Skip to content

Bump the npm_and_yarn group across 2 directories with 10 updates - #1031

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-a38ab1525e
Open

Bump the npm_and_yarn group across 2 directories with 10 updates#1031
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-a38ab1525e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 3 updates in the / directory: brace-expansion, form-data and shell-quote.
Bumps the npm_and_yarn group with 8 updates in the /app directory:

Package From To
brace-expansion 1.1.7 1.1.18
http-proxy-middleware 0.17.4 removed
js-yaml 3.7.0 3.15.2
websocket-driver 0.6.5 0.7.5
@angular/common 4.1.3 20.3.27
@angular/compiler 4.1.3 22.1.4
@angular/core 4.1.3 20.3.25
socket.io-parser 2.3.1 4.2.7

Updates brace-expansion from 1.1.8 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
</tr></table>

... (truncated)

Commits

Updates brace-expansion from 1.1.7 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
</tr></table>

... (truncated)

Commits

Removes form-data

Updates shell-quote from 1.6.1 to 1.10.0

Changelog

Sourced from shell-quote's changelog.

v1.10.0 - 2026-07-10

Merged

Commits

  • [Fix] parse: match nested ${...} braces so nested parameter expansion is consumed as one substitution c0842c8
  • [Tests] parse: pin single-quote literalness and unmatched-quote handling a0d03e3
  • [readme] remove the space in js code fences so evalmd evaluates them 2116fa3
  • [Tests] quote: pin conservative escaping of =, @, ^, ,, :, ! (#11) 1c36f3f
  • [readme] document that quote outputs POSIX quoting, not cmd.exe/PowerShell 100e96e
  • [readme] document parse's supported parameter-expansion subset e1c75cd
  • [Fix] parse: a backslash inside single quotes must not escape the closing quote 5d460a3
  • [readme] fix stale example outputs 2de86f5
  • [Tests] quote: pin that a backslash with whitespace is not doubled in single quotes (#14) 190e236
  • [readme] quote: use output verbatim; do not re-quote it (#11) 1b36468
  • [Refactor] parse: fix swapped SINGLE_QUOTE/DOUBLE_QUOTE variable names 801af5c
  • [types] fix an error TS v6 ignores but v7 fails on 59bbf8b
  • [Dev Deps] update @arethetypeswrong/cli, evalmd a04d475
  • [Dev Deps] update @arethetypeswrong/ci, eslint d390f9a
  • [Tests] quote: the tilde test escapes every ~, not just a leading one (#9) 617d119

v1.9.0 - 2026-06-24

Commits

  • [New] add types dca6e21
  • [Dev Deps] update eslint 9aa9e8f
  • [Fix] parse: finalize tokens in linear time (GHSA-395f-4hp3-45gv) 7ff5488
  • [actions] update workflows 75e8497
  • [actions] Windows + node 4/6/7: pin eslint to 9 before install, since npm 2/3 cannot stage eslint 10@types/esrecurse 3fb739d
  • [actions] retry npm install on Windows to survive npm 2/3 staging-rename flake abe0163
  • [actions] Windows + node 5/7: install deps with a modern node b4bafa2
  • [Fix] quote: escape leading ~ to prevent shell tilde-expansion 7a76c1a
  • [Dev Deps] update auto-changelog, tape 7184b44
  • [Dev Deps] apparently jackspeak is no longer in the graph 9ba368a

v1.8.4 - 2026-05-22

Commits

  • [Fix] quote: validate object-token shapes 4378a6e
  • [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore 22ebec0
  • [Tests] increase coverage 9f3caa3
  • [readme] replace runkit CI badge with shields.io check-runs badge 3344a04
  • [Dev Deps] update @ljharb/eslint-config 699c511

v1.8.3 - 2025-06-01

... (truncated)

Commits
  • 64988d9 v1.10.0
  • 617d119 [Tests] quote: the tilde test escapes every ~, not just a leading one (#9)
  • 59bbf8b [types] fix an error TS v6 ignores but v7 fails on
  • 190e236 [Tests] quote: pin that a backslash with whitespace is not doubled in singl...
  • a04d475 [Dev Deps] update @arethetypeswrong/cli, evalmd
  • b9545b3 [New] parse: add opt-in splitUnquoted option for shell field-splitting of...
  • 1b36468 [readme] quote: use output verbatim; do not re-quote it (#11)
  • 1c36f3f [Tests] quote: pin conservative escaping of =, @, ^, ,, :, ! (#11)
  • e1c75cd [readme] document parse's supported parameter-expansion subset
  • c0842c8 [Fix] parse: match nested ${...} braces so nested parameter expansion is ...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by ljharb, a new releaser for shell-quote since your current version.

Install script changes

This version adds prepublish script that runs during installation. Review the package contents before updating.


Updates brace-expansion from 1.1.7 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

v1.1.11

brace-expansion

Brace expansion, as known from sh/bash, in JavaScript.

build status downloads Greenkeeper badge

testling badge

Example

var expand = require('brace-expansion');
expand('file-{a,b,c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('-v{,,}')
// => ['-v', '-v', '-v']
expand('file{0..2}.jpg')
// => ['file0.jpg', 'file1.jpg', 'file2.jpg']
expand('file-{a..c}.jpg')
// => ['file-a.jpg', 'file-b.jpg', 'file-c.jpg']
expand('file{2..0}.jpg')
// => ['file2.jpg', 'file1.jpg', 'file0.jpg']
expand('file{0..4..2}.jpg')
// => ['file0.jpg', 'file2.jpg', 'file4.jpg']
</tr></table>

... (truncated)

Commits

Removes http-proxy-middleware

Updates js-yaml from 3.7.0 to 3.15.2

Changelog

Sourced from js-yaml's changelog.

3.15.2 - 2026-08-26

Changed

  • [backport] Hard-limit merge sequence size to 100.

Security

  • [backport] Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

3.15.1 - 2026-07-31

Security

  • [backport] Remove quadratic complexity from !!omap duplicate key detection.

3.15.0 - 2026-06-27

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one safeLoad() / safeLoadAll() call.

[3.14.2] - 2025-11-15

Security

  • Fix prototype pollution in merge (<<).

[3.14.1] - 2020-12-07

Security

  • Fix possible code execution in (already unsafe) .load() (in &anchor).

[3.14.0] - 2020-05-22

Changed

  • Support safe/loadAll(input, options) variant of call.
  • CI: drop outdated nodejs versions.
  • Dev deps bump.

Fixed

  • Quote = in plain scalars #519.
  • Check the node type for !<?> tag in case user manually specifies it.
  • Verify that there are no null-bytes in input.
  • Fix wrong quote position when writing condensed flow, #526.

[3.13.1] - 2019-04-05

Security

  • Fix possible code execution in (already unsafe) .load(), #480.

[3.13.0] - 2019-03-20

... (truncated)

Commits

Updates websocket-driver from 0.6.5 to 0.7.5

Changelog

Sourced from websocket-driver's changelog.

0.7.5 / 2026-06-04

  • Close a draft-75/76 connection if a length header grows to exceed the configured max length
  • Fail the connection if a message is larger than the configured max length after extension processing

0.7.4 / 2020-05-22

  • Avoid crashing if process.version does not contain any digits
  • Emit ping and pong events from the Server driver
  • Require http-parser-js >=0.5.1 which fixes the bug we addressed in 0.7.3

0.7.3 / 2019-06-13

  • Cap version of http-parser-js below 0.4.11, which introduced a bug that prevents us from handling messages that are part of the same input buffer as the handshake response if chunked encoding is specified

0.7.2 / 2019-06-13

(This version was pulled due to an error when publishing)

0.7.1 / 2019-06-10

  • Catch any exceptions produced while generating a handshake response and send a 400 Bad Request response to the client
  • Pick the RFC-6455 protocol version if the request contains any of the headers used by that version
  • Use the Buffer.alloc() and Buffer.from() functions instead of the unsafe Buffer() constructor
  • Handle errors encountered while handling malformed draft-76 requests
  • Change license from MIT to Apache 2.0

0.7.0 / 2017-09-11

  • Add ping and pong to the set of events users can listen to
  • Replace the bindings to Node's HTTP parser with http-parser-js
Commits
  • 5d6a9aa Bump version to 0.7.5
  • c55679a Fail the connection if a message is larger than the configured max length aft...
  • 5b197ca Close a draft-75/76 connection if a length header grows to exceed the configu...
  • fc93a48 Test on Node v22, v24, and v26
  • 2e82d34 Test on recent versions of Node
  • e4962db Switch from Travis CI to GitHub Actions
  • 3f2f9b7 Travis update: cache npm modules, remove sudo, run on Node 15
  • 5f711f0 Bump version to 0.7.4
  • 17cf70f Pin http-parser-js to version that fixes https://github.com/creationix/http-p...
  • 5c2a184 Add Node versions 13 and 14 on Travis
  • Additional commits viewable in compare view

Updates @angular/common from 4.1.3 to 20.3.27

Release notes

Sourced from @​angular/common's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

20.3.26 (2026-07-08)

compiler-cli

Commit Type Description
406aaa31e6 fix update babel dependencies to latest v7

core

Commit Type Description
26831d0cbd fix avoid caching missing locale data
8eb7aea08b fix reject dynamic script host elements

http

Commit Type Description
b963f61028 fix prevent caching of responses with Set-Cookie headers

service-worker

Commit Type Description

... (truncated)

Commits
  • a64e288 fix(http): distinguish repeated transfer cache params
  • b963f61 fix(http): prevent caching of responses with Set-Cookie headers
  • 06be298 fix(http): preserve empty referrer option in HttpRequest
  • 9f443bc fix(common): Limits date format string length
  • fa940e1 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
  • 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
  • 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
  • e2ef1ce fix(http): skip transfer cache for fetch credentialed requests
  • 3d135ce fix(common): add upper bounds for digitsInfo
  • 39a4b4c fix(common): sanitize placeholder
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular/common since your current version.


Updates @angular/compiler from 4.1.3 to 22.1.4

Release notes

Sourced from @​angular/compiler's releases.

22.1.4

common

Commit Description
fix - 60a874c3fb avoid prototype member collisions
fix - e8378dfeab use locale NaN symbol in number formatting

compiler

Commit Description
fix - 05c7c725a5 scope animations declared in minified nested rules

compiler-cli

Commit Description
fix - afe8499a14 default template diagnostic related message source file to template
fix - 079a846263 Produce correct tcb expression for optional chaining
fix - 55eeb46418 retain metadata for strict standalone errors

core

Commit Description
fix - 3da35cbab9 avoid prototype member collisions
fix - b199bdfa2a explicitly reject foreign components in JIT mode
fix - 9a8e4826b9 preserve namespace for dynamic component hosts
fix - 7c752d4815 prevent TransferState prototype pollution
fix - 7546b7a805 throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit Description
fix - c8eb7f0056 use dot-access for readonly rule configuration

language-service

Commit Description
fix - 93d7f718d2 honor quote style preference when generating imports

migrations

Commit Description
fix - 85c8829ac1 preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit Description
fix - 71e52d1396 avoid stripping unicode whitespace during url resolution

22.1.3

animations

Commit Description
fix - d9620e0f1b detect object trigger values with Object.hasOwn

common

Commit Description
fix - b3c78a5081 preserve literal key union in KeyValuePipe.transform()

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

22.1.4 (2026-08-26)

common

Commit Type Description
60a874c3fb fix avoid prototype member collisions
e8378dfeab fix use locale NaN symbol in number formatting

compiler

Commit Type Description
05c7c725a5 fix scope animations declared in minified nested rules

compiler-cli

Commit Type Description
afe8499a14 fix default template diagnostic related message source file to template
079a846263 fix Produce correct tcb expression for optional chaining
55eeb46418 fix retain metadata for strict standalone errors

core

Commit Type Description
3da35cbab9 fix avoid prototype member collisions
b199bdfa2a fix explicitly reject foreign components in JIT mode
9a8e4826b9 fix preserve namespace for dynamic component hosts
7c752d4815 fix prevent TransferState prototype pollution
7546b7a805 fix throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit Type Description
c8eb7f0056 fix use dot-access for readonly rule configuration

language-service

Commit Type Description
93d7f718d2 fix honor quote style preference when generating imports

migrations

Commit Type Description
85c8829ac1 fix preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit Type Description
71e52d1396 fix avoid stripping unicode whitespace during url resolution

22.1.3 (2026-08-19)

animations

Commit Type Description
d9620e0f1b fix detect object trigger values with Object.hasOwn

common

... (truncated)

Commits
  • 079a846 fix(compiler-cli): Produce correct tcb expression for optional chaining
  • 05c7c72 fix(compiler): scope animations declared in minified nested rules
  • df00ed2 refactor(compiler-cli): add compiler option for enabling source locations
  • 83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
  • eb0d62e Revert "fix(compiler): preserve &ngsp; between sibling control flow blocks"
  • 94f0b9a fix(compiler): preserve &ngsp; between sibling control flow blocks
  • 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
  • 6f9a64e fix(compiler): remove namespaced MathML script elements
  • 76dff30 fix(compiler): Generate correct expression for optional chaning.
  • 3478df7 refactor(compiler): remove unused code and exports
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular/compiler since your current version.


Updates @angular/core from 4.1.3 to 20.3.25

Release notes

Sourced from @​angular/core's releases.

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering
fix - ca48b4728d validate lowercase SVG animation attribute names (#69270)

http

Commit Description
fix - 06be298267 preserve empty referrer option in HttpRequest
fix - fa940e1f4d Rejects non-HTTP(S) URLs in JSONP requests
fix - e2ef1ce72a skip transfer cache for fetch credentialed requests

platform-server

Commit Description
fix - 49368c1859 harden platform location origin validation during SSR
refactor - d55c94ad81 deprecate ServerXhr (#69256)

service-worker

Commit Description
fix - d65a5f457b Strips sensitive headers on cross-origin redirects

Deprecations

platform-server

  • XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

20.3.24

platform-server

Commit Description
fix - 6ca433e56b throw on suspicious URLs and restrict protocol-relative URLs
fix - 8680b5152f update domino to latest version

20.3.23

compiler

Commit Description
fix - d40acc6431 prevent namespaced SVG elements from being stripped

20.3.22

common

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

20.3.25 (2026-06-10)

Deprecations

platform-server

  • XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

common

Commit Type Description
9f443bc24c fix Limits date format string length
566ad05f20 fix skip transfer cache for uncacheable HTTP traffic
1a62130a6b fix use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Type Description
a68ec702a0 fix sanitize two-way properties

core

Commit Type Description
768a349e6e fix harden TransferState restoration against DOM clobbering
ca48b4728d fix validate lowercase SVG animation attribute names (#69270)

http

Commit Type Description
06be298267 fix preserve empty referrer option in HttpRequest
fa940e1f4d fix Rejects non-HTTP(S) URLs in JSONP requests
e2ef1ce72a fix skip transfer cache for fetch credentialed requests

platform-server

...

Description has been truncated

Commit Type Description

@dependabot
Bump the npm_and_yarn group across 2 directories with 10 updates
c4858bb 
Bumps the npm_and_yarn group with 3 updates in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion), [form-data](https://github.com/form-data/form-data) and [shell-quote](https://github.com/ljharb/shell-quote).
Bumps the npm_and_yarn group with 8 updates in the /app directory:

| Package | From | To |
| --- | --- | --- |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.7` | `1.1.18` |
| [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `0.17.4` | `removed` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `3.7.0` | `3.15.2` |
| [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.6.5` | `0.7.5` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `4.1.3` | `20.3.27` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `4.1.3` | `22.1.4` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `4.1.3` | `20.3.25` |
| [socket.io-parser](https://github.com/socketio/socket.io) | `2.3.1` | `4.2.7` |



Updates `brace-expansion` from 1.1.8 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.8...v1.1.18)

Updates `brace-expansion` from 1.1.7 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.8...v1.1.18)

Removes `form-data`

Updates `shell-quote` from 1.6.1 to 1.10.0
- [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md)
- [Commits](ljharb/shell-quote@v1.6.1...v1.10.0)

Updates `brace-expansion` from 1.1.7 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v1.1.8...v1.1.18)

Removes `http-proxy-middleware`

Updates `js-yaml` from 3.7.0 to 3.15.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/3.15.2/CHANGELOG.md)
- [Commits](nodeca/js-yaml@3.7.0...3.15.2)

Updates `websocket-driver` from 0.6.5 to 0.7.5
- [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md)
- [Commits](faye/websocket-driver-node@0.6.5...0.7.5)

Updates `@angular/common` from 4.1.3 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v20.3.27/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common)

Updates `@angular/compiler` from 4.1.3 to 22.1.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v22.1.4/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.1.4/packages/compiler)

Updates `@angular/core` from 4.1.3 to 20.3.25
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v20.3.25/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core)

Updates `socket.io-parser` from 2.3.1 to 4.2.7
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/commits/socket.io-parser@4.2.7)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: form-data
  dependency-version:
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: shell-quote
  dependency-version: 1.10.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: http-proxy-middleware
  dependency-version:
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 3.15.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: websocket-driver
  dependency-version: 0.7.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular/common"
  dependency-version: 20.3.27
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular/compiler"
  dependency-version: 22.1.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular/core"
  dependency-version: 20.3.25
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: socket.io-parser
  dependency-version: 4.2.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants