - #35085, thanks @​badams!

10.4.3

10.4.2

10.4.1

Commits
  • 5496a42 Bump version from "10.4.5" to "10.4.6" [skip ci]
  • a80a5af Merge pull request #34985 from TheSeydiCharyyev/fix/issue-34951-partial-globals
  • 5b929ca Merge pull request #35157 from Kakadus/update-esbuild
  • 48e7b20 Bump version from "10.4.4" to "10.4.5" [skip ci]
  • 730f744 Merge pull request #35094 from storybookjs/jeppe-cursor/a236965c
  • dc88f70 Merge pull request #35053 from storybookjs/sidnioulz/double-gate-ai-optin
  • 5adebe7 Bump version from "10.4.3" to "10.4.4" [skip ci]
  • ce1491d Merge pull request #35085 from badams/fix/telemetry-fetch-timeout
  • 624e618 Bump version from "10.4.2" to "10.4.3" [skip ci]
  • c898822 Merge pull request #34496 from NYCU-Chung/fix/docs-blocks-custom-mdx
  • Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 25.9.3

Commits

Updates @types/node from 25.0.3 to 25.9.3

Commits

Updates @playwright/test from 1.57.0 to 1.61.0

Release notes

Sourced from @​playwright/test's releases.

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

Browser and Screencast

  • New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.
  • New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.
  • The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

  • The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.
  • Supported expect.soft.poll(...).
  • New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.
  • New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.
  • testInfo.errors now lists each sub-error of an AggregateError as a separate entry.

... (truncated)

Commits
  • 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
  • a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
  • 8133dcf cherry-pick(#41283): docs: add Ubuntu 26.04 and Node.js 26.x to system requir...
  • 812432e chore: mark v1.61.0 (#41277)
  • ac05145 fix(fetch): report serverAddr and securityDetails for reused sockets (#41267)
  • 056efc9 fix(trace-viewer): add keyboard navigation to NetworkFilters component (#41...
  • 41f7b9a chore: fixes uncovered by the .NET 1.61 roll (#41266)
  • ba50778 fix(mcp): assign caps as array for legacy --vision flag (#41253)
  • b8ee5ae docs: release notes for v1.61 (#41261)
  • 49c1f69 fix(trace viewer): load trace from a local file (#41263)
  • Additional commits viewable in compare view

Updates @types/node from 25.0.3 to 25.9.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the others group across 2 directories with 7 updates
a8d58a9 
Bumps the others group with 6 updates in the /ngx-fudis directory:

| Package | From | To |
| --- | --- | --- |
| [zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js) | `0.15.1` | `0.16.2` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `25.9.3` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.7` | `0.28.1` |
| [ng-packagr](https://github.com/ng-packagr/ng-packagr) | `21.2.3` | `21.2.5` |
| [semver-parser](https://github.com/asamuzaK/semverParser) | `4.2.0` | `4.2.1` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.4.0` | `10.4.6` |

Bumps the others group with 2 updates in the /test directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@playwright/test](https://github.com/microsoft/playwright).


Updates `zone.js` from 0.15.1 to 0.16.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/packages/zone.js/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/zone.js-0.16.2/packages/zone.js)

Updates `@types/node` from 25.9.1 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `esbuild` from 0.27.7 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.7...v0.28.1)

Updates `ng-packagr` from 21.2.3 to 21.2.5
- [Release notes](https://github.com/ng-packagr/ng-packagr/releases)
- [Changelog](https://github.com/ng-packagr/ng-packagr/blob/21.2.5/CHANGELOG.md)
- [Commits](ng-packagr/ng-packagr@21.2.3...21.2.5)

Updates `semver-parser` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/asamuzaK/semverParser/releases)
- [Commits](asamuzaK/semverParser@v4.2.0...v4.2.1)

Updates `storybook` from 10.4.0 to 10.4.6
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/core)

Updates `@types/node` from 25.9.1 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/node` from 25.0.3 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@playwright/test` from 1.57.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.57.0...v1.61.0)

Updates `@types/node` from 25.0.3 to 25.9.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: zone.js
  dependency-version: 0.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: ng-packagr
  dependency-version: 21.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: semver-parser
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: storybook
  dependency-version: 10.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: others
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: "@playwright/test"
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: others
- dependency-name: "@types/node"
  dependency-version: 25.9.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: others
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Updating dependencies javascript Pull requests that update javascript code labels Jun 18, 2026
@github-actions

github-actions Bot commented Jun 18, 2026

Copy link
Copy Markdown
Lines Statements Branches Functions
Coverage: 94%
 94.82% (13696/14444) 89.28% (1425/1596) 91.08% (531/583)
Coverage Report • (94%)
File% Stmts% Branch% Funcs% LinesUncovered Line #s
All files94.8289.2891.0894.82 
report-only-changed-files is enabled. No files were changed in this commit :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@RiinaKuu RiinaKuu Awaiting requested review from RiinaKuu RiinaKuu is a code owner

@MayaMarjut MayaMarjut Awaiting requested review from MayaMarjut MayaMarjut is a code owner

@mfaarni mfaarni Awaiting requested review from mfaarni mfaarni is a code owner

@krisrelax krisrelax Awaiting requested review from krisrelax krisrelax is a code owner

@emilyhernandez emilyhernandez Awaiting requested review from emilyhernandez emilyhernandez is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Updating dependencies javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants