161 Commits

Author	SHA1	Message	Date
John Kennedy	841466e060	chore: patch vulnerable transitive dependencies (#2682) ... ## Summary Patch the currently open Dependabot alerts in `pnpm-lock.yaml` by tightening the existing root pnpm overrides and regenerating the lockfile: - `js-yaml` 4.x → 4.3.1 - `dompurify` → 3.4.13 - `mermaid` → 11.16.1 (covers five advisories) - `undici` 6.x → 6.28.0 and 7.x → 7.29.0 (covers seven advisory/major-version alert instances) - `postcss` → 8.5.25 The remaining `@hono/node-server` alert is already stale on `main`: the lockfile resolves 1.19.17 and 2.1.0, both outside the advisory's vulnerable `<2.0.5` range (the 1.x line is not affected by that range). ## Validation - `pnpm install --frozen-lockfile` - `pnpm run format:check` - Verified every affected package resolution in `pnpm-lock.yaml` is outside the corresponding vulnerable range ## Scope Dependency overrides and generated `pnpm-lock.yaml` only; no runtime code changes. Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>	2026-08-11 19:05:28 -07:00
dependabot[bot]	b5d71cb62c	chore(deps): bump nanoid from 5.1.6 to 5.1.16 (#2678) ... Bumps [nanoid](https://github.com/ai/nanoid) from 5.1.6 to 5.1.16. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ai/nanoid/releases">nanoid's releases</a>.</em></p> <blockquote> <h2>5.1.16</h2> <ul> <li>Fixed forever loop on negative size (by <a href="https://github.com/spokodev"><code>@​spokodev</code></a>).</li> </ul> <h2>5.1.15</h2> <ul> <li>Fixed random pool corruption on big ID sizes.</li> </ul> <h2>5.1.14</h2> <ul> <li>Fixed npm package size regression.</li> </ul> <h2>5.1.13</h2> <ul> <li>Fixed npm package size regression.</li> </ul> <h2>5.1.12</h2> <ul> <li>Moved to npm Provenance and Staged Publishing.</li> </ul> <h2>5.1.11</h2> <ul> <li>Fixed breaking Nano ID by requesting big ID.</li> </ul> <h2>5.1.10</h2> <ul> <li>Fixed breaking nanoid by requesting big ID (by <a href="https://github.com/alanzabihi"><code>@​alanzabihi</code></a>).</li> </ul> <h2>5.1.9</h2> <ul> <li>Fixed npm package size regression.</li> </ul> <h2>5.1.8</h2> <ul> <li>Made <code>cusatomAlphabet</code> 75% faster (by <a href="https://github.com/saripovdenis"><code>@​saripovdenis</code></a>).</li> </ul> <h2>5.1.7</h2> <ul> <li>Added <code>--version</code> to CLI (by <a href="https://github.com/mahmoodhamdi"><code>@​mahmoodhamdi</code></a>).</li> <li>Updated <code>nanoid.js</code> for CDN (by <a href="https://github.com/mahmoodhamdi"><code>@​mahmoodhamdi</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/mahmoodhamdi"><code>@​mahmoodhamdi</code></a>).</li> <li>Fixed <code>customRandom</code> types (by <a href="https://github.com/oguimbal"><code>@​oguimbal</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md">nanoid's changelog</a>.</em></p> <blockquote> <h2>5.1.16</h2> <ul> <li>Fixed forever loop on negative size (by <a href="https://github.com/spokodev"><code>@​spokodev</code></a>).</li> </ul> <h2>5.1.15</h2> <ul> <li>Fixed random pool corruption on big ID sizes.</li> </ul> <h2>5.1.14</h2> <ul> <li>Fixed npm package size regression.</li> </ul> <h2>5.1.13</h2> <ul> <li>Fixed npm package size regression.</li> </ul> <h2>5.1.12</h2> <ul> <li>Moved to npm Provenance and Staged Publishing.</li> </ul> <h2>5.1.11</h2> <ul> <li>Fixed breaking Nano ID by requesting big ID.</li> </ul> <h2>5.1.10</h2> <ul> <li>Fixed breaking Nano ID by requesting big ID (by <a href="https://github.com/alanzabihi"><code>@​alanzabihi</code></a>).</li> </ul> <h2>5.1.9</h2> <ul> <li>Fixed npm package size regression.</li> </ul> <h2>5.1.8</h2> <ul> <li>Made <code>cusatomAlphabet</code> 75% faster (by <a href="https://github.com/saripovdenis"><code>@​saripovdenis</code></a>).</li> </ul> <h2>5.1.7</h2> <ul> <li>Added <code>--version</code> to CLI (by <a href="https://github.com/mahmoodhamdi"><code>@​mahmoodhamdi</code></a>).</li> <li>Updated <code>nanoid.js</code> for CDN (by <a href="https://github.com/mahmoodhamdi"><code>@​mahmoodhamdi</code></a>).</li> <li>Fixed docs (by <a href="https://github.com/mahmoodhamdi"><code>@​mahmoodhamdi</code></a>).</li> <li>Fixed <code>customRandom</code> types (by <a href="https://github.com/oguimbal"><code>@​oguimbal</code></a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"><code>6ccc67b</code></a> Release 5.1.16 version</li> <li><a href="https://github.com/ai/nanoid/commit/6de05d794f62eeac3f527c74c34c6af0c1d32e49"><code>6de05d7</code></a> fix(non-secure): clamp negative size with a smaller guard (<a href="https://redirect.github.com/ai/nanoid/issues/600">#600</a>)</li> <li><a href="https://github.com/ai/nanoid/commit/39259034f7c095cb36a97d6937e77905a659808a"><code>3925903</code></a> Update dependencies</li> <li><a href="https://github.com/ai/nanoid/commit/0b695546fd83beaa943fbcaa90af92895dd0ae55"><code>0b69554</code></a> Release 5.1.15 version</li> <li><a href="https://github.com/ai/nanoid/commit/333c5a030e2ee68ba08c43c5021d8dbf1724cef5"><code>333c5a0</code></a> Backport changelog changes for 3.x</li> <li><a href="https://github.com/ai/nanoid/commit/266eb637236f654a6ec6ef58fd12213e1bafe35b"><code>266eb63</code></a> Remove debug code</li> <li><a href="https://github.com/ai/nanoid/commit/a6a94d3f8dc71513864f2e9ae9c5a4130511b34c"><code>a6a94d3</code></a> Do not allow to pollute pool</li> <li><a href="https://github.com/ai/nanoid/commit/93fe197416c337bb732e2665be2c60968379dc73"><code>93fe197</code></a> Reduce ID size</li> <li><a href="https://github.com/ai/nanoid/commit/e4b7a9a7323006474ec939112aec68944b0da097"><code>e4b7a9a</code></a> Release 5.1.14 version</li> <li><a href="https://github.com/ai/nanoid/commit/6bf3469b5b33137e385e07dc1c84779cf3e38956"><code>6bf3469</code></a> Update release action</li> <li>Additional commits viewable in <a href="https://github.com/ai/nanoid/compare/5.1.6...5.1.16">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for nanoid since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>	2026-08-11 16:09:26 -07:00
dependabot[bot]	6ac60da74f	chore(deps): bump the langchain group across 1 directory with 5 updates (#2651) ... Bumps the langchain group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.5.1` | `1.5.2` | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.3` | `1.2.4` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.3` | `1.5.4` | | [@langchain/quickjs](https://github.com/langchain-ai/deepagentsjs) | `0.6.0` | `1.0.0` | | [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.4` | `0.8.9` | Updates `@langchain/anthropic` from 1.5.1 to 1.5.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/anthropic's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/anthropic</code><a href="https://github.com/1"><code>@​1</code></a>.5.2</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11255">#11255</a> <a href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(anthropic): add claude-opus-5 support</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a> feat(anthropic): add Claude Opus 5 support (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a> chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a> chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a> chore(deps): bump axios from 1.16.1 to 1.18.0 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/3eeeb8ace227289625380dedf9e0fef3ce4ab466"><code>3eeeb8a</code></a> chore(deps-dev): bump typeorm from 1.0.0 to 1.1.0 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11247">#11247</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ee76ea0347fb611153e5ec7d0e70fa405f5293a3"><code>ee76ea0</code></a> chore(deps): patch websocket-driver Dependabot advisories (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11213">#11213</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e5d9de5df9e48a54cbcd95c6fc22a4ac8e78e155"><code>e5d9de5</code></a> fix(deps): resolve Dependabot security alerts (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11212">#11212</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b7b5c525ddc3388e767474d3ad37cb9101424ff4"><code>b7b5c52</code></a> chore: add Socket optimized dependency overrides (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11205">#11205</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a> feat(langchain): add tool error middleware (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11201">#11201</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.2">compare view</a></li> </ul> </details> <br /> Updates `@langchain/core` from 1.2.3 to 1.2.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/core's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.2.4</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11190">#11190</a> <a href="https://github.com/langchain-ai/langchainjs/commit/9654bde694af4e78080a76a0b39d7edd35683449"><code>9654bde</code></a> Thanks <a href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>! - Coalesce nested LangChain tracer callbacks that share run bookkeeping.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11153">#11153</a> <a href="https://github.com/langchain-ai/langchainjs/commit/84ce6d65ef0ab2c556d5a5a3b5651b5cf3d73303"><code>84ce6d6</code></a> Thanks <a href="https://github.com/parveshsaini"><code>@​parveshsaini</code></a>! - fix(core): bind splitText when trimMessages receives a TextSplitter instance</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f6dbb882d1d4a591d69020145b6a871fe7801b35"><code>f6dbb88</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11268">#11268</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/9654bde694af4e78080a76a0b39d7edd35683449"><code>9654bde</code></a> fix(core): coalesce duplicate tracer copies sharing run state (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11190">#11190</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/84ce6d65ef0ab2c556d5a5a3b5651b5cf3d73303"><code>84ce6d6</code></a> fix(core): bind splitText when trimMessages receives a TextSplitter instance ...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/710d74f3fc0ff98d5088c8e0c86752829cfaaa2c"><code>710d74f</code></a> fix: resolve open Dependabot alerts (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11259">#11259</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/5226cddb0d0b31d33bb78fc51230e4283cd6cc64"><code>5226cdd</code></a> chore(deps-dev): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10 in /libs/langcha...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a> feat(anthropic): add Claude Opus 5 support (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a> chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a> chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a> chore(deps): bump axios from 1.16.1 to 1.18.0 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.3...@langchain/core@1.2.4">compare view</a></li> </ul> </details> <br /> Updates `langchain` from 1.5.3 to 1.5.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">langchain's releases</a>.</em></p> <blockquote> <h2>langchain@1.5.4</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11201">#11201</a> <a href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - feat(langchain): add middleware for handling tool execution errors</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a> feat(anthropic): add Claude Opus 5 support (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a> chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a> chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a> chore(deps): bump axios from 1.16.1 to 1.18.0 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/3eeeb8ace227289625380dedf9e0fef3ce4ab466"><code>3eeeb8a</code></a> chore(deps-dev): bump typeorm from 1.0.0 to 1.1.0 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11247">#11247</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ee76ea0347fb611153e5ec7d0e70fa405f5293a3"><code>ee76ea0</code></a> chore(deps): patch websocket-driver Dependabot advisories (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11213">#11213</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e5d9de5df9e48a54cbcd95c6fc22a4ac8e78e155"><code>e5d9de5</code></a> fix(deps): resolve Dependabot security alerts (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11212">#11212</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/b7b5c525ddc3388e767474d3ad37cb9101424ff4"><code>b7b5c52</code></a> chore: add Socket optimized dependency overrides (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11205">#11205</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a> feat(langchain): add tool error middleware (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11201">#11201</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.3...langchain@1.5.4">compare view</a></li> </ul> </details> <br /> Updates `@langchain/quickjs` from 0.6.0 to 1.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/deepagentsjs/releases">@​langchain/quickjs's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/quickjs</code><a href="https://github.com/1"><code>@​1</code></a>.0.0</h2> <p>No release notes provided.</p> <h2><code>@​langchain/quickjs</code><a href="https://github.com/1"><code>@​1</code></a>.0.0-rc.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126"><code>d25097f</code></a>, <a href="https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931"><code>dd142fe</code></a>]: <ul> <li>deepagents@1.12.0-rc.0</li> </ul> </li> </ul> <h2><code>@​langchain/quickjs</code><a href="https://github.com/1"><code>@​1</code></a>.0.0-alpha.0</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://github.com/langchain-ai/deepagentsjs/commit/4faca20343089ee2d8ecaf4c8ad3b5f8fcf1e8f8"><code>4faca20</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - feat(deepagents): support multimodal files for backends</p> </li> <li> <p><a href="https://github.com/langchain-ai/deepagentsjs/commit/07800c04d56bf2b9cb8ed99f769fd199908fd589"><code>07800c0</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - chore(deepagents): refactor backend method names - lsInfo -&gt; ls, grepRaw -&gt; grep, globInfo -&gt; glob</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/langchain-ai/deepagentsjs/commit/b1a2c8ddaef59f40aebe225cde458ce70d5fbdd3"><code>b1a2c8d</code></a>, <a href="https://github.com/langchain-ai/deepagentsjs/commit/bca71ed044edc438389a4ca19d81f43dabe01fa7"><code>bca71ed</code></a>, <a href="https://github.com/langchain-ai/deepagentsjs/commit/4faca20343089ee2d8ecaf4c8ad3b5f8fcf1e8f8"><code>4faca20</code></a>, <a href="https://github.com/langchain-ai/deepagentsjs/commit/07800c04d56bf2b9cb8ed99f769fd199908fd589"><code>07800c0</code></a>, <a href="https://github.com/langchain-ai/deepagentsjs/commit/6b76b39cfc6a87ccb034d6e27888f7f6f2f91b97"><code>6b76b39</code></a>]:</p> <ul> <li>deepagents@1.9.0-alpha.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/bed2d344bc815b5f550b35c6f1972f7a25fea603"><code>bed2d34</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/712">#712</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/b17714892227a0dbc797cf932bb4cd9a7e6cf437"><code>b177148</code></a> chore: exit pre-release (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/711">#711</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/149f4585f1e5e9511ac40ab398c72bd13665fbe2"><code>149f458</code></a> chore: version packages (rc) (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/709">#709</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/79e4654efaafb156ea1c39d2d6c1e0d4c17152cb"><code>79e4654</code></a> fix(deps): resolve Dependabot alerts (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/710">#710</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0"><code>1225a7f</code></a> feat(deepagents): make todo middleware opt-in (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/708">#708</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/71000c0b705226c3730fb97c7215dfbb8a6141ed"><code>71000c0</code></a> build(deps): bump the minor-deps-updates-main group across 1 directory with 1...</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/24ea7fa8ac4f0dd3319a375b721ef8cfd7657f64"><code>24ea7fa</code></a> build(deps): bump the major-deps-updates-main group across 1 directory with 2...</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/0e6a35b647fb872753fc7d3132d9a3f5026e88db"><code>0e6a35b</code></a> fix(deno): extend reconnect readiness retry (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/706">#706</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/a55022dc2f4aa0d2701edcaebb39c33a67dd1df8"><code>a55022d</code></a> chore: version packages (rc) (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/699">#699</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126"><code>d25097f</code></a> feat(deepagents): simplify prompting (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/703">#703</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/deepagentsjs/compare/@langchain/quickjs@0.6.0...@langchain/quickjs@1.0.0">compare view</a></li> </ul> </details> <br /> Updates `langsmith` from 0.8.4 to 0.8.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's releases</a>.</em></p> <blockquote> <h2>v0.8.9</h2> <h2>What's Changed</h2> <ul> <li>feat(sandbox): add JS Dockerfile snapshots by <a href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2951">langchain-ai/langsmith-sdk#2951</a></li> <li>chore(deps-dev): bump the js-minor-and-patch group across 1 directory with 11 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2931">langchain-ai/langsmith-sdk#2931</a></li> <li>chore(deps): bump websockets from 15.0.1 to 16.0 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2811">langchain-ai/langsmith-sdk#2811</a></li> <li>chore(deps): update myst-parser requirement from &gt;=3 to &gt;=4.0.1 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2841">langchain-ai/langsmith-sdk#2841</a></li> <li>chore(deps): bump the py-minor-and-patch group across 1 directory with 19 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2934">langchain-ai/langsmith-sdk#2934</a></li> <li>chore(deps): bump typescript from 5.9.3 to 6.0.3 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2839">langchain-ai/langsmith-sdk#2839</a></li> <li>chore(deps-dev): bump google-adk from 1.10.0 to 2.1.0 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2960">langchain-ai/langsmith-sdk#2960</a></li> <li>chore(deps-dev): bump wrapt from 1.17.3 to 2.2.1 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2961">langchain-ai/langsmith-sdk#2961</a></li> <li>chore(deps-dev): bump the py-minor-and-patch group in /python with 6 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2958">langchain-ai/langsmith-sdk#2958</a></li> <li>chore(deps-dev): bump types-tqdm from 4.67.3.20260408 to 4.67.3.20260518 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2959">langchain-ai/langsmith-sdk#2959</a></li> <li>ci: add minimum workflow permissions by <a href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2967">langchain-ai/langsmith-sdk#2967</a></li> <li>chore: update dependabot.yml to comply with posture checks by <a href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2966">langchain-ai/langsmith-sdk#2966</a></li> <li>test(python): deflake test_tracing_queue_limit_drops_when_full by <a href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2964">langchain-ai/langsmith-sdk#2964</a></li> <li>feat(sandbox): size the dockerfile-build sandbox via vcpus/mem_bytes (python) by <a href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2979">langchain-ai/langsmith-sdk#2979</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.8...v0.8.9">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.8...v0.8.9</a></p> <h2>v0.8.8</h2> <h2>What's Changed</h2> <ul> <li>fix(python): retry sandbox pool timeouts by <a href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2953">langchain-ai/langsmith-sdk#2953</a></li> <li>fix(sandbox): build Dockerfile snapshots off /tmp by <a href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2956">langchain-ai/langsmith-sdk#2956</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.8">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.8</a></p> <h2>v0.8.7</h2> <h2>What's Changed</h2> <ul> <li>fix: reconnect sandbox command streams on EOF by <a href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2941">langchain-ai/langsmith-sdk#2941</a></li> <li>feat(sandbox): build snapshots from Dockerfiles by <a href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2950">langchain-ai/langsmith-sdk#2950</a></li> <li>fix(python): add organization id to context URLs by <a href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2945">langchain-ai/langsmith-sdk#2945</a></li> <li>fix(js): add organization id to context URLs by <a href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2946">langchain-ai/langsmith-sdk#2946</a></li> <li>release(py): 0.8.7 by <a href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2947">langchain-ai/langsmith-sdk#2947</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.6...v0.8.7">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.6...v0.8.7</a></p> <h2>v0.8.6</h2> <h2>What's Changed</h2> <ul> <li>chore(deps-dev): bump <code>@​google/genai</code> from 1.50.1 to 2.0.1 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2875">langchain-ai/langsmith-sdk#2875</a></li> <li>chore(deps): bump mako from 1.3.11 to 1.3.12 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2880">langchain-ai/langsmith-sdk#2880</a></li> <li>chore(deps): bump authlib from 1.6.11 to 1.6.12 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2888">langchain-ai/langsmith-sdk#2888</a></li> <li>chore(deps): bump hono from 4.12.15 to 4.12.18 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2894">langchain-ai/langsmith-sdk#2894</a></li> <li>chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2895">langchain-ai/langsmith-sdk#2895</a></li> <li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.94.0 to 0.95.0 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2881">langchain-ai/langsmith-sdk#2881</a></li> <li>chore(deps): bump postcss from 8.5.8 to 8.5.14 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2898">langchain-ai/langsmith-sdk#2898</a></li> <li>chore(deps): bump <code>@​protobufjs/utf8</code> from 1.1.0 to 1.1.1 in /js/internal/environment_tests/test-exports-vite in the npm_and_yarn group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2908">langchain-ai/langsmith-sdk#2908</a></li> <li>chore(deps): bump hono from 4.12.18 to 4.12.19 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2909">langchain-ai/langsmith-sdk#2909</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/1eda04b4e86a93befecbd869aef6022e7f516837"><code>1eda04b</code></a> feat(sandbox): size the dockerfile-build sandbox via vcpus/mem_bytes (python)...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/5960910cbe044dca6a0961f099577f41166f9601"><code>5960910</code></a> test(python): deflake test_tracing_queue_limit_drops_when_full (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2964">#2964</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/846d4c5b17580b86618bd9a1573759e19d0cf647"><code>846d4c5</code></a> chore: update dependabot.yml to comply with posture checks (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2966">#2966</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/48b66b3ccaa0d2a305ffd1656e18bd4297af019f"><code>48b66b3</code></a> ci: add minimum workflow permissions (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2967">#2967</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/d0a93ac8a2872cf2dc6f7cb7a17645b21816d9c7"><code>d0a93ac</code></a> chore(deps-dev): bump types-tqdm from 4.67.3.20260408 to 4.67.3.20260518 in /...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/fc9ba745e3797950d0c97fce8d68c63c7915e60c"><code>fc9ba74</code></a> chore(deps-dev): bump the py-minor-and-patch group in /python with 6 updates ...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/d54e69b689029994d23cb6876a8e87c6e64a3e79"><code>d54e69b</code></a> chore(deps-dev): bump wrapt from 1.17.3 to 2.2.1 in /python (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2961">#2961</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/1d212585b886f79130db74c6741240ab79fc62bd"><code>1d21258</code></a> chore(deps-dev): bump google-adk from 1.10.0 to 2.1.0 in /python (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2960">#2960</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/b66d791bfec699eb5fc26df1e81be8b9a6677c2c"><code>b66d791</code></a> chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /js (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2839">#2839</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/a0f9eff836623cce60bdcabb2a33275d8ec741ee"><code>a0f9eff</code></a> chore(deps): bump the py-minor-and-patch group across 1 directory with 19 upd...</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.4...v0.8.9">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Christian Bromann <git@bromann.dev> Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>	2026-08-04 08:48:42 -07:00
dependabot[bot]	41da338742	chore(deps-dev): bump the react group across 1 directory with 3 updates (#2650) ... Bumps the react group with 3 updates in the / directory: [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react), [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) and [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). Updates `@types/react` from 19.2.17 to 19.2.18 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare view</a></li> </ul> </details> <br /> Updates `@types/react-dom` from 19.2.3 to 19.2.4 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom">compare view</a></li> </ul> </details> <br /> Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/releases">@​vitejs/plugin-react's releases</a>.</em></p> <blockquote> <h2>plugin-react@6.0.5</h2> <h3>Fixed the react compiler preset filter to be linear (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1353">#1353</a>)</h3> <p>The improved filter in v6.0.3 was non-linear and caused a performance regression (<a href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1349">#1349</a>). The filter was changed to be linear to avoid that.</p> <h2>plugin-react@6.0.4</h2> <h3>Fixed <code>$RefreshSig$ is not defined</code> error when running <code>vite dev</code> with <code>NODE_ENV=production</code></h3> <p>When running <code>vite dev</code> with <code>NODE_ENV=production</code>, the app errored with <code>$RefreshSig$ is not defined</code>. This error is now fixed.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md">@​vitejs/plugin-react's changelog</a>.</em></p> <blockquote> <h2>6.0.5 (2026-07-30)</h2> <h3>Fixed the react compiler preset filter to be linear (<a href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1353">#1353</a>)</h3> <p>The improved filter in v6.0.3 was non-linear and caused a performance regression (<a href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1349">#1349</a>). The filter was changed to be linear to avoid that.</p> <h2>6.0.4 (2026-07-22)</h2> <h3>Fixed <code>$RefreshSig$ is not defined</code> error when running <code>vite dev</code> with <code>NODE_ENV=production</code></h3> <p>When running <code>vite dev</code> with <code>NODE_ENV=production</code>, the app errored with <code>$RefreshSig$ is not defined</code>. This error is now fixed.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/68c0cb8796ce18bd049c3d05c5210eaf0617eac0"><code>68c0cb8</code></a> release: plugin-react@6.0.5 (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1362">#1362</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/555cdbc126506317b05404481374406771a41e70"><code>555cdbc</code></a> fix(react): make the react compiler preset filter linear (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1353">#1353</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/a00a9f8240d5a7bb4062ee2a5bac68ea4f0defa6"><code>a00a9f8</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1327">#1327</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/f4b549822ec239799d746c030abb0b9a7d8f0a04"><code>f4b5498</code></a> release: plugin-react@6.0.4</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/7a4065906e07e616aee23c4fcc76a76b74a7d694"><code>7a40659</code></a> fix(react): <code>$RefreshSig$ is not defined</code> with NODE_ENV=production vite dev ...</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/98b32d47a3f2517d52e8a51d8e28ff2ed13678a2"><code>98b32d4</code></a> fix(deps): update react 19.2.8 (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1298">#1298</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/8ae5449be23079dd17fdefc64064a3d94be6fc39"><code>8ae5449</code></a> fix: babel-plugin-react-compiler cannot be imported when used in a framework ...</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/f09ea01b0b66a4900c3e42cef2aa0147e78b097c"><code>f09ea01</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1282">#1282</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-04 02:00:41 -07:00
dependabot[bot]	162f8d3578	chore(deps): bump @hono/node-server from 2.0.12 to 2.1.0 (#2657) ... Bumps [@hono/node-server](https://github.com/honojs/node-server) from 2.0.12 to 2.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/node-server/releases">@​hono/node-server's releases</a>.</em></p> <blockquote> <h2>v2.1.0</h2> <h2>What's Changed</h2> <ul> <li>feat: add Early Hints (HTTP 103) middleware by <a href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li> <li>fix(listener): avoid uncaught error when force-closing a non-standard socket by <a href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li> <li><a href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/node-server/commit/82ba34e6b19da49ca500d4cac95b5fb25ee48cc8"><code>82ba34e</code></a> 2.1.0</li> <li><a href="https://github.com/honojs/node-server/commit/1f2909a5ef3c7f3b024bd572e39f120dc5e6595a"><code>1f2909a</code></a> fix(listener): avoid uncaught error when force-closing a non-standard socket ...</li> <li><a href="https://github.com/honojs/node-server/commit/977a242557d03b59112ea77d70124996679c53ef"><code>977a242</code></a> feat: add Early Hints (HTTP 103) middleware (<a href="https://redirect.github.com/honojs/node-server/issues/378">#378</a>)</li> <li>See full diff in <a href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-04 02:00:23 -07:00
dependabot[bot]	674d4e458c	chore(deps-dev): bump svelte from 5.56.7 to 5.56.8 in the svelte group across 1 directory (#2642) ... Bumps the svelte group with 1 update in the / directory: [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte). Updates `svelte` from 5.56.7 to 5.56.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/svelte/releases">svelte's releases</a>.</em></p> <blockquote> <h2>svelte@5.56.8</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: call <code>onerror</code> and provide a working <code>reset</code> when hydrating a failed boundary (<a href="https://redirect.github.com/sveltejs/svelte/pull/18556">#18556</a>)</p> </li> <li> <p>fix: preserve select selection when spread attributes omit value (<a href="https://redirect.github.com/sveltejs/svelte/pull/18561">#18561</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md">svelte's changelog</a>.</em></p> <blockquote> <h2>5.56.8</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: call <code>onerror</code> and provide a working <code>reset</code> when hydrating a failed boundary (<a href="https://redirect.github.com/sveltejs/svelte/pull/18556">#18556</a>)</p> </li> <li> <p>fix: preserve select selection when spread attributes omit value (<a href="https://redirect.github.com/sveltejs/svelte/pull/18561">#18561</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/svelte/commit/44a7813730579b94004e182e5a67aab27aa9d2a6"><code>44a7813</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18572">#18572</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/3dde011d3a9e7b9145169da0b75dcd607a378c0e"><code>3dde011</code></a> fix: call <code>onerror</code> and provide a working <code>reset</code> when hydrating a failed bou...</li> <li><a href="https://github.com/sveltejs/svelte/commit/2bace308e37ac1def958be750bd699ed302bb715"><code>2bace30</code></a> fix: preserve select selection with spread attributes (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18561">#18561</a>)</li> <li>See full diff in <a href="https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte">compare view</a></li> </ul> </details> <br /> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>	2026-08-04 08:26:42 +00:00
dependabot[bot]	c1f05c0532	chore(deps): bump the angular group across 1 directory with 10 updates (#2652) ... Bumps the angular group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `22.0.8` | `22.1.0` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `22.0.8` | `22.1.0` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `22.0.8` | `22.1.0` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `22.0.8` | `22.1.0` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `22.0.8` | `22.1.0` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `22.0.8` | `22.1.0` | | [@angular/build](https://github.com/angular/angular-cli) | `22.0.8` | `22.1.2` | | [@angular/cli](https://github.com/angular/angular-cli) | `22.0.8` | `22.1.2` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `22.0.8` | `22.1.0` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `22.0.8` | `22.1.0` | Updates `@angular/common` from 22.0.8 to 22.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/common's releases</a>.</em></p> <blockquote> <h2>22.1.0</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix - 1ad6824d0d" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat - af5e4e1131" /></a></td> <td>Add an error for --global-foo cases (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat - d579ecaf73" /></a></td> <td>Disable '--global-' error outside of g3 (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat - f98547675c" /></a></td> <td>Namespace CSS variables to the app (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat - 8c8b2f7783" /></a></td> <td>Support css var namespacing in properties (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix - 292199aa4d" /></a></td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix - 25c744c4d0" /></a></td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix - 5bd00add07" /></a></td> <td>support foreign components inside control flow blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf - 2e442f7876" /></a></td> <td>do not emit tag name when control flow root is foreign component (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix - aeb55c8bc1" /></a></td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix - 7c60a98b3c" /></a></td> <td>support import aliases in foreignImports (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat - 124ba10ead" /></a></td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat - eab4847a8b" /></a></td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img src="https://img.shields.io/badge/091456a214-fix-green" alt="fix - 091456a214" /></a></td> <td>account for namespaces in host binding sanitization (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix - b3748e9fe4" /></a></td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix - 11b206b919" /></a></td> <td>introduce disposal mechanism for Angular views in foreign <code>@content</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232"><img src="https://img.shields.io/badge/56607967db-fix-green" alt="fix - 56607967db" /></a></td> <td>introduce logical-only containers for foreign content</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><img src="https://img.shields.io/badge/23cf1a828b-fix-green" alt="fix - 23cf1a828b" /></a></td> <td>sanitize host bindings on concrete hosts (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b"><img src="https://img.shields.io/badge/0c07356c5c-fix-green" alt="fix - 0c07356c5c" /></a></td> <td>set current tnode in foreign component instruction on reuse</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67"><img src="https://img.shields.io/badge/bbbd357bd2-fix-green" alt="fix - bbbd357bd2" /></a></td> <td>add utility to assert that value is a field tree</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded"><img src="https://img.shields.io/badge/e3630c23c5-feat-blue" alt="feat - e3630c23c5" /></a></td> <td>add options to allow caching of credentialed and non-cacheable HTTP requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><img src="https://img.shields.io/badge/ec16a3d6c6-fix-green" alt="fix - ec16a3d6c6" /></a></td> <td>enable xsrf for root-provided HttpClient</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><img src="https://img.shields.io/badge/39e362eea5-fix-green" alt="fix - 39e362eea5" /></a></td> <td>match header values exactly when deleting</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><img src="https://img.shields.io/badge/be46ca8696-fix-green" alt="fix - be46ca8696" /></a></td> <td>preserve immutability of materialized clones</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96"><img src="https://img.shields.io/badge/c0cbd46bd7-fix-green" alt="fix - c0cbd46bd7" /></a></td> <td>skip transfer cache for fetch credentialed requests (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69017">#69017</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5"><img src="https://img.shields.io/badge/af04e266cc-refactor-yellow" alt="refactor - af04e266cc" /></a></td> <td>deprecate jsonp support</td> </tr> </tbody> </table> <h3>language-service</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/7f0265e43ab9f6b1ab9ad0ae84e70a40db417417"><img src="https://img.shields.io/badge/7f0265e43a-feat-blue" alt="feat - 7f0265e43a" /></a></td> <td>compile non-exported classes if standalone (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68454">#68454</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4f9c824dd9ec4462d29ed07b5e7916be86c19e84"><img src="https://img.shields.io/badge/4f9c824dd9-feat-blue" alt="feat - 4f9c824dd9" /></a></td> <td>Typecheck templates which would require inline typecheck blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68454">#68454</a>)</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's changelog</a>.</em></p> <blockquote> <h1>22.1.0 (2026-07-29)</h1> <h2>Deprecations</h2> <h3>http</h3> <ul> <li><code>HttpClient.jsonp</code>, <code>HttpClientJsonpModule</code>, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.</li> </ul> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e">1ad6824d0d</a></td> <td>fix</td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e">af5e4e1131</a></td> <td>feat</td> <td>Add an error for --global-foo cases (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee">d579ecaf73</a></td> <td>feat</td> <td>Disable '--global-' error outside of g3 (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb">f98547675c</a></td> <td>feat</td> <td>Namespace CSS variables to the app (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d">8c8b2f7783</a></td> <td>feat</td> <td>Support css var namespacing in properties (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4">292199aa4d</a></td> <td>fix</td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b">25c744c4d0</a></td> <td>fix</td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e">aeb55c8bc1</a></td> <td>fix</td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff">7c60a98b3c</a></td> <td>fix</td> <td>support import aliases in foreignImports (<a href="https://redirect.github.com/angular/angular/pull/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5">124ba10ead</a></td> <td>feat</td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717">eab4847a8b</a></td> <td>feat</td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0">091456a214</a></td> <td>fix</td> <td>account for namespaces in host binding sanitization (<a href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452">b3748e9fe4</a></td> <td>fix</td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a">11b206b919</a></td> <td>fix</td> <td>introduce disposal mechanism for Angular views in foreign <code>@content</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232">56607967db</a></td> <td>fix</td> <td>introduce logical-only containers for foreign content</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544">23cf1a828b</a></td> <td>fix</td> <td>sanitize host bindings on concrete hosts (<a href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b">0c07356c5c</a></td> <td>fix</td> <td>set current tnode in foreign component instruction on reuse</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67">bbbd357bd2</a></td> <td>fix</td> <td>add utility to assert that value is a field tree</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded">e3630c23c5</a></td> <td>feat</td> <td>add options to allow caching of credentialed and non-cacheable HTTP requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64">ec16a3d6c6</a></td> <td>fix</td> <td>enable xsrf for root-provided HttpClient</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea">39e362eea5</a></td> <td>fix</td> <td>match header values exactly when deleting</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81">be46ca8696</a></td> <td>fix</td> <td>preserve immutability of materialized clones</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96">c0cbd46bd7</a></td> <td>fix</td> <td>skip transfer cache for fetch credentialed requests (<a href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5">af04e266cc</a></td> <td>refactor</td> <td>deprecate jsonp support</td> </tr> </tbody> </table> <h3>language-service</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/79a37f3d0b690a9e9cc893a10cef4ef4cdce4c3b"><code>79a37f3</code></a> refactor(common): replaces the deprecated positional <code>subscribe</code> arguments wi...</li> <li><a href="https://github.com/angular/angular/commit/6dcb534e127d8b9971103596844ca1c0e736596b"><code>6dcb534</code></a> refactor(common): remove duplicate helper function</li> <li><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><code>ec16a3d</code></a> fix(http): enable xsrf for root-provided HttpClient</li> <li><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><code>39e362e</code></a> fix(http): match header values exactly when deleting</li> <li><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><code>be46ca8</code></a> fix(http): preserve immutability of materialized clones</li> <li><a href="https://github.com/angular/angular/commit/d14696e4308c5cd95cf2184cae3582b52f7c7cf3"><code>d14696e</code></a> fix(common): preserve crossorigin on image preloads</li> <li><a href="https://github.com/angular/angular/commit/3192dccaa3e1488f8bf351864ea48e44a21246aa"><code>3192dcc</code></a> fix(http): prevent transfer cache key collisions</li> <li><a href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185"><code>359fb50</code></a> fix(common): avoid prototype lookups in date format caches</li> <li><a href="https://github.com/angular/angular/commit/6d043f86573e317f20039ccec031d6e63c01b656"><code>6d043f8</code></a> fix(http): prevent interceptor signal reads from leaking into calling reactiv...</li> <li><a href="https://github.com/angular/angular/commit/c1829f6d7cc37aec73217a53da1e8314690c8c79"><code>c1829f6</code></a> docs(docs-infra): Add build-time validation for API and guide links using rou...</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.1.0/packages/common">compare view</a></li> </ul> </details> <br /> Updates `@angular/compiler` from 22.0.8 to 22.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/compiler's releases</a>.</em></p> <blockquote> <h2>22.1.0</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix - 1ad6824d0d" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat - af5e4e1131" /></a></td> <td>Add an error for --global-foo cases (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat - d579ecaf73" /></a></td> <td>Disable '--global-' error outside of g3 (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat - f98547675c" /></a></td> <td>Namespace CSS variables to the app (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat - 8c8b2f7783" /></a></td> <td>Support css var namespacing in properties (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix - 292199aa4d" /></a></td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix - 25c744c4d0" /></a></td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix - 5bd00add07" /></a></td> <td>support foreign components inside control flow blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf - 2e442f7876" /></a></td> <td>do not emit tag name when control flow root is foreign component (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix - aeb55c8bc1" /></a></td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix - 7c60a98b3c" /></a></td> <td>support import aliases in foreignImports (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat - 124ba10ead" /></a></td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat - eab4847a8b" /></a></td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img src="https://img.shields.io/badge/091456a214-fix-green" alt="fix - 091456a214" /></a></td> <td>account for namespaces in host binding sanitization (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix - b3748e9fe4" /></a></td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix - 11b206b919" /></a></td> <td>introduce disposal mechanism for Angular views in foreign <code>@content</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232"><img src="https://img.shields.io/badge/56607967db-fix-green" alt="fix - 56607967db" /></a></td> <td>introduce logical-only containers for foreign content</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><img src="https://img.shields.io/badge/23cf1a828b-fix-green" alt="fix - 23cf1a828b" /></a></td> <td>sanitize host bindings on concrete hosts (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b"><img src="https://img.shields.io/badge/0c07356c5c-fix-green" alt="fix - 0c07356c5c" /></a></td> <td>set current tnode in foreign component instruction on reuse</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67"><img src="https://img.shields.io/badge/bbbd357bd2-fix-green" alt="fix - bbbd357bd2" /></a></td> <td>add utility to assert that value is a field tree</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded"><img src="https://img.shields.io/badge/e3630c23c5-feat-blue" alt="feat - e3630c23c5" /></a></td> <td>add options to allow caching of credentialed and non-cacheable HTTP requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><img src="https://img.shields.io/badge/ec16a3d6c6-fix-green" alt="fix - ec16a3d6c6" /></a></td> <td>enable xsrf for root-provided HttpClient</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><img src="https://img.shields.io/badge/39e362eea5-fix-green" alt="fix - 39e362eea5" /></a></td> <td>match header values exactly when deleting</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><img src="https://img.shields.io/badge/be46ca8696-fix-green" alt="fix - be46ca8696" /></a></td> <td>preserve immutability of materialized clones</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96"><img src="https://img.shields.io/badge/c0cbd46bd7-fix-green" alt="fix - c0cbd46bd7" /></a></td> <td>skip transfer cache for fetch credentialed requests (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69017">#69017</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5"><img src="https://img.shields.io/badge/af04e266cc-refactor-yellow" alt="refactor - af04e266cc" /></a></td> <td>deprecate jsonp support</td> </tr> </tbody> </table> <h3>language-service</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/7f0265e43ab9f6b1ab9ad0ae84e70a40db417417"><img src="https://img.shields.io/badge/7f0265e43a-feat-blue" alt="feat - 7f0265e43a" /></a></td> <td>compile non-exported classes if standalone (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68454">#68454</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4f9c824dd9ec4462d29ed07b5e7916be86c19e84"><img src="https://img.shields.io/badge/4f9c824dd9-feat-blue" alt="feat - 4f9c824dd9" /></a></td> <td>Typecheck templates which would require inline typecheck blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68454">#68454</a>)</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's changelog</a>.</em></p> <blockquote> <h1>22.1.0 (2026-07-29)</h1> <h2>Deprecations</h2> <h3>http</h3> <ul> <li><code>HttpClient.jsonp</code>, <code>HttpClientJsonpModule</code>, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.</li> </ul> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e">1ad6824d0d</a></td> <td>fix</td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e">af5e4e1131</a></td> <td>feat</td> <td>Add an error for --global-foo cases (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee">d579ecaf73</a></td> <td>feat</td> <td>Disable '--global-' error outside of g3 (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb">f98547675c</a></td> <td>feat</td> <td>Namespace CSS variables to the app (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d">8c8b2f7783</a></td> <td>feat</td> <td>Support css var namespacing in properties (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4">292199aa4d</a></td> <td>fix</td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b">25c744c4d0</a></td> <td>fix</td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e">aeb55c8bc1</a></td> <td>fix</td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff">7c60a98b3c</a></td> <td>fix</td> <td>support import aliases in foreignImports (<a href="https://redirect.github.com/angular/angular/pull/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5">124ba10ead</a></td> <td>feat</td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717">eab4847a8b</a></td> <td>feat</td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0">091456a214</a></td> <td>fix</td> <td>account for namespaces in host binding sanitization (<a href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452">b3748e9fe4</a></td> <td>fix</td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a">11b206b919</a></td> <td>fix</td> <td>introduce disposal mechanism for Angular views in foreign <code>@content</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232">56607967db</a></td> <td>fix</td> <td>introduce logical-only containers for foreign content</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544">23cf1a828b</a></td> <td>fix</td> <td>sanitize host bindings on concrete hosts (<a href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b">0c07356c5c</a></td> <td>fix</td> <td>set current tnode in foreign component instruction on reuse</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67">bbbd357bd2</a></td> <td>fix</td> <td>add utility to assert that value is a field tree</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded">e3630c23c5</a></td> <td>feat</td> <td>add options to allow caching of credentialed and non-cacheable HTTP requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64">ec16a3d6c6</a></td> <td>fix</td> <td>enable xsrf for root-provided HttpClient</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea">39e362eea5</a></td> <td>fix</td> <td>match header values exactly when deleting</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81">be46ca8696</a></td> <td>fix</td> <td>preserve immutability of materialized clones</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96">c0cbd46bd7</a></td> <td>fix</td> <td>skip transfer cache for fetch credentialed requests (<a href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5">af04e266cc</a></td> <td>refactor</td> <td>deprecate jsonp support</td> </tr> </tbody> </table> <h3>language-service</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><code>091456a</code></a> fix(core): account for namespaces in host binding sanitization (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</li> <li><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><code>23cf1a8</code></a> fix(core): sanitize host bindings on concrete hosts (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</li> <li><a href="https://github.com/angular/angular/commit/8201cebc49c2d43307731191479749fb4dc3e854"><code>8201ceb</code></a> refactor(compiler): enforce exhaustive defer trigger handling</li> <li><a href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34"><code>68ac204</code></a> fix(core): ignore processing instruction syntax in templates</li> <li><a href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c"><code>da52137</code></a> fix(compiler): parsing of an empty template literal interpolation</li> <li><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><code>5bd00ad</code></a> fix(compiler): support foreign components inside control flow blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69674">#69674</a>)</li> <li><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><code>2e442f7</code></a> perf(compiler): do not emit tag name when control flow root is foreign compon...</li> <li><a href="https://github.com/angular/angular/commit/a19c02706fd84d831298c6e2e37dd19fc1b00e4e"><code>a19c027</code></a> refactor(compiler-cli): support foreign imports with isolated declarations</li> <li><a href="https://github.com/angular/angular/commit/997b772f28f92de64b416263bb6dc02dc9e7598d"><code>997b772</code></a> fix(compiler): use regular optional chaining expression for safe function cal...</li> <li><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><code>d579eca</code></a> feat(compiler): Disable '--global-' error outside of g3 (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.1.0/packages/compiler">compare view</a></li> </ul> </details> <br /> Updates `@angular/core` from 22.0.8 to 22.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/core's releases</a>.</em></p> <blockquote> <h2>22.1.0</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix - 1ad6824d0d" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat - af5e4e1131" /></a></td> <td>Add an error for --global-foo cases (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat - d579ecaf73" /></a></td> <td>Disable '--global-' error outside of g3 (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat - f98547675c" /></a></td> <td>Namespace CSS variables to the app (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat - 8c8b2f7783" /></a></td> <td>Support css var namespacing in properties (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix - 292199aa4d" /></a></td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix - 25c744c4d0" /></a></td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix - 5bd00add07" /></a></td> <td>support foreign components inside control flow blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf - 2e442f7876" /></a></td> <td>do not emit tag name when control flow root is foreign component (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix - aeb55c8bc1" /></a></td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix - 7c60a98b3c" /></a></td> <td>support import aliases in foreignImports (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat - 124ba10ead" /></a></td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat - eab4847a8b" /></a></td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img src="https://img.shields.io/badge/091456a214-fix-green" alt="fix - 091456a214" /></a></td> <td>account for namespaces in host binding sanitization (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix - b3748e9fe4" /></a></td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix - 11b206b919" /></a></td> <td>introduce disposal mechanism for Angular views in foreign <code>@content</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232"><img src="https://img.shields.io/badge/56607967db-fix-green" alt="fix - 56607967db" /></a></td> <td>introduce logical-only containers for foreign content</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><img src="https://img.shields.io/badge/23cf1a828b-fix-green" alt="fix - 23cf1a828b" /></a></td> <td>sanitize host bindings on concrete hosts (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b"><img src="https://img.shields.io/badge/0c07356c5c-fix-green" alt="fix - 0c07356c5c" /></a></td> <td>set current tnode in foreign component instruction on reuse</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67"><img src="https://img.shields.io/badge/bbbd357bd2-fix-green" alt="fix - bbbd357bd2" /></a></td> <td>add utility to assert that value is a field tree</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded"><img src="https://img.shields.io/badge/e3630c23c5-feat-blue" alt="feat - e3630c23c5" /></a></td> <td>add options to allow caching of credentialed and non-cacheable HTTP requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><img src="https://img.shields.io/badge/ec16a3d6c6-fix-green" alt="fix - ec16a3d6c6" /></a></td> <td>enable xsrf for root-provided HttpClient</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><img src="https://img.shields.io/badge/39e362eea5-fix-green" alt="fix - 39e362eea5" /></a></td> <td>match header values exactly when deleting</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><img src="https://img.shields.io/badge/be46ca8696-fix-green" alt="fix - be46ca8696" /></a></td> <td>preserve immutability of materialized clones</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96"><img src="https://img.shields.io/badge/c0cbd46bd7-fix-green" alt="fix - c0cbd46bd7" /></a></td> <td>skip transfer cache for fetch credentialed requests (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69017">#69017</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5"><img src="https://img.shields.io/badge/af04e266cc-refactor-yellow" alt="refactor - af04e266cc" /></a></td> <td>deprecate jsonp support</td> </tr> </tbody> </table> <h3>language-service</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/7f0265e43ab9f6b1ab9ad0ae84e70a40db417417"><img src="https://img.shields.io/badge/7f0265e43a-feat-blue" alt="feat - 7f0265e43a" /></a></td> <td>compile non-exported classes if standalone (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68454">#68454</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4f9c824dd9ec4462d29ed07b5e7916be86c19e84"><img src="https://img.shields.io/badge/4f9c824dd9-feat-blue" alt="feat - 4f9c824dd9" /></a></td> <td>Typecheck templates which would require inline typecheck blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68454">#68454</a>)</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's changelog</a>.</em></p> <blockquote> <h1>22.1.0 (2026-07-29)</h1> <h2>Deprecations</h2> <h3>http</h3> <ul> <li><code>HttpClient.jsonp</code>, <code>HttpClientJsonpModule</code>, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.</li> </ul> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e">1ad6824d0d</a></td> <td>fix</td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e">af5e4e1131</a></td> <td>feat</td> <td>Add an error for --global-foo cases (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee">d579ecaf73</a></td> <td>feat</td> <td>Disable '--global-' error outside of g3 (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb">f98547675c</a></td> <td>feat</td> <td>Namespace CSS variables to the app (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d">8c8b2f7783</a></td> <td>feat</td> <td>Support css var namespacing in properties (<a href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4">292199aa4d</a></td> <td>fix</td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b">25c744c4d0</a></td> <td>fix</td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e">aeb55c8bc1</a></td> <td>fix</td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff">7c60a98b3c</a></td> <td>fix</td> <td>support import aliases in foreignImports (<a href="https://redirect.github.com/angular/angular/pull/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5">124ba10ead</a></td> <td>feat</td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717">eab4847a8b</a></td> <td>feat</td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0">091456a214</a></td> <td>fix</td> <td>account for namespaces in host binding sanitization (<a href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452">b3748e9fe4</a></td> <td>fix</td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a">11b206b919</a></td> <td>fix</td> <td>introduce disposal mechanism for Angular views in foreign <code>@content</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232">56607967db</a></td> <td>fix</td> <td>introduce logical-only containers for foreign content</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544">23cf1a828b</a></td> <td>fix</td> <td>sanitize host bindings on concrete hosts (<a href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b">0c07356c5c</a></td> <td>fix</td> <td>set current tnode in foreign component instruction on reuse</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67">bbbd357bd2</a></td> <td>fix</td> <td>add utility to assert that value is a field tree</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded">e3630c23c5</a></td> <td>feat</td> <td>add options to allow caching of credentialed and non-cacheable HTTP requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64">ec16a3d6c6</a></td> <td>fix</td> <td>enable xsrf for root-provided HttpClient</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea">39e362eea5</a></td> <td>fix</td> <td>match header values exactly when deleting</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81">be46ca8696</a></td> <td>fix</td> <td>preserve immutability of materialized clones</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96">c0cbd46bd7</a></td> <td>fix</td> <td>skip transfer cache for fetch credentialed requests (<a href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5">af04e266cc</a></td> <td>refactor</td> <td>deprecate jsonp support</td> </tr> </tbody> </table> <h3>language-service</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/ada038fca8ec59c90a9b5773e0a1d5411ee67073"><code>ada038f</code></a> refactor(core): Migrate more tests off <code>fakeAsync</code></li> <li><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><code>091456a</code></a> fix(core): account for namespaces in host binding sanitization (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</li> <li><a href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><code>23cf1a8</code></a> fix(core): sanitize host bindings on concrete hosts (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</li> <li><a href="https://github.com/angular/angular/commit/5d5b2ea72d03ffc2350e66e202cbca0bf491a5f2"><code>5d5b2ea</code></a> fix(migrations): correctly detect <code>then</code>/<code>else</code> keywords in control flow migr...</li> <li><a href="https://github.com/angular/angular/commit/350ea416b64c98929bdfbcc1dded220bef0df378"><code>350ea41</code></a> refactor(core): align navigation types with built in ones</li> <li><a href="https://github.com/angular/angular/commit/49672c437b440564e9c20b77a7ff151fbf316706"><code>49672c4</code></a> fix(migrations): correctly migrate ngClass with mixed space-separated keys</li> <li><a href="https://github.com/angular/angular/commit/3499a1321bfe4801c38744ddb500715486680366"><code>3499a13</code></a> fix(core): ensure SVG animation attributeName is checked case-insensitively</li> <li><a href="https://github.com/angular/angular/commit/223e40279f3f6df979a323f79cb370528366c24a"><code>223e402</code></a> fix(migrations): preserve NgClass import on partial migration</li> <li><a href="https://github.com/angular/angular/commit/f034c02e67d25018ca3ff952904d9bcaf43175d4"><code>f034c02</code></a> build: update cross-repo angular dependencies to v22.1.0-next.4</li> <li><a href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41"><code>0ae6d81</code></a> fix(core): preserve explicit input transform write type</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.1.0/packages/core">compare view</a></li> </ul> </details> <br /> Updates `@angular/forms` from 22.0.8 to 22.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/forms's releases</a>.</em></p> <blockquote> <h2>22.1.0</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix - 1ad6824d0d" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69017">#69017</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat - af5e4e1131" /></a></td> <td>Add an error for --global-foo cases (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat - d579ecaf73" /></a></td> <td>Disable '--global-' error outside of g3 (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat - f98547675c" /></a></td> <td>Namespace CSS variables to the app (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat - 8c8b2f7783" /></a></td> <td>Support css var namespacing in properties (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix - 292199aa4d" /></a></td> <td>permissive whitespace parsing in default never blocks</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix - 25c744c4d0" /></a></td> <td>support foreign components defined outside top-level scope</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix - 5bd00add07" /></a></td> <td>support foreign components inside control flow blocks (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf - 2e442f7876" /></a></td> <td>do not emit tag name when control flow root is foreign component (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix - aeb55c8bc1" /></a></td> <td>allow passing uninvoked signals as foreign component props</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix - 7c60a98b3c" /></a></td> <td>support import aliases in foreignImports (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68674">#68674</a>)</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat - 124ba10ead" /></a></td> <td>add custom set option to linkedSignal</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat - eab4847a8b" /></a></td> <td>Adds deep linking from Performance panel to DevTools</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img src="https://img.shields.io/badge/091456a214-fix-green" alt="fix - 091456a214" /></a></td> <td>account for namespaces in host binding sanitization (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69558">#69558</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix - b3748e9fe4" /></a></td> <td>correct container anchor collection order to match DOM layout</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix - 11b206b919" /></a></td> <td>introduce disposal mechanism for Angular views in foreign ... _Description has been truncated_ Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-04 01:13:29 -07:00
dependabot[bot]	2ba482196e	chore(deps): bump hono from 4.12.31 to 4.12.34 (#2654) ... Bumps [hono](https://github.com/honojs/hono) from 4.12.31 to 4.12.34. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/hono/releases">hono's releases</a>.</em></p> <blockquote> <h2>v4.12.34</h2> <h2>Security fixes</h2> <p>This release includes fixes for the following security issues:</p> <h3><code>memo()</code> retains SSR output across requests, leading to cross-user data disclosure</h3> <p>Affects: <code>hono/jsx</code> (server-side rendering). Fixes <code>memo()</code> reusing a retained render result across requests when props compare equal, where a component reading request-scoped values from ambient context — <code>useContext()</code>, <code>useRequestContext()</code>, or <code>getContext()</code> — could serve HTML rendered for another user's request, disclosing account data or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r</p> <h3>ReDoS in CORS middleware via <code>Access-Control-Request-Headers</code></h3> <p>Affects: <code>hono/cors</code>. Fixes a whitespace-tolerant regular expression with quadratic backtracking used to parse the <code>Access-Control-Request-Headers</code> preflight header when <code>allowHeaders</code> is not configured (the default), where a single preflight request carrying a long whitespace run could consume seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239</p> <h3>Algorithmic complexity DoS in Language Middleware</h3> <p>Affects: <code>hono/language</code>. Fixes quadratic string processing in language-tag normalization, where a crafted language tag with a large number of hyphen-separated subtags — supplied via a query parameter, cookie, or <code>Accept-Language</code> header — could cause excessive CPU consumption and block the event loop. GHSA-54fx-42gc-7vw4</p> <h3>Proxy Helper does not remove response headers listed in the <code>Connection</code> header</h3> <p>Affects: <code>hono/proxy</code>. Fixes <code>proxy()</code> forwarding response headers that the origin's <code>Connection</code> header designates as connection-scoped, where headers intended only for the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to clients, disclosing connection-scoped or internal metadata. GHSA-79qm-7rj5-m7r9</p> <hr /> <p>Users who use <code>hono/jsx</code> for server-side rendering, <code>hono/cors</code>, <code>hono/language</code>, or <code>hono/proxy</code> are strongly encouraged to upgrade to this version.</p> <h2>v4.12.33</h2> <h2>What's Changed</h2> <ul> <li>fix(cookie): relax name validation when parsing Cookie header in <a href="https://redirect.github.com/honojs/hono/pull/5164">honojs/hono#5164</a></li> <li>chore: bump <code>@hono/node-server</code> in <a href="https://redirect.github.com/honojs/hono/pull/5167">honojs/hono#5167</a></li> <li>fix(jsx): handle useSyncExternalStore subscription and snapshot changes in <a href="https://redirect.github.com/honojs/hono/pull/5166">honojs/hono#5166</a></li> <li>chore: remove undici in favor of global fetch in <a href="https://redirect.github.com/honojs/hono/pull/5168">honojs/hono#5168</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.12.32...v4.12.33">https://github.com/honojs/hono/compare/v4.12.32...v4.12.33</a></p> <h2>v4.12.32</h2> <h2>What's Changed</h2> <ul> <li>ci: enable reports for type &amp; bundle size check in <a href="https://redirect.github.com/honojs/hono/pull/5148">honojs/hono#5148</a></li> <li>fix(aws-lambda): add jwt and lambda authorizer types for API Gateway v2 in <a href="https://redirect.github.com/honojs/hono/pull/5142">honojs/hono#5142</a></li> <li>fix(sse): emit empty id field to reset Last-Event-ID in <a href="https://redirect.github.com/honojs/hono/pull/5138">honojs/hono#5138</a></li> <li>test(cloudflare-workers): add coverage for onClose, onError, send, and close in Cloudflare Workers websocket adapter in <a href="https://redirect.github.com/honojs/hono/pull/5145">honojs/hono#5145</a></li> <li>fix: use <code>Object.create(null)</code> when parsing query, headers, and params in <a href="https://redirect.github.com/honojs/hono/pull/5161">honojs/hono#5161</a></li> <li>fix(secure-headers): keep CSP callbacks scoped to their header in <a href="https://redirect.github.com/honojs/hono/pull/5147">honojs/hono#5147</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.12.31...v4.12.32">https://github.com/honojs/hono/compare/v4.12.31...v4.12.32</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/hono/commit/734755ace341607628219ea1dd8ca17f01bf1a5c"><code>734755a</code></a> 4.12.34</li> <li><a href="https://github.com/honojs/hono/commit/9839ff32a349bf088b6ddfa604010879dd2d3a05"><code>9839ff3</code></a> chore: update <code>bun.lock</code> (<a href="https://redirect.github.com/honojs/hono/issues/5182">#5182</a>)</li> <li><a href="https://github.com/honojs/hono/commit/0c45036d6b0ddf42ab2fa44639dc8710825d5c0f"><code>0c45036</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/720b566290793d4358bf39843adcb7cf4da4548f"><code>720b566</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/f70e2c31684387b3231cc38512a31df6ca76a1c7"><code>f70e2c3</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/93fc250d8b4df58ea542cb945171de8013d5e6d5"><code>93fc250</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/51db3131d5e97076327edaa0afdb60ebb77c264f"><code>51db313</code></a> 4.12.33</li> <li><a href="https://github.com/honojs/hono/commit/aed146364d5c48a8336b8c82fedfabebf8063d07"><code>aed1463</code></a> chore: remove undici in favor of global fetch (<a href="https://redirect.github.com/honojs/hono/issues/5168">#5168</a>)</li> <li><a href="https://github.com/honojs/hono/commit/224d2f5cbf2b4bc2ebb7482d0592149a8d9f0574"><code>224d2f5</code></a> fix(jsx): handle useSyncExternalStore subscription and snapshot changes (<a href="https://redirect.github.com/honojs/hono/issues/5166">#5166</a>)</li> <li><a href="https://github.com/honojs/hono/commit/df653cea0450657977887d56a5188368387456c8"><code>df653ce</code></a> chore: bump <code>@hono/node-server</code> (<a href="https://redirect.github.com/honojs/hono/issues/5167">#5167</a>)</li> <li>Additional commits viewable in <a href="https://github.com/honojs/hono/compare/v4.12.31...v4.12.34">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-08-03 16:03:28 -07:00
dependabot[bot]	cac6d31065	chore(deps): bump the vite-vitest group across 1 directory with 6 updates (#2644) ... Bumps the vite-vitest group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.9.14` | `2.10.8` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.2.0` | | [rollup](https://github.com/rollup/rollup) | `4.59.0` | `4.62.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.9` | `4.1.10` | | [@vitest/browser-webdriverio](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-webdriverio) | `4.1.9` | `4.1.10` | Updates `turbo` from 2.9.14 to 2.10.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vercel/turborepo/releases">turbo's releases</a>.</em></p> <blockquote> <h2>Turborepo v2.10.8</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Changelog</h3> <ul> <li>fix: Scroll TUI task list with mouse wheel by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13479">vercel/turborepo#13479</a></li> <li>fix: Make releases resumable by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13486">vercel/turborepo#13486</a></li> <li>refactor: Expose knowledge-backed package scope views by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13456">vercel/turborepo#13456</a></li> <li>chore: Release Turborepo 2.10.7 by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13489">vercel/turborepo#13489</a></li> <li>refactor: Use package knowledge for configuration scopes by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13457">vercel/turborepo#13457</a></li> <li>refactor: Use package knowledge for run scope enumeration by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13458">vercel/turborepo#13458</a></li> <li>release(turborepo): 2.10.8-canary.1 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/vercel/turborepo/pull/13490">vercel/turborepo#13490</a></li> <li>refactor: Use package knowledge in repository views by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13459">vercel/turborepo#13459</a></li> <li>refactor: Use package knowledge in package integrations by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13460">vercel/turborepo#13460</a></li> <li>ci: Parallelize environment setup steps by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13491">vercel/turborepo#13491</a></li> <li>release(turborepo): 2.10.8-canary.2 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/vercel/turborepo/pull/13492">vercel/turborepo#13492</a></li> <li>refactor: Use package knowledge for task hashing paths by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13461">vercel/turborepo#13461</a></li> <li>refactor: Use package knowledge for run-cache paths by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13462">vercel/turborepo#13462</a></li> <li>refactor: Bind toolchain callbacks to package knowledge by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13463">vercel/turborepo#13463</a></li> <li>refactor: Use package knowledge for microfrontend commands by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13464">vercel/turborepo#13464</a></li> <li>refactor: Use package knowledge for run summaries by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13465">vercel/turborepo#13465</a></li> <li>refactor: Use package knowledge for watcher paths by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13466">vercel/turborepo#13466</a></li> <li>ci: Enable remote cache for types codegen by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13495">vercel/turborepo#13495</a></li> <li>docs: Fix llms.txt links to page markdown routes by <a href="https://github.com/molebox"><code>@​molebox</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13497">vercel/turborepo#13497</a></li> <li>refactor: Use package knowledge for prune paths by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13467">vercel/turborepo#13467</a></li> <li>refactor: Use package knowledge in the LSP by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13468">vercel/turborepo#13468</a></li> <li>refactor: Use consistent repository construction by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13469">vercel/turborepo#13469</a></li> <li>refactor: Delete legacy package and scope authority by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13470">vercel/turborepo#13470</a></li> <li>perf: Cache telemetry salt instead of re-reading config on every hash by <a href="https://github.com/charpeni"><code>@​charpeni</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13498">vercel/turborepo#13498</a></li> <li>feat: Support Android (Termux) by <a href="https://github.com/gtbuchanan"><code>@​gtbuchanan</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/12735">vercel/turborepo#12735</a></li> <li>ci: Restore Cargo targets on all test platforms by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13505">vercel/turborepo#13505</a></li> <li>fix: Resolve gitdir for linked worktrees in repo index by <a href="https://github.com/charpeni"><code>@​charpeni</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13503">vercel/turborepo#13503</a></li> <li>test: Characterize relationship projections by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13499">vercel/turborepo#13499</a></li> <li>refactor: Produce native relationship observations by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13500">vercel/turborepo#13500</a></li> <li>feat: Resolve GitHub Actions remote base refs behind future flag by <a href="https://github.com/louis-bompart"><code>@​louis-bompart</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/10732">vercel/turborepo#10732</a></li> <li>refactor: Add core relationship projections by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13502">vercel/turborepo#13502</a></li> <li>refactor: Define external resolution contracts by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13507">vercel/turborepo#13507</a></li> <li>refactor: Move repository tasks into Turbo configuration by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13504">vercel/turborepo#13504</a></li> <li>refactor: Build JavaScript external resolution generations by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13508">vercel/turborepo#13508</a></li> <li>refactor: Contribute Cargo external resolutions by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13509">vercel/turborepo#13509</a></li> <li>refactor: Migrate external declaration consumers by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13511">vercel/turborepo#13511</a></li> <li>ci: Auto-merge release PRs by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13510">vercel/turborepo#13510</a></li> <li>chore: Release Turborepo 2.10.8-canary.3 by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13512">vercel/turborepo#13512</a></li> <li>fix: Use tokenless release review gate by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13513">vercel/turborepo#13513</a></li> <li>refactor: Use resolution fingerprints for task hashes by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13514">vercel/turborepo#13514</a></li> <li>fix: Support fork PRs in review gate by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13516">vercel/turborepo#13516</a></li> <li>refactor: Migrate lockfile affectedness by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13519">vercel/turborepo#13519</a></li> <li>refactor: Migrate external resolution summaries by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13520">vercel/turborepo#13520</a></li> <li>refactor: Migrate external package queries to resolution knowledge by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13523">vercel/turborepo#13523</a></li> <li>fix: Serialize macOS Homebrew setup by <a href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in <a href="https://redirect.github.com/vercel/turborepo/pull/13549">vercel/turborepo#13549</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vercel/turborepo/commit/2515f8b181ad49aaf933893b1688fb08447001a3"><code>2515f8b</code></a> publish 2.10.8 to registry</li> <li><a href="https://github.com/vercel/turborepo/commit/dd87718f0036b93324df66b26fdf37056094b5d0"><code>dd87718</code></a> test: Add uv workspace integration coverage (<a href="https://redirect.github.com/vercel/turborepo/issues/13602">#13602</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/b3dc99b98a6fb7db9eabd23ae0b601100cb66162"><code>b3dc99b</code></a> fix: Fall back to polling on macOS (<a href="https://redirect.github.com/vercel/turborepo/issues/13622">#13622</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/f8f288e6b16f59a0261d9ef2c47e698b472b39b2"><code>f8f288e</code></a> feat: Prune uv workspaces (<a href="https://redirect.github.com/vercel/turborepo/issues/13613">#13613</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/b2e25d4971ac18373f872a98796d13ecfc26128b"><code>b2e25d4</code></a> feat: Watch uv workspace changes (<a href="https://redirect.github.com/vercel/turborepo/issues/13612">#13612</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/00538d09752961e2e42654a26196b739b7d00e20"><code>00538d0</code></a> fix: Make Windows Cap'n Proto cache relocatable (<a href="https://redirect.github.com/vercel/turborepo/issues/13621">#13621</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/e14de24864ca2e0682de9adfa275ccda1a0fb134"><code>e14de24</code></a> feat: Hash uv lockfile closures (<a href="https://redirect.github.com/vercel/turborepo/issues/13611">#13611</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/4195e4122b710b40a5012ded88fd764e728b1599"><code>4195e41</code></a> feat: Run native uv tasks (<a href="https://redirect.github.com/vercel/turborepo/issues/13610">#13610</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/87156466a1e99bedd783ed25e1f2d71f55707a90"><code>8715646</code></a> feat: Discover uv workspaces (<a href="https://redirect.github.com/vercel/turborepo/issues/13609">#13609</a>)</li> <li><a href="https://github.com/vercel/turborepo/commit/5cf35ad3da3437baf1506e47f720544f887397d3"><code>5cf35ad</code></a> ci: Invalidate Cap'n Proto caches (<a href="https://redirect.github.com/vercel/turborepo/issues/13616">#13616</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vercel/turborepo/compare/v2.9.14...v2.10.8">compare view</a></li> </ul> </details> <br /> Updates `vite` from 8.0.16 to 8.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>create-vite@8.2.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.2.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.2.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.2.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.2.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.2.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.2.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.2.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.5</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.4</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.3</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.2</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.1</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>create-vite@8.1.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.1.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>plugin-legacy@8.1.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.1.0-beta.0</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/vitejs/vite/compare/v8.2.0-beta.0...v8.2.0">8.2.0</a> (2026-07-30)</h2> <h3>Features</h3> <ul> <li>add <code>input</code> to <code>server.fs.allow</code> (<a href="https://redirect.github.com/vitejs/vite/issues/23035">#23035</a>) (<a href="https://github.com/vitejs/vite/commit/95a3cdab83e1125b03d2e8dd942fb6b64209e5fa">95a3cda</a>)</li> <li><strong>bundled-dev:</strong> reload once after rebuild instead of via the fallback page (<a href="https://redirect.github.com/vitejs/vite/issues/23106">#23106</a>) (<a href="https://github.com/vitejs/vite/commit/b24381d741941b9ce2b1c07db62cc5f4d7bad981">b24381d</a>)</li> <li><strong>bundled-dev:</strong> support worker file update accepted by HMR (<a href="https://redirect.github.com/vitejs/vite/issues/23068">#23068</a>) (<a href="https://github.com/vitejs/vite/commit/0d04351fdc12258c75b9f1cda5780fdb836ed0ef">0d04351</a>)</li> <li><strong>config:</strong> include column in config incompatibility location (<a href="https://redirect.github.com/vitejs/vite/issues/23064">#23064</a>) (<a href="https://github.com/vitejs/vite/commit/8a245726944ed29225920d49be77c33c6e03afc8">8a24572</a>)</li> <li><strong>dev:</strong> resolve interface name for explicit host in network URLs (<a href="https://redirect.github.com/vitejs/vite/issues/22965">#22965</a>) (<a href="https://github.com/vitejs/vite/commit/3ac77d9dd742968961af38a5a91ed6b061ceda7d">3ac77d9</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>bundledDev:</strong> print build errors to the terminal when an HMR update fails (<a href="https://redirect.github.com/vitejs/vite/issues/23024">#23024</a>) (<a href="https://github.com/vitejs/vite/commit/41c465896e8b11b1eb9c5fbdafbdcc528e189a2c">41c4658</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/23069">#23069</a>) (<a href="https://github.com/vitejs/vite/commit/4c07b74416f859d7e8bdace13409ef2d080edf76">4c07b74</a>)</li> <li><strong>hmr:</strong> preserve environment snapshot during server restart (<a href="https://redirect.github.com/vitejs/vite/issues/22992">#22992</a>) (<a href="https://github.com/vitejs/vite/commit/b1186c36d06bb94941c58e8272fc4acb8512c93b">b1186c3</a>)</li> <li><strong>importAnalysis:</strong> interop imports injected into optimized dep files by plugins (<a href="https://redirect.github.com/vitejs/vite/issues/23029">#23029</a>) (<a href="https://github.com/vitejs/vite/commit/8c2a87d41fb24536e59643351758084cde4d0dd7">8c2a87d</a>)</li> <li><strong>module-runner:</strong> keep stack trace interception working when <code>Object.prototype</code> is frozen (<a href="https://redirect.github.com/vitejs/vite/issues/23073">#23073</a>) (<a href="https://github.com/vitejs/vite/commit/599c5b02a8b6879b05ede988020f1331e877aaea">599c5b0</a>)</li> <li><strong>server:</strong> strip base in indexHtml module graph lookup (<a href="https://redirect.github.com/vitejs/vite/issues/22932">#22932</a>) (<a href="https://github.com/vitejs/vite/commit/fa005d19af5d847931c6dbefc63841c137383e6c">fa005d1</a>)</li> <li>support resolving top-level input option with plugins (<a href="https://redirect.github.com/vitejs/vite/issues/23101">#23101</a>) (<a href="https://github.com/vitejs/vite/commit/41df81a6a4c3eef08f7a9a8ac9530cd136c0eafa">41df81a</a>)</li> </ul> <h3>Documentation</h3> <ul> <li><strong>config:</strong> correct cacheDir default fallback description (<a href="https://redirect.github.com/vitejs/vite/issues/23060">#23060</a>) (<a href="https://github.com/vitejs/vite/commit/aafa103af5d71fb59d7c3dd617d0cbef3b222f1f">aafa103</a>)</li> </ul> <h3>Tests</h3> <ul> <li>config CJS module vars in ESM case (<a href="https://redirect.github.com/vitejs/vite/issues/23010">#23010</a>) (<a href="https://github.com/vitejs/vite/commit/d8cd38830251b95fd7dddcd0eee0ce94cc61c2f4">d8cd388</a>)</li> </ul> <h2><a href="https://github.com/vitejs/vite/compare/v8.1.5...v8.2.0-beta.0">8.2.0-beta.0</a> (2026-07-22)</h2> <h3>Features</h3> <ul> <li>add <code>input</code> option (<a href="https://redirect.github.com/vitejs/vite/issues/22642">#22642</a>) (<a href="https://github.com/vitejs/vite/commit/9beae37d7221b25463a011feb40b0303ca328d87">9beae37</a>)</li> <li><strong>config:</strong> warn features incompatible with native loader in bundle loader (<a href="https://redirect.github.com/vitejs/vite/issues/22850">#22850</a>) (<a href="https://github.com/vitejs/vite/commit/05302b07267f6b4f9dbeac5b1d73fcc3dc06d730">05302b0</a>)</li> <li><strong>css:</strong> export PostCSS config type for type-safe configs (<a href="https://redirect.github.com/vitejs/vite/issues/22792">#22792</a>) (<a href="https://github.com/vitejs/vite/commit/302c755a8125b9a26214e3b413922b5513e41981">302c755</a>)</li> <li><strong>dev:</strong> label network URLs with their interface name (<a href="https://redirect.github.com/vitejs/vite/issues/22830">#22830</a>) (<a href="https://github.com/vitejs/vite/commit/78accc42a5b8887d9df624f7d4a934d3ead677d1">78accc4</a>)</li> <li><strong>optimizer:</strong> support aube lockfile (<a href="https://redirect.github.com/vitejs/vite/issues/22813">#22813</a>) (<a href="https://github.com/vitejs/vite/commit/6319827116c5be2a19c1b91c84ba3d38ad26a41c">6319827</a>)</li> <li><strong>optimizer:</strong> support nub lockfile (<a href="https://redirect.github.com/vitejs/vite/issues/22891">#22891</a>) (<a href="https://github.com/vitejs/vite/commit/65d3604f6fdbfcf6e86244d7fe3c1ca86acae701">65d3604</a>)</li> <li>update rolldown-related dependencies and use client-side HMR in bundled-dev (<a href="https://redirect.github.com/vitejs/vite/issues/22961">#22961</a>) (<a href="https://github.com/vitejs/vite/commit/960e9efbc1372000caac46cc2f123cef4824e2bb">960e9ef</a>)</li> <li><strong>wasm:</strong> expand test suite, unwrap WebAssembly.Global and enable js-string builtins (<a href="https://redirect.github.com/vitejs/vite/issues/22674">#22674</a>) (<a href="https://github.com/vitejs/vite/commit/9e79b51579457a9af4fa623b68a0bfabbf38010b">9e79b51</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>build:</strong> map CSS chunks in chunk import maps (fix <a href="https://redirect.github.com/vitejs/vite/issues/22946">#22946</a>) (<a href="https://redirect.github.com/vitejs/vite/issues/22947">#22947</a>) (<a href="https://github.com/vitejs/vite/commit/e16ff3a1199293ac9cdfa6132c08fdea162215f3">e16ff3a</a>)</li> <li><strong>config:</strong> exclude virtual modules from native config compat check (<a href="https://redirect.github.com/vitejs/vite/issues/22979">#22979</a>) (<a href="https://github.com/vitejs/vite/commit/2ced1fe4e4e480ed78cb7aa5c78319e57bfa7783">2ced1fe</a>)</li> <li><strong>css:</strong> rewrite urls in OnceExit-injected content (<a href="https://redirect.github.com/vitejs/vite/issues/22983">#22983</a>) (<a href="https://github.com/vitejs/vite/commit/abb793e18c92592c21fbb8e1f3fc450b5839f04f">abb793e</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22985">#22985</a>) (<a href="https://github.com/vitejs/vite/commit/04f345b37064cd0bba6447eb5c32be5c22162f3d">04f345b</a>)</li> <li><strong>deps:</strong> update dependency magic-string to v1 (<a href="https://redirect.github.com/vitejs/vite/issues/22998">#22998</a>) (<a href="https://github.com/vitejs/vite/commit/c60b4d7cdb85b7d4f78671cdcfb863e5f8b66bb7">c60b4d7</a>)</li> <li><strong>hmr:</strong> remove hot data after prune (<a href="https://redirect.github.com/vitejs/vite/issues/23002">#23002</a>) (<a href="https://github.com/vitejs/vite/commit/be9631658f5191ee5c5665e780239d42a330280a">be96316</a>)</li> <li>resolve root to real path (<a href="https://redirect.github.com/vitejs/vite/issues/22832">#22832</a>) (<a href="https://github.com/vitejs/vite/commit/55bba7bbd9de40d031360e4408fe91bff5b29ec9">55bba7b</a>)</li> </ul> <h3>Performance Improvements</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/24a611f1c83a976d32262628d42f683609746635"><code>24a611f</code></a> release: v7.2.4</li> <li><a href="https://github.com/vitejs/vite/commit/2d66b7b14aa6dfd62f3d6a59ee8382ed5ca6fd32"><code>2d66b7b</code></a> fix: revert &quot;perf(deps): replace debug with obug (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)&quot;</li> <li><a href="https://github.com/vitejs/vite/commit/a668014dba377c2b82a32d8124f1761e9ea74f82"><code>a668014</code></a> release: v7.2.3</li> <li><a href="https://github.com/vitejs/vite/commit/acfe939e1f7c303c34b0b39b883cc302da767fa2"><code>acfe939</code></a> perf(deps): replace debug with obug (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/4f8171eb3046bd70c83964689897dab4c6b58bc0"><code>4f8171e</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21128">#21128</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/50297208452241061cb44d09a4bbdf77a11ac01e"><code>5029720</code></a> chore(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21127">#21127</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/5909efd8fbfd1bf1eab65427aea0613124b2797a"><code>5909efd</code></a> fix: allow multiple <code>bindCLIShortcuts</code> calls with shortcut merging (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21103">#21103</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/39a0a15fd24ed37257c48b795097a3794e54d255"><code>39a0a15</code></a> chore(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21095">#21095</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/6a34ac3422686e7cf7cc9a25d299cb8e5a8d92a0"><code>6a34ac3</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21096">#21096</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/02ceaec45e17bef19159188a28d9196fed1761be"><code>02ceaec</code></a> chore(deps): update dependency <code>@​rollup/plugin-commonjs</code> to v29 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21099">#21099</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite">compare view</a></li> </ul> </details> <br /> Updates `rollup` from 4.59.0 to 4.62.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rollup/rollup/releases">rollup's releases</a>.</em></p> <blockquote> <h2>v4.62.3</h2> <h2>4.62.3</h2> <p><em>2026-07-26</em></p> <h3>Bug Fixes</h3> <ul> <li>Sanitize illegal characters preserved modules input base (<a href="https://redirect.github.com/rollup/rollup/issues/6439">#6439</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://redirect.github.com/rollup/rollup/pull/6421">#6421</a>: docs: update x_google_ignoreList link to canonical URL (<a href="https://github.com/DucMinhNe"><code>@​DucMinhNe</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6422">#6422</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6423">#6423</a>: chore(deps): update actions/checkout action to v7 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6424">#6424</a>: chore(deps): update dependency eslint-plugin-unicorn to v68 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6425">#6425</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6426">#6426</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6432">#6432</a>: fix: make isLegal idempotent by not using a global-flag regex (<a href="https://github.com/spokodev"><code>@​spokodev</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6433">#6433</a>: docs: clarify sideEffects and moduleSideEffects (<a href="https://github.com/ishaanlabs-gg"><code>@​ishaanlabs-gg</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6434">#6434</a>: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6435">#6435</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6436">#6436</a>: chore(deps): update actions/cache action to v6 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6438">#6438</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6439">#6439</a>: Sanitize input base before computing preserved module chunk names (<a href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6443">#6443</a>: chore(deps): update dependency eslint-plugin-unicorn to v71 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6444">#6444</a>: fix(deps): update rust crate swc_compiler_base to v60 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6446">#6446</a>: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6447">#6447</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6448">#6448</a>: chore(deps): update actions/setup-node action to v7 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6449">#6449</a>: chore(deps): update dependency eslint-plugin-unicorn to v72 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6450">#6450</a>: chore(deps): update dependency pinia to v4 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6451">#6451</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6455">#6455</a>: docs: fix broken commonjs namedExports link in troubleshooting (<a href="https://github.com/Hashim1999164"><code>@​Hashim1999164</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6456">#6456</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6457">#6457</a>: chore(deps): update dependency magic-string to v1 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6458">#6458</a>: fix(deps): update swc monorepo (major) (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6459">#6459</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6460">#6460</a>: Fix build:docs after rollup update (<a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> </ul> <h2>v4.62.2</h2> <h2>4.62.2</h2> <p><em>2026-06-19</em></p> <h3>Bug Fixes</h3> <ul> <li>Do not add spurious side-effect-free external imports to chunks when using minChunkSize (<a href="https://redirect.github.com/rollup/rollup/issues/6411">#6411</a>)</li> </ul> <h3>Pull Requests</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rollup/rollup/blob/master/CHANGELOG.md">rollup's changelog</a>.</em></p> <blockquote> <h2>4.62.3</h2> <p><em>2026-07-26</em></p> <h3>Bug Fixes</h3> <ul> <li>Sanitize illegal characters preserved modules input base (<a href="https://redirect.github.com/rollup/rollup/issues/6439">#6439</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://redirect.github.com/rollup/rollup/pull/6421">#6421</a>: docs: update x_google_ignoreList link to canonical URL (<a href="https://github.com/DucMinhNe"><code>@​DucMinhNe</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6422">#6422</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6423">#6423</a>: chore(deps): update actions/checkout action to v7 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6424">#6424</a>: chore(deps): update dependency eslint-plugin-unicorn to v68 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6425">#6425</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6426">#6426</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6432">#6432</a>: fix: make isLegal idempotent by not using a global-flag regex (<a href="https://github.com/spokodev"><code>@​spokodev</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6433">#6433</a>: docs: clarify sideEffects and moduleSideEffects (<a href="https://github.com/ishaanlabs-gg"><code>@​ishaanlabs-gg</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6434">#6434</a>: chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6435">#6435</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6436">#6436</a>: chore(deps): update actions/cache action to v6 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6438">#6438</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6439">#6439</a>: Sanitize input base before computing preserved module chunk names (<a href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6443">#6443</a>: chore(deps): update dependency eslint-plugin-unicorn to v71 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6444">#6444</a>: fix(deps): update rust crate swc_compiler_base to v60 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6446">#6446</a>: chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6447">#6447</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6448">#6448</a>: chore(deps): update actions/setup-node action to v7 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6449">#6449</a>: chore(deps): update dependency eslint-plugin-unicorn to v72 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6450">#6450</a>: chore(deps): update dependency pinia to v4 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6451">#6451</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6455">#6455</a>: docs: fix broken commonjs namedExports link in troubleshooting (<a href="https://github.com/Hashim1999164"><code>@​Hashim1999164</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6456">#6456</a>: fix(deps): update minor/patch updates (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6457">#6457</a>: chore(deps): update dependency magic-string to v1 (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6458">#6458</a>: fix(deps): update swc monorepo (major) (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6459">#6459</a>: chore(deps): lock file maintenance (<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6460">#6460</a>: Fix build:docs after rollup update (<a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> </ul> <h2>4.62.2</h2> <p><em>2026-06-19</em></p> <h3>Bug Fixes</h3> <ul> <li>Do not add spurious side-effect-free external imports to chunks when using minChunkSize (<a href="https://redirect.github.com/rollup/rollup/issues/6411">#6411</a>)</li> </ul> <h3>Pull Requests</h3> <ul> <li><a href="https://redirect.github.com/rollup/rollup/pull/6411">#6411</a>: Skip side-effect-free external imports when hoisting is disabled (<a href="https://github.com/morgan-coded"><code>@​morgan-coded</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> <li><a href="https://redirect.github.com/rollup/rollup/pull/6416">#6416</a>: refactor(rust/parser_ast): extract property AstConverter write buffer kind logic to new method (<a href="https://github.com/fabianbernhart"><code>@​fabianbernhart</code></a>, <a href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rollup/rollup/commit/a80a1974c584bfa8b694fb5d1a20f3fa75ebaf0a"><code>a80a197</code></a> 4.62.3</li> <li><a href="https://github.com/rollup/rollup/commit/e87e19b31e87a1dd6a749a6c11afe4cb9183cf8d"><code>e87e19b</code></a> Update audit resolve</li> <li><a href="https://github.com/rollup/rollup/commit/72f98e99228ad90a8e13d79709c009a827a4ef34"><code>72f98e9</code></a> Fix build:docs after rollup update (<a href="https://redirect.github.com/rollup/rollup/issues/6460">#6460</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/e3821cd714d4b1498b9c2d8c3070c9ff8febd7e4"><code>e3821cd</code></a> fix: make isLegal idempotent by not using a global-flag regex (<a href="https://redirect.github.com/rollup/rollup/issues/6432">#6432</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/db0c477a34a5b160c04cd52840f7ded8f57c446f"><code>db0c477</code></a> Sanitize input base before computing preserved module chunk names (<a href="https://redirect.github.com/rollup/rollup/issues/6439">#6439</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/a65f21ce941523761497810e4727ec6d1101a618"><code>a65f21c</code></a> chore(deps): update dependency magic-string to v1 (<a href="https://redirect.github.com/rollup/rollup/issues/6457">#6457</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/a43aae4c0c703dbd4e167345da6c9d41eafe48e6"><code>a43aae4</code></a> docs: fix broken commonjs namedExports link in troubleshooting (<a href="https://redirect.github.com/rollup/rollup/issues/6455">#6455</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/41c28d7db566c501c2a0a0588407aa6e86bb0ea9"><code>41c28d7</code></a> chore(deps): lock file maintenance (<a href="https://redirect.github.com/rollup/rollup/issues/6459">#6459</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/894136eb13ef629bc0b6324e88cfc26c65a6d88b"><code>894136e</code></a> chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (<a href="https://redirect.github.com/rollup/rollup/issues/6446">#6446</a>)</li> <li><a href="https://github.com/rollup/rollup/commit/fad0ba38db5793b730eb6e44483e3cec7c5f2f15"><code>fad0ba3</code></a> fix(deps): update swc monorepo (major) (<a href="https://redirect.github.com/rollup/rollup/issues/6458">#6458</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rollup/rollup/compare/v4.59.0...v4.62.3">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 4.1.9 to 4.1.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v4.1.10</h2> <h3>   🐞 Bug Fixes</h3> <ul> <li><strong>browser</strong>: Check fs access in builtin commands [backport to v4]  -  by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (claude-opus-4-8)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a> <a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li> <li><strong>vm</strong>: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by <a href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a> <a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a> chore: release v4.1.10 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10718">#10718</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/bae52b5112a6fd8200101b88bf8af9685d077295"><code>bae52b5</code></a> fix(vm): fix external module resolve error with deps optimizer query for enco...</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest">compare view</a></li> </ul> </details> <br /> Updates `@vitest/browser-playwright` from 4.1.9 to 4.1.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser-playwright's releases</a>.</em></p> <blockquote> <h2>v4.1.10</h2> <h3>   🐞 Bug Fixes</h3> <ul> <li><strong>browser</strong>: Check fs access in builtin commands [backport to v4]  -  by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (claude-opus-4-8)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a> <a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li> <li><strong>vm</strong>: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by <a href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a> <a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a> chore: release v4.1.10 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright/issues/10718">#10718</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f"><code>5c18dd2</code></a> fix(browser): check fs access in builtin commands [backport to v4] (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright/issues/10680">#10680</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-playwright">compare view</a></li> </ul> </details> <br /> Updates `@vitest/browser-webdriverio` from 4.1.9 to 4.1.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser-webdriverio's releases</a>.</em></p> <blockquote> <h2>v4.1.10</h2> <h3>   🐞 Bug Fixes</h3> <ul> <li><strong>browser</strong>: Check fs access in builtin commands [backport to v4]  -  by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (claude-opus-4-8)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a> <a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li> <li><strong>vm</strong>: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by <a href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a> <a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a> chore: release v4.1.10 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-webdriverio/issues/10718">#10718</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f"><code>5c18dd2</code></a> fix(browser): check fs access in builtin commands [backport to v4] (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-webdriverio/issues/10680">#10680</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-webdriverio">compare view</a></li> </ul> </details> <br /> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>	2026-08-03 15:49:15 -07:00
dependabot[bot]	56728fd3bd	chore(deps): bump @hono/node-server from 1.19.15 to 2.0.12 (#2635) ... Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.15 to 2.0.12. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/node-server/releases">@​hono/node-server's releases</a>.</em></p> <blockquote> <h2>v2.0.12</h2> <h2>What's Changed</h2> <ul> <li>test: replace supertest by <a href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/379">honojs/node-server#379</a></li> <li>fix(response): copy headers when init is a foreign Response by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/382">honojs/node-server#382</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12">https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12</a></p> <h2>v2.0.11</h2> <h2>What's Changed</h2> <ul> <li>test: use a custom helper for path traversal tests by <a href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li> <li>perf(request): fast-path QUERY methods by <a href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li> <li>perf(request): fast-path PATCH method by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p> <h2>v2.0.10</h2> <h2>Security fixes</h2> <p>This release includes a fix for the following security issue:</p> <h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3> <p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked the request's <code>IncomingMessage</code> and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. <a href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p> <hr /> <p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to this version.</p> <h2>v2.0.9</h2> <h2>What's Changed</h2> <ul> <li>fix(websocket): polyfill missing ErrorEvent global by <a href="https://github.com/otnc"><code>@​otnc</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li> <li>fix(serve-static): correct Range header parsing edge cases by <a href="https://github.com/otnc"><code>@​otnc</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li> <li>fix: recover complete request bodies after client disconnect by <a href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9">https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9</a></p> <h2>v2.0.8</h2> <h2>What's Changed</h2> <ul> <li>ci(release): add <code>--no-git-checks</code> option for <code>pnpm stage publish</code> by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/369">honojs/node-server#369</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8">https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8</a></p> <h2>v2.0.7</h2> <h2>What's Changed</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/honojs/node-server/commits/v2.0.12">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-28 23:24:25 -07:00
John Kennedy	a41e4185dd	fix: resolve Dependabot alerts (#2634) ... ## Summary - raise security overrides for the 18 open Dependabot alerts - refresh the pnpm lockfile to patched dependency versions - also resolve the newer `brace-expansion` advisory reported by `pnpm audit` ## Verification - `pnpm install --frozen-lockfile --ignore-scripts` - `pnpm audit --prod --audit-level=low` — no known vulnerabilities - `pnpm format:check` - `git diff --check` ## Note - `pnpm build` completed 10/15 tasks, then failed in the existing `@langchain/langgraph-api` TypeScript build (`pnpm tsc --outDir dist`) without diagnostics in the wrapper output. Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>	2026-07-26 01:28:12 +00:00
dependabot[bot]	07ba620415	chore(deps-dev): bump the svelte group across 1 directory with 3 updates (#2618) ... Bumps the svelte group with 3 updates in the / directory: [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte), [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [vitest-browser-svelte](https://github.com/vitest-community/vitest-browser-svelte). Updates `@sveltejs/vite-plugin-svelte` from 7.1.2 to 7.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/vite-plugin-svelte/releases">@​sveltejs/vite-plugin-svelte's releases</a>.</em></p> <blockquote> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/7"><code>@​7</code></a>.2.0</h2> <h3>Minor Changes</h3> <ul> <li>feat(inspector): add a context menu with current component stack (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1370">#1370</a>)</li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/7"><code>@​7</code></a>.1.4</h2> <h3>Patch Changes</h3> <ul> <li>fix: enforce ltr styles for inspector (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1324">#1324</a>)</li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/7"><code>@​7</code></a>.1.3</h2> <h3>Patch Changes</h3> <ul> <li>fix: ensure the inspector is injected into the client correctly for Vite+ projects (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1355">#1355</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md">@​sveltejs/vite-plugin-svelte's changelog</a>.</em></p> <blockquote> <h2>7.2.0</h2> <h3>Minor Changes</h3> <ul> <li>feat(inspector): add a context menu with current component stack (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1370">#1370</a>)</li> </ul> <h2>7.1.4</h2> <h3>Patch Changes</h3> <ul> <li>fix: enforce ltr styles for inspector (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1324">#1324</a>)</li> </ul> <h2>7.1.3</h2> <h3>Patch Changes</h3> <ul> <li>fix: ensure the inspector is injected into the client correctly for Vite+ projects (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1355">#1355</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/02981fd9bb395b6aa5453e2bc3166778ae71e326"><code>02981fd</code></a> Version Packages (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1371">#1371</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/4158aa2da85af8362364844548a9ba6787111719"><code>4158aa2</code></a> feat: context menu with component stack (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1370">#1370</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/c867a3ac277a61d8f398c21fc561fd33e8970e15"><code>c867a3a</code></a> Version Packages (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1368">#1368</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/dbdb2552c0d050178f1d89dfb0ae5fa98d5c2f2b"><code>dbdb255</code></a> fix: inspector rtl host styles (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1324">#1324</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/694bc9585e65e047cc12f4fa875bd3a56281302f"><code>694bc95</code></a> chore(deps): update dependency typescript to v6 (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1315">#1315</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/9281816ffb8ac12a29f2195e27cd6473b782f950"><code>9281816</code></a> chore(deps): update all non-major dependencies (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1365">#1365</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/02d370d6741c3d439329163acf0ba43974ad5141"><code>02d370d</code></a> Version Packages (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1361">#1361</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/3b581de58debac3784f27bf2d5613ef438335156"><code>3b581de</code></a> Revert &quot;feat: support <code>.svelte.mjs</code> and <code>.svelte.mts</code> files&quot; (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1366">#1366</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/5545e1aac9c7bfcc068ae3fb65c47f7898da2e58"><code>5545e1a</code></a> feat: support <code>.svelte.mjs</code> and <code>.svelte.mts</code> files (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1293">#1293</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/2cb977e28defa5324ee696b1cb234c6c7086730b"><code>2cb977e</code></a> fix(inspector): activate under Vite+ by matching its client module path (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1355">#1355</a>)</li> <li>See full diff in <a href="https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.2.0/packages/vite-plugin-svelte">compare view</a></li> </ul> </details> <br /> Updates `svelte` from 5.56.4 to 5.56.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/svelte/releases">svelte's releases</a>.</em></p> <blockquote> <h2>svelte@5.56.7</h2> <h3>Patch Changes</h3> <ul> <li>chore: provide <code>indent</code> option for <code>print</code> (<a href="https://redirect.github.com/sveltejs/svelte/pull/18474">#18474</a>)</li> </ul> <h2>svelte@5.56.6</h2> <h3>Patch Changes</h3> <ul> <li> <p>perf: skip unnecessary blocker analysis when compiling components without top-level await (<a href="https://redirect.github.com/sveltejs/svelte/pull/18548">#18548</a>)</p> </li> <li> <p>fix: rerun derived that had an abort controller on reconnection (<a href="https://redirect.github.com/sveltejs/svelte/pull/18551">#18551</a>)</p> </li> </ul> <h2>svelte@5.56.5</h2> <h3>Patch Changes</h3> <ul> <li> <p>chore: drop dead code that make TSGO fail (<a href="https://redirect.github.com/sveltejs/svelte/pull/18496">#18496</a>)</p> </li> <li> <p>fix: don't (re)connect deriveds when read inside branch/root effects (<a href="https://redirect.github.com/sveltejs/svelte/pull/18527">#18527</a>)</p> </li> <li> <p>fix: skip unnecessary derived effect in earlier batch (<a href="https://redirect.github.com/sveltejs/svelte/pull/18525">#18525</a>)</p> </li> <li> <p>fix: avoid declaration tag warning in event handlers (<a href="https://redirect.github.com/sveltejs/svelte/pull/18500">#18500</a>)</p> </li> <li> <p>fix: abort deriveds own AbortSignal when it disconnects (<a href="https://redirect.github.com/sveltejs/svelte/pull/18400">#18400</a>)</p> </li> <li> <p>fix: ensure <code>$state.eager()</code> is correctly transormed for SSR output (<a href="https://redirect.github.com/sveltejs/svelte/pull/18530">#18530</a>)</p> </li> <li> <p>fix: correctly transform declaration tags during SSR (<a href="https://redirect.github.com/sveltejs/svelte/pull/18492">#18492</a>)</p> </li> <li> <p>fix: transform computed keys in keyed <code>{#each}</code> destructuring patterns (<a href="https://redirect.github.com/sveltejs/svelte/pull/18521">#18521</a>)</p> </li> <li> <p>fix: chain preprocessor sourcemaps with an empty <code>sources[0]</code> instead of dropping them (<a href="https://redirect.github.com/sveltejs/svelte/pull/18518">#18518</a>)</p> </li> <li> <p>fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (<a href="https://redirect.github.com/sveltejs/svelte/pull/18541">#18541</a>)</p> </li> <li> <p>fix: don't treat declaration tags as parts inside each blocks (<a href="https://redirect.github.com/sveltejs/svelte/pull/18507">#18507</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md">svelte's changelog</a>.</em></p> <blockquote> <h2>5.56.7</h2> <h3>Patch Changes</h3> <ul> <li>chore: provide <code>indent</code> option for <code>print</code> (<a href="https://redirect.github.com/sveltejs/svelte/pull/18474">#18474</a>)</li> </ul> <h2>5.56.6</h2> <h3>Patch Changes</h3> <ul> <li> <p>perf: skip unnecessary blocker analysis when compiling components without top-level await (<a href="https://redirect.github.com/sveltejs/svelte/pull/18548">#18548</a>)</p> </li> <li> <p>fix: rerun derived that had an abort controller on reconnection (<a href="https://redirect.github.com/sveltejs/svelte/pull/18551">#18551</a>)</p> </li> </ul> <h2>5.56.5</h2> <h3>Patch Changes</h3> <ul> <li> <p>chore: drop dead code that make TSGO fail (<a href="https://redirect.github.com/sveltejs/svelte/pull/18496">#18496</a>)</p> </li> <li> <p>fix: don't (re)connect deriveds when read inside branch/root effects (<a href="https://redirect.github.com/sveltejs/svelte/pull/18527">#18527</a>)</p> </li> <li> <p>fix: skip unnecessary derived effect in earlier batch (<a href="https://redirect.github.com/sveltejs/svelte/pull/18525">#18525</a>)</p> </li> <li> <p>fix: avoid declaration tag warning in event handlers (<a href="https://redirect.github.com/sveltejs/svelte/pull/18500">#18500</a>)</p> </li> <li> <p>fix: abort deriveds own AbortSignal when it disconnects (<a href="https://redirect.github.com/sveltejs/svelte/pull/18400">#18400</a>)</p> </li> <li> <p>fix: ensure <code>$state.eager()</code> is correctly transormed for SSR output (<a href="https://redirect.github.com/sveltejs/svelte/pull/18530">#18530</a>)</p> </li> <li> <p>fix: correctly transform declaration tags during SSR (<a href="https://redirect.github.com/sveltejs/svelte/pull/18492">#18492</a>)</p> </li> <li> <p>fix: transform computed keys in keyed <code>{#each}</code> destructuring patterns (<a href="https://redirect.github.com/sveltejs/svelte/pull/18521">#18521</a>)</p> </li> <li> <p>fix: chain preprocessor sourcemaps with an empty <code>sources[0]</code> instead of dropping them (<a href="https://redirect.github.com/sveltejs/svelte/pull/18518">#18518</a>)</p> </li> <li> <p>fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (<a href="https://redirect.github.com/sveltejs/svelte/pull/18541">#18541</a>)</p> </li> <li> <p>fix: don't treat declaration tags as parts inside each blocks (<a href="https://redirect.github.com/sveltejs/svelte/pull/18507">#18507</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/svelte/commit/b29d7002ecf9bc0036b18647c0b7677a7cb0a914"><code>b29d700</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18560">#18560</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/b791cac54e2db43317f2bc6c8e41e694245c551e"><code>b791cac</code></a> chore: provide <code>indent</code> option for <code>print</code> (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18474">#18474</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/4a6a85b5f149cc96514ed3bf5e59083b9246d394"><code>4a6a85b</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18552">#18552</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/d0dbe1a48013b9c405b518511f8330baf3a27bc9"><code>d0dbe1a</code></a> perf: skip quadratic blocker analysis when no top-level await (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18548">#18548</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/22e0adb75a07442015feb0465cee1d3a61729e90"><code>22e0adb</code></a> fix: rerun derived that had an abort controller on reconnection (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18551">#18551</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/602a873b6b82bba4e6edc91b039e2f6defbe3fc4"><code>602a873</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18497">#18497</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/a4fd67e361914df612ae432ff75283c2d332ae18"><code>a4fd67e</code></a> fix: $state.eager() is sometimes incorrect in SSR (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18530">#18530</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/199ffebca375b29b65fcac53fc1825b452175a53"><code>199ffeb</code></a> fix: clear previous_task reference after abort in Tween (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18541">#18541</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/edeef1f9f713ab1ffdba698ff6d92cce8da1c5b4"><code>edeef1f</code></a> chore: add some failing tests (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18528">#18528</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/a91b0687866c8b2f78692010702bb811bf27b9a8"><code>a91b068</code></a> fix: abort deriveds own AbortSignal when it disconnects (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18400">#18400</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/svelte/commits/svelte@5.56.7/packages/svelte">compare view</a></li> </ul> </details> <br /> Updates `vitest-browser-svelte` from 2.2.0 to 3.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-community/vitest-browser-svelte/releases">vitest-browser-svelte's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <h3>   🚨 Breaking Changes</h3> <ul> <li>Make render async-only  -  by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/29">vitest-community/vitest-browser-svelte#29</a> <a href="https://github.com/vitest-community/vitest-browser-svelte/commit/fbd5d33"><!-- raw HTML omitted -->(fbd5d)<!-- raw HTML omitted --></a></li> </ul> <h3>   🐞 Bug Fixes</h3> <ul> <li>Ensure all <code>pure</code> exports are re-exported  -  by <a href="https://github.com/mcous"><code>@​mcous</code></a> in <a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/42">vitest-community/vitest-browser-svelte#42</a> <a href="https://github.com/vitest-community/vitest-browser-svelte/commit/25afcc8"><!-- raw HTML omitted -->(25afc)<!-- raw HTML omitted --></a></li> <li><strong>types</strong>: Export <code>RenderResult</code>  -  by <a href="https://github.com/Jungzl"><code>@​Jungzl</code></a> in <a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/40">vitest-community/vitest-browser-svelte#40</a> <a href="https://github.com/vitest-community/vitest-browser-svelte/commit/2555e88"><!-- raw HTML omitted -->(2555e)<!-- raw HTML omitted --></a></li> </ul> <h5>    <a href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.2.1...v3.0.0">View changes on GitHub</a></h5> <h2>v2.2.1</h2> <p><em>No significant changes</em></p> <h5>    <a href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.2.0...v2.2.1">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/544765466f25f4a2d63935f7f33f7e027eb495ff"><code>5447654</code></a> chore: release v3.0.0 (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/43">#43</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/fbd5d3309acc621a42a65f48d3764359ec3b2017"><code>fbd5d33</code></a> feat!: make render async-only (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/29">#29</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/25afcc8603221944a35bc99fbb0d811acb229100"><code>25afcc8</code></a> fix: ensure all <code>pure</code> exports are re-exported (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/42">#42</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/8500e8f051830d5514a634c6e625aefad757d695"><code>8500e8f</code></a> refactor(types): remove JSDoc type comments (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/41">#41</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/2555e884d659e47124e18efb4a3b565b9e64c992"><code>2555e88</code></a> fix(types): export <code>RenderResult</code> (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/40">#40</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/878bd966f78d8ef962098d0536d28099dfa606db"><code>878bd96</code></a> chore: release v2.2.1 (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/39">#39</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/20c97e63dc8ef0190afb043ad6e62d7775eebe3d"><code>20c97e6</code></a> build: switch from JSDoc to TypeScript (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/34">#34</a>)</li> <li>See full diff in <a href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.2.0...v3.0.0">compare view</a></li> </ul> </details> <br /> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>	2026-07-24 14:44:02 -07:00
dependabot[bot]	b508ae1edc	chore(deps): bump @hono/node-server from 2.0.10 to 2.0.11 (#2629) ... Bumps [@hono/node-server](https://github.com/honojs/node-server) from 2.0.10 to 2.0.11. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/node-server/releases">@​hono/node-server's releases</a>.</em></p> <blockquote> <h2>v2.0.11</h2> <h2>What's Changed</h2> <ul> <li>test: use a custom helper for path traversal tests by <a href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li> <li>perf(request): fast-path QUERY methods by <a href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li> <li>perf(request): fast-path PATCH method by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/node-server/commit/834e54f15cf12b80cf82823c845b2bab41056cf0"><code>834e54f</code></a> 2.0.11</li> <li><a href="https://github.com/honojs/node-server/commit/ba72bcd8c563fbe1e9678e7ef27794a0aa4a6158"><code>ba72bcd</code></a> perf(request): fast-path PATCH method (<a href="https://redirect.github.com/honojs/node-server/issues/380">#380</a>)</li> <li><a href="https://github.com/honojs/node-server/commit/962baa463879da394008f27510d68dc90b640e99"><code>962baa4</code></a> perf(request): fast-path QUERY methods (<a href="https://redirect.github.com/honojs/node-server/issues/376">#376</a>)</li> <li><a href="https://github.com/honojs/node-server/commit/62284d659380cb0354510d0359c160c8d970764d"><code>62284d6</code></a> test: use a custom helper for path traversal tests (<a href="https://redirect.github.com/honojs/node-server/issues/377">#377</a>)</li> <li>See full diff in <a href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-24 18:23:24 +00:00
dependabot[bot]	5d817d0f2e	chore(deps): bump the angular group across 1 directory with 12 updates (#2617) ... Bumps the angular group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `22.0.4` | `22.0.8` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `22.0.4` | `22.0.8` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `22.0.4` | `22.0.8` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `22.0.4` | `22.0.8` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `22.0.4` | `22.0.8` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `22.0.4` | `22.0.8` | | [@angular/build](https://github.com/angular/angular-cli) | `22.0.5` | `22.0.8` | | [@angular/cli](https://github.com/angular/angular-cli) | `22.0.5` | `22.0.8` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `22.0.4` | `22.0.8` | | [@analogjs/vite-plugin-angular](https://github.com/analogjs/analog) | `2.6.2` | `2.6.4` | | [@analogjs/vitest-angular](https://github.com/analogjs/analog) | `2.6.2` | `2.6.4` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `22.0.4` | `22.0.8` | Updates `@angular/common` from 22.0.4 to 22.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/common's releases</a>.</em></p> <blockquote> <h2>22.0.8</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix - c0368f2278" /></a></td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix - 8616ba9db6" /></a></td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix - d302c7ab83" /></a></td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix - 9d40f8aefe" /></a></td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix - 388daea2fc" /></a></td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix - bb39cda648" /></a></td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <h2>22.0.7</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix - 91e33aa1de" /></a></td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix - 5b516e3a58" /></a></td> <td>parsing of an empty template literal interpolation</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix - c88ddde1c9" /></a></td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix - 94d9591b51" /></a></td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix - c89f71a74c" /></a></td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix - 70500e4067" /></a></td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix - 1b9964675f" /></a></td> <td>allow multiple async validators</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix - 64d6d47a0c" /></a></td> <td>preserve intermediate number values in signal forms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix - 6cf7446afa" /></a></td> <td>prevent stale CVA writeback during debounce</td> </tr> </tbody> </table> <h3>http</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's changelog</a>.</em></p> <blockquote> <h1>22.0.8 (2026-07-22)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td> <td>fix</td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td> <td>fix</td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td> <td>fix</td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td> <td>fix</td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td> <td>fix</td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td> <td>fix</td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.6 (2026-07-15)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td> <td>fix</td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td> <td>fix</td> <td>parsing of an empty template literal interpolation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td> <td>fix</td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td> <td>fix</td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td> <td>fix</td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td> <td>fix</td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><code>c0368f2</code></a> fix(common): preserve crossorigin on image preloads</li> <li><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><code>9d40f8a</code></a> fix(http): prevent transfer cache key collisions</li> <li><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><code>91e33aa</code></a> fix(common): avoid prototype lookups in date format caches</li> <li><a href="https://github.com/angular/angular/commit/20b7dc3023df9ccde232cf9fef1d2b1d3ae68b23"><code>20b7dc3</code></a> fix(http): prevent interceptor signal reads from leaking into calling reactiv...</li> <li><a href="https://github.com/angular/angular/commit/748faa4f95dfdae1570057f7af1bc7031e80a94a"><code>748faa4</code></a> docs(docs-infra): Add build-time validation for API and guide links using rou...</li> <li><a href="https://github.com/angular/angular/commit/8e6d7f71906e35181577b9e66474695ba3077599"><code>8e6d7f7</code></a> fix(router): use safe hasOwnProperty when parsing query params</li> <li><a href="https://github.com/angular/angular/commit/eb8fb9fe58687fe0f341dc3beb5d0fb469605179"><code>eb8fb9f</code></a> fix(common): use Object.hasOwn in I18nSelectPipe to handle null-prototype and...</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.8/packages/common">compare view</a></li> </ul> </details> <br /> Updates `@angular/compiler` from 22.0.4 to 22.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/compiler's releases</a>.</em></p> <blockquote> <h2>22.0.8</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix - c0368f2278" /></a></td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix - 8616ba9db6" /></a></td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix - d302c7ab83" /></a></td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix - 9d40f8aefe" /></a></td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix - 388daea2fc" /></a></td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix - bb39cda648" /></a></td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <h2>22.0.7</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix - 91e33aa1de" /></a></td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix - 5b516e3a58" /></a></td> <td>parsing of an empty template literal interpolation</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix - c88ddde1c9" /></a></td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix - 94d9591b51" /></a></td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix - c89f71a74c" /></a></td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix - 70500e4067" /></a></td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix - 1b9964675f" /></a></td> <td>allow multiple async validators</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix - 64d6d47a0c" /></a></td> <td>preserve intermediate number values in signal forms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix - 6cf7446afa" /></a></td> <td>prevent stale CVA writeback during debounce</td> </tr> </tbody> </table> <h3>http</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's changelog</a>.</em></p> <blockquote> <h1>22.0.8 (2026-07-22)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td> <td>fix</td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td> <td>fix</td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td> <td>fix</td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td> <td>fix</td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td> <td>fix</td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td> <td>fix</td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.6 (2026-07-15)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td> <td>fix</td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td> <td>fix</td> <td>parsing of an empty template literal interpolation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td> <td>fix</td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td> <td>fix</td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td> <td>fix</td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td> <td>fix</td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/3854174ec4a25e21abaef4ddd9d968a5b46fc832"><code>3854174</code></a> refactor(compiler): enforce exhaustive defer trigger handling</li> <li><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><code>c89f71a</code></a> fix(core): ignore processing instruction syntax in templates</li> <li><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><code>5b516e3</code></a> fix(compiler): parsing of an empty template literal interpolation</li> <li><a href="https://github.com/angular/angular/commit/fd4ddcafed340dbc116df9718f03ee9e16c41c18"><code>fd4ddca</code></a> fix(compiler): use regular optional chaining expression for safe function cal...</li> <li><a href="https://github.com/angular/angular/commit/b5ea3408ce1414c5c93a4d252a298e1ef18f447e"><code>b5ea340</code></a> refactor(compiler): remove <code>visitAttributeComment</code></li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.8/packages/compiler">compare view</a></li> </ul> </details> <br /> Updates `@angular/core` from 22.0.4 to 22.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/core's releases</a>.</em></p> <blockquote> <h2>22.0.8</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix - c0368f2278" /></a></td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix - 8616ba9db6" /></a></td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix - d302c7ab83" /></a></td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix - 9d40f8aefe" /></a></td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix - 388daea2fc" /></a></td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix - bb39cda648" /></a></td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <h2>22.0.7</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix - 91e33aa1de" /></a></td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix - 5b516e3a58" /></a></td> <td>parsing of an empty template literal interpolation</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix - c88ddde1c9" /></a></td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix - 94d9591b51" /></a></td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix - c89f71a74c" /></a></td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix - 70500e4067" /></a></td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix - 1b9964675f" /></a></td> <td>allow multiple async validators</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix - 64d6d47a0c" /></a></td> <td>preserve intermediate number values in signal forms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix - 6cf7446afa" /></a></td> <td>prevent stale CVA writeback during debounce</td> </tr> </tbody> </table> <h3>http</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's changelog</a>.</em></p> <blockquote> <h1>22.0.8 (2026-07-22)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td> <td>fix</td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td> <td>fix</td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td> <td>fix</td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td> <td>fix</td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td> <td>fix</td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td> <td>fix</td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.6 (2026-07-15)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td> <td>fix</td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td> <td>fix</td> <td>parsing of an empty template literal interpolation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td> <td>fix</td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td> <td>fix</td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td> <td>fix</td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td> <td>fix</td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><code>388daea</code></a> fix(migrations): correctly migrate ngClass with mixed space-separated keys</li> <li><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><code>8616ba9</code></a> fix(core): ensure SVG animation attributeName is checked case-insensitively</li> <li><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><code>bb39cda</code></a> fix(migrations): preserve NgClass import on partial migration</li> <li><a href="https://github.com/angular/angular/commit/829d98e9ae08b12a2c4a624a64f87660d6dfde26"><code>829d98e</code></a> build: update cross-repo angular dependencies to v22.0.7</li> <li><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><code>70500e4</code></a> fix(core): preserve explicit input transform write type</li> <li><a href="https://github.com/angular/angular/commit/e881b962cc45ddc7d60da095bac496a7709f25cb"><code>e881b96</code></a> refactor(core): move signal debug graph interfaces to primitives/devtools</li> <li><a href="https://github.com/angular/angular/commit/1046fd9e56b607ddc3f22ffd86af7c3bddec40ce"><code>1046fd9</code></a> refactor(core): remove deprecated <code>unregisterTool</code> from <code>ModelContext</code></li> <li><a href="https://github.com/angular/angular/commit/5936ffb80cf729667951a43b2da479d663fb5c98"><code>5936ffb</code></a> refactor(core): update WebMCP tool registration to be asynchronous</li> <li><a href="https://github.com/angular/angular/commit/c82ae67e3d866daea488c9cb312c45bbb19c7b33"><code>c82ae67</code></a> Revert &quot;fix(core): allow static attributes for explicit input transforms&quot;</li> <li><a href="https://github.com/angular/angular/commit/ec9b4793e88828257cae38ac75b8e1c5392022ff"><code>ec9b479</code></a> build: update cross-repo angular dependencies</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.0.8/packages/core">compare view</a></li> </ul> </details> <br /> Updates `@angular/forms` from 22.0.4 to 22.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/forms's releases</a>.</em></p> <blockquote> <h2>22.0.8</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix - c0368f2278" /></a></td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix - 8616ba9db6" /></a></td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix - d302c7ab83" /></a></td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix - 9d40f8aefe" /></a></td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix - 388daea2fc" /></a></td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix - bb39cda648" /></a></td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <h2>22.0.7</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix - 91e33aa1de" /></a></td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix - 5b516e3a58" /></a></td> <td>parsing of an empty template literal interpolation</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix - c88ddde1c9" /></a></td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix - 94d9591b51" /></a></td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix - c89f71a74c" /></a></td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix - 70500e4067" /></a></td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix - 1b9964675f" /></a></td> <td>allow multiple async validators</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix - 64d6d47a0c" /></a></td> <td>preserve intermediate number values in signal forms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix - 6cf7446afa" /></a></td> <td>prevent stale CVA writeback during debounce</td> </tr> </tbody> </table> <h3>http</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/forms's changelog</a>.</em></p> <blockquote> <h1>22.0.8 (2026-07-22)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td> <td>fix</td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td> <td>fix</td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td> <td>fix</td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td> <td>fix</td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td> <td>fix</td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td> <td>fix</td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.6 (2026-07-15)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td> <td>fix</td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td> <td>fix</td> <td>parsing of an empty template literal interpolation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td> <td>fix</td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td> <td>fix</td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td> <td>fix</td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td> <td>fix</td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><code>d302c7a</code></a> fix(forms): ensure <code>pending</code> status propagates to the root form in signal forms</li> <li><a href="https://github.com/angular/angular/commit/e14ead1093a40200bc1bd4162611dcb9862fc714"><code>e14ead1</code></a> Revert &quot;fix(forms): preserve intermediate number values in signal forms&quot;</li> <li><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><code>64d6d47</code></a> fix(forms): preserve intermediate number values in signal forms</li> <li><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><code>70500e4</code></a> fix(core): preserve explicit input transform write type</li> <li><a href="https://github.com/angular/angular/commit/a6174d5900570ec0ce72683438bdbbc39158f96d"><code>a6174d5</code></a> refactor(forms): warn when a text input receives a null value in Signal Forms</li> <li><a href="https://github.com/angular/angular/commit/5936ffb80cf729667951a43b2da479d663fb5c98"><code>5936ffb</code></a> refactor(core): update WebMCP tool registration to be asynchronous</li> <li><a href="https://github.com/angular/angular/commit/5d06fcb1092d121a8990ef7934bfba0b599ff6f2"><code>5d06fcb</code></a> test(forms): register writeback test control as CVA</li> <li><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><code>6cf7446</code></a> fix(forms): prevent stale CVA writeback during debounce</li> <li><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><code>1b99646</code></a> fix(forms): allow multiple async validators</li> <li><a href="https://github.com/angular/angular/commit/eca3395019cf019452e2d1b6eacc43555c313e2d"><code>eca3395</code></a> removed console log</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.0.8/packages/forms">compare view</a></li> </ul> </details> <br /> Updates `@angular/platform-browser` from 22.0.4 to 22.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/platform-browser's releases</a>.</em></p> <blockquote> <h2>22.0.8</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix - c0368f2278" /></a></td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix - 8616ba9db6" /></a></td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix - d302c7ab83" /></a></td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix - 9d40f8aefe" /></a></td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix - 388daea2fc" /></a></td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix - bb39cda648" /></a></td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <h2>22.0.7</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix - 91e33aa1de" /></a></td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix - 5b516e3a58" /></a></td> <td>parsing of an empty template literal interpolation</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix - c88ddde1c9" /></a></td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix - 94d9591b51" /></a></td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix - c89f71a74c" /></a></td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix - 70500e4067" /></a></td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix - 1b9964675f" /></a></td> <td>allow multiple async validators</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix - 64d6d47a0c" /></a></td> <td>preserve intermediate number values in signal forms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix - 6cf7446afa" /></a></td> <td>prevent stale CVA writeback during debounce</td> </tr> </tbody> </table> <h3>http</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/platform-browser's changelog</a>.</em></p> <blockquote> <h1>22.0.8 (2026-07-22)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td> <td>fix</td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td> <td>fix</td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td> <td>fix</td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td> <td>fix</td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td> <td>fix</td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td> <td>fix</td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.6 (2026-07-15)</h1> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td> <td>fix</td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td> <td>fix</td> <td>parsing of an empty template literal interpolation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td> <td>fix</td> <td>support foreign components inside control flow blocks (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td> <td>perf</td> <td>do not emit tag name when control flow root is foreign component (<a href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td> <td>fix</td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td> <td>fix</td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td> <td>fix</td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td> <td>fix</td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/b34bf0dce855bca3c6dfcf7e19d38b3b39288a16"><code>b34bf0d</code></a> fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP</li> <li><a href="https://github.com/angular/angular/commit/ab18f5ff0bfdd7ef5f3050c1a271c1553b30f608"><code>ab18f5f</code></a> refactor(core): cleanup Meta service</li> <li><a href="https://github.com/angular/angular/commit/748faa4f95dfdae1570057f7af1bc7031e80a94a"><code>748faa4</code></a> docs(docs-infra): Add build-time validation for API and guide links using rou...</li> <li><a href="https://github.com/angular/angular/commit/97197786b3d77154ace1c8e638c12ccc12b4610f"><code>9719778</code></a> docs: add NG05200 error reference page for SANITIZATION_UNSAFE_SCRIPT</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.8/packages/platform-browser">compare view</a></li> </ul> </details> <br /> Updates `@angular/router` from 22.0.4 to 22.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/router's releases</a>.</em></p> <blockquote> <h2>22.0.8</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix - c0368f2278" /></a></td> <td>preserve crossorigin on image preloads</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix - 8616ba9db6" /></a></td> <td>ensure SVG animation attributeName is checked case-insensitively</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix - d302c7ab83" /></a></td> <td>ensure <code>pending</code> status propagates to the root form in signal forms</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix - 9d40f8aefe" /></a></td> <td>prevent transfer cache key collisions</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix - 388daea2fc" /></a></td> <td>correctly migrate ngClass with mixed space-separated keys</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix - bb39cda648" /></a></td> <td>preserve NgClass import on partial migration</td> </tr> </tbody> </table> <h2>22.0.7</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix - 91e33aa1de" /></a></td> <td>avoid prototype lookups in date format caches</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix - 5b516e3a58" /></a></td> <td>parsing of an empty template literal interpolation</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix - c88ddde1c9" /></a></td> <td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix - 94d9591b51" /></a></td> <td>allow static attributes for explicit input transforms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix - c89f71a74c" /></a></td> <td>ignore processing instruction syntax in templates</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix - 70500e4067" /></a></td> <td>preserve explicit input transform write type</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix - 1b9964675f" /></a></td> <td>allow multiple async validators</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix - 64d6d47a0c" /></a></td> <td>preserve intermediate number values in signal forms</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix - 6cf7446afa" /></a></td> <td>prevent stale CVA writeback during debounce</td> </tr> </tbody> </table> <h3>h... _Description has been truncated_ Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-24 11:13:54 -07:00
dependabot[bot]	708770350b	chore(deps): bump @hono/node-server from 1.19.13 to 2.0.10 (#2628) ... Bumps [@hono/node-server](https://github.com/honojs/node-server) from 1.19.13 to 2.0.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/node-server/releases">@​hono/node-server's releases</a>.</em></p> <blockquote> <h2>v2.0.10</h2> <h2>Security fixes</h2> <p>This release includes a fix for the following security issue:</p> <h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3> <p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked the request's <code>IncomingMessage</code> and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. <a href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p> <hr /> <p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to this version.</p> <h2>v2.0.9</h2> <h2>What's Changed</h2> <ul> <li>fix(websocket): polyfill missing ErrorEvent global by <a href="https://github.com/otnc"><code>@​otnc</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li> <li>fix(serve-static): correct Range header parsing edge cases by <a href="https://github.com/otnc"><code>@​otnc</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li> <li>fix: recover complete request bodies after client disconnect by <a href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their first contribution in <a href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9">https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9</a></p> <h2>v2.0.8</h2> <h2>What's Changed</h2> <ul> <li>ci(release): add <code>--no-git-checks</code> option for <code>pnpm stage publish</code> by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/369">honojs/node-server#369</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8">https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8</a></p> <h2>v2.0.7</h2> <h2>What's Changed</h2> <ul> <li>chore: migrate to pnpm by <a href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/367">honojs/node-server#367</a></li> <li>fix(serve-static): serve precompressed files for application/octet-stream by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/366">honojs/node-server#366</a></li> <li>chore: bump <code>supertest</code> by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/368">honojs/node-server#368</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.6...v2.0.7">https://github.com/honojs/node-server/compare/v2.0.6...v2.0.7</a></p> <h2>v2.0.6</h2> <h2>What's Changed</h2> <ul> <li>ci: publish to npm from CI with OIDC trusted publishing and bump <code>np</code> by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/361">honojs/node-server#361</a></li> <li>ci: use npm Staged publishing by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/364">honojs/node-server#364</a></li> <li>fix: preserve status and statusText when cloning a Response with liveheaders by <a href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a href="https://redirect.github.com/honojs/node-server/pull/363">honojs/node-server#363</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/node-server/compare/v2.0.5...v2.0.6">https://github.com/honojs/node-server/compare/v2.0.5...v2.0.6</a></p> <h2>v2.0.5</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/node-server/commit/7c1457ed5536c02fdd2f001129fae67bcbca54a1"><code>7c1457e</code></a> 2.0.10</li> <li><a href="https://github.com/honojs/node-server/commit/3a21938c418340e980cb7ffa88e78369f78392d1"><code>3a21938</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/node-server/commit/98420217e53a17a238ef1aa1a6bef0b2b70136c5"><code>9842021</code></a> 2.0.9</li> <li><a href="https://github.com/honojs/node-server/commit/51f3bf56f56d9691ec0f7e1562a96f0b485a7dd9"><code>51f3bf5</code></a> fix: recover complete request bodies after client disconnect (<a href="https://redirect.github.com/honojs/node-server/issues/375">#375</a>)</li> <li><a href="https://github.com/honojs/node-server/commit/fdb87badbe313cfbfe6bb2355e9893dc0698d2bd"><code>fdb87ba</code></a> fix(serve-static): correct Range header parsing edge cases (<a href="https://redirect.github.com/honojs/node-server/issues/372">#372</a>)</li> <li><a href="https://github.com/honojs/node-server/commit/912e3fd80c4311756f724bd566de1433c8d772d9"><code>912e3fd</code></a> fix(websocket): polyfill missing ErrorEvent global (<a href="https://redirect.github.com/honojs/node-server/issues/371">#371</a>)</li> <li><a href="https://github.com/honojs/node-server/commit/114c15efb38dabaf81af774ddb764409e3d156d8"><code>114c15e</code></a> 2.0.8</li> <li><a href="https://github.com/honojs/node-server/commit/5db2d5df662cd69ff5c4cc23b8ecb3a6f63e4e38"><code>5db2d5d</code></a> ci(release): add <code>--no-git-checks</code> option for <code>pnpm stage publish</code> (<a href="https://redirect.github.com/honojs/node-server/issues/369">#369</a>)</li> <li><a href="https://github.com/honojs/node-server/commit/a528a77ed2c28dc12775c849abc6b6df6d4cb44c"><code>a528a77</code></a> 2.0.7</li> <li><a href="https://github.com/honojs/node-server/commit/b2d610c1e37a96639fbb2eae662e858800aa8906"><code>b2d610c</code></a> chore: bump <code>supertest</code> (<a href="https://redirect.github.com/honojs/node-server/issues/368">#368</a>)</li> <li>Additional commits viewable in <a href="https://github.com/honojs/node-server/compare/v1.19.13...v2.0.10">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for <code>@​hono/node-server</code> since your current version.</p> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-23 13:14:43 -07:00
dependabot[bot]	fa9892117d	chore(deps-dev): bump @vitest/browser from 4.1.9 to 4.1.10 (#2624) ... Bumps [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) from 4.1.9 to 4.1.10. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser's releases</a>.</em></p> <blockquote> <h2>v4.1.10</h2> <h3>   🐞 Bug Fixes</h3> <ul> <li><strong>browser</strong>: Check fs access in builtin commands [backport to v4]  -  by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>, <strong>Hiroshi Ogawa</strong> and <strong>OpenCode (claude-opus-4-8)</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a> <a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li> <li><strong>vm</strong>: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4]  -  by <a href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a> <a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a> chore: release v4.1.10 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/10718">#10718</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f"><code>5c18dd2</code></a> fix(browser): check fs access in builtin commands [backport to v4] (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/10680">#10680</a>)</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-23 13:13:18 -07:00
dependabot[bot]	cdffd18d19	chore(deps): bump the langchain group across 1 directory with 6 updates (#2616) ... Bumps the langchain group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@langchain/core](https://github.com/langchain-ai/langchainjs) | `1.2.1` | `1.2.3` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.2` | `1.5.3` | | [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `1.5.3` | `1.5.5` | | [@langchain/classic](https://github.com/langchain-ai/langchainjs) | `1.0.38` | `1.0.40` | | [@langchain/quickjs](https://github.com/langchain-ai/deepagentsjs) | `0.5.1` | `0.6.0` | | [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.0` | `0.8.4` | Updates `@langchain/core` from 1.2.1 to 1.2.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/core's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.2.3</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11200">#11200</a> <a href="https://github.com/langchain-ai/langchainjs/commit/08e588865927c3bf0eb2ec418cfb3fba527e14bb"><code>08e5888</code></a> Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! - fix(aws): normalize and safely replay Bedrock reasoning blocks</p> <p>Emit standard reasoning blocks with preserved signatures, omit incomplete signature-only reasoning during replay, and retain compatibility with legacy and redacted Bedrock reasoning.</p> </li> </ul> <h2><code>@​langchain/core</code><a href="https://github.com/1"><code>@​1</code></a>.2.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11171">#11171</a> <a href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(core): coerce string v1 AIMessage content to text blocks</p> <p>Prevent <code>contentBlocks.push is not a function</code> when constructing an <code>AIMessage</code> with <code>response_metadata.output_version === &quot;v1&quot;</code> and string <code>content</code> (common in serialized LangGraph stream payloads).</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/82a6b8ebf1a876b0ac819f2ee0ae6c6582031cb5"><code>82a6b8e</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11202">#11202</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/08e588865927c3bf0eb2ec418cfb3fba527e14bb"><code>08e5888</code></a> fix(aws): normalize Bedrock reasoning blocks (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11200">#11200</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/21aaeb0b2ea5f526702bf6b8f7e1f6da34a21d2e"><code>21aaeb0</code></a> fix: patch 13 high/critical Dependabot alerts (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11199">#11199</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/782c7f2b2b5c67352736686c8d124e5f85e97fd0"><code>782c7f2</code></a> chore(dev): bump <code>@​types/node</code> from 25.9.1 to 26.1.0 in the types group across ...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a> fix(openai): drop <code>tool_call</code> content blocks from chat completions input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a> fix(openai): filter out content blocks the chat completions api rejects as in...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a> fix(core): coerce string v1 AIMessage content to text blocks (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.1...@langchain/core@1.2.3">compare view</a></li> </ul> </details> <br /> Updates `langchain` from 1.5.2 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">langchain's releases</a>.</em></p> <blockquote> <h2>langchain@1.5.3</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11167">#11167</a> <a href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - fix(langchain): malformed tool input schemas are unrecoverable</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a> fix(langchain): malformed tool input schemas are unrecoverable (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a> chore(deps): bump the aws group across 1 directory with 7 updates (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/553155b5807becca67dcca790b8e42b4e7950b50"><code>553155b</code></a> chore(deps): bump js-yaml from 5.0.0 to 5.1.0 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11142">#11142</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/24bde73901daa41b626eac843453a7a951ff98c3"><code>24bde73</code></a> chore(deps): bump prettier from 3.8.3 to 3.9.4 in the typescript-eslint group...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/8db72635b93f2f9c8dd79472414741a624c375a9"><code>8db7263</code></a> fix: remove duplicate pnpm lockfile entries (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11141">#11141</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/99449de42a492ac5302f61f294f11836779e7b16"><code>99449de</code></a> chore(deps): bump the langchain group with 5 updates (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11131">#11131</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/39c17d7388e76cea7f4eb59c3833b2d62df297cb"><code>39c17d7</code></a> chore(deps): bump google-auth-library from 10.6.2 to 10.9.0 in the google gro...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/32613bee109a3e72423fbe4a3fa774ec12f20e63"><code>32613be</code></a> chore(deps): bump the build-and-test group with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11133">#11133</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2ecacad5912bb8f9289a01828c0583f2a17e7b79"><code>2ecacad</code></a> chore(deps): bump the gh-actions-minor-and-patch group with 2 updates (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11129">#11129</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.2...langchain@1.5.3">compare view</a></li> </ul> </details> <br /> Updates `@langchain/openai` from 1.5.3 to 1.5.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/openai's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.5</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11175">#11175</a> <a href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - fix(openai): filter out content blocks the chat completions api rejects as input</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11177">#11177</a> <a href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - fix(openai): drop tool_call content blocks from chat completions input</p> </li> </ul> <h2><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.4</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11169">#11169</a> <a href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - fix(openai): emit output_text for assistant content in responses input</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a> fix(openai): drop <code>tool_call</code> content blocks from chat completions input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a> fix(openai): filter out content blocks the chat completions api rejects as in...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a> fix(core): coerce string v1 AIMessage content to text blocks (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a> fix(openai): emit <code>output_text</code> for assistant content in responses input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a> fix(langchain): malformed tool input schemas are unrecoverable (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a> chore(deps): bump the aws group across 1 directory with 7 updates (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.3...@langchain/openai@1.5.5">compare view</a></li> </ul> </details> <br /> Updates `@langchain/classic` from 1.0.38 to 1.0.40 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/classic's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/classic</code><a href="https://github.com/1"><code>@​1</code></a>.0.40</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>, <a href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>]: <ul> <li><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.5</li> </ul> </li> </ul> <h2><code>@​langchain/classic</code><a href="https://github.com/1"><code>@​1</code></a>.0.39</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>]: <ul> <li><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.4</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a> fix(openai): drop <code>tool_call</code> content blocks from chat completions input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a> fix(openai): filter out content blocks the chat completions api rejects as in...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a> fix(core): coerce string v1 AIMessage content to text blocks (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a> fix(openai): emit <code>output_text</code> for assistant content in responses input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a> fix(langchain): malformed tool input schemas are unrecoverable (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a> chore(deps): bump the aws group across 1 directory with 7 updates (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/classic@1.0.38...@langchain/classic@1.0.40">compare view</a></li> </ul> </details> <br /> Updates `@langchain/quickjs` from 0.5.1 to 0.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/deepagentsjs/releases">@​langchain/quickjs's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/quickjs</code><a href="https://github.com/0"><code>@​0</code></a>.6.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/deepagentsjs/pull/606">#606</a> <a href="https://github.com/langchain-ai/deepagentsjs/commit/3c8f8b2ea6f0204353c63bf49c3fdc6655bf1069"><code>3c8f8b2</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - chore(quickjs): disallow task as a configurable ptc tool</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/ff8cc5c4b4d17dc0c784e162a1b69563305fcbdc"><code>ff8cc5c</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/607">#607</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/1a2b2df5528f0f61870b054fff8291355f6a2a0b"><code>1a2b2df</code></a> fix(deepagents): default unknown file extensions to text/plain (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/656">#656</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/5f93c114759399002a3981a93e3df13981514b1d"><code>5f93c11</code></a> fix(modal): modal sandboxes fail to upload files (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/657">#657</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/ff7d82a791456b268c0e9bf70a9e455295ffb4b9"><code>ff7d82a</code></a> build(deps): bump the minor-deps-updates-main group with 8 updates (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/640">#640</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/88986a241743ca6b8db513c1c9926a7b59d3ca27"><code>88986a2</code></a> build(deps): bump the major-deps-updates-main group with 3 updates (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/641">#641</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/9217edd307d7815fe201541951d70a44d70918bc"><code>9217edd</code></a> build(deps): bump the patch-deps-updates-main group with 15 updates (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/639">#639</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/4f1b6cfd71e6a309f8754e700cca3ef9367638b7"><code>4f1b6cf</code></a> build(deps): bump actions/checkout from 6.0.1 to 7.0.0 in the major-deps-upda...</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/1cca3d32bb8f992e29322ed041308555fda39cfe"><code>1cca3d3</code></a> build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in the minor-deps-...</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/331b80f8d00a568ba58ab7af4d02f4dfa097d4ce"><code>331b80f</code></a> build(deps): bump the patch-deps-updates group with 2 updates (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/636">#636</a>)</li> <li><a href="https://github.com/langchain-ai/deepagentsjs/commit/5b462f2ab2400fba52906e8f1485a500ec5b6e17"><code>5b462f2</code></a> fix: migrate Daytona SDK dependency [closes <a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/609">#609</a>] (<a href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/614">#614</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/deepagentsjs/compare/@langchain/quickjs@0.5.1...@langchain/quickjs@0.6.0">compare view</a></li> </ul> </details> <br /> Updates `langsmith` from 0.8.0 to 0.8.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's releases</a>.</em></p> <blockquote> <h2>v0.8.4</h2> <h2>What's Changed</h2> <ul> <li>release(js): 0.6.3 by <a href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2864">langchain-ai/langsmith-sdk#2864</a></li> <li>chore(deps): bump python-multipart from 0.0.26 to 0.0.27 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2859">langchain-ai/langsmith-sdk#2859</a></li> <li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.91.1 to 0.92.0 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2858">langchain-ai/langsmith-sdk#2858</a></li> <li>chore(deps): bump postcss from 8.5.8 to 8.5.14 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2857">langchain-ai/langsmith-sdk#2857</a></li> <li>chore(deps): bump hono from 4.12.15 to 4.12.18 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2860">langchain-ai/langsmith-sdk#2860</a></li> <li>chore(deps-dev): bump langchain-core from 1.3.2 to 1.3.3 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2867">langchain-ai/langsmith-sdk#2867</a></li> <li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.92.0 to 0.93.0 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2869">langchain-ai/langsmith-sdk#2869</a></li> <li>chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /python by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2873">langchain-ai/langsmith-sdk#2873</a></li> <li>chore(deps): bump the py-minor-and-patch group across 1 directory with 12 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2876">langchain-ai/langsmith-sdk#2876</a></li> <li>chore(deps-dev): bump the js-minor-and-patch group across 1 directory with 16 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2877">langchain-ai/langsmith-sdk#2877</a></li> <li>chore(deps): bump the py-minor-and-patch group across 1 directory with 11 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2879">langchain-ai/langsmith-sdk#2879</a></li> <li>chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2868">langchain-ai/langsmith-sdk#2868</a></li> <li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.93.0 to 0.94.0 in /js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2878">langchain-ai/langsmith-sdk#2878</a></li> <li>sdk(js): rename experimental/sandbox -&gt; sandbox (breaking) by <a href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2885">langchain-ai/langsmith-sdk#2885</a></li> <li>sdk(py): drop sandbox alpha/experimental warnings by <a href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2884">langchain-ai/langsmith-sdk#2884</a></li> <li>feat(sandbox): make snapshot optional and add TS options overload by <a href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2887">langchain-ai/langsmith-sdk#2887</a></li> <li>release(py): 0.8.4 by <a href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2889">langchain-ai/langsmith-sdk#2889</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.3...v0.8.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.3...v0.8.4</a></p> <h2>v0.8.3</h2> <h2>What's Changed</h2> <ul> <li>fix(js): prevent sending [object Object] as span attribute when dealing with nested objects, send full langsmith.usage_metadata if present by <a href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2845">langchain-ai/langsmith-sdk#2845</a></li> <li>release(js): bump to 0.6.2 by <a href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2856">langchain-ai/langsmith-sdk#2856</a></li> <li>sdk(py): replace ttl_seconds with idle_ttl_seconds + delete_after_stop_seconds by <a href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2853">langchain-ai/langsmith-sdk#2853</a></li> <li>sdk(js): replace ttlSeconds with idleTtlSeconds + deleteAfterStopSeconds by <a href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2854">langchain-ai/langsmith-sdk#2854</a></li> <li>Fix push_agent URL owner for name-only identifiers by <a href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2862">langchain-ai/langsmith-sdk#2862</a></li> <li>docs(langsmith): clarify trust boundaries when working with hub by <a href="https://github.com/eyurtsev"><code>@​eyurtsev</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2861">langchain-ai/langsmith-sdk#2861</a></li> <li>release(py): 0.8.3 by <a href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2863">langchain-ai/langsmith-sdk#2863</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.2...v0.8.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.2...v0.8.3</a></p> <h2>v0.8.2</h2> <h2>What's Changed</h2> <ul> <li>Bump JS SDK version to 0.6.1 by <a href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2847">langchain-ai/langsmith-sdk#2847</a></li> <li>fix: parse urllib3 version with packaging.Version by <a href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2851">langchain-ai/langsmith-sdk#2851</a></li> <li>Bump Python SDK version to 0.8.2 by <a href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2855">langchain-ai/langsmith-sdk#2855</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a> made their first contribution in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2851">langchain-ai/langsmith-sdk#2851</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.1...v0.8.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.1...v0.8.2</a></p> <h2>v0.8.1</h2> <h2>What's Changed</h2> <ul> <li>chore(js): remove experimental opencode integration by <a href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2836">langchain-ai/langsmith-sdk#2836</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/273f8f9b0deccb7b21f899fbe6ee0474702a9860"><code>273f8f9</code></a> release(py): 0.8.4 (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2889">#2889</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/afbf4fb970f1b1d5bc4b8fb3e233a8bef1a5eac9"><code>afbf4fb</code></a> feat(sandbox): make snapshot optional and add TS options overload (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2887">#2887</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/54da5410a2ab7ee67b2eed9137f8dcbbc1426355"><code>54da541</code></a> sdk(py): drop sandbox alpha/experimental warnings (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2884">#2884</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/1536e2bb61b35acd9bf7ef4b14fa3305f349fd24"><code>1536e2b</code></a> sdk(js): rename experimental/sandbox -&gt; sandbox (breaking) (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2885">#2885</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/8f635fbb0e787b0db7450e12e4fed234053a2b1b"><code>8f635fb</code></a> chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.93.0 to 0.94.0 in /js (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2878">#2878</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/ce0f40f3852ff938df2b9c1922b352c2559e5acc"><code>ce0f40f</code></a> chore(deps): bump the npm_and_yarn group across 2 directories with 2 updates ...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/061c197e3aefee98024ca3ad280c8530e5140a67"><code>061c197</code></a> chore(deps): bump the py-minor-and-patch group across 1 directory with 11 upd...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/ab5d5f3f2253415f8697aa4b7561c47ea0b0de33"><code>ab5d5f3</code></a> chore(deps-dev): bump the js-minor-and-patch group across 1 directory with 16...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/3dc69de1025cb08f1fda8a63447ebba2c13a4b16"><code>3dc69de</code></a> chore(deps): bump the py-minor-and-patch group across 1 directory with 12 upd...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/6754bd3bec2b88db8471b4d4726cf95021bc4476"><code>6754bd3</code></a> chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /python (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2873">#2873</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.0...v0.8.4">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-23 12:04:59 -07:00
dependabot[bot]	c15239f5c9	chore(deps): bump tar from 7.5.16 to 7.5.19 (#2625) ... Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.19. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad"><code>be440da</code></a> 7.5.19</li> <li><a href="https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3"><code>2812e93</code></a> add maxDecompressionRatio guard against explosive decompression</li> <li><a href="https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93"><code>9ecd4d2</code></a> 7.5.18</li> <li><a href="https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5"><code>9e78bf0</code></a> refuse to let header size be less than 0</li> <li><a href="https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b"><code>e02a4e9</code></a> pax: parse values according to known types</li> <li><a href="https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946"><code>9cbdb31</code></a> 7.5.17</li> <li><a href="https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3"><code>7a635c2</code></a> terminate pax strings on nul bytes</li> <li>See full diff in <a href="https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.19">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 15:50:29 -07:00
dependabot[bot]	2dfb9211b6	chore(deps): bump hono from 4.12.25 to 4.12.27 (#2627) ... Bumps [hono](https://github.com/honojs/hono) from 4.12.25 to 4.12.27. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/hono/releases">hono's releases</a>.</em></p> <blockquote> <h2>v4.12.27</h2> <h2>Security fixes</h2> <p>This release includes fixes for the following security issues:</p> <h3>hono/jsx does not isolate context per request</h3> <p>Affects: <code>hono/jsx</code>, <code>hono/jsx-renderer</code>. During SSR, context was stored process-wide instead of per request, so <code>useContext()</code>/<code>useRequestContext()</code> read after an <code>await</code> in an async component could return another concurrent request's value — leading to cross-request data disclosure or authorization checks against the wrong request. GHSA-hvrm-45r6-mjfj</p> <h3>Server-Side XSS via JSX escaping bypass in cx()</h3> <p>Affects: <code>hono/css</code>. <code>cx()</code> marked its composed class name as already-escaped without escaping the input, so untrusted input passed as a class name could break out of the JSX <code>class</code> attribute during SSR and inject markup (XSS). GHSA-w62v-xxxg-mg59</p> <h3>API Gateway v1 adapter can drop a repeated request header value</h3> <p>Affects: <code>hono/aws-lambda</code>. The API Gateway v1 (and VPC Lattice) adapter de-duplicated repeated header values by substring instead of exact match, dropping a value that is a substring of another (e.g. <code>203.0.113.1</code> dropped when <code>203.0.113.10</code> is present) — affecting logic such as <code>X-Forwarded-For</code>-based IP restriction. GHSA-xgm2-5f3f-mvvc</p> <hr /> <p>Users of <code>hono/jsx</code>/<code>hono/jsx-renderer</code>, <code>hono/css</code> (<code>cx()</code>), or the <code>hono/aws-lambda</code> API Gateway v1 / VPC Lattice adapters are encouraged to upgrade.</p> <h2>v4.12.26</h2> <h2>What's Changed</h2> <ul> <li>fix(lambda-edge): satisfy Deno lib types for Content-Length body encoding by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/5013">honojs/hono#5013</a></li> <li>ci: publish to npm from CI with OIDC trusted publishing by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/5028">honojs/hono#5028</a></li> <li>chore: remove unused devcontainer and gitpod configs by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/5029">honojs/hono#5029</a></li> <li>chore: replace arg and glob with Bun native APIs in build script by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/5030">honojs/hono#5030</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.12.25...v4.12.26">https://github.com/honojs/hono/compare/v4.12.25...v4.12.26</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/hono/commit/97c6fe1f12298c715eb7b2da65b4b6e0d81682bb"><code>97c6fe1</code></a> 4.12.27</li> <li><a href="https://github.com/honojs/hono/commit/aa921770d09bc35970362d5a2630a878f6d982fd"><code>aa92177</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc"><code>cd3f6f7</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/d4853a8f2794ce982818783f123e388a6dedd966"><code>d4853a8</code></a> fix(jsx): make merged context-isolation tests pass tsc type check (<a href="https://redirect.github.com/honojs/hono/issues/5037">#5037</a>)</li> <li><a href="https://github.com/honojs/hono/commit/6735fea78db8ca72e8606001f57b10ee6a96b349"><code>6735fea</code></a> fix(jsx): cast awaitedFallback through unknown to fix Deno type check (<a href="https://redirect.github.com/honojs/hono/issues/5036">#5036</a>)</li> <li><a href="https://github.com/honojs/hono/commit/fab3b13639339cbd5ba1166a5b23d9ac30c5f64f"><code>fab3b13</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/9f0dadf141a3242a6c3b77462c7d33c6ce0f599d"><code>9f0dadf</code></a> ci: use npm Staged publishing (<a href="https://redirect.github.com/honojs/hono/issues/5035">#5035</a>)</li> <li><a href="https://github.com/honojs/hono/commit/27b7992f821bc10c2f62ad0ad86bd94eea251862"><code>27b7992</code></a> 4.12.26</li> <li><a href="https://github.com/honojs/hono/commit/d29982cc40c3babb417db625ab0671d982398646"><code>d29982c</code></a> chore: replace arg and glob with Bun native APIs in build script</li> <li><a href="https://github.com/honojs/hono/commit/16215d5f509099b81b00d60a2777bc6b5ac06827"><code>16215d5</code></a> chore: remove unused devcontainer and gitpod configs (<a href="https://redirect.github.com/honojs/hono/issues/5029">#5029</a>)</li> <li>Additional commits viewable in <a href="https://github.com/honojs/hono/compare/v4.12.25...v4.12.27">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for hono since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 15:50:14 -07:00
dependabot[bot]	bed89394e0	chore(deps-dev): bump typeorm from 0.3.29 to 0.3.31 (#2626) ... Bumps [typeorm](https://github.com/typeorm/typeorm) from 0.3.29 to 0.3.31. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typeorm/typeorm/releases">typeorm's releases</a>.</em></p> <blockquote> <h2>0.3.31</h2> <h3>Bug Fixes</h3> <ul> <li><strong>cache:</strong> release query runner on error in storeInCache (<a href="https://redirect.github.com/typeorm/typeorm/issues/12545">#12545</a>) (<a href="https://github.com/typeorm/typeorm/commit/a84b9b3d39c44cc0e5809b4680a5f046bda602cd">a84b9b3</a>)</li> <li>correct grammar in AlreadyHasActiveConnectionError message (<a href="https://redirect.github.com/typeorm/typeorm/issues/12554">#12554</a>) (<a href="https://github.com/typeorm/typeorm/commit/304d1290a4b6bd47d7d38269bae6a8514f378c9c">304d129</a>)</li> <li><strong>entity-manager:</strong> default invalidWhereValuesBehavior to throw on the write path (<a href="https://redirect.github.com/typeorm/typeorm/issues/12690">#12690</a>) (<a href="https://github.com/typeorm/typeorm/commit/44d8052ba4d226364c26e722826340d4ceb1419b">44d8052</a>)</li> <li><strong>entity-manager:</strong> validate where criteria in increment/decrement (<a href="https://redirect.github.com/typeorm/typeorm/issues/12692">#12692</a>) (<a href="https://github.com/typeorm/typeorm/commit/8a51b756bf31c885da1e1d92cb17d94819c7040a">8a51b75</a>)</li> <li><strong>mongodb:</strong> use cursor.transform for doc to entity transformation and skip load broadcast in next if toArray (<a href="https://redirect.github.com/typeorm/typeorm/issues/11926">#11926</a>) (<a href="https://github.com/typeorm/typeorm/commit/0bbefc914ef69b3826a4a2075b0b008c9a02e807">0bbefc9</a>)</li> <li>move hashing function to PlatformTools (<a href="https://redirect.github.com/typeorm/typeorm/issues/12648">#12648</a>) (<a href="https://github.com/typeorm/typeorm/commit/c456cbd5d40aa2e797314bd202956449f64efbac">c456cbd</a>)</li> <li>multiple recursive cte problems (<a href="https://redirect.github.com/typeorm/typeorm/issues/12490">#12490</a>) (<a href="https://github.com/typeorm/typeorm/commit/7c26654f430a7190c331242d68e75111fb334ea3">7c26654</a>)</li> <li>normalization of FindOptionsWhere for arrays and Buffers (<a href="https://redirect.github.com/typeorm/typeorm/issues/12577">#12577</a>) (<a href="https://github.com/typeorm/typeorm/commit/a8173fcdf325c44bf3eb2101c6318b45c573102b">a8173fc</a>)</li> <li><strong>persistence:</strong> preserve select false columns on the in-memory entity after save() (<a href="https://redirect.github.com/typeorm/typeorm/issues/12501">#12501</a>) (<a href="https://github.com/typeorm/typeorm/commit/324c46cd8669270dd5f22173cd78a7cab591349c">324c46c</a>)</li> <li><strong>postgres:</strong> improve normalizeDatetimeFunction for tstzrange data type (<a href="https://redirect.github.com/typeorm/typeorm/issues/12182">#12182</a>) (<a href="https://github.com/typeorm/typeorm/commit/bf47c9f1171b15523292e8914cfbdcfee542ef07">bf47c9f</a>)</li> <li><strong>query-builder:</strong> reject empty where criteria on update and delete operations (<a href="https://redirect.github.com/typeorm/typeorm/issues/12629">#12629</a>) (<a href="https://github.com/typeorm/typeorm/commit/81b946625d84bcf3ce720fea7d406003270169ee">81b9466</a>)</li> <li><strong>query-builder:</strong> wrap inner joins under left joins correctly (<a href="https://redirect.github.com/typeorm/typeorm/issues/11137">#11137</a>) (<a href="https://github.com/typeorm/typeorm/commit/d5f4b9d7e0f0aca63a9dd66e7ae26a15f7e8eee0">d5f4b9d</a>)</li> <li>remove <code>require()</code> calls that break bundlers (<a href="https://redirect.github.com/typeorm/typeorm/issues/12647">#12647</a>) (<a href="https://github.com/typeorm/typeorm/commit/30f9fc717bcfaa472d56680437105a6b9581014d">30f9fc7</a>)</li> <li><strong>tree-entity:</strong> tree entity schema propagation in internal TreeRepository methods (<a href="https://redirect.github.com/typeorm/typeorm/issues/12590">#12590</a>) (<a href="https://github.com/typeorm/typeorm/commit/7fb7c2c7c30d57489921eed458dfb97a5d08d4b8">7fb7c2c</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/typeorm/typeorm/compare/0.3.30...0.3.31">https://github.com/typeorm/typeorm/compare/0.3.30...0.3.31</a></p> <h2>0.3.30</h2> <h2>What's Changed</h2> <ul> <li>fix: scope invalidWhereValuesBehavior to high-level abstractions only by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11878">typeorm/typeorm#11878</a></li> <li>fix: scope computed-columns join to correct table in MSSQL schema query by <a href="https://github.com/PreAgile"><code>@​PreAgile</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12288">typeorm/typeorm#12288</a></li> <li>fix: preserve user-defined shared join columns in change set by <a href="https://github.com/PreAgile"><code>@​PreAgile</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12354">typeorm/typeorm#12354</a></li> <li>revert: fix up limit with joins by <a href="https://github.com/alumni"><code>@​alumni</code></a></li> <li>fix(find-options): allow array values in JsonContains by <a href="https://github.com/kyungseopk1m"><code>@​kyungseopk1m</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12420">typeorm/typeorm#12420</a></li> <li>fix(cockroachdb): adjust join in loadTables to load correct table columns by <a href="https://github.com/Cprakhar"><code>@​Cprakhar</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12413">typeorm/typeorm#12413</a></li> <li>ci: use the v0.3 branch as base for detect-changes by <a href="https://github.com/alumni"><code>@​alumni</code></a></li> <li>chore(release): release 0.3.30 by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12511">typeorm/typeorm#12511</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/typeorm/typeorm/compare/0.3.29...0.3.30">https://github.com/typeorm/typeorm/compare/0.3.29...0.3.30</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typeorm/typeorm/blob/0.3.31/CHANGELOG.md">typeorm's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/typeorm/typeorm/compare/0.3.30...0.3.31">0.3.31</a> (2026-07-13)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>docs:</strong> correct project name in release flow (<a href="https://redirect.github.com/typeorm/typeorm/issues/12519">#12519</a>) (<a href="https://github.com/typeorm/typeorm/commit/3b9faa31ced080db2073cd92c42905dd402fa636">3b9faa3</a>)</li> <li><strong>docs:</strong> resolve docs workflow issues (<a href="https://github.com/typeorm/typeorm/commit/c3c09b043f68ad4b19cc7b02bbeb85e2f720305c">c3c09b0</a>)</li> <li><strong>docs:</strong> resolve docs workflow issues (<a href="https://github.com/typeorm/typeorm/commit/f7b4b634647bd1a3e340fa421760183ebfb867be">f7b4b63</a>)</li> <li><strong>entity-manager:</strong> validate where criteria in increment/decrement (<a href="https://redirect.github.com/typeorm/typeorm/issues/12692">#12692</a>) (<a href="https://github.com/typeorm/typeorm/commit/a69a8c6816a493461f043c3bce8364a51fbf91ce">a69a8c6</a>)</li> <li><strong>migration:</strong> escape backslashes and interpolation in generated template literals (<a href="https://github.com/typeorm/typeorm/commit/b175f9b8be422edd2a2ac035ba90c3f2ce782dfe">b175f9b</a>)</li> <li>normalization of FindOptionsWhere for arrays and Buffers (<a href="https://redirect.github.com/typeorm/typeorm/issues/12577">#12577</a>) (<a href="https://github.com/typeorm/typeorm/commit/a309182c4495c8606dea96ed71ab3f2236663d64">a309182</a>)</li> <li><strong>persistence:</strong> preserve select false columns on the in-memory entity after save() (<a href="https://redirect.github.com/typeorm/typeorm/issues/12501">#12501</a>) (<a href="https://github.com/typeorm/typeorm/commit/d8e91274662b85effbf6c79ff5d7379970839d27">d8e9127</a>)</li> <li><strong>query-builder:</strong> reject empty where criteria on update and delete operations (<a href="https://redirect.github.com/typeorm/typeorm/issues/12629">#12629</a>) (<a href="https://github.com/typeorm/typeorm/commit/dfd972b80b9c79f4df429cd4a3cf171481928874">dfd972b</a>)</li> <li><strong>tree-entity:</strong> tree entity schema propagation in internal TreeRepository methods (<a href="https://redirect.github.com/typeorm/typeorm/issues/12590">#12590</a>) (<a href="https://github.com/typeorm/typeorm/commit/e1f93da606576660b7e907c9f8d90520394ed495">e1f93da</a>)</li> </ul> <h2><a href="https://github.com/typeorm/typeorm/compare/0.3.29...0.3.30">0.3.30</a> (2026-05-18)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>cockroachdb:</strong> adjust join in loadTables to load correct table columns (<a href="https://redirect.github.com/typeorm/typeorm/issues/12413">#12413</a>) (<a href="https://github.com/typeorm/typeorm/commit/d93402e57523b8e2f7373f052b2e7872ce87012b">d93402e</a>)</li> <li><strong>find-options:</strong> allow array values in JsonContains (<a href="https://redirect.github.com/typeorm/typeorm/issues/12420">#12420</a>) (<a href="https://github.com/typeorm/typeorm/commit/90f169d6988ee60ad5f1243d3e7c839be2a76b3d">90f169d</a>)</li> <li>preserve user-defined shared join columns in change set (<a href="https://redirect.github.com/typeorm/typeorm/issues/12354">#12354</a>) (<a href="https://github.com/typeorm/typeorm/commit/0aba011264bda823ef258a8d090fd3d99098bb26">0aba011</a>)</li> <li>scope computed-columns join to correct table in MSSQL schema query (<a href="https://redirect.github.com/typeorm/typeorm/issues/12288">#12288</a>) (<a href="https://github.com/typeorm/typeorm/commit/6170be6dfcbbbb0aa3a9b35c2dab5d0f60a7a1b3">6170be6</a>)</li> <li>scope invalidWhereValuesBehavior to high-level abstractions only (<a href="https://redirect.github.com/typeorm/typeorm/issues/11878">#11878</a>) (<a href="https://github.com/typeorm/typeorm/commit/1e10fb86a6bac2fe012452d86867c4d4bb67568a">1e10fb8</a>), closes <a href="https://github.com/hi/issues/level">hi#level</a></li> </ul> <h3>Reverts</h3> <ul> <li>fix up limit with joins (<a href="https://redirect.github.com/typeorm/typeorm/issues/11987">#11987</a>) (<a href="https://github.com/typeorm/typeorm/commit/66f1ff80fb66d2a33d56b35f50e110686d81829b">66f1ff8</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typeorm/typeorm/commit/797320375fb83b2e9af4a6455e0b1b4483be329d"><code>7973203</code></a> ci: publish to npm from <code>v0</code> using the <code>legacy</code> tag</li> <li><a href="https://github.com/typeorm/typeorm/commit/92e92767e3b9567bb97ca7552c752e8a57c15518"><code>92e9276</code></a> ci: use <code>npm@11</code></li> <li><a href="https://github.com/typeorm/typeorm/commit/099c23ef51caf86407a06c7292881316337d7db3"><code>099c23e</code></a> chore: prepare release 0.3.31 (<a href="https://redirect.github.com/typeorm/typeorm/issues/12676">#12676</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/b175f9b8be422edd2a2ac035ba90c3f2ce782dfe"><code>b175f9b</code></a> Merge commit from fork</li> <li><a href="https://github.com/typeorm/typeorm/commit/a69a8c6816a493461f043c3bce8364a51fbf91ce"><code>a69a8c6</code></a> fix(entity-manager): validate where criteria in increment/decrement (<a href="https://redirect.github.com/typeorm/typeorm/issues/12692">#12692</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/dfd972b80b9c79f4df429cd4a3cf171481928874"><code>dfd972b</code></a> fix(query-builder): reject empty where criteria on update and delete operatio...</li> <li><a href="https://github.com/typeorm/typeorm/commit/a2d43639fdd762192a4d25716b6750a5618dfaf0"><code>a2d4363</code></a> chore: update deps (<a href="https://redirect.github.com/typeorm/typeorm/issues/12661">#12661</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/e1f93da606576660b7e907c9f8d90520394ed495"><code>e1f93da</code></a> fix(tree-entity): tree entity schema propagation in internal TreeRepository m...</li> <li><a href="https://github.com/typeorm/typeorm/commit/a309182c4495c8606dea96ed71ab3f2236663d64"><code>a309182</code></a> fix: normalization of FindOptionsWhere for arrays and Buffers (<a href="https://redirect.github.com/typeorm/typeorm/issues/12577">#12577</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/d8e91274662b85effbf6c79ff5d7379970839d27"><code>d8e9127</code></a> fix(persistence): preserve select false columns on the in-memory entity after...</li> <li>Additional commits viewable in <a href="https://github.com/typeorm/typeorm/compare/0.3.29...0.3.31">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 15:49:59 -07:00
dependabot[bot]	119b49c6f8	chore(deps): bump the vue group with 2 updates (#2619) ... Bumps the vue group with 2 updates: [vue](https://github.com/vuejs/core) and [@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue). Updates `vue` from 3.5.39 to 3.5.40 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vuejs/core/releases">vue's releases</a>.</em></p> <blockquote> <h2>v3.5.40</h2> <p>For stable releases, please refer to <a href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">CHANGELOG.md</a> for details. For pre-releases, please refer to <a href="https://github.com/vuejs/core/blob/minor/CHANGELOG.md">CHANGELOG.md</a> of the <code>minor</code> branch.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">vue's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/vuejs/core/compare/v3.5.39...v3.5.40">3.5.40</a> (2026-07-16)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>compiler-core:</strong> avoid leaking slot branch keys (<a href="https://redirect.github.com/vuejs/core/issues/15051">#15051</a>) (<a href="https://github.com/vuejs/core/commit/20c9d263d3bfafdfbcc1921f259fd8f711e18659">20c9d26</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/15048">#15048</a></li> <li><strong>hydration:</strong> pass namespace when patching dynamic props (<a href="https://redirect.github.com/vuejs/core/issues/15082">#15082</a>) (<a href="https://github.com/vuejs/core/commit/e0d27234ddd2061383cb5dcc475d6b9558ed8e4f">e0d2723</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/15081">#15081</a> <a href="https://redirect.github.com/vuejs/core/issues/15050">#15050</a></li> <li><strong>reactivity:</strong> handle effect removal during scope stop (<a href="https://redirect.github.com/vuejs/core/issues/15084">#15084</a>) (<a href="https://github.com/vuejs/core/commit/378f9783248a4a4f20781d665d4f7089f39cae6e">378f978</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/15083">#15083</a></li> <li><strong>runtime-core:</strong> skip lazy hydration for detached roots (<a href="https://redirect.github.com/vuejs/core/issues/15092">#15092</a>) (<a href="https://github.com/vuejs/core/commit/97f3525551ad06103083eb2cbf9858c5e57cd58e">97f3525</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/15091">#15091</a></li> <li><strong>runtime-core:</strong> unwind dangling blocks when slot content throws (<a href="https://redirect.github.com/vuejs/core/issues/15071">#15071</a>) (<a href="https://github.com/vuejs/core/commit/ddc132d7c054ecd2029ddcc95bcba770cd44f022">ddc132d</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/15070">#15070</a></li> <li><strong>runtime-dom:</strong> respect current select model type (<a href="https://redirect.github.com/vuejs/core/issues/15010">#15010</a>) (<a href="https://github.com/vuejs/core/commit/eb89e935a771ab7fc3f8e67a82bc8fc7ea28bdaa">eb89e93</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/15009">#15009</a></li> <li><strong>server-renderer:</strong> handle errors in optimized component renders (<a href="https://redirect.github.com/vuejs/core/issues/12601">#12601</a>) (<a href="https://github.com/vuejs/core/commit/474907c0f01d021c564545137051a2b56eb4a769">474907c</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/12575">#12575</a></li> <li><strong>server-renderer:</strong> remove package dependency cycle (<a href="https://redirect.github.com/vuejs/core/issues/15063">#15063</a>) (<a href="https://github.com/vuejs/core/commit/4d35ecadb6f625b0f7407ccee0e357c2dd8084c7">4d35eca</a>)</li> <li><strong>shared:</strong> prevent SSR comment escaping from creating closing delimiters (<a href="https://redirect.github.com/vuejs/core/issues/15045">#15045</a>) (<a href="https://github.com/vuejs/core/commit/bd962bbaca746d8f65775a07723420406ebad0da">bd962bb</a>)</li> <li><strong>types:</strong> don't constrain component $el type to Element (<a href="https://redirect.github.com/vuejs/core/issues/15040">#15040</a>) (<a href="https://github.com/vuejs/core/commit/164460a52988c44dc34a541219c88120078372a0">164460a</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vuejs/core/commit/fa2885d8c48768d26f1666a01bd540ffe3b20f9b"><code>fa2885d</code></a> release: v3.5.40</li> <li><a href="https://github.com/vuejs/core/commit/20c9d263d3bfafdfbcc1921f259fd8f711e18659"><code>20c9d26</code></a> fix(compiler-core): avoid leaking slot branch keys (<a href="https://redirect.github.com/vuejs/core/issues/15051">#15051</a>)</li> <li><a href="https://github.com/vuejs/core/commit/7da6334f6162927cd41f9f369145722509540990"><code>7da6334</code></a> Revert &quot;fix(runtime-core): pause tracking when invoking function refs&quot; (<a href="https://redirect.github.com/vuejs/core/issues/15094">#15094</a>)</li> <li><a href="https://github.com/vuejs/core/commit/90aecb1d21b7d029543e6dc4825c3d80dd769312"><code>90aecb1</code></a> chore(deps): update all non-major dependencies (<a href="https://redirect.github.com/vuejs/core/issues/15026">#15026</a>)</li> <li><a href="https://github.com/vuejs/core/commit/97f3525551ad06103083eb2cbf9858c5e57cd58e"><code>97f3525</code></a> fix(runtime-core): skip lazy hydration for detached roots (<a href="https://redirect.github.com/vuejs/core/issues/15092">#15092</a>)</li> <li><a href="https://github.com/vuejs/core/commit/fe1c0f8494c10bc677b0bf8ec7fa518e3f15569e"><code>fe1c0f8</code></a> chore(deps): update test (<a href="https://redirect.github.com/vuejs/core/issues/15025">#15025</a>)</li> <li><a href="https://github.com/vuejs/core/commit/e41c45a78a97b4f7422059eb274479d8e8b5886f"><code>e41c45a</code></a> chore(deps): update dependency conventional-changelog to v8 (<a href="https://redirect.github.com/vuejs/core/issues/15078">#15078</a>)</li> <li><a href="https://github.com/vuejs/core/commit/3eb66a9f6238d99632ce0dd2971ed66b7fc6a671"><code>3eb66a9</code></a> chore(deps): update actions/cache action to v6 (<a href="https://redirect.github.com/vuejs/core/issues/15076">#15076</a>)</li> <li><a href="https://github.com/vuejs/core/commit/40178ddfc2b80c77db0f25a3d69819c9f5a3b689"><code>40178dd</code></a> chore(deps): update lint (<a href="https://redirect.github.com/vuejs/core/issues/15075">#15075</a>)</li> <li><a href="https://github.com/vuejs/core/commit/7f122b9bb85349e323ad3d025cdb4eab28d76de0"><code>7f122b9</code></a> chore(deps): update dependency conventional-changelog-angular to v9 (<a href="https://redirect.github.com/vuejs/core/issues/15079">#15079</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vuejs/core/compare/v3.5.39...v3.5.40">compare view</a></li> </ul> </details> <br /> Updates `@vitejs/plugin-vue` from 6.0.7 to 6.0.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-vue/releases">@​vitejs/plugin-vue's releases</a>.</em></p> <blockquote> <h2>plugin-vue@6.0.8</h2> <p>Please refer to <a href="https://github.com/vitejs/vite-plugin-vue/blob/plugin-vue@6.0.8/packages/plugin-vue/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md">@​vitejs/plugin-vue's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite-plugin-vue/compare/plugin-vue@6.0.7...plugin-vue@6.0.8">6.0.8</a> (2026-07-14)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li><strong>plugin-vue:</strong> add forced vapor mode option (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/766">#766</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/d59c3c04b0c5cd920bab5f0f6000bedfef901e1c">d59c3c0</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/781">#781</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/d369e5a57592ed525c4da5ef0458cb89a6977ad2">d369e5a</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/d8ff7d0e8f557a7c1975c07b30e232c69bdbbc03"><code>d8ff7d0</code></a> release: plugin-vue@6.0.8</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/d59c3c04b0c5cd920bab5f0f6000bedfef901e1c"><code>d59c3c0</code></a> feat(plugin-vue): add forced vapor mode option (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue/issues/766">#766</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/d369e5a57592ed525c4da5ef0458cb89a6977ad2"><code>d369e5a</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue/issues/781">#781</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.8/packages/plugin-vue">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 15:38:58 -07:00
dependabot[bot]	c14b070b96	chore(deps): bump the react group with 2 updates (#2620) ... Bumps the react group with 2 updates: [react](https://github.com/react/react/tree/HEAD/packages/react) and [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom). Updates `react` from 19.2.7 to 19.2.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react's releases</a>.</em></p> <blockquote> <h2>19.2.8 (July 21st, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Performance improvements when decoding (<a href="https://redirect.github.com/facebook/react/pull/37087">#37087</a> by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a> [FlightReply] Performance improvements when decoding (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/37087">#37087</a>)</li> <li><a href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a> [19.2.x] Update required references to GitHub repo (<a href="https://github.com/react/react/tree/HEAD/packages/react/issues/36753">#36753</a>)</li> <li>See full diff in <a href="https://github.com/react/react/commits/v19.2.8/packages/react">compare view</a></li> </ul> </details> <br /> Updates `react-dom` from 19.2.7 to 19.2.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react/react/releases">react-dom's releases</a>.</em></p> <blockquote> <h2>19.2.8 (July 21st, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Performance improvements when decoding (<a href="https://redirect.github.com/facebook/react/pull/37087">#37087</a> by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a> [FlightReply] Performance improvements when decoding (<a href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37087">#37087</a>)</li> <li><a href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a> [19.2.x] Update required references to GitHub repo (<a href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/36753">#36753</a>)</li> <li>See full diff in <a href="https://github.com/react/react/commits/v19.2.8/packages/react-dom">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-21 15:38:46 -07:00
Christian Bromann	dac8c2fa7e	chore: bump langsmith to ^0.8.0 (#2595) ... ## Description The langsmith SDK published v0.8.0. This updates the `langsmith` dependency in the workspaces that pin it via a caret range (`langgraph-cli`) to `^0.8.0` and refreshes `pnpm-lock.yaml` so the workspace packages resolve to `0.8.0`. The broad peer/dependency range in `langgraph-api` (`>=0.5.19 <1.0.0`) already permits `0.8.0` and is left unchanged, matching prior langsmith bump PRs. Transitive `langsmith` versions pulled in by published `@langchain/*` packages are left untouched. ## Test Plan - [ ] `pnpm install --frozen-lockfile` resolves without changes Made by [Open SWE](https://openswe.vercel.app/agents/019f436f-3343-7169-a06a-5f64fe70e3af) --------- Signed-off-by: Christian Bromann <git@bromann.dev> Co-authored-by: Christian Bromann <731337+christian-bromann@users.noreply.github.com> Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>	2026-07-14 14:08:13 -07:00
John Kennedy	a34543a0dd	build: add Socket optimized pnpm overrides (#2600) ... ## Summary - Add Socket optimized registry overrides for supported transitive dependencies. - Regenerate the root pnpm lockfile with the Socket registry packages. - Add Socket GitHub App configuration scoped to dependency manifest and lockfile changes. ## Test plan - `sfw pnpm install --lockfile-only --no-frozen-lockfile` - `git diff --check` - JSON/YAML parsing for `package.json` and `socket.yml` The install reported existing workspace peer/deprecation warnings and a missing docs patch path. --------- Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>	2026-07-14 07:48:37 +00:00
John Kennedy	041c0e81c9	chore: patch dependabot security alerts (#2588) ... ## Summary - Add pnpm overrides for patched transitive dependency versions flagged by Dependabot - Refresh pnpm lockfile to resolve vulnerable @babel/core, @grpc/grpc-js, form-data, protobufjs, esbuild, shell-quote, tmp, uuid, and ws versions - Leaves only the low-severity elliptic advisory, which currently has no patched version ## Testing - sfw pnpm install --offline --frozen-lockfile - pnpm audit --json (1 remaining low elliptic advisory, no patched version) - pnpm lint Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>	2026-07-05 17:46:07 -07:00
John Kennedy	8fb6376a75	chore: update Vitest to 4.1.9 (#2587) ... ## Summary - update all workspace `vitest` declarations to `4.1.9` - update `@vitest/browser-playwright` and `@vitest/browser-webdriverio` declarations to `4.1.9` - refresh `pnpm-lock.yaml` so no `vitest`/`@vitest/browser` versions below `4.1.9` remain ## Validation - `sfw pnpm install` - `pnpm format:check` - `pnpm lint` - `pnpm build` - targeted audit check: no `vitest` or `@vitest/browser` advisories remain - `pnpm --filter create-langgraph test` - `pnpm --filter @langchain/react test` - `pnpm --filter @langchain/svelte test` - `pnpm --filter @langchain/vue test` - `pnpm --filter @langchain/angular test` - `pnpm --filter @langchain/langgraph test` ## Notes - `pnpm --filter @langchain/langgraph test:browser` did not run locally because Playwright Chromium for the updated provider was not installed on this machine; Vitest exited before running tests with Playwright's `pnpm exec playwright install` message. - The SDK Vitest suites passed but printed Vitest's post-success close-timeout warning. Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>	2026-07-03 23:18:35 -07:00
John Kennedy	bf9fc73a49	chore: raise Dependabot override floors (#2586) ... ## Summary - raise root pnpm override floors for `qs`, `dompurify`, `undici`, `fast-xml-parser`, and 7.x `protobufjs` to patched ranges from current Dependabot alerts - refresh `pnpm-lock.yaml` with `pnpm install --lockfile-only` ## Verification - `sfw pnpm install --lockfile-only` - `git diff --check` - verified resolved versions: `undici` 6.27.0/7.28.0, `dompurify` 3.4.11, `fast-xml-parser` 5.9.3, `protobufjs` 7.6.5, `qs` 6.15.3 Note: `protobufjs@6.11.6` remains via the separate `onnx-proto` chain and is outside the 7.x root override floor.	2026-07-04 04:36:31 +00:00
dependabot[bot]	8f3f4596f1	chore(deps): bump the vue group across 1 directory with 2 updates (#2581) ... Bumps the vue group with 2 updates in the / directory: [vue](https://github.com/vuejs/core) and [@vitejs/plugin-vue-jsx](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx). Updates `vue` from 3.5.35 to 3.5.39 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vuejs/core/releases">vue's releases</a>.</em></p> <blockquote> <h2>v3.5.39</h2> <p>For stable releases, please refer to <a href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">CHANGELOG.md</a> for details. For pre-releases, please refer to <a href="https://github.com/vuejs/core/blob/minor/CHANGELOG.md">CHANGELOG.md</a> of the <code>minor</code> branch.</p> <h2>v3.5.38</h2> <p>For stable releases, please refer to <a href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">CHANGELOG.md</a> for details. For pre-releases, please refer to <a href="https://github.com/vuejs/core/blob/minor/CHANGELOG.md">CHANGELOG.md</a> of the <code>minor</code> branch.</p> <h2>v3.5.37</h2> <p>For stable releases, please refer to <a href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">CHANGELOG.md</a> for details. For pre-releases, please refer to <a href="https://github.com/vuejs/core/blob/minor/CHANGELOG.md">CHANGELOG.md</a> of the <code>minor</code> branch.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">vue's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/vuejs/core/compare/v3.5.38...v3.5.39">3.5.39</a> (2026-06-25)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>compiler-core:</strong> correct filter rewrite recursion (<a href="https://redirect.github.com/vuejs/core/issues/14959">#14959</a>) (<a href="https://github.com/vuejs/core/commit/be7ce314b96256f1c56f53088d51ed6bc77fde28">be7ce31</a>)</li> <li><strong>hydration:</strong> force patch dynamic props when hydrating (<a href="https://redirect.github.com/vuejs/core/issues/9083">#9083</a>) (<a href="https://github.com/vuejs/core/commit/024cf06daa33db4660431f20aa050acb99cff07f">024cf06</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/9033">#9033</a></li> <li><strong>hydration:</strong> respect data-allow-mismatch on conditional branches (<a href="https://redirect.github.com/vuejs/core/issues/12801">#12801</a>) (<a href="https://github.com/vuejs/core/commit/164af639a120421194f7afe0e097bdf254c90199">164af63</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/12782">#12782</a></li> <li><strong>reactivity:</strong> avoid triggering effects when set fails (<a href="https://redirect.github.com/vuejs/core/issues/14964">#14964</a>) (<a href="https://github.com/vuejs/core/commit/e450973eabc0038f398344b981acd8759c246c50">e450973</a>)</li> <li><strong>runtime-core:</strong> handle non-isomorphic block element update (<a href="https://redirect.github.com/vuejs/core/issues/15002">#15002</a>) (<a href="https://github.com/vuejs/core/commit/932ddd058d69be9bbd8cd796c89f0d1a4fc128d7">932ddd0</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/6385">#6385</a></li> <li><strong>runtime-core:</strong> normalize function children for elements and Teleport (<a href="https://redirect.github.com/vuejs/core/issues/9108">#9108</a>) (<a href="https://github.com/vuejs/core/commit/2f374cda18cbe331ede1a49a324b423c75d0faf3">2f374cd</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/9107">#9107</a></li> <li><strong>runtime-core:</strong> pause tracking when invoking function refs (<a href="https://redirect.github.com/vuejs/core/issues/14985">#14985</a>) (<a href="https://github.com/vuejs/core/commit/3ac052b6b1e9d3978e98cc30a1a89a9b9b51358b">3ac052b</a>)</li> <li><strong>runtime-core:</strong> preserve once event listener name (<a href="https://redirect.github.com/vuejs/core/issues/8341">#8341</a>) (<a href="https://github.com/vuejs/core/commit/87b73b64a0d9b4e2dd2dacfe98f2f1c2396d7a61">87b73b6</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/8342">#8342</a></li> <li><strong>runtime-dom:</strong> preserve option modifier event names (<a href="https://redirect.github.com/vuejs/core/issues/8338">#8338</a>) (<a href="https://github.com/vuejs/core/commit/4b659e699925555464ea9ae8fa3e1984609f6dc2">4b659e6</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/8334">#8334</a></li> <li><strong>ssr:</strong> dedupe inherited scope ids during vnode rendering (<a href="https://redirect.github.com/vuejs/core/issues/15005">#15005</a>) (<a href="https://github.com/vuejs/core/commit/027da6b2810c4752131439d2645f3d931d07242f">027da6b</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/12159">#12159</a> <a href="https://redirect.github.com/vuejs/core/issues/12175">#12175</a></li> <li><strong>ssr:</strong> resolve nested async teleport content (<a href="https://redirect.github.com/vuejs/core/issues/9431">#9431</a>) (<a href="https://github.com/vuejs/core/commit/31d0f23757afb410c638a9c29d44d76d0944e18f">31d0f23</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/6207">#6207</a></li> <li><strong>teleport:</strong> handle teleport unmount edge case (<a href="https://redirect.github.com/vuejs/core/issues/12705">#12705</a>) (<a href="https://github.com/vuejs/core/commit/671997ade74e34880cebe3c340269b8598c3b26c">671997a</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/12702">#12702</a></li> <li><strong>types:</strong> support named tuple emits (<a href="https://redirect.github.com/vuejs/core/issues/12676">#12676</a>) (<a href="https://github.com/vuejs/core/commit/232f4022e3160b30b11748a6d97ea2c15ed3b74f">232f402</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/12673">#12673</a></li> <li><strong>types:</strong> validate defineModel defaults (<a href="https://redirect.github.com/vuejs/core/issues/14968">#14968</a>) (<a href="https://github.com/vuejs/core/commit/747f57e9cdb3c5f084f8da5ca7e0e0b7b326b662">747f57e</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/14966">#14966</a></li> </ul> <h2><a href="https://github.com/vuejs/core/compare/v3.5.37...v3.5.38">3.5.38</a> (2026-06-11)</h2> <h2><a href="https://github.com/vuejs/core/compare/v3.5.36...v3.5.37">3.5.37</a> (2026-06-11)</h2> <h2><a href="https://github.com/vuejs/core/compare/v3.5.35...v3.5.36">3.5.36</a> (2026-06-11)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>compiler-core:</strong> avoid crash on CDATA at the document root (<a href="https://redirect.github.com/vuejs/core/issues/14916">#14916</a>) (<a href="https://github.com/vuejs/core/commit/0ea17e232f9a8f4a9acf57c6addc78cf4f279c13">0ea17e2</a>)</li> <li><strong>compiler-core:</strong> prefix dynamic keys on v-memo elements (<a href="https://redirect.github.com/vuejs/core/issues/14922">#14922</a>) (<a href="https://github.com/vuejs/core/commit/68e978e3e71a8ae40701808e78966f2168c5907c">68e978e</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/14920">#14920</a></li> <li><strong>compiler-sfc:</strong> handle vue-ignore on leading intersection/union type (<a href="https://redirect.github.com/vuejs/core/issues/14950">#14950</a>) (<a href="https://github.com/vuejs/core/commit/0dcd225c01f211ebb8ce4dda8c8eac10539abf1a">0dcd225</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/12254">#12254</a></li> <li><strong>compiler-sfc:</strong> respect var hoisting in props destructure (<a href="https://github.com/vuejs/core/commit/48ad452dd61926a59e358da3c74c5ef750ae21c4">48ad452</a>)</li> <li><strong>reactivity:</strong> preserve watch callback return value when wrapped for <code>once: true</code> (<a href="https://redirect.github.com/vuejs/core/issues/14902">#14902</a>) (<a href="https://github.com/vuejs/core/commit/450a8a8e45520f30fe8343c5016a777d888e53fc">450a8a8</a>)</li> <li><strong>runtime-core:</strong> add dev warning for silent catch in compat mode and fix test description typo (<a href="https://redirect.github.com/vuejs/core/issues/14891">#14891</a>) (<a href="https://github.com/vuejs/core/commit/db3e117025a7193291ed6676180a5a44bbe0ae76">db3e117</a>)</li> <li><strong>runtime-core:</strong> force model update when reverted before sync (<a href="https://redirect.github.com/vuejs/core/issues/14897">#14897</a>) (<a href="https://github.com/vuejs/core/commit/7f76378b0d178a29113ee07d67faa48b637944e8">7f76378</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/13524">#13524</a></li> <li><strong>runtime-core:</strong> skip async component callbacks after unmount (<a href="https://redirect.github.com/vuejs/core/issues/14911">#14911</a>) (<a href="https://github.com/vuejs/core/commit/5300ead57b3c14942d4c155ef5e485d5409e7f02">5300ead</a>)</li> <li><strong>transition:</strong> avoid move transition for hidden v-show group children (<a href="https://redirect.github.com/vuejs/core/issues/14895">#14895</a>) (<a href="https://github.com/vuejs/core/commit/c11f6ee644412edf3eef6736991e895e4a3e1dde">c11f6ee</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/14894">#14894</a></li> <li><strong>watch:</strong> trigger immediate callback for empty sources (<a href="https://redirect.github.com/vuejs/core/issues/14914">#14914</a>) (<a href="https://github.com/vuejs/core/commit/1f2ca7e4837b1b0de0b91048fffdb03710c0b03e">1f2ca7e</a>), closes <a href="https://redirect.github.com/vuejs/core/issues/14898">#14898</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vuejs/core/commit/c0606e91798c8dca4f33d101e1dd836d672592c1"><code>c0606e9</code></a> release: v3.5.39</li> <li><a href="https://github.com/vuejs/core/commit/4b659e699925555464ea9ae8fa3e1984609f6dc2"><code>4b659e6</code></a> fix(runtime-dom): preserve option modifier event names (<a href="https://redirect.github.com/vuejs/core/issues/8338">#8338</a>)</li> <li><a href="https://github.com/vuejs/core/commit/232f4022e3160b30b11748a6d97ea2c15ed3b74f"><code>232f402</code></a> fix(types): support named tuple emits (<a href="https://redirect.github.com/vuejs/core/issues/12676">#12676</a>)</li> <li><a href="https://github.com/vuejs/core/commit/671997ade74e34880cebe3c340269b8598c3b26c"><code>671997a</code></a> fix(teleport): handle teleport unmount edge case (<a href="https://redirect.github.com/vuejs/core/issues/12705">#12705</a>)</li> <li><a href="https://github.com/vuejs/core/commit/164af639a120421194f7afe0e097bdf254c90199"><code>164af63</code></a> fix(hydration): respect data-allow-mismatch on conditional branches (<a href="https://redirect.github.com/vuejs/core/issues/12801">#12801</a>)</li> <li><a href="https://github.com/vuejs/core/commit/2f374cda18cbe331ede1a49a324b423c75d0faf3"><code>2f374cd</code></a> fix(runtime-core): normalize function children for elements and Teleport (<a href="https://redirect.github.com/vuejs/core/issues/9108">#9108</a>)</li> <li><a href="https://github.com/vuejs/core/commit/87b73b64a0d9b4e2dd2dacfe98f2f1c2396d7a61"><code>87b73b6</code></a> fix(runtime-core): preserve once event listener name (<a href="https://redirect.github.com/vuejs/core/issues/8341">#8341</a>)</li> <li><a href="https://github.com/vuejs/core/commit/027da6b2810c4752131439d2645f3d931d07242f"><code>027da6b</code></a> fix(ssr): dedupe inherited scope ids during vnode rendering (<a href="https://redirect.github.com/vuejs/core/issues/15005">#15005</a>)</li> <li><a href="https://github.com/vuejs/core/commit/024cf06daa33db4660431f20aa050acb99cff07f"><code>024cf06</code></a> fix(hydration): force patch dynamic props when hydrating (<a href="https://redirect.github.com/vuejs/core/issues/9083">#9083</a>)</li> <li><a href="https://github.com/vuejs/core/commit/be7ce314b96256f1c56f53088d51ed6bc77fde28"><code>be7ce31</code></a> fix(compiler-core): correct filter rewrite recursion (<a href="https://redirect.github.com/vuejs/core/issues/14959">#14959</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vuejs/core/compare/v3.5.35...v3.5.39">compare view</a></li> </ul> </details> <br /> Updates `@vitejs/plugin-vue-jsx` from 5.1.5 to 5.1.6 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-vue/releases">@​vitejs/plugin-vue-jsx's releases</a>.</em></p> <blockquote> <h2>plugin-vue-jsx@5.1.6</h2> <p>Please refer to <a href="https://github.com/vitejs/vite-plugin-vue/blob/plugin-vue-jsx@5.1.6/packages/plugin-vue-jsx/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue-jsx/CHANGELOG.md">@​vitejs/plugin-vue-jsx's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite-plugin-vue/compare/plugin-vue-jsx@5.1.5...plugin-vue-jsx@5.1.6">5.1.6</a> (2026-06-23)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/738">#738</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/050c9962660e7bb189fe8e03f0fa4cbd0b5ba766">050c996</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/762">#762</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/9e825b85ebe9b6006dc5927aaa8aabc0bcc7eceb">9e825b8</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/774">#774</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/77dc8bc935216bb7ed13f1c2653a80ffdc99fd45">77dc8bc</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/781">#781</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/d369e5a57592ed525c4da5ef0458cb89a6977ad2">d369e5a</a>)</li> </ul> <h3>Performance Improvements</h3> <ul> <li><strong>jsx:</strong> cache TypeScript Babel plugin config (<a href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/799">#799</a>) (<a href="https://github.com/vitejs/vite-plugin-vue/commit/5f3ffabacdca7049747b28f7c78f52735c6fa0e1">5f3ffab</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/f6a8200c1af5fe3e4fb7d585f256b33504da065f"><code>f6a8200</code></a> release: plugin-vue-jsx@5.1.6</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/5f3ffabacdca7049747b28f7c78f52735c6fa0e1"><code>5f3ffab</code></a> perf(jsx): cache TypeScript Babel plugin config (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/799">#799</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/d369e5a57592ed525c4da5ef0458cb89a6977ad2"><code>d369e5a</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/781">#781</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/77dc8bc935216bb7ed13f1c2653a80ffdc99fd45"><code>77dc8bc</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/774">#774</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/9e825b85ebe9b6006dc5927aaa8aabc0bcc7eceb"><code>9e825b8</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/762">#762</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/050c9962660e7bb189fe8e03f0fa4cbd0b5ba766"><code>050c996</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/738">#738</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/540ab15b12003946c42d03c7a47fc8d8e8932be3"><code>540ab15</code></a> release: plugin-vue-jsx@5.1.5</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/b3f23e4d0818f11a3e2f674380da870b11d260a2"><code>b3f23e4</code></a> chore: remove Vite 8 beta from supported range (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/746">#746</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/2f2ff982a1ffde62bd8ac4c94bcc404d2bf17f80"><code>2f2ff98</code></a> release: plugin-vue-jsx@5.1.4</li> <li><a href="https://github.com/vitejs/vite-plugin-vue/commit/e69d7519aeda6e7be10736197ceea8ad69d89905"><code>e69d751</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue-jsx/issues/726">#726</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue-jsx@5.1.6/packages/plugin-vue-jsx">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-02 23:59:37 -07:00
dependabot[bot]	3c8318dcc2	chore(deps-dev): bump the svelte group with 2 updates (#2580) ... Bumps the svelte group with 2 updates: [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [vitest-browser-svelte](https://github.com/vitest-community/vitest-browser-svelte). Updates `svelte` from 5.56.1 to 5.56.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/svelte/releases">svelte's releases</a>.</em></p> <blockquote> <h2>svelte@5.56.4</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: include wrapping parentheses in <code>{@const}</code> declarator <code>end</code> position (<a href="https://redirect.github.com/sveltejs/svelte/pull/18436">#18436</a>)</p> </li> <li> <p>fix: always unset reactivity context after restoring it (<a href="https://redirect.github.com/sveltejs/svelte/pull/18453">#18453</a>)</p> </li> <li> <p>fix: don't notify <code>searchParams</code> subscribers when the URL changes without affecting the search string (<a href="https://redirect.github.com/sveltejs/svelte/pull/18425">#18425</a>)</p> </li> <li> <p>fix: strip <code>?</code> from optional parameters in <code>&lt;script lang=&quot;ts&quot;&gt;</code> so generated JavaScript is valid (<a href="https://redirect.github.com/sveltejs/svelte/pull/18448">#18448</a>)</p> </li> </ul> <h2>svelte@5.56.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: ignore errors that occur in destroyed effects (<a href="https://redirect.github.com/sveltejs/svelte/pull/18384">#18384</a>)</p> </li> <li> <p>fix: type BigInts in <code>$state.snapshot(...)</code> return values (<a href="https://redirect.github.com/sveltejs/svelte/pull/18388">#18388</a>)</p> </li> </ul> <h2>svelte@5.56.2</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: properly track effect end node for async sibling component (<a href="https://redirect.github.com/sveltejs/svelte/pull/18371">#18371</a>)</p> </li> <li> <p>fix: prevent false-positive reactivity loss warning (<a href="https://redirect.github.com/sveltejs/svelte/pull/18373">#18373</a>)</p> </li> <li> <p>chore: bump esrap dependency (<a href="https://redirect.github.com/sveltejs/svelte/pull/18372">#18372</a>)</p> </li> <li> <p>fix: ignore declaration tags for animation directive (<a href="https://redirect.github.com/sveltejs/svelte/pull/18366">#18366</a>)</p> </li> <li> <p>fix: reject pending async deriveds on discard (<a href="https://redirect.github.com/sveltejs/svelte/pull/18308">#18308</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md">svelte's changelog</a>.</em></p> <blockquote> <h2>5.56.4</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: include wrapping parentheses in <code>{@const}</code> declarator <code>end</code> position (<a href="https://redirect.github.com/sveltejs/svelte/pull/18436">#18436</a>)</p> </li> <li> <p>fix: always unset reactivity context after restoring it (<a href="https://redirect.github.com/sveltejs/svelte/pull/18453">#18453</a>)</p> </li> <li> <p>fix: don't notify <code>searchParams</code> subscribers when the URL changes without affecting the search string (<a href="https://redirect.github.com/sveltejs/svelte/pull/18425">#18425</a>)</p> </li> <li> <p>fix: strip <code>?</code> from optional parameters in <code>&lt;script lang=&quot;ts&quot;&gt;</code> so generated JavaScript is valid (<a href="https://redirect.github.com/sveltejs/svelte/pull/18448">#18448</a>)</p> </li> </ul> <h2>5.56.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: ignore errors that occur in destroyed effects (<a href="https://redirect.github.com/sveltejs/svelte/pull/18384">#18384</a>)</p> </li> <li> <p>fix: type BigInts in <code>$state.snapshot(...)</code> return values (<a href="https://redirect.github.com/sveltejs/svelte/pull/18388">#18388</a>)</p> </li> </ul> <h2>5.56.2</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: properly track effect end node for async sibling component (<a href="https://redirect.github.com/sveltejs/svelte/pull/18371">#18371</a>)</p> </li> <li> <p>fix: prevent false-positive reactivity loss warning (<a href="https://redirect.github.com/sveltejs/svelte/pull/18373">#18373</a>)</p> </li> <li> <p>chore: bump esrap dependency (<a href="https://redirect.github.com/sveltejs/svelte/pull/18372">#18372</a>)</p> </li> <li> <p>fix: ignore declaration tags for animation directive (<a href="https://redirect.github.com/sveltejs/svelte/pull/18366">#18366</a>)</p> </li> <li> <p>fix: reject pending async deriveds on discard (<a href="https://redirect.github.com/sveltejs/svelte/pull/18308">#18308</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/svelte/commit/eae50dfd1c2269e37258ef5c09527003bcf61573"><code>eae50df</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18435">#18435</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/36ae0622a8da4c6e60d32cde199af3d7c3121cd3"><code>36ae062</code></a> fix: always unset reactivity context after restoring it (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18453">#18453</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/a6985bcd24faa8ec4a8de671b2013d98b0bc629f"><code>a6985bc</code></a> fix: strip <code>?</code> from optional parameters in svelte lang ts (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18448">#18448</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/c4daa490bbbf483ebba117c1afb6f71b4b19e63c"><code>c4daa49</code></a> fix: include wrapping parentheses in <code>{@const}</code> declarator end (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18436">#18436</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/0510174bc0c908c9d4980274717191fdf46a38c6"><code>0510174</code></a> fix: make <code>SvelteURLSearchParams</code> notifications accurate (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18425">#18425</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/8ea3ee8c62aed631d5c4bbc0870d491059ed7d03"><code>8ea3ee8</code></a> chore(deps-dev): bump esbuild from 0.25.11 to 0.28.1 (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18427">#18427</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/a9f48540e236d326714a1148b9d61cf785c0f98a"><code>a9f4854</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18389">#18389</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/71a6515bd648202b2795a80e68e7c9c7ac9ad4ee"><code>71a6515</code></a> fix: check boundary exists before calling error handler in async derived (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18">#18</a>...</li> <li><a href="https://github.com/sveltejs/svelte/commit/3d83c9abe606415c2ceee215c76582ea9bcfa7b1"><code>3d83c9a</code></a> fix: add bigint to Primitive type for $state.snapshot (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18388">#18388</a>)</li> <li><a href="https://github.com/sveltejs/svelte/commit/51baf1c1af4f02e2a8b009a87d932437f164b612"><code>51baf1c</code></a> Version Packages (<a href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18357">#18357</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/svelte/commits/svelte@5.56.4/packages/svelte">compare view</a></li> </ul> </details> <br /> Updates `vitest-browser-svelte` from 2.1.1 to 2.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-community/vitest-browser-svelte/releases">vitest-browser-svelte's releases</a>.</em></p> <blockquote> <h2>v2.2.0</h2> <h3>   🚀 Features</h3> <ul> <li>Add <code>wrapper</code> option  -  by <a href="https://github.com/mcous"><code>@​mcous</code></a> in <a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/31">vitest-community/vitest-browser-svelte#31</a> <a href="https://github.com/vitest-community/vitest-browser-svelte/commit/3715b4d"><!-- raw HTML omitted -->(3715b)<!-- raw HTML omitted --></a></li> </ul> <h5>    <a href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.1.1...v2.2.0">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/351c8ff649484173f7814b92c8b0f4a560de1125"><code>351c8ff</code></a> chore: release v2.2.0 (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/36">#36</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/e29e1ee6bbe0d757d50f5683744d5b7e2a15d07e"><code>e29e1ee</code></a> ci: add zizmor (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/37">#37</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/ff6a5fabcac3a3044f0a368d76bffca663b8c362"><code>ff6a5fa</code></a> build: update the release workflow (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/35">#35</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/3715b4d7ce477049305e8f5c13b18a549130d576"><code>3715b4d</code></a> feat: add <code>wrapper</code> option (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/31">#31</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/fc777f7a974161334f89b3256ac58db69dbb2e33"><code>fc777f7</code></a> chore(deps): update Vitest and others (<a href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/28">#28</a>)</li> <li><a href="https://github.com/vitest-community/vitest-browser-svelte/commit/23f732332b51c40f200e149dc9ea5a1e51b797f6"><code>23f7323</code></a> chore: add links to docs and package</li> <li>See full diff in <a href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.1.1...v2.2.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-02 05:10:21 +00:00
dependabot[bot]	1cb3985878	chore(deps-dev): bump the react group with 2 updates (#2582) ... Bumps the react group with 2 updates: [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) and [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react). Updates `@types/react` from 19.2.16 to 19.2.17 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare view</a></li> </ul> </details> <br /> Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.3 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md">@​vitejs/plugin-react's changelog</a>.</em></p> <blockquote> <h2>6.0.3 (2026-06-23)</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/640fd358a0e82393acfce4e92e19a6ac6e1641a7"><code>640fd35</code></a> release: plugin-react@6.0.3</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/889efb02cdc4ec978a5e177a37e0213cfded38a4"><code>889efb0</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1249">#1249</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/6c57dd4c5d71075b48039df2532804e72880da21"><code>6c57dd4</code></a> fix(plugin-react): use '/' base in bundledDev preamble to fix non-root base p...</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/3cc33a703636b558a1c1c99e787ddc6bd64aab2d"><code>3cc33a7</code></a> fix(deps): update react-related dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1245">#1245</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/c0f7c7ff709dc9d88bc1f29f1b27c1b3e2bfcfca"><code>c0f7c7f</code></a> docs: mention the Biome rule in the &quot;Consistent components exports&quot; section (...</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/cd80f0f7b2b750f6e8f719f9c3dbe4f22ddd94db"><code>cd80f0f</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1241">#1241</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/e38accafea0c7c84f7fc72fd69d9cec731fa7600"><code>e38acca</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1227">#1227</a>)</li> <li><a href="https://github.com/vitejs/vite-plugin-react/commit/9a9bb26c23b966dceed47ff9ec257faeb0e777d9"><code>9a9bb26</code></a> perf(react): improve react compiler preset so that slightly more modules are ...</li> <li>See full diff in <a href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.3/packages/plugin-react">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-02 05:09:57 +00:00
dependabot[bot]	125901ed12	chore(deps): bump the angular group with 13 updates (#2579) ... Bumps the angular group with 13 updates: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `22.0.1` | `22.0.4` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `22.0.1` | `22.0.4` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `22.0.1` | `22.0.4` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `22.0.0` | `22.0.4` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `22.0.0` | `22.0.4` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `22.0.0` | `22.0.4` | | [@angular/build](https://github.com/angular/angular-cli) | `22.0.0` | `22.0.5` | | [@angular/cli](https://github.com/angular/angular-cli) | `22.0.0` | `22.0.5` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `22.0.0` | `22.0.4` | | [@analogjs/vite-plugin-angular](https://github.com/analogjs/analog) | `2.6.0` | `2.6.2` | | [@analogjs/vitest-angular](https://github.com/analogjs/analog) | `2.6.0` | `2.6.2` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `22.0.0` | `22.0.4` | | [vitest-browser-angular](https://github.com/vitest-community/vitest-browser-angular) | `0.4.0` | `0.5.0` | Updates `@angular/common` from 22.0.1 to 22.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/common's releases</a>.</em></p> <blockquote> <h2>22.0.4</h2> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><img src="https://img.shields.io/badge/fd37f09f37-fix-green" alt="fix - fd37f09f37" /></a></td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <h2>22.0.3</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><img src="https://img.shields.io/badge/f90c20df40-fix-green" alt="fix - f90c20df40" /></a></td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><img src="https://img.shields.io/badge/f4f7f3755c-fix-green" alt="fix - f4f7f3755c" /></a></td> <td>remove unused import breaking CI in 22.0.x</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/06d854929c31213df363274f80a64b9049f0310c"><img src="https://img.shields.io/badge/06d854929c-fix-green" alt="fix - 06d854929c" /></a></td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><img src="https://img.shields.io/badge/2799304259-fix-green" alt="fix - 2799304259" /></a></td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><img src="https://img.shields.io/badge/8cdc202dfc-fix-green" alt="fix - 8cdc202dfc" /></a></td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b4a5a2fb4eb2b2ffb6e79170d453d55af2c72e73"><img src="https://img.shields.io/badge/b4a5a2fb4e-fix-green" alt="fix - b4a5a2fb4e" /></a></td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a16f9b22633ef88f64517e18b29923c74da6bff6"><img src="https://img.shields.io/badge/a16f9b2263-fix-green" alt="fix - a16f9b2263" /></a></td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bcc648f4b6dae63d600a9f1c40854940bf8442c7"><img src="https://img.shields.io/badge/bcc648f4b6-fix-green" alt="fix - bcc648f4b6" /></a></td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <h2>22.0.2</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><img src="https://img.shields.io/badge/94ea403563-fix-green" alt="fix - 94ea403563" /></a></td> <td>escape anchor fragment in shadow DOM name selector</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><img src="https://img.shields.io/badge/6c1f3e9d49-fix-green" alt="fix - 6c1f3e9d49" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69316">#69316</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><img src="https://img.shields.io/badge/6f1171991a-fix-green" alt="fix - 6f1171991a" /></a></td> <td>restrict possible event handler check to property names longer than 2 characters</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/528a34f766191da3fc684c6fac988b1bd2028f49"><img src="https://img.shields.io/badge/528a34f766-fix-green" alt="fix - 528a34f766" /></a></td> <td>avoid caching missing locale data</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e17e8d542242333359946863d0272680c966325b"><img src="https://img.shields.io/badge/e17e8d5422-fix-green" alt="fix - e17e8d5422" /></a></td> <td>escape overlapping comment delimiters in escapeCommentText</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><img src="https://img.shields.io/badge/59dea13f80-fix-green" alt="fix - 59dea13f80" /></a></td> <td>guard against DOM clobbering in declareExperimentalWebMcpTool</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's changelog</a>.</em></p> <blockquote> <h1>22.0.4 (2026-06-26)</h1> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034">fd37f09f37</a></td> <td>fix</td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.2 (2026-06-25)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ecd047578e1eb3a4cdfee7bfee9b1422e5a5db2c">ecd047578e</a></td> <td>fix</td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8b2785b597ccf11dae3cd3f2e7ee97480233e4d6">8b2785b597</a></td> <td>fix</td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91d168e74b7cdcd1292772b1052888b83de5f3af">91d168e74b</a></td> <td>fix</td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f76e8a98c1005827e562811d5d08ffd35493f9f5">f76e8a98c1</a></td> <td>fix</td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c75ff0255c3d5ee16f94a9969cd611ab2e02d4a2">c75ff0255c</a></td> <td>feat</td> <td>add migration from injectable to service</td> </tr> </tbody> </table> <h3>router</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/97a3fd6a55eccabf7c9adfb33f745c8d1da6d3e9">97a3fd6a55</a></td> <td>feat</td> <td>handle null and undefined inputs in RouterLinkActive</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/716f9eb032baea351c94352f8e36dac8bc82468e">716f9eb032</a></td> <td>fix</td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6f98f98f1f410e5343852e3c8f98c32267b29e01">6f98f98f1f</a></td> <td>fix</td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8d31b82116c4128a00302abd7c4dfc035c77789e">8d31b82116</a></td> <td>fix</td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.0.3 (2026-06-25)</h1> <h3>compiler</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/cd8f472ab4b7d0565fd9c883feaa4be4fee730ef"><code>cd8f472</code></a> docs: add documentation for HttpClient response body size limit and related e...</li> <li><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><code>8cdc202</code></a> fix(http): prevent caching of responses with Set-Cookie headers</li> <li><a href="https://github.com/angular/angular/commit/6867f77ec779a0a24f6339ad6c775f444202103c"><code>6867f77</code></a> fix(http): distinguish repeated transfer cache params</li> <li><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><code>6c1f3e9</code></a> fix(common): skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69316">#69316</a>)</li> <li><a href="https://github.com/angular/angular/commit/7ef139906802ddd98ce12ce99fdd8c11a684d87d"><code>7ef1399</code></a> fix(http): skip transfer cache for fetch credentialed requests (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69316">#69316</a>)</li> <li><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><code>94ea403</code></a> fix(common): escape anchor fragment in shadow DOM name selector</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.4/packages/common">compare view</a></li> </ul> </details> <br /> Updates `@angular/compiler` from 22.0.1 to 22.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/compiler's releases</a>.</em></p> <blockquote> <h2>22.0.4</h2> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><img src="https://img.shields.io/badge/fd37f09f37-fix-green" alt="fix - fd37f09f37" /></a></td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <h2>22.0.3</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><img src="https://img.shields.io/badge/f90c20df40-fix-green" alt="fix - f90c20df40" /></a></td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><img src="https://img.shields.io/badge/f4f7f3755c-fix-green" alt="fix - f4f7f3755c" /></a></td> <td>remove unused import breaking CI in 22.0.x</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/06d854929c31213df363274f80a64b9049f0310c"><img src="https://img.shields.io/badge/06d854929c-fix-green" alt="fix - 06d854929c" /></a></td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><img src="https://img.shields.io/badge/2799304259-fix-green" alt="fix - 2799304259" /></a></td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><img src="https://img.shields.io/badge/8cdc202dfc-fix-green" alt="fix - 8cdc202dfc" /></a></td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b4a5a2fb4eb2b2ffb6e79170d453d55af2c72e73"><img src="https://img.shields.io/badge/b4a5a2fb4e-fix-green" alt="fix - b4a5a2fb4e" /></a></td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a16f9b22633ef88f64517e18b29923c74da6bff6"><img src="https://img.shields.io/badge/a16f9b2263-fix-green" alt="fix - a16f9b2263" /></a></td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bcc648f4b6dae63d600a9f1c40854940bf8442c7"><img src="https://img.shields.io/badge/bcc648f4b6-fix-green" alt="fix - bcc648f4b6" /></a></td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <h2>22.0.2</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><img src="https://img.shields.io/badge/94ea403563-fix-green" alt="fix - 94ea403563" /></a></td> <td>escape anchor fragment in shadow DOM name selector</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><img src="https://img.shields.io/badge/6c1f3e9d49-fix-green" alt="fix - 6c1f3e9d49" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69316">#69316</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><img src="https://img.shields.io/badge/6f1171991a-fix-green" alt="fix - 6f1171991a" /></a></td> <td>restrict possible event handler check to property names longer than 2 characters</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/528a34f766191da3fc684c6fac988b1bd2028f49"><img src="https://img.shields.io/badge/528a34f766-fix-green" alt="fix - 528a34f766" /></a></td> <td>avoid caching missing locale data</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e17e8d542242333359946863d0272680c966325b"><img src="https://img.shields.io/badge/e17e8d5422-fix-green" alt="fix - e17e8d5422" /></a></td> <td>escape overlapping comment delimiters in escapeCommentText</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><img src="https://img.shields.io/badge/59dea13f80-fix-green" alt="fix - 59dea13f80" /></a></td> <td>guard against DOM clobbering in declareExperimentalWebMcpTool</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's changelog</a>.</em></p> <blockquote> <h1>22.0.4 (2026-06-26)</h1> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034">fd37f09f37</a></td> <td>fix</td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.2 (2026-06-25)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ecd047578e1eb3a4cdfee7bfee9b1422e5a5db2c">ecd047578e</a></td> <td>fix</td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8b2785b597ccf11dae3cd3f2e7ee97480233e4d6">8b2785b597</a></td> <td>fix</td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91d168e74b7cdcd1292772b1052888b83de5f3af">91d168e74b</a></td> <td>fix</td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f76e8a98c1005827e562811d5d08ffd35493f9f5">f76e8a98c1</a></td> <td>fix</td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c75ff0255c3d5ee16f94a9969cd611ab2e02d4a2">c75ff0255c</a></td> <td>feat</td> <td>add migration from injectable to service</td> </tr> </tbody> </table> <h3>router</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/97a3fd6a55eccabf7c9adfb33f745c8d1da6d3e9">97a3fd6a55</a></td> <td>feat</td> <td>handle null and undefined inputs in RouterLinkActive</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/716f9eb032baea351c94352f8e36dac8bc82468e">716f9eb032</a></td> <td>fix</td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6f98f98f1f410e5343852e3c8f98c32267b29e01">6f98f98f1f</a></td> <td>fix</td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8d31b82116c4128a00302abd7c4dfc035c77789e">8d31b82116</a></td> <td>fix</td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.0.3 (2026-06-25)</h1> <h3>compiler</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><code>f4f7f37</code></a> fix(compiler): remove unused import breaking CI in 22.0.x</li> <li><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><code>f90c20d</code></a> fix(compiler): account for NgModule dependencies in JIT-compiled partial decl...</li> <li><a href="https://github.com/angular/angular/commit/489d1707d79fe91f1c23d905c4ce9f21cfd1ddf2"><code>489d170</code></a> refactor(compiler): desable the legacy template syntax</li> <li><a href="https://github.com/angular/angular/commit/39001be266e05d73e90a8acf01d47fcddbfab612"><code>39001be</code></a> refactor(compiler): Move the attribute comment to the HTML AST</li> <li><a href="https://github.com/angular/angular/commit/74f2b91c12cef610e5e0dad2f73e036019e570f4"><code>74f2b91</code></a> refactor(compiler): correct TcbInvalidReferenceOp initializer</li> <li><a href="https://github.com/angular/angular/commit/b32ee7ceb3878d25ed58b7bbad58aaf3a01d9966"><code>b32ee7c</code></a> fix(core): treat iframe credentialless as security-sensitive</li> <li><a href="https://github.com/angular/angular/commit/f309727ada9e306c8001b54d4caf7fe71528a427"><code>f309727</code></a> refactor(compiler): Collect in-element comments</li> <li><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><code>6f11719</code></a> fix(compiler): restrict possible event handler check to property names longer...</li> <li><a href="https://github.com/angular/angular/commit/8bb3947e995906cc1e48e41e7abc65de3a3cd1f4"><code>8bb3947</code></a> refactor: optimize dom security schema lookups</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.4/packages/compiler">compare view</a></li> </ul> </details> <br /> Updates `@angular/core` from 22.0.1 to 22.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/core's releases</a>.</em></p> <blockquote> <h2>22.0.4</h2> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><img src="https://img.shields.io/badge/fd37f09f37-fix-green" alt="fix - fd37f09f37" /></a></td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <h2>22.0.3</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><img src="https://img.shields.io/badge/f90c20df40-fix-green" alt="fix - f90c20df40" /></a></td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><img src="https://img.shields.io/badge/f4f7f3755c-fix-green" alt="fix - f4f7f3755c" /></a></td> <td>remove unused import breaking CI in 22.0.x</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/06d854929c31213df363274f80a64b9049f0310c"><img src="https://img.shields.io/badge/06d854929c-fix-green" alt="fix - 06d854929c" /></a></td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><img src="https://img.shields.io/badge/2799304259-fix-green" alt="fix - 2799304259" /></a></td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><img src="https://img.shields.io/badge/8cdc202dfc-fix-green" alt="fix - 8cdc202dfc" /></a></td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b4a5a2fb4eb2b2ffb6e79170d453d55af2c72e73"><img src="https://img.shields.io/badge/b4a5a2fb4e-fix-green" alt="fix - b4a5a2fb4e" /></a></td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a16f9b22633ef88f64517e18b29923c74da6bff6"><img src="https://img.shields.io/badge/a16f9b2263-fix-green" alt="fix - a16f9b2263" /></a></td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bcc648f4b6dae63d600a9f1c40854940bf8442c7"><img src="https://img.shields.io/badge/bcc648f4b6-fix-green" alt="fix - bcc648f4b6" /></a></td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <h2>22.0.2</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><img src="https://img.shields.io/badge/94ea403563-fix-green" alt="fix - 94ea403563" /></a></td> <td>escape anchor fragment in shadow DOM name selector</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><img src="https://img.shields.io/badge/6c1f3e9d49-fix-green" alt="fix - 6c1f3e9d49" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69316">#69316</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><img src="https://img.shields.io/badge/6f1171991a-fix-green" alt="fix - 6f1171991a" /></a></td> <td>restrict possible event handler check to property names longer than 2 characters</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/528a34f766191da3fc684c6fac988b1bd2028f49"><img src="https://img.shields.io/badge/528a34f766-fix-green" alt="fix - 528a34f766" /></a></td> <td>avoid caching missing locale data</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e17e8d542242333359946863d0272680c966325b"><img src="https://img.shields.io/badge/e17e8d5422-fix-green" alt="fix - e17e8d5422" /></a></td> <td>escape overlapping comment delimiters in escapeCommentText</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><img src="https://img.shields.io/badge/59dea13f80-fix-green" alt="fix - 59dea13f80" /></a></td> <td>guard against DOM clobbering in declareExperimentalWebMcpTool</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's changelog</a>.</em></p> <blockquote> <h1>22.0.4 (2026-06-26)</h1> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034">fd37f09f37</a></td> <td>fix</td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.2 (2026-06-25)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ecd047578e1eb3a4cdfee7bfee9b1422e5a5db2c">ecd047578e</a></td> <td>fix</td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8b2785b597ccf11dae3cd3f2e7ee97480233e4d6">8b2785b597</a></td> <td>fix</td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91d168e74b7cdcd1292772b1052888b83de5f3af">91d168e74b</a></td> <td>fix</td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f76e8a98c1005827e562811d5d08ffd35493f9f5">f76e8a98c1</a></td> <td>fix</td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c75ff0255c3d5ee16f94a9969cd611ab2e02d4a2">c75ff0255c</a></td> <td>feat</td> <td>add migration from injectable to service</td> </tr> </tbody> </table> <h3>router</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/97a3fd6a55eccabf7c9adfb33f745c8d1da6d3e9">97a3fd6a55</a></td> <td>feat</td> <td>handle null and undefined inputs in RouterLinkActive</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/716f9eb032baea351c94352f8e36dac8bc82468e">716f9eb032</a></td> <td>fix</td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6f98f98f1f410e5343852e3c8f98c32267b29e01">6f98f98f1f</a></td> <td>fix</td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8d31b82116c4128a00302abd7c4dfc035c77789e">8d31b82116</a></td> <td>fix</td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.0.3 (2026-06-25)</h1> <h3>compiler</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><code>fd37f09</code></a> fix(migrations): resolve migration failure when tsconfig specifies rootDir</li> <li><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><code>f90c20d</code></a> fix(compiler): account for NgModule dependencies in JIT-compiled partial decl...</li> <li><a href="https://github.com/angular/angular/commit/01d58d7ad7277ca1acc07186a7114167d65b02d6"><code>01d58d7</code></a> refactor(core): Tree shake the <code>SimpleChanges</code> &amp; co.</li> <li><a href="https://github.com/angular/angular/commit/03d1a6444a57ed654929c4b36c86cf797021c3c0"><code>03d1a64</code></a> docs(core): document resource chaining with chain() in params context</li> <li><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><code>2799304</code></a> fix(core): avoid uncaught promise errors in injectAsync prefetching</li> <li><a href="https://github.com/angular/angular/commit/3e7c83b0a30886ffc9ecb9f6d1f234debadce68d"><code>3e7c83b</code></a> Revert &quot;fix(core): escape overlapping comment delimiters in escapeCommentText&quot;</li> <li><a href="https://github.com/angular/angular/commit/152601ed9429d127e31a9068db92aa4406cd0ced"><code>152601e</code></a> refactor(core): add <code>childSignalProp</code> to <code>ReactiveNodeKind</code></li> <li><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><code>59dea13</code></a> fix(core): guard against DOM clobbering in declareExperimentalWebMcpTool</li> <li><a href="https://github.com/angular/angular/commit/81cb4570b2297d8af1a7287e2275758afc5b9acb"><code>81cb457</code></a> refactor(router): Add handling for ActivatedRoute-scoped injector</li> <li><a href="https://github.com/angular/angular/commit/f902d1d35e90e9220e40581fa2d7c4463b2d1190"><code>f902d1d</code></a> perf(core): detect existing signal dependency without checking all producer l...</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.0.4/packages/core">compare view</a></li> </ul> </details> <br /> Updates `@angular/forms` from 22.0.0 to 22.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/forms's releases</a>.</em></p> <blockquote> <h2>22.0.4</h2> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><img src="https://img.shields.io/badge/fd37f09f37-fix-green" alt="fix - fd37f09f37" /></a></td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <h2>22.0.3</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><img src="https://img.shields.io/badge/f90c20df40-fix-green" alt="fix - f90c20df40" /></a></td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><img src="https://img.shields.io/badge/f4f7f3755c-fix-green" alt="fix - f4f7f3755c" /></a></td> <td>remove unused import breaking CI in 22.0.x</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/06d854929c31213df363274f80a64b9049f0310c"><img src="https://img.shields.io/badge/06d854929c-fix-green" alt="fix - 06d854929c" /></a></td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><img src="https://img.shields.io/badge/2799304259-fix-green" alt="fix - 2799304259" /></a></td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><img src="https://img.shields.io/badge/8cdc202dfc-fix-green" alt="fix - 8cdc202dfc" /></a></td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b4a5a2fb4eb2b2ffb6e79170d453d55af2c72e73"><img src="https://img.shields.io/badge/b4a5a2fb4e-fix-green" alt="fix - b4a5a2fb4e" /></a></td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a16f9b22633ef88f64517e18b29923c74da6bff6"><img src="https://img.shields.io/badge/a16f9b2263-fix-green" alt="fix - a16f9b2263" /></a></td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bcc648f4b6dae63d600a9f1c40854940bf8442c7"><img src="https://img.shields.io/badge/bcc648f4b6-fix-green" alt="fix - bcc648f4b6" /></a></td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <h2>22.0.2</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><img src="https://img.shields.io/badge/94ea403563-fix-green" alt="fix - 94ea403563" /></a></td> <td>escape anchor fragment in shadow DOM name selector</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><img src="https://img.shields.io/badge/6c1f3e9d49-fix-green" alt="fix - 6c1f3e9d49" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69316">#69316</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><img src="https://img.shields.io/badge/6f1171991a-fix-green" alt="fix - 6f1171991a" /></a></td> <td>restrict possible event handler check to property names longer than 2 characters</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/528a34f766191da3fc684c6fac988b1bd2028f49"><img src="https://img.shields.io/badge/528a34f766-fix-green" alt="fix - 528a34f766" /></a></td> <td>avoid caching missing locale data</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e17e8d542242333359946863d0272680c966325b"><img src="https://img.shields.io/badge/e17e8d5422-fix-green" alt="fix - e17e8d5422" /></a></td> <td>escape overlapping comment delimiters in escapeCommentText</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><img src="https://img.shields.io/badge/59dea13f80-fix-green" alt="fix - 59dea13f80" /></a></td> <td>guard against DOM clobbering in declareExperimentalWebMcpTool</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/forms's changelog</a>.</em></p> <blockquote> <h1>22.0.4 (2026-06-26)</h1> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034">fd37f09f37</a></td> <td>fix</td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.2 (2026-06-25)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ecd047578e1eb3a4cdfee7bfee9b1422e5a5db2c">ecd047578e</a></td> <td>fix</td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8b2785b597ccf11dae3cd3f2e7ee97480233e4d6">8b2785b597</a></td> <td>fix</td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91d168e74b7cdcd1292772b1052888b83de5f3af">91d168e74b</a></td> <td>fix</td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f76e8a98c1005827e562811d5d08ffd35493f9f5">f76e8a98c1</a></td> <td>fix</td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c75ff0255c3d5ee16f94a9969cd611ab2e02d4a2">c75ff0255c</a></td> <td>feat</td> <td>add migration from injectable to service</td> </tr> </tbody> </table> <h3>router</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/97a3fd6a55eccabf7c9adfb33f745c8d1da6d3e9">97a3fd6a55</a></td> <td>feat</td> <td>handle null and undefined inputs in RouterLinkActive</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/716f9eb032baea351c94352f8e36dac8bc82468e">716f9eb032</a></td> <td>fix</td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6f98f98f1f410e5343852e3c8f98c32267b29e01">6f98f98f1f</a></td> <td>fix</td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8d31b82116c4128a00302abd7c4dfc035c77789e">8d31b82116</a></td> <td>fix</td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.0.3 (2026-06-25)</h1> <h3>compiler</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/2353bf22a52563fece26047820234ae013cdc931"><code>2353bf2</code></a> refactor(forms): widen <code>AsyncValidatorOptions.factory</code></li> <li><a href="https://github.com/angular/angular/commit/d2b613900cbfeb4780d4061155e2b1b6183128be"><code>d2b6139</code></a> docs(forms): clarify debounce('blur') usage with custom FormValueControl</li> <li><a href="https://github.com/angular/angular/commit/59ee51e2d4adea02d25068b21980312164fd477d"><code>59ee51e</code></a> docs(forms): update package docs for Signal Forms graduation</li> <li><a href="https://github.com/angular/angular/commit/3f055435f6e2f5f9824bc8f70d061b284bea7c80"><code>3f05543</code></a> refactor(forms): fix initWebMcpForm description to be required</li> <li><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014"><code>11836a6</code></a> fix(forms): delay mcp reading the form model by a <code>tick</code></li> <li><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae"><code>e51ad37</code></a> fix(forms): remove animationstart listener on component destroy to prevent me...</li> <li><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd"><code>85d2d10</code></a> fix(forms): harden FormGroup control lookups against prototype shadowing</li> <li><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f"><code>cdcea80</code></a> fix(core): require WebMCP tool descriptions</li> <li><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a"><code>55b7b5a</code></a> fix(forms): set <code>additionalProperties: false</code> on generated WebMCP form</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.4/packages/forms">compare view</a></li> </ul> </details> <br /> Updates `@angular/platform-browser` from 22.0.0 to 22.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/platform-browser's releases</a>.</em></p> <blockquote> <h2>22.0.4</h2> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><img src="https://img.shields.io/badge/fd37f09f37-fix-green" alt="fix - fd37f09f37" /></a></td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <h2>22.0.3</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><img src="https://img.shields.io/badge/f90c20df40-fix-green" alt="fix - f90c20df40" /></a></td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><img src="https://img.shields.io/badge/f4f7f3755c-fix-green" alt="fix - f4f7f3755c" /></a></td> <td>remove unused import breaking CI in 22.0.x</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/06d854929c31213df363274f80a64b9049f0310c"><img src="https://img.shields.io/badge/06d854929c-fix-green" alt="fix - 06d854929c" /></a></td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><img src="https://img.shields.io/badge/2799304259-fix-green" alt="fix - 2799304259" /></a></td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><img src="https://img.shields.io/badge/8cdc202dfc-fix-green" alt="fix - 8cdc202dfc" /></a></td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b4a5a2fb4eb2b2ffb6e79170d453d55af2c72e73"><img src="https://img.shields.io/badge/b4a5a2fb4e-fix-green" alt="fix - b4a5a2fb4e" /></a></td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a16f9b22633ef88f64517e18b29923c74da6bff6"><img src="https://img.shields.io/badge/a16f9b2263-fix-green" alt="fix - a16f9b2263" /></a></td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bcc648f4b6dae63d600a9f1c40854940bf8442c7"><img src="https://img.shields.io/badge/bcc648f4b6-fix-green" alt="fix - bcc648f4b6" /></a></td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <h2>22.0.2</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><img src="https://img.shields.io/badge/94ea403563-fix-green" alt="fix - 94ea403563" /></a></td> <td>escape anchor fragment in shadow DOM name selector</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><img src="https://img.shields.io/badge/6c1f3e9d49-fix-green" alt="fix - 6c1f3e9d49" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/platform-browser/issues/69316">#69316</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><img src="https://img.shields.io/badge/6f1171991a-fix-green" alt="fix - 6f1171991a" /></a></td> <td>restrict possible event handler check to property names longer than 2 characters</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/528a34f766191da3fc684c6fac988b1bd2028f49"><img src="https://img.shields.io/badge/528a34f766-fix-green" alt="fix - 528a34f766" /></a></td> <td>avoid caching missing locale data</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e17e8d542242333359946863d0272680c966325b"><img src="https://img.shields.io/badge/e17e8d5422-fix-green" alt="fix - e17e8d5422" /></a></td> <td>escape overlapping comment delimiters in escapeCommentText</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><img src="https://img.shields.io/badge/59dea13f80-fix-green" alt="fix - 59dea13f80" /></a></td> <td>guard against DOM clobbering in declareExperimentalWebMcpTool</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/platform-browser's changelog</a>.</em></p> <blockquote> <h1>22.0.4 (2026-06-26)</h1> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034">fd37f09f37</a></td> <td>fix</td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.2 (2026-06-25)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ecd047578e1eb3a4cdfee7bfee9b1422e5a5db2c">ecd047578e</a></td> <td>fix</td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8b2785b597ccf11dae3cd3f2e7ee97480233e4d6">8b2785b597</a></td> <td>fix</td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91d168e74b7cdcd1292772b1052888b83de5f3af">91d168e74b</a></td> <td>fix</td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f76e8a98c1005827e562811d5d08ffd35493f9f5">f76e8a98c1</a></td> <td>fix</td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c75ff0255c3d5ee16f94a9969cd611ab2e02d4a2">c75ff0255c</a></td> <td>feat</td> <td>add migration from injectable to service</td> </tr> </tbody> </table> <h3>router</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/97a3fd6a55eccabf7c9adfb33f745c8d1da6d3e9">97a3fd6a55</a></td> <td>feat</td> <td>handle null and undefined inputs in RouterLinkActive</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/716f9eb032baea351c94352f8e36dac8bc82468e">716f9eb032</a></td> <td>fix</td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6f98f98f1f410e5343852e3c8f98c32267b29e01">6f98f98f1f</a></td> <td>fix</td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8d31b82116c4128a00302abd7c4dfc035c77789e">8d31b82116</a></td> <td>fix</td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.0.3 (2026-06-25)</h1> <h3>compiler</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/3d536d7a8479f7360de822e8ec905a8d3a26efdd"><code>3d536d7</code></a> docs: add error guide for NG05102</li> <li><a href="https://github.com/angular/angular/commit/f598dcfda0d2c13eca237b6a2ed7006361b0506a"><code>f598dcf</code></a> docs: add error guide for NG05101</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.4/packages/platform-browser">compare view</a></li> </ul> </details> <br /> Updates `@angular/router` from 22.0.0 to 22.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/router's releases</a>.</em></p> <blockquote> <h2>22.0.4</h2> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034"><img src="https://img.shields.io/badge/fd37f09f37-fix-green" alt="fix - fd37f09f37" /></a></td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <h2>22.0.3</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f90c20df4064dcdc4fe63d3148e0d696a61f562c"><img src="https://img.shields.io/badge/f90c20df40-fix-green" alt="fix - f90c20df40" /></a></td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/f4f7f3755cc74c7ee73da32a14d99cdb9265177c"><img src="https://img.shields.io/badge/f4f7f3755c-fix-green" alt="fix - f4f7f3755c" /></a></td> <td>remove unused import breaking CI in 22.0.x</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/06d854929c31213df363274f80a64b9049f0310c"><img src="https://img.shields.io/badge/06d854929c-fix-green" alt="fix - 06d854929c" /></a></td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/279930425910c804e369a04f8df3a259f16b8daf"><img src="https://img.shields.io/badge/2799304259-fix-green" alt="fix - 2799304259" /></a></td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8cdc202dfcd45b95fdcabb2af3493571f57a4762"><img src="https://img.shields.io/badge/8cdc202dfc-fix-green" alt="fix - 8cdc202dfc" /></a></td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b4a5a2fb4eb2b2ffb6e79170d453d55af2c72e73"><img src="https://img.shields.io/badge/b4a5a2fb4e-fix-green" alt="fix - b4a5a2fb4e" /></a></td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a16f9b22633ef88f64517e18b29923c74da6bff6"><img src="https://img.shields.io/badge/a16f9b2263-fix-green" alt="fix - a16f9b2263" /></a></td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/bcc648f4b6dae63d600a9f1c40854940bf8442c7"><img src="https://img.shields.io/badge/bcc648f4b6-fix-green" alt="fix - bcc648f4b6" /></a></td> <td>support model() signals in downgradeComponent</td> </tr> </tbody> </table> <h2>22.0.2</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/94ea4035638db37e938831e3cb0e9562ca399475"><img src="https://img.shields.io/badge/94ea403563-fix-green" alt="fix - 94ea403563" /></a></td> <td>escape anchor fragment in shadow DOM name selector</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6c1f3e9d49907ef643f1bc5297ff404768017acf"><img src="https://img.shields.io/badge/6c1f3e9d49-fix-green" alt="fix - 6c1f3e9d49" /></a></td> <td>skip transfer cache for uncacheable HTTP traffic (<a href="https://github.com/angular/angular/tree/HEAD/packages/router/issues/69316">#69316</a>)</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/6f1171991a1262b5384470f34029f7312dc4fc53"><img src="https://img.shields.io/badge/6f1171991a-fix-green" alt="fix - 6f1171991a" /></a></td> <td>restrict possible event handler check to property names longer than 2 characters</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/528a34f766191da3fc684c6fac988b1bd2028f49"><img src="https://img.shields.io/badge/528a34f766-fix-green" alt="fix - 528a34f766" /></a></td> <td>avoid caching missing locale data</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e17e8d542242333359946863d0272680c966325b"><img src="https://img.shields.io/badge/e17e8d5422-fix-green" alt="fix - e17e8d5422" /></a></td> <td>escape overlapping comment delimiters in escapeCommentText</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/59dea13f802f0bf43c4ee2b65c2a1aa0e59a2a15"><img src="https://img.shields.io/badge/59dea13f80-fix-green" alt="fix - 59dea13f80" /></a></td> <td>guard against DOM clobbering in declareExperimentalWebMcpTool</td> </tr> </tbody> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/router's changelog</a>.</em></p> <blockquote> <h1>22.0.4 (2026-06-26)</h1> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/fd37f09f371184f6160ec7eb7fdf560eb9d77034">fd37f09f37</a></td> <td>fix</td> <td>resolve migration failure when tsconfig specifies rootDir</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>22.1.0-next.2 (2026-06-25)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ecd047578e1eb3a4cdfee7bfee9b1422e5a5db2c">ecd047578e</a></td> <td>fix</td> <td>account for NgModule dependencies in JIT-compiled partial declarations</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/8b2785b597ccf11dae3cd3f2e7ee97480233e4d6">8b2785b597</a></td> <td>fix</td> <td>report diagnostic instead of crashing on malformed host binding</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/91d168e74b7cdcd1292772b1052888b83de5f3af">91d168e74b</a></td> <td>fix</td> <td>avoid uncaught promise errors in injectAsync prefetching</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/f76e8a98c1005827e562811d5d08ffd35493f9f5">f76e8a98c1</a></td> <td>fix</td> <td>prevent caching of responses with Set-Cookie headers</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c75ff0255c3d5ee16f94a9969cd611ab2e02d4a2">c75ff0255c</a></td> <td>feat</td> <td>add migration from injectable to service</td> </tr> </tbody> </table> <h3>router</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/97a3fd6a55eccabf7c9adfb33f745c8d1da6d3e9">97a3fd6a55</a></td> <td>feat</td> <td>handle null and undefined inputs in RouterLinkActive</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/716f9eb032baea351c94352f8e36dac8bc82468e">716f9eb032</a></td> <td>fix</td> <td>preserve referrer in asset requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/6f98f98f1f410e5343852e3c8f98c32267b29e01">6f98f98f1f</a></td> <td>fix</td> <td>preserve referrer policy in asset requests</td> </tr> </tbody> </table> <h3>upgrade</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://g... _Description has been truncated_ Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-01 21:59:48 -07:00
dependabot[bot]	81f63653d3	chore(deps): bump the langchain group with 8 updates (#2578) ... Bumps the langchain group with 8 updates: | Package | From | To | | --- | --- | --- | | [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) | `1.4.0` | `1.5.1` | | [langchain](https://github.com/langchain-ai/langchainjs) | `1.4.4` | `1.5.2` | | [@langchain/openai](https://github.com/langchain-ai/langchainjs) | `1.4.7` | `1.5.3` | | [@langchain/groq](https://github.com/langchain-ai/langchainjs) | `1.2.1` | `1.3.1` | | [@langchain/mistralai](https://github.com/langchain-ai/langchainjs) | `1.1.0` | `1.2.0` | | [@langchain/ollama](https://github.com/langchain-ai/langchainjs) | `1.2.7` | `1.3.0` | | [@langchain/classic](https://github.com/langchain-ai/langchainjs) | `1.0.34` | `1.0.38` | | [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.7.4` | `0.7.14` | Updates `@langchain/anthropic` from 1.4.0 to 1.5.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/anthropic's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/anthropic</code><a href="https://github.com/1"><code>@​1</code></a>.5.1</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11073">#11073</a> <a href="https://github.com/langchain-ai/langchainjs/commit/baa57ba7cdce2046ba3dd40e9e8cf3c93c9c1ac4"><code>baa57ba</code></a> Thanks <a href="https://github.com/archievi"><code>@​archievi</code></a>! - Stop sending <code>thinking: { type: &quot;disabled&quot; }</code> on <code>ChatAnthropic</code> requests when the user never configured thinking. The disabled value is now only emitted when it is explicitly set, so adaptive-only models (e.g. <code>claude-fable-5</code>) that reject an explicit <code>thinking.type: &quot;disabled&quot;</code> no longer fail with a 400 on a default <code>ChatAnthropic</code> instance.</li> </ul> <h2><code>@​langchain/anthropic</code><a href="https://github.com/1"><code>@​1</code></a>.5.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10924">#10924</a> <a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(anthropic): update native streamEvents event coverage</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1ee0df0c49335104968f6c5130dbdb7e777f85d7"><code>1ee0df0</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11097">#11097</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f01770895c06621b469a6c6b5244747f6efdfbf7"><code>f017708</code></a> fix(core): better 429 error handling (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10674">#10674</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a> fix(openai): omit empty reasoning item id in Responses API input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11045">#11045</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a> fix(openai): route standard url file blocks to native input_file in Responses...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a> fix(openai): stream built-in tool progress events (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11090">#11090</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d2e6afcf17b269aa11a2f18444c208bc8a4b2520"><code>d2e6afc</code></a> fix(groq): require <code>@​langchain/core</code> &gt;= 1.1.30 in peer dependency (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11072">#11072</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c66870ea8ebf9e3b0794ab8d969b25dfb189f2de"><code>c66870e</code></a> feat(weaviate): add X-Weaviate-Client-Integration telemetry header (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11088">#11088</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/baa57ba7cdce2046ba3dd40e9e8cf3c93c9c1ac4"><code>baa57ba</code></a> fix(anthropic): omit default disabled thinking from requests (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11073">#11073</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/04edb8d0fa3c408adbc6e4c277d1f3aaf5b40161"><code>04edb8d</code></a> docs(ibm): fix &quot;Recieved&quot; typo in tool_choice error message (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11066">#11066</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2b7f368c2baa3f2916a207bf099a437adce2179c"><code>2b7f368</code></a> chore(deps): bump uuid from 14.0.0 to 14.0.1 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11094">#11094</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.4.0...@langchain/anthropic@1.5.1">compare view</a></li> </ul> </details> <br /> Updates `langchain` from 1.4.4 to 1.5.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">langchain's releases</a>.</em></p> <blockquote> <h2>langchain@1.5.2</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11100">#11100</a> <a href="https://github.com/langchain-ai/langchainjs/commit/3205b35ac83037a2fff2998f16a66b5126b306f8"><code>3205b35</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - fix(langchain, openai): decouple strict tools from strict structured output response</li> </ul> <h2>langchain@1.5.1</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11087">#11087</a> <a href="https://github.com/langchain-ai/langchainjs/commit/534b43a0719c89e3fb4ab7052d3f39797660aa43"><code>534b43a</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - fix(langchain): keep tool call streams pending across any tool interrupt</p> <p>A raw <code>interrupt()</code> raised from inside a tool surfaced as a <code>tool-error</code> and rejected the call's un-awaited <code>output</code> promise, producing an unhandled rejection that crashed HITL runs. The tool-call stream transformer now treats any serialized graph interrupt as control flow (the call stays pending and resumes), not just <code>humanInTheLoopMiddleware</code> interrupts.</p> </li> </ul> <h2>langchain@1.5.0</h2> <h3>Minor Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11062">#11062</a> <a href="https://github.com/langchain-ai/langchainjs/commit/3ebd10ae381ef7c9e12759f08d2f2b745bdfae62"><code>3ebd10a</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(langchain): surface tool-dispatched subagents on <code>run.subagents</code></p> <p>Add a native subagent stream transformer to <code>createAgent</code> so v3 runs expose named nested agents (<code>createAgent({ name })</code> invoked from tools) as typed <code>SubagentRunStream</code> handles with <code>name</code>, <code>cause</code>, scoped <code>messages</code> / <code>toolCalls</code>, and <code>output</code>. Refactors agent stream transformers into <code>agents/transformers/</code> and exports only the public stream types from the package entry.</p> </li> </ul> <h2>langchain@1.4.6</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11012">#11012</a> <a href="https://github.com/langchain-ai/langchainjs/commit/4aeaa767a48dcc5451371f14adf4a06f064d23b9"><code>4aeaa76</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(langchain): add <code>when</code> predicate to human-in-the-loop middleware</p> <p>Add an optional <code>when</code> callback on <code>InterruptOnConfig</code> so callers can dynamically skip interrupts for specific tool calls. The predicate receives a <code>ToolCallRequest</code> (batch <code>afterModel</code> context) and returns whether to interrupt or auto-approve, matching Python <code>HumanInTheLoopMiddleware</code>.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11080">#11080</a> <a href="https://github.com/langchain-ai/langchainjs/commit/e51478a4436d69a21f75f1c9e0bb84f3abb6d6f5"><code>e51478a</code></a> Thanks <a href="https://github.com/aolsenjazz"><code>@​aolsenjazz</code></a>! - feat(aws): bedrock prompt caching middleware</p> <p>Adds bedrockPromptCachingMiddleware. The interface largely matches what was previous implemented with anthropicPromptCachingMiddleware, making a best-effort attempt at utilizing prompt caching features for supported models.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f1d64ff8d6076fb6656c1f327b7b58eac520314b"><code>f1d64ff</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11101">#11101</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/72ffc4bf17dc6dca390546c0e6c9503607198f26"><code>72ffc4b</code></a> fix(aws): add Bedrock stream idle timeout (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11098">#11098</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/3205b35ac83037a2fff2998f16a66b5126b306f8"><code>3205b35</code></a> fix(langchain, openai): decouple strict tools from strict structured output r...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1ee0df0c49335104968f6c5130dbdb7e777f85d7"><code>1ee0df0</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11097">#11097</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f01770895c06621b469a6c6b5244747f6efdfbf7"><code>f017708</code></a> fix(core): better 429 error handling (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10674">#10674</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a> fix(openai): omit empty reasoning item id in Responses API input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11045">#11045</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a> fix(openai): route standard url file blocks to native input_file in Responses...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a> fix(openai): stream built-in tool progress events (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11090">#11090</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d2e6afcf17b269aa11a2f18444c208bc8a4b2520"><code>d2e6afc</code></a> fix(groq): require <code>@​langchain/core</code> &gt;= 1.1.30 in peer dependency (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11072">#11072</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c66870ea8ebf9e3b0794ab8d969b25dfb189f2de"><code>c66870e</code></a> feat(weaviate): add X-Weaviate-Client-Integration telemetry header (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11088">#11088</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.4.4...langchain@1.5.2">compare view</a></li> </ul> </details> <br /> Updates `@langchain/openai` from 1.4.7 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/openai's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.3</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11100">#11100</a> <a href="https://github.com/langchain-ai/langchainjs/commit/3205b35ac83037a2fff2998f16a66b5126b306f8"><code>3205b35</code></a> Thanks <a href="https://github.com/colifran"><code>@​colifran</code></a>! - fix(langchain, openai): decouple strict tools from strict structured output response</li> </ul> <h2><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11045">#11045</a> <a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a> Thanks <a href="https://github.com/jackjin1997"><code>@​jackjin1997</code></a>! - fix(openai): omit empty id and content on reasoning items in Responses API input</p> <p>Reasoning blocks reassembled from streaming chunks (e.g. via <code>streamEvents</code>) never carry an id, since OpenAI's streaming protocol only includes it in non-streaming responses. When such a message was replayed as Responses API input on the next turn, the reasoning item was emitted with <code>id: &quot;&quot;</code>, which OpenAI rejects with <code>400 Invalid 'input[n].id': ''</code>. The <code>id</code> field is now omitted when absent.</p> <p>A second error surfaced immediately after that fix: the same converter set a populated <code>content</code> array on the reasoning input item, which the Responses API also rejects (<code>400 Invalid 'input[n].content': array too long. Expected an array with maximum length 0</code>). Reasoning input items only carry <code>summary</code>, so <code>content</code> is no longer forwarded. Thanks to <a href="https://github.com/csrujanreddy"><code>@​csrujanreddy</code></a> for catching the second issue and verifying both fixes against the live API.</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11065">#11065</a> <a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a> Thanks <a href="https://github.com/rxits"><code>@​rxits</code></a>! - fix(openai): route standard url file blocks to native input_file in Responses API</p> </li> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11090">#11090</a> <a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a> Thanks <a href="https://github.com/nikhilpakhloo"><code>@​nikhilpakhloo</code></a>! - fix(openai): stream built-in tool progress events</p> </li> </ul> <h2><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.1</h2> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11001">#11001</a> <a href="https://github.com/langchain-ai/langchainjs/commit/80b43ecffe0701c3c375c407fb601cb452f708ef"><code>80b43ec</code></a> Thanks <a href="https://github.com/Herrtian"><code>@​Herrtian</code></a>! - Wrap Responses API stream iteration errors with existing OpenAI client error handling.</li> </ul> <h2><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10924">#10924</a> <a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(openai): add native streamEvents event converters</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f1d64ff8d6076fb6656c1f327b7b58eac520314b"><code>f1d64ff</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11101">#11101</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/72ffc4bf17dc6dca390546c0e6c9503607198f26"><code>72ffc4b</code></a> fix(aws): add Bedrock stream idle timeout (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11098">#11098</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/3205b35ac83037a2fff2998f16a66b5126b306f8"><code>3205b35</code></a> fix(langchain, openai): decouple strict tools from strict structured output r...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1ee0df0c49335104968f6c5130dbdb7e777f85d7"><code>1ee0df0</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11097">#11097</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f01770895c06621b469a6c6b5244747f6efdfbf7"><code>f017708</code></a> fix(core): better 429 error handling (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10674">#10674</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a> fix(openai): omit empty reasoning item id in Responses API input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11045">#11045</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a> fix(openai): route standard url file blocks to native input_file in Responses...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a> fix(openai): stream built-in tool progress events (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11090">#11090</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d2e6afcf17b269aa11a2f18444c208bc8a4b2520"><code>d2e6afc</code></a> fix(groq): require <code>@​langchain/core</code> &gt;= 1.1.30 in peer dependency (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11072">#11072</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c66870ea8ebf9e3b0794ab8d969b25dfb189f2de"><code>c66870e</code></a> feat(weaviate): add X-Weaviate-Client-Integration telemetry header (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11088">#11088</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.4.7...@langchain/openai@1.5.3">compare view</a></li> </ul> </details> <br /> Updates `@langchain/groq` from 1.2.1 to 1.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/groq's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/groq</code><a href="https://github.com/1"><code>@​1</code></a>.3.1</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11072">#11072</a> <a href="https://github.com/langchain-ai/langchainjs/commit/d2e6afcf17b269aa11a2f18444c208bc8a4b2520"><code>d2e6afc</code></a> Thanks <a href="https://github.com/atimothee"><code>@​atimothee</code></a>! - fix(groq): require <code>@langchain/core</code> &gt;= 1.1.30 in peer dependency</p> <p>The package imports <code>@langchain/core/utils/standard_schema</code> and <code>@langchain/core/language_models/structured_output</code>, both of which were introduced in <code>@langchain/core@1.1.30</code>. The previous <code>^1.0.0</code> peer dependency range allowed installing incompatible older versions and caused module-resolution failures at build/runtime.</p> </li> </ul> <h2><code>@​langchain/groq</code><a href="https://github.com/1"><code>@​1</code></a>.3.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10924">#10924</a> <a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(groq): add native OpenAI-compatible streamEvents events</li> </ul> <h3>Patch Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/11069">#11069</a> <a href="https://github.com/langchain-ai/langchainjs/commit/7d61f5f19861643bd39eda333628e59783c75fa9"><code>7d61f5f</code></a> Thanks <a href="https://github.com/brandonhawi"><code>@​brandonhawi</code></a>! - Tighten the <code>@langchain/core</code> peer dependency to <code>^1.1.30</code>, the version that introduced the <code>utils/standard_schema</code> and <code>language_models/structured_output</code> export subpaths imported by <code>ChatGroq</code>. The previous <code>^1.0.0</code> range allowed core versions below 1.1.30 that lack these exports, causing module-not-found build failures.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1ee0df0c49335104968f6c5130dbdb7e777f85d7"><code>1ee0df0</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11097">#11097</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f01770895c06621b469a6c6b5244747f6efdfbf7"><code>f017708</code></a> fix(core): better 429 error handling (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10674">#10674</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a> fix(openai): omit empty reasoning item id in Responses API input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11045">#11045</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a> fix(openai): route standard url file blocks to native input_file in Responses...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a> fix(openai): stream built-in tool progress events (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11090">#11090</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d2e6afcf17b269aa11a2f18444c208bc8a4b2520"><code>d2e6afc</code></a> fix(groq): require <code>@​langchain/core</code> &gt;= 1.1.30 in peer dependency (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11072">#11072</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c66870ea8ebf9e3b0794ab8d969b25dfb189f2de"><code>c66870e</code></a> feat(weaviate): add X-Weaviate-Client-Integration telemetry header (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11088">#11088</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/baa57ba7cdce2046ba3dd40e9e8cf3c93c9c1ac4"><code>baa57ba</code></a> fix(anthropic): omit default disabled thinking from requests (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11073">#11073</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/04edb8d0fa3c408adbc6e4c277d1f3aaf5b40161"><code>04edb8d</code></a> docs(ibm): fix &quot;Recieved&quot; typo in tool_choice error message (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11066">#11066</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2b7f368c2baa3f2916a207bf099a437adce2179c"><code>2b7f368</code></a> chore(deps): bump uuid from 14.0.0 to 14.0.1 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11094">#11094</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/groq@1.2.1...@langchain/groq@1.3.1">compare view</a></li> </ul> </details> <br /> Updates `@langchain/mistralai` from 1.1.0 to 1.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/mistralai's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/mistralai</code><a href="https://github.com/1"><code>@​1</code></a>.2.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10924">#10924</a> <a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(mistralai): add native streamEvents event conversion</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c5e896270207fcd3bdf1d1877e80b94c72d35f1e"><code>c5e8962</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11059">#11059</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e51478a4436d69a21f75f1c9e0bb84f3abb6d6f5"><code>e51478a</code></a> feat(aws): bedrock prompt caching middleware (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11080">#11080</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/7d61f5f19861643bd39eda333628e59783c75fa9"><code>7d61f5f</code></a> fix(groq): tighten <code>@​langchain/core</code> peer dependency to ^1.1.30 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11069">#11069</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> feat(deps): native streamEvents ChatModelStreamEvent protocol (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10924">#10924</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/6d212ef91affd19b71dac22fd3761287a96108bf"><code>6d212ef</code></a> docs(tavily): fix &quot;refering&quot; typo in tool description (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11067">#11067</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a001816b56a0f19326d1e3e5ccbea5ae90dd549f"><code>a001816</code></a> chore(deps): bump esbuild from 0.28.0 to 0.28.1 in /environment_tests/test-ex...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/234c8bbb97444357847de5751d81ee9c51a7d33f"><code>234c8bb</code></a> ci(infra): pin GitHub Actions to full-length commit SHAs (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11061">#11061</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/4aeaa767a48dcc5451371f14adf4a06f064d23b9"><code>4aeaa76</code></a> feat(langchain): add <code>when</code> predicate to human-in-the-loop middleware (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11012">#11012</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ac0f71d03994664cfee98e71a584d4aa3321746f"><code>ac0f71d</code></a> fix(core): preserve AIMessage content blocks (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11047">#11047</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/39f338e08e6abfd9e1d02157b2e8b3c9768a673c"><code>39f338e</code></a> chore: remove deprecated <code>@​langchain/google-cloud-sql-pg</code> package (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11060">#11060</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/mistralai@1.1.0...@langchain/mistralai@1.2.0">compare view</a></li> </ul> </details> <br /> Updates `@langchain/ollama` from 1.2.7 to 1.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/ollama's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/ollama</code><a href="https://github.com/1"><code>@​1</code></a>.3.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/langchain-ai/langchainjs/pull/10924">#10924</a> <a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> Thanks <a href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>! - feat(ollama): add native streamEvents event conversion</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c5e896270207fcd3bdf1d1877e80b94c72d35f1e"><code>c5e8962</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11059">#11059</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/e51478a4436d69a21f75f1c9e0bb84f3abb6d6f5"><code>e51478a</code></a> feat(aws): bedrock prompt caching middleware (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11080">#11080</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/7d61f5f19861643bd39eda333628e59783c75fa9"><code>7d61f5f</code></a> fix(groq): tighten <code>@​langchain/core</code> peer dependency to ^1.1.30 (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11069">#11069</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a> feat(deps): native streamEvents ChatModelStreamEvent protocol (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10924">#10924</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/6d212ef91affd19b71dac22fd3761287a96108bf"><code>6d212ef</code></a> docs(tavily): fix &quot;refering&quot; typo in tool description (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11067">#11067</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/a001816b56a0f19326d1e3e5ccbea5ae90dd549f"><code>a001816</code></a> chore(deps): bump esbuild from 0.28.0 to 0.28.1 in /environment_tests/test-ex...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/234c8bbb97444357847de5751d81ee9c51a7d33f"><code>234c8bb</code></a> ci(infra): pin GitHub Actions to full-length commit SHAs (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11061">#11061</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/4aeaa767a48dcc5451371f14adf4a06f064d23b9"><code>4aeaa76</code></a> feat(langchain): add <code>when</code> predicate to human-in-the-loop middleware (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11012">#11012</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/ac0f71d03994664cfee98e71a584d4aa3321746f"><code>ac0f71d</code></a> fix(core): preserve AIMessage content blocks (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11047">#11047</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/39f338e08e6abfd9e1d02157b2e8b3c9768a673c"><code>39f338e</code></a> chore: remove deprecated <code>@​langchain/google-cloud-sql-pg</code> package (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11060">#11060</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.2.7...@langchain/ollama@1.3.0">compare view</a></li> </ul> </details> <br /> Updates `@langchain/classic` from 1.0.34 to 1.0.38 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/classic's releases</a>.</em></p> <blockquote> <h2><code>@​langchain/classic</code><a href="https://github.com/1"><code>@​1</code></a>.0.38</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langchainjs/commit/3205b35ac83037a2fff2998f16a66b5126b306f8"><code>3205b35</code></a>]: <ul> <li><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.3</li> </ul> </li> </ul> <h2><code>@​langchain/classic</code><a href="https://github.com/1"><code>@​1</code></a>.0.37</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a>, <a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a>, <a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a>]: <ul> <li><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.2</li> </ul> </li> </ul> <h2><code>@​langchain/classic</code><a href="https://github.com/1"><code>@​1</code></a>.0.36</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langchainjs/commit/80b43ecffe0701c3c375c407fb601cb452f708ef"><code>80b43ec</code></a>]: <ul> <li><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.1</li> </ul> </li> </ul> <h2><code>@​langchain/classic</code><a href="https://github.com/1"><code>@​1</code></a>.0.35</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/langchain-ai/langchainjs/commit/2e2811509d75af94f57cedcc3842f178f4c020d1"><code>2e28115</code></a>]: <ul> <li><code>@​langchain/openai</code><a href="https://github.com/1"><code>@​1</code></a>.5.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f1d64ff8d6076fb6656c1f327b7b58eac520314b"><code>f1d64ff</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11101">#11101</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/72ffc4bf17dc6dca390546c0e6c9503607198f26"><code>72ffc4b</code></a> fix(aws): add Bedrock stream idle timeout (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11098">#11098</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/3205b35ac83037a2fff2998f16a66b5126b306f8"><code>3205b35</code></a> fix(langchain, openai): decouple strict tools from strict structured output r...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/1ee0df0c49335104968f6c5130dbdb7e777f85d7"><code>1ee0df0</code></a> chore: version packages (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11097">#11097</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/f01770895c06621b469a6c6b5244747f6efdfbf7"><code>f017708</code></a> fix(core): better 429 error handling (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/10674">#10674</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/05936ab45ce1bbb04b955c3ebdd03dc1451b655c"><code>05936ab</code></a> fix(openai): omit empty reasoning item id in Responses API input (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11045">#11045</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/798cb705222f43759e94d02a790ebb706ef2f099"><code>798cb70</code></a> fix(openai): route standard url file blocks to native input_file in Responses...</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/80c790b593ad19668f1101f84f06c175db114909"><code>80c790b</code></a> fix(openai): stream built-in tool progress events (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11090">#11090</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/d2e6afcf17b269aa11a2f18444c208bc8a4b2520"><code>d2e6afc</code></a> fix(groq): require <code>@​langchain/core</code> &gt;= 1.1.30 in peer dependency (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11072">#11072</a>)</li> <li><a href="https://github.com/langchain-ai/langchainjs/commit/c66870ea8ebf9e3b0794ab8d969b25dfb189f2de"><code>c66870e</code></a> feat(weaviate): add X-Weaviate-Client-Integration telemetry header (<a href="https://redirect.github.com/langchain-ai/langchainjs/issues/11088">#11088</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langchainjs/compare/@langchain/classic@1.0.34...@langchain/classic@1.0.38">compare view</a></li> </ul> </details> <br /> Updates `langsmith` from 0.7.4 to 0.7.14 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's releases</a>.</em></p> <blockquote> <h2>v0.7.14</h2> <h2>What's Changed</h2> <ul> <li>fix: sum Anthropic cache tokens into input_tokens for correct cost calculation by <a href="https://github.com/QuentinBrosse"><code>@​QuentinBrosse</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2519">langchain-ai/langsmith-sdk#2519</a></li> <li>chore(py): Bump version: 0.7.13 → 0.7.14 by <a href="https://github.com/jacoblee93"><code>@​jacoblee93</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2535">langchain-ai/langsmith-sdk#2535</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.13...v0.7.14">https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.13...v0.7.14</a></p> <h2>v0.7.13</h2> <h2>What's Changed</h2> <ul> <li>fix: initialize otel exporter before background thread by <a href="https://github.com/ericdong-langchain"><code>@​ericdong-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2526">langchain-ai/langsmith-sdk#2526</a></li> <li>fix: convert non primitive types to JSON strings by <a href="https://github.com/ericdong-langchain"><code>@​ericdong-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2527">langchain-ai/langsmith-sdk#2527</a></li> <li>fix: missing await by <a href="https://github.com/ericdong-langchain"><code>@​ericdong-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2528">langchain-ai/langsmith-sdk#2528</a></li> <li>fix: bump minimatch to resolve CVE-2026-27903 by <a href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2502">langchain-ai/langsmith-sdk#2502</a></li> <li>feat(py): add experiment-level metadata to pytest integration by <a href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2524">langchain-ai/langsmith-sdk#2524</a></li> <li>Bump version: 0.7.12 → 0.7.13 by <a href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2531">langchain-ai/langsmith-sdk#2531</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.12...v0.7.13">https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.12...v0.7.13</a></p> <h2>v0.7.12</h2> <h2>What's Changed</h2> <ul> <li>fix: sample before transform in ingest by <a href="https://github.com/ericdong-langchain"><code>@​ericdong-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2488">langchain-ai/langsmith-sdk#2488</a></li> <li>chore: bump version by <a href="https://github.com/ericdong-langchain"><code>@​ericdong-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2521">langchain-ai/langsmith-sdk#2521</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.11...v0.7.12">https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.11...v0.7.12</a></p> <h2>v0.7.11</h2> <h2>What's Changed</h2> <ul> <li>add get insights reports with runs by <a href="https://github.com/Palashio"><code>@​Palashio</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2517">langchain-ai/langsmith-sdk#2517</a></li> <li>bump version for insights sdk changes by <a href="https://github.com/Palashio"><code>@​Palashio</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2520">langchain-ai/langsmith-sdk#2520</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Palashio"><code>@​Palashio</code></a> made their first contribution in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2517">langchain-ai/langsmith-sdk#2517</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.10...v0.7.11">https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.10...v0.7.11</a></p> <h2>v0.7.10</h2> <h2>What's Changed</h2> <ul> <li>chore(deps-dev): bump the js-minor-and-patch group across 1 directory with 9 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2490">langchain-ai/langsmith-sdk#2490</a></li> <li>fix: update deprecated model and re-record VCR cassettes by <a href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2503">langchain-ai/langsmith-sdk#2503</a></li> <li>chore(deps): bump minimatch from 3.1.2 to 3.1.5 in /js/internal/environment_tests/test-exports-metro in the npm_and_yarn group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2489">langchain-ai/langsmith-sdk#2489</a></li> <li>fix: memory leak in _cached_attachment_args when tracing closures by <a href="https://github.com/angus-langchain"><code>@​angus-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2515">langchain-ai/langsmith-sdk#2515</a></li> <li>Bump version: 0.7.9 → 0.7.10 by <a href="https://github.com/angus-langchain"><code>@​angus-langchain</code></a> in <a href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2516">langchain-ai/langsmith-sdk#2516</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.9...v0.7.10">https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.9...v0.7.10</a></p> <h2>v0.7.9</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/f099beb36228b2ce008e56262ab6a5846d2dbdd1"><code>f099beb</code></a> chore(py): Bump version: 0.7.13 → 0.7.14 (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2535">#2535</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/27f1b8312c39b7acda31ac9a850fd74fb99a4e29"><code>27f1b83</code></a> fix: sum Anthropic cache tokens into input_tokens for correct cost calculatio...</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/22c21bff7d1e429d0dfa7800adf95ef971ef2458"><code>22c21bf</code></a> Bump version: 0.7.12 → 0.7.13 (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2531">#2531</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/5d17205b854377bf1c8c59f2c40923c295e2c127"><code>5d17205</code></a> feat(py): add experiment-level metadata to pytest integration (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2524">#2524</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/1412ad4bfe5294e5d6407962162b2fbfcd75202d"><code>1412ad4</code></a> fix: bump minimatch to resolve CVE-2026-27903 (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2502">#2502</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/da0d6e3f137ff375d787c4ba773c8b8d7832d0d8"><code>da0d6e3</code></a> fix: missing await (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2528">#2528</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/9f587d5f45ead3f19a61bd12743827fd84541657"><code>9f587d5</code></a> fix: convert non primitive types to JSON strings (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2527">#2527</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/0efa7fb188a451857790d0066edd5e5cf28dca2f"><code>0efa7fb</code></a> fix: initialize otel exporter before background thread (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2526">#2526</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/51d4e0b867cab82fa95468099e6b2ec3fbb21644"><code>51d4e0b</code></a> chore: bump version (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2521">#2521</a>)</li> <li><a href="https://github.com/langchain-ai/langsmith-sdk/commit/f8db5d1542703c388ccf7d506cbdbff5786c9d6f"><code>f8db5d1</code></a> fix: sample before transform in ingest (<a href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2488">#2488</a>)</li> <li>Additional commits viewable in <a href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.7.4...v0.7.14">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-01 21:59:38 -07:00
Christian Bromann	85ba859b6f	fix(langgraph): drop unused zod-to-json-schema dependency (#2571) ... ## Summary - Remove the vestigial `zod-to-json-schema` peer/dev dependency from `@langchain/langgraph` (`libs/langgraph-core`) and the `langgraph` umbrella package. Nothing in source imports it anymore — graph JSON Schema generation flows through `@langchain/core/utils/json_schema`'s `toJsonSchema`, which uses Zod v4's native `toJSONSchema` with a v3 fallback. - This was the last remaining `zod@^3.24.1` peer constraint, which is what produced the install-time conflict with Zod v4 reported in #1706. - Prune the unused `zod-to-json-schema` declaration from 6 example projects (`multi_agent`, `chatbot-simulation-evaluation`, `reflection`, `rewoo`, `plan-and-execute`, `quickstart`) that declared but never used it. Kept it in `rag`, `how-tos`, and `chatbots`, whose notebooks genuinely call `zodToJsonSchema`. - Regenerate `pnpm-lock.yaml`. Fixes #1706	2026-06-25 11:06:46 -07:00
Christian Bromann	38d15e2f1f	fix(langgraph-api): support configurable TypeScript loaders in dev server (#2568) ... ## Summary - Add configurable TypeScript loader support for the in-memory dev server to fix reflect-metadata / `emitDecoratorMetadata` incompatibility with tsx (esbuild). - Introduce `node_loader` on Node `langgraph.json` configs and `LANGGRAPH_NODE_LOADER` env override; default remains `tsx` CLI watch mode. - Generalize non-tsx loaders to `node [--watch] --import <loader> --import preload entrypoint`, with shorthand mapping for `ts-node` → `ts-node/esm`. - Add `spawn-args` helper + unit tests; add `ts-node` as optional peer dependency of `@langchain/langgraph-api`. Fixes #1834	2026-06-23 09:43:07 -07:00
Christian Bromann	0558e472b7	fix(sdk): bundle pure-ESM deps into CJS build to fix ERR_REQUIRE_ESM (#2565) ... ## Summary - Fix `ERR_REQUIRE_ESM` in `@langchain/langgraph-sdk` for CommonJS consumers on Node < 20.19 / < 22.12: the CJS build no longer does a top-level `require()` of the pure-ESM `p-retry`/`p-queue`. They (and their transitive ESM-only deps) are now bundled and transpiled into relative CJS chunks. - Add per-package build overrides via an optional `tsdown.config.ts`, mirroring the langchainjs convention. `internal/build` discovers and merges it (`config: false` disables tsdown's own discovery so the config's imports resolve from the package dir), and re-exports `defineConfig` from `@langchain/build` so packages get type-safe configs without depending on `tsdown` directly. - Remove the leftover `libs/checkpoint-redis/langchain.config.js` (from the old `@langchain/scripts` build) — it was the only package still carrying one and the current tsdown build ignores it. Fixes #2562	2026-06-22 14:56:09 -07:00
Christian Bromann	5d279df5d5	chore(deps): bump langchain (#2564) ... Bump langchainjs to latest release. --------- Signed-off-by: Christian Bromann <git@bromann.dev> Co-authored-by: open-swe[bot] <215916821+open-swe[bot]@users.noreply.github.com>	2026-06-22 11:38:06 -07:00
Christian Bromann	48cbdd23fd	feat(langgraph-cli): add deploy command for LangSmith Deployment (#2559) ... ## Summary - Add `langgraphjs deploy` to `@langchain/langgraph-cli`, porting the Python CLI's LangSmith Deployment workflow for JS projects. - Support local Docker build/push and remote source-archive upload paths, plus `deploy list`, `deploy revisions list`, `deploy delete`, and `deploy logs`. - Introduce host-backend client, archive/ignore/output helpers, and unit tests; wire the command into the CLI entrypoint and add the `ignore` dependency. Test on our deployment cookbook: ``` pnpm run deploy > js-langsmith@0.1.0 deploy /Users/christian.bromann/Sites/LangChain/deployment-cookbook/js-langsmith > langgraphjs deploy Note: 'langgraphjs deploy' is in beta. Expect frequent updates and improvements. Skipping reserved env var: LANGSMITH_API_KEY Skipping reserved env var: LANGSMITH_TENANT_ID Docker is installed but not running. Start Docker and try again. Using remote build instead. 1. Looking up deployment 'deployment-cookbook-agent' No deployment found. Will create. 2. Creating deployment 'deployment-cookbook-agent' Deployment ID: fc41ac21-0251-4caf-9f6b-e8e381520e59 3. Creating source archive Archive created (0.1 MB) 4. Requesting upload URL 5. Uploading source Uploading (0.1 MB)... 100% 6. Triggering remote build View status: https://smith.langchain.com/o/d7ca4f49-e65f-4c96-8d03-e1d713acb728/host/deployments/fc41ac21-0251-4caf-9f6b-e8e381520e59 QUEUED... (9s) AWAITING_BUILD... (18s) BUILDING... (3m 13s) AWAITING_DEPLOY... (3m 32s) DEPLOYING... (4m 50s) Deployment successful! URL: https://deployment-cookbook-agent-3569d4ef8d405f40850d56230f67258b.us.langgraph.app View status: https://smith.langchain.com/o/d7ca4f49-e65f-4c96-8d03-e1d713acb728/host/deployments/fc41ac21-0251-4caf-9f6b-e8e381520e59 ```	2026-06-22 09:30:50 -07:00
dependabot[bot]	617cac92a4	chore(deps-dev): bump typeorm from 0.3.28 to 0.3.29 (#2563) ... Bumps [typeorm](https://github.com/typeorm/typeorm) from 0.3.28 to 0.3.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typeorm/typeorm/releases">typeorm's releases</a>.</em></p> <blockquote> <h2>0.3.29</h2> <h2>What's Changed</h2> <ul> <li>fix: fix up aggregate methods ambiguous column by <a href="https://github.com/Cprakhar"><code>@​Cprakhar</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11822">typeorm/typeorm#11822</a></li> <li>fix: prevent eager-loaded entities from overwriting manual relations by <a href="https://github.com/LeviHeber"><code>@​LeviHeber</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11267">typeorm/typeorm#11267</a></li> <li>fix: release query runner when there is no migration to revert by <a href="https://github.com/mjr128"><code>@​mjr128</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11232">typeorm/typeorm#11232</a></li> <li>fix: add async to the method using setFindOptions() by <a href="https://github.com/bindon"><code>@​bindon</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/10787">typeorm/typeorm#10787</a></li> <li>chore: disable eslint errors for chai assertions by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11833">typeorm/typeorm#11833</a></li> <li>ci(tests): Remove limitation of branches to run on by <a href="https://github.com/OSA413"><code>@​OSA413</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11794">typeorm/typeorm#11794</a></li> <li>ci: upgrade actions to v6 by <a href="https://github.com/pkuczynski"><code>@​pkuczynski</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11844">typeorm/typeorm#11844</a></li> <li>docs(v0.3): add version dropdown (stable/dev) by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11863">typeorm/typeorm#11863</a></li> <li>fix(sap): <code>QueryBuilder</code> parameter of type JS <code>Date</code> not escaped correctly by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11867">typeorm/typeorm#11867</a></li> <li>feat(sap): add pool timeout by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11868">typeorm/typeorm#11868</a></li> <li>feat(qodo): enable new review experience in v0.3 by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11910">typeorm/typeorm#11910</a></li> <li>feat: add <code>returning</code> option to update/upsert operations by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11782">typeorm/typeorm#11782</a></li> <li>test: enable repository-returning test by <a href="https://github.com/gioboa"><code>@​gioboa</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11913">typeorm/typeorm#11913</a></li> <li>chore(qodo): disable in progress notification in v0.3 by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11928">typeorm/typeorm#11928</a></li> <li>ci(docs): add deploy Github Action to v0.3 branch by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11929">typeorm/typeorm#11929</a></li> <li>chore(qodo): disable persistent comments and inline code suggestions in v0.3 by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11989">typeorm/typeorm#11989</a></li> <li>chore(deps): update all dependencies to the latest minor version by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12015">typeorm/typeorm#12015</a></li> <li>fix(redis): redis cache version detection by <a href="https://github.com/mguida22"><code>@​mguida22</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/11936">typeorm/typeorm#11936</a></li> <li>ci: remove summary comments location policy by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12117">typeorm/typeorm#12117</a></li> <li>ci(qodo): remove /improve from pr and push commands by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12129">typeorm/typeorm#12129</a></li> <li>ci: migrate from npm to pnpm by <a href="https://github.com/pkuczynski"><code>@​pkuczynski</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12193">typeorm/typeorm#12193</a></li> <li>ci(qodo): sync qodo pr agent config from master by <a href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12265">typeorm/typeorm#12265</a></li> <li>ci: remove docs indexing by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12435">typeorm/typeorm#12435</a></li> <li>fix(security): validate limit() in Update/SoftDelete query builders by <a href="https://github.com/smith-xyz"><code>@​smith-xyz</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12437">typeorm/typeorm#12437</a></li> <li>chore(deps): update all minor by <a href="https://github.com/alumni"><code>@​alumni</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12443">typeorm/typeorm#12443</a></li> <li>chore(release): release 0.3.29 by <a href="https://github.com/michaelbromley"><code>@​michaelbromley</code></a> in <a href="https://redirect.github.com/typeorm/typeorm/pull/12442">typeorm/typeorm#12442</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/LeviHeber"><code>@​LeviHeber</code></a> made their first contribution in <a href="https://redirect.github.com/typeorm/typeorm/pull/11267">typeorm/typeorm#11267</a></li> <li><a href="https://github.com/mjr128"><code>@​mjr128</code></a> made their first contribution in <a href="https://redirect.github.com/typeorm/typeorm/pull/11232">typeorm/typeorm#11232</a></li> <li><a href="https://github.com/bindon"><code>@​bindon</code></a> made their first contribution in <a href="https://redirect.github.com/typeorm/typeorm/pull/10787">typeorm/typeorm#10787</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/typeorm/typeorm/compare/0.3.28...0.3.29">https://github.com/typeorm/typeorm/compare/0.3.28...0.3.29</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md">typeorm's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/typeorm/typeorm/compare/0.3.28...0.3.29">0.3.29</a> (2026-05-08)</h2> <h3>Bug Fixes</h3> <ul> <li>add async to the method using setFindOptions() (<a href="https://redirect.github.com/typeorm/typeorm/issues/10787">#10787</a>) (<a href="https://github.com/typeorm/typeorm/commit/cc07c90f1de51bd31c0c450fae3a200f355c37f1">cc07c90</a>)</li> <li>change import for process dependency (<a href="https://redirect.github.com/typeorm/typeorm/issues/11248">#11248</a>) (<a href="https://github.com/typeorm/typeorm/commit/1c67c3b02632c92cac33f5cfd6895a92e93571d8">1c67c3b</a>)</li> <li><strong>cli:</strong> init command loading non-existing package.json (<a href="https://redirect.github.com/typeorm/typeorm/issues/11947">#11947</a>) (<a href="https://github.com/typeorm/typeorm/commit/4d9d1a61c68ecc9b8161abbd59594e69fe052a80">4d9d1a6</a>)</li> <li>fix up aggregate methods ambiguous column (<a href="https://redirect.github.com/typeorm/typeorm/issues/11822">#11822</a>) (<a href="https://github.com/typeorm/typeorm/commit/6e34756b9d6cc8b7b96cfeab869483ef62b2a7e6">6e34756</a>)</li> <li>fix up limit with joins (<a href="https://redirect.github.com/typeorm/typeorm/issues/11987">#11987</a>) (<a href="https://github.com/typeorm/typeorm/commit/3657db86b9c26cd3fcb839279ad0e2f2165305fa">3657db8</a>)</li> <li>getPendingMigrations unnecessarily creating migrations table (<a href="https://redirect.github.com/typeorm/typeorm/issues/11672">#11672</a>) (<a href="https://github.com/typeorm/typeorm/commit/1dbc22428bdfd0b33760afe7bcbb5456d9eab8be">1dbc224</a>)</li> <li><strong>postgres:</strong> execute queries sequentially to avoid pg 8.19.0 deprecation warning (<a href="https://redirect.github.com/typeorm/typeorm/issues/12105">#12105</a>) (<a href="https://github.com/typeorm/typeorm/commit/79829a0f63cb4620a95d73841a77099b988cc1be">79829a0</a>)</li> <li>prevent columns with select false from being returned (<a href="https://redirect.github.com/typeorm/typeorm/issues/11944">#11944</a>) (<a href="https://github.com/typeorm/typeorm/commit/6b20831bb7bc285a9accbdfca6563e73d818d435">6b20831</a>)</li> <li>prevent eager-loaded entities from overwriting manual relations (<a href="https://redirect.github.com/typeorm/typeorm/issues/11267">#11267</a>) (<a href="https://github.com/typeorm/typeorm/commit/2d8c5158db1aef458cd909db05059fff9129305a">2d8c515</a>)</li> <li>propagate schema and database to closure junction table (<a href="https://redirect.github.com/typeorm/typeorm/issues/12110">#12110</a>) (<a href="https://github.com/typeorm/typeorm/commit/58b403f04cfe1e0aae17e6064279cee5e1a33eb3">58b403f</a>)</li> <li><strong>redis:</strong> redis cache version detection (<a href="https://redirect.github.com/typeorm/typeorm/issues/11936">#11936</a>) (<a href="https://github.com/typeorm/typeorm/commit/f22c7a2358108c6656f15470250d937bf440f71d">f22c7a2</a>)</li> <li>release query runner when there is no migration to revert (<a href="https://redirect.github.com/typeorm/typeorm/issues/11232">#11232</a>) (<a href="https://github.com/typeorm/typeorm/commit/a46eb0a7e18df52a39e5f39ae2c4e67a89c945d9">a46eb0a</a>)</li> <li><strong>sap:</strong> <code>QueryBuilder</code> parameter of type JS <code>Date</code> not escaped correctly (<a href="https://redirect.github.com/typeorm/typeorm/issues/11867">#11867</a>) (<a href="https://github.com/typeorm/typeorm/commit/51534362daed2f1cc9ce72ee0886e894892face7">5153436</a>)</li> <li><strong>security:</strong> validate limit() in Update/SoftDelete query builders (<a href="https://redirect.github.com/typeorm/typeorm/issues/12437">#12437</a>) (<a href="https://github.com/typeorm/typeorm/commit/0d7991a27a13a9af7818505e51dddb52c8299d0a">0d7991a</a>)</li> <li>virtual property handling in schema builder (<a href="https://redirect.github.com/typeorm/typeorm/issues/11000">#11000</a>) (<a href="https://github.com/typeorm/typeorm/commit/5bd3255dbd992387c5b7940cb95295570ae56c86">5bd3255</a>)</li> </ul> <h3>Features</h3> <ul> <li>add <code>returning</code> option to update/upsert operations (<a href="https://redirect.github.com/typeorm/typeorm/issues/11782">#11782</a>) (<a href="https://github.com/typeorm/typeorm/commit/11d9767212e95e9e36e09af5e1eac4668c326551">11d9767</a>)</li> <li><strong>sap:</strong> add pool timeout (<a href="https://redirect.github.com/typeorm/typeorm/issues/11868">#11868</a>) (<a href="https://github.com/typeorm/typeorm/commit/b4e2ad2a6cbd941a8a665b5d7fde6bb28546ffef">b4e2ad2</a>)</li> <li><strong>sap:</strong> support locking in select (<a href="https://redirect.github.com/typeorm/typeorm/issues/11996">#11996</a>) (<a href="https://github.com/typeorm/typeorm/commit/86a9e3e1d8e019ef036ccd4935bdc6c25898cf75">86a9e3e</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typeorm/typeorm/commit/0ed009a12867e302ecbc7cedfd442cc60d21c006"><code>0ed009a</code></a> ci: add npm environment to publish job for trusted publishing</li> <li><a href="https://github.com/typeorm/typeorm/commit/6ede38bb0e51939dee50c88ab7bfa88cd407e5e9"><code>6ede38b</code></a> chore: enable trusted publishing in publish workflow</li> <li><a href="https://github.com/typeorm/typeorm/commit/578d9e9636b5bd3beef6e1482f366126caf9d843"><code>578d9e9</code></a> chore: fix pnpm publish for v0.3</li> <li><a href="https://github.com/typeorm/typeorm/commit/253f060b3513f465638a05a27f75244148de8bf8"><code>253f060</code></a> chore: disable git check on pnpm publish for v0.3</li> <li><a href="https://github.com/typeorm/typeorm/commit/1b5476fd2936e925484fe126b8dd621f11d75021"><code>1b5476f</code></a> chore: set pnpm publish branch for v0.3</li> <li><a href="https://github.com/typeorm/typeorm/commit/17c6ec2e83e81312c0f1b2b27fa0a22551acd04f"><code>17c6ec2</code></a> chore(release): release 0.3.29 (<a href="https://redirect.github.com/typeorm/typeorm/issues/12442">#12442</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/0ac80921c249b37886c131546ca01ab851abe0fe"><code>0ac8092</code></a> chore(deps): update all minor (<a href="https://redirect.github.com/typeorm/typeorm/issues/12443">#12443</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/0d7991a27a13a9af7818505e51dddb52c8299d0a"><code>0d7991a</code></a> fix(security): validate limit() in Update/SoftDelete query builders (<a href="https://redirect.github.com/typeorm/typeorm/issues/12437">#12437</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/c38c754a06618a69277cb5069845ae68a0af8ef0"><code>c38c754</code></a> ci: remove docs indexing (<a href="https://redirect.github.com/typeorm/typeorm/issues/12435">#12435</a>)</li> <li><a href="https://github.com/typeorm/typeorm/commit/1b66c44d0410bdc56a0dcefb46be41867ec0fffc"><code>1b66c44</code></a> Merge commit from fork</li> <li>Additional commits viewable in <a href="https://github.com/typeorm/typeorm/compare/0.3.28...0.3.29">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for typeorm since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-22 08:20:36 -07:00
Christian Bromann	b1e856d987	feat(sdk): apply state update and goto alongside interrupt resume (#2557) ... ## Summary - Add `update` and `goto` options to `respond()` across the SDK so resolving an interrupt can apply a state update and/or directed jump in the **same superstep** — mapped to LangGraph's `Command(resume, update, goto)`. The canonical use case is a HITL flow that pushes the interrupt card into state at the moment it answers, committed in one checkpoint with no flicker. - `@langchain/langgraph-sdk`: new `update`/`goto` fields on `StreamRespondAllOptions`, forwarded by `StreamController.respond`/`respondAll`; `@langchain/core` `BaseMessage` instances under the `messagesKey` are serialized to dicts before transport, exactly like `submit()`. - `@langchain/langgraph-api`: forward `update`/`goto` from `input.respond` into the run `Command` in both the protocol service and the embedded server. - `@langchain/react`, `@langchain/vue`, `@langchain/svelte`, `@langchain/angular`: document the new `respond({ update, goto })` capability (incl. `BaseMessage` examples). - Fix: the protocol-v2 state normalizer stripped `response_metadata`, which HITL cards ride on (`AIMessage.response_metadata`); non-empty `response_metadata` is now preserved. - Add React browser tests (`interrupt_card_graph` fixture via `createAgent`) covering the approve and reject paths: the FE-pushed card lands in committed state exactly once and persists through a slow tool execution.	2026-06-22 08:20:15 -07:00
dependabot[bot]	d95ed2095d	chore(deps-dev): bump uuid from 14.0.0 to 14.0.1 (#2560) ... Bumps [uuid](https://github.com/uuidjs/uuid) from 14.0.0 to 14.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uuidjs/uuid/releases">uuid's releases</a>.</em></p> <blockquote> <h2>v14.0.1</h2> <h2><a href="https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1">14.0.1</a> (2026-06-20)</h2> <h3>Bug Fixes</h3> <ul> <li>add types condition to node export for moduleResolution bundler (<a href="https://redirect.github.com/uuidjs/uuid/issues/961">#961</a>) (<a href="https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e">27ffae5</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md">uuid's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1">14.0.1</a> (2026-06-20)</h2> <h3>Bug Fixes</h3> <ul> <li>add types condition to node export for moduleResolution bundler (<a href="https://redirect.github.com/uuidjs/uuid/issues/961">#961</a>) (<a href="https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e">27ffae5</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/uuidjs/uuid/commit/70177807e9229dfacde2038dc1e722f1828f358a"><code>7017780</code></a> chore(main): release 14.0.1 (<a href="https://redirect.github.com/uuidjs/uuid/issues/964">#964</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/f2c3e4b513e47968f568ad1bf96417c6924e83a7"><code>f2c3e4b</code></a> chore: fix release-please workflow (<a href="https://redirect.github.com/uuidjs/uuid/issues/963">#963</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/27ffae5e867823b8c7db255975d65358fbdb1a7e"><code>27ffae5</code></a> fix: add types condition to node export for moduleResolution bundler (<a href="https://redirect.github.com/uuidjs/uuid/issues/961">#961</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/664cb3163531f49d3a5125f732d38724621bfcaa"><code>664cb31</code></a> Remove outdated security contact information (<a href="https://redirect.github.com/uuidjs/uuid/issues/959">#959</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/d729016037c4e1b09a522f4854a96f4f4add9047"><code>d729016</code></a> fix(ci): checkout PR head commit in browser workflow (<a href="https://redirect.github.com/uuidjs/uuid/issues/957">#957</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/89a5ebcc56999fc25c95350f922693b71fb11d32"><code>89a5ebc</code></a> Workflows (<a href="https://redirect.github.com/uuidjs/uuid/issues/948">#948</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/196e208db33d568d8d43d5b549d5d0eb3d9b0fbf"><code>196e208</code></a> chore: fix workflow (<a href="https://redirect.github.com/uuidjs/uuid/issues/947">#947</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/95af4489be459d6ba14d137b6fcd87ffd0953e91"><code>95af448</code></a> chore: update workflows (<a href="https://redirect.github.com/uuidjs/uuid/issues/946">#946</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/3b57f95555ab1b8432213264b5eaa318958fb8fe"><code>3b57f95</code></a> chore: add workflow_dispatch (<a href="https://redirect.github.com/uuidjs/uuid/issues/944">#944</a>)</li> <li><a href="https://github.com/uuidjs/uuid/commit/a433096a74e1d1815432fb1bed8115369785a1a9"><code>a433096</code></a> chore: add 12.x and 13.x maintenance release branches (<a href="https://redirect.github.com/uuidjs/uuid/issues/941">#941</a>)</li> <li>Additional commits viewable in <a href="https://github.com/uuidjs/uuid/compare/v14.0.0...v14.0.1">compare view</a></li> </ul> </details> <details> <summary>Install script changes</summary> <p>This version modifies <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-22 07:53:38 -07:00
dependabot[bot]	c18622faf7	chore(deps): bump @angular/compiler from 22.0.0 to 22.0.1 (#2541) ... Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 22.0.0 to 22.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/compiler's releases</a>.</em></p> <blockquote> <h2>22.0.1</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8"><img src="https://img.shields.io/badge/c4b5fa3c92-fix-green" alt="fix - c4b5fa3c92" /></a></td> <td>escape CSS string-terminating characters in escapeCssUrl</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5"><img src="https://img.shields.io/badge/dfff57ede9-fix-green" alt="fix - dfff57ede9" /></a></td> <td>Limits date format string length</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c"><img src="https://img.shields.io/badge/3c2892c8df-fix-green" alt="fix - 3c2892c8df" /></a></td> <td>prevent prototype pollution in formatDateTime</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1"><img src="https://img.shields.io/badge/1d87c49f6e-fix-green" alt="fix - 1d87c49f6e" /></a></td> <td>use cryptographically secure SHA-256 for transfer cache key generation</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce"><img src="https://img.shields.io/badge/1ee224ca30-fix-green" alt="fix - 1ee224ca30" /></a></td> <td>disallow i18n event attributes</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136"><img src="https://img.shields.io/badge/a56f1cdf8f-fix-green" alt="fix - a56f1cdf8f" /></a></td> <td>more robust logic to check if regex can be optimized</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b"><img src="https://img.shields.io/badge/5946c18275-fix-green" alt="fix - 5946c18275" /></a></td> <td>sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the MathML namespace</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918"><img src="https://img.shields.io/badge/393b84caf8-fix-green" alt="fix - 393b84caf8" /></a></td> <td>sanitize two-way properties</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39"><img src="https://img.shields.io/badge/3d9ca2f173-fix-green" alt="fix - 3d9ca2f173" /></a></td> <td>bind switch exhaustive check expressions</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/669146b0e74ab1bed4196ccebe1c3608f52fd4f8"><img src="https://img.shields.io/badge/669146b0e7-fix-green" alt="fix - 669146b0e7" /></a></td> <td>disable WebMCP during SSR</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/562a566eadfdec3d9708f1a5e03e7dd2821d3432"><img src="https://img.shields.io/badge/562a566ead-fix-green" alt="fix - 562a566ead" /></a></td> <td>Handle synchronous errors in PendingTasks.run function</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/fa546f382de10af46d0508733c6630ffe4bef328"><img src="https://img.shields.io/badge/fa546f382d-fix-green" alt="fix - fa546f382d" /></a></td> <td>harden TransferState restoration against DOM clobbering</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/29fdb98684a57c99417efb5aac5a3b7f205e2c8f"><img src="https://img.shields.io/badge/29fdb98684-fix-green" alt="fix - 29fdb98684" /></a></td> <td>prevent dangling prevConsumer reference from leaking destroyed views (<a href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68681">#68681</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f"><img src="https://img.shields.io/badge/cdcea80327-fix-green" alt="fix - cdcea80327" /></a></td> <td>require WebMCP tool descriptions</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4289c4c8408056eb90cd25cdb76475d00de129d6"><img src="https://img.shields.io/badge/4289c4c840-fix-green" alt="fix - 4289c4c840" /></a></td> <td>update comment for Default change detection</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3dd433b39a66609412427f06162fb4ebc2b3e4aa"><img src="https://img.shields.io/badge/3dd433b39a-fix-green" alt="fix - 3dd433b39a" /></a></td> <td>use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5"><img src="https://img.shields.io/badge/045bb736b3-fix-green" alt="fix - 045bb736b3" /></a></td> <td>validate lowercase SVG animation attribute names</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014"><img src="https://img.shields.io/badge/11836a670a-fix-green" alt="fix - 11836a670a" /></a></td> <td>delay mcp reading the form model by a <code>tick</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd"><img src="https://img.shields.io/badge/85d2d100e3-fix-green" alt="fix - 85d2d100e3" /></a></td> <td>harden FormGroup control lookups against prototype shadowing</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae"><img src="https://img.shields.io/badge/e51ad374ea-fix-green" alt="fix - e51ad374ea" /></a></td> <td>remove animationstart listener on component destroy to prevent memory leak</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a"><img src="https://img.shields.io/badge/55b7b5a6b6-fix-green" alt="fix - 55b7b5a6b6" /></a></td> <td>set <code>additionalProperties: false</code> on generated WebMCP form</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297"><img src="https://img.shields.io/badge/ffb06c0514-fix-green" alt="fix - ffb06c0514" /></a></td> <td>ensure query parameters are inserted before URL fragments</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe"><img src="https://img.shields.io/badge/2dd65d21e6-fix-green" alt="fix - 2dd65d21e6" /></a></td> <td>pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> on post/patch requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320"><img src="https://img.shields.io/badge/4254eb416c-fix-green" alt="fix - 4254eb416c" /></a></td> <td>preserve empty referrer option in HttpRequest</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22"><img src="https://img.shields.io/badge/167bd4c162-fix-green" alt="fix - 167bd4c162" /></a></td> <td>Rejects non-HTTP(S) URLs in JSONP requests</td> </tr> </tbody> </table> <h3>language-service</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/43a0e2872908d1a614139317e8dfeb52d9f69f75"><img src="https://img.shields.io/badge/43a0e28729-fix-green" alt="fix - 43a0e28729" /></a></td> <td>prevent external template inlay hints from appearing in TS files</td> </tr> </tbody> </table> <h3>platform-server</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's changelog</a>.</em></p> <blockquote> <h1>22.0.1 (2026-06-10)</h1> <h2>Deprecations</h2> <h3>platform-server</h3> <ul> <li>XHR support in <code>@angular/platform-server</code> is deprecated. Use standard <code>fetch</code> APIs instead. (cherry picked from commit 8446e46f8bc33bd4419fa7f6106b8d117ca2e099)</li> </ul> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8">c4b5fa3c92</a></td> <td>fix</td> <td>escape CSS string-terminating characters in escapeCssUrl</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5">dfff57ede9</a></td> <td>fix</td> <td>Limits date format string length</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c">3c2892c8df</a></td> <td>fix</td> <td>prevent prototype pollution in formatDateTime</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1">1d87c49f6e</a></td> <td>fix</td> <td>use cryptographically secure SHA-256 for transfer cache key generation</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce">1ee224ca30</a></td> <td>fix</td> <td>disallow i18n event attributes</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136">a56f1cdf8f</a></td> <td>fix</td> <td>more robust logic to check if regex can be optimized</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b">5946c18275</a></td> <td>fix</td> <td>sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the MathML namespace</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918">393b84caf8</a></td> <td>fix</td> <td>sanitize two-way properties</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39">3d9ca2f173</a></td> <td>fix</td> <td>bind switch exhaustive check expressions</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/669146b0e74ab1bed4196ccebe1c3608f52fd4f8">669146b0e7</a></td> <td>fix</td> <td>disable WebMCP during SSR</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/562a566eadfdec3d9708f1a5e03e7dd2821d3432">562a566ead</a></td> <td>fix</td> <td>Handle synchronous errors in PendingTasks.run function</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/fa546f382de10af46d0508733c6630ffe4bef328">fa546f382d</a></td> <td>fix</td> <td>harden TransferState restoration against DOM clobbering</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/29fdb98684a57c99417efb5aac5a3b7f205e2c8f">29fdb98684</a></td> <td>fix</td> <td>prevent dangling prevConsumer reference from leaking destroyed views (<a href="https://redirect.github.com/angular/angular/pull/68681">#68681</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f">cdcea80327</a></td> <td>fix</td> <td>require WebMCP tool descriptions</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4289c4c8408056eb90cd25cdb76475d00de129d6">4289c4c840</a></td> <td>fix</td> <td>update comment for Default change detection</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3dd433b39a66609412427f06162fb4ebc2b3e4aa">3dd433b39a</a></td> <td>fix</td> <td>use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5">045bb736b3</a></td> <td>fix</td> <td>validate lowercase SVG animation attribute names</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014">11836a670a</a></td> <td>fix</td> <td>delay mcp reading the form model by a <code>tick</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd">85d2d100e3</a></td> <td>fix</td> <td>harden FormGroup control lookups against prototype shadowing</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae">e51ad374ea</a></td> <td>fix</td> <td>remove animationstart listener on component destroy to prevent memory leak</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a">55b7b5a6b6</a></td> <td>fix</td> <td>set <code>additionalProperties: false</code> on generated WebMCP form</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297">ffb06c0514</a></td> <td>fix</td> <td>ensure query parameters are inserted before URL fragments</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe">2dd65d21e6</a></td> <td>fix</td> <td>pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> on post/patch requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320">4254eb416c</a></td> <td>fix</td> <td>preserve empty referrer option in HttpRequest</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22">167bd4c162</a></td> <td>fix</td> <td>Rejects non-HTTP(S) URLs in JSONP requests</td> </tr> </tbody> </table> <h3>language-service</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/4645850e24d2764313040b6711af93d3fd426825"><code>4645850</code></a> refactor(compiler): Remove 80 char limit on AbstractEmitterVisitor</li> <li><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce"><code>1ee224c</code></a> fix(compiler): disallow i18n event attributes</li> <li><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b"><code>5946c18</code></a> fix(compiler): sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the ...</li> <li><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918"><code>393b84c</code></a> fix(compiler): sanitize two-way properties</li> <li><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39"><code>3d9ca2f</code></a> fix(compiler-cli): bind switch exhaustive check expressions</li> <li><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136"><code>a56f1cd</code></a> fix(compiler): more robust logic to check if regex can be optimized</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.1/packages/compiler">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-17 12:38:21 -07:00
dependabot[bot]	4808541753	chore(deps): bump @angular/core from 22.0.0 to 22.0.1 (#2538) ... Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 22.0.0 to 22.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/core's releases</a>.</em></p> <blockquote> <h2>22.0.1</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8"><img src="https://img.shields.io/badge/c4b5fa3c92-fix-green" alt="fix - c4b5fa3c92" /></a></td> <td>escape CSS string-terminating characters in escapeCssUrl</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5"><img src="https://img.shields.io/badge/dfff57ede9-fix-green" alt="fix - dfff57ede9" /></a></td> <td>Limits date format string length</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c"><img src="https://img.shields.io/badge/3c2892c8df-fix-green" alt="fix - 3c2892c8df" /></a></td> <td>prevent prototype pollution in formatDateTime</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1"><img src="https://img.shields.io/badge/1d87c49f6e-fix-green" alt="fix - 1d87c49f6e" /></a></td> <td>use cryptographically secure SHA-256 for transfer cache key generation</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce"><img src="https://img.shields.io/badge/1ee224ca30-fix-green" alt="fix - 1ee224ca30" /></a></td> <td>disallow i18n event attributes</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136"><img src="https://img.shields.io/badge/a56f1cdf8f-fix-green" alt="fix - a56f1cdf8f" /></a></td> <td>more robust logic to check if regex can be optimized</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b"><img src="https://img.shields.io/badge/5946c18275-fix-green" alt="fix - 5946c18275" /></a></td> <td>sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the MathML namespace</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918"><img src="https://img.shields.io/badge/393b84caf8-fix-green" alt="fix - 393b84caf8" /></a></td> <td>sanitize two-way properties</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39"><img src="https://img.shields.io/badge/3d9ca2f173-fix-green" alt="fix - 3d9ca2f173" /></a></td> <td>bind switch exhaustive check expressions</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/669146b0e74ab1bed4196ccebe1c3608f52fd4f8"><img src="https://img.shields.io/badge/669146b0e7-fix-green" alt="fix - 669146b0e7" /></a></td> <td>disable WebMCP during SSR</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/562a566eadfdec3d9708f1a5e03e7dd2821d3432"><img src="https://img.shields.io/badge/562a566ead-fix-green" alt="fix - 562a566ead" /></a></td> <td>Handle synchronous errors in PendingTasks.run function</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/fa546f382de10af46d0508733c6630ffe4bef328"><img src="https://img.shields.io/badge/fa546f382d-fix-green" alt="fix - fa546f382d" /></a></td> <td>harden TransferState restoration against DOM clobbering</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/29fdb98684a57c99417efb5aac5a3b7f205e2c8f"><img src="https://img.shields.io/badge/29fdb98684-fix-green" alt="fix - 29fdb98684" /></a></td> <td>prevent dangling prevConsumer reference from leaking destroyed views (<a href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68681">#68681</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f"><img src="https://img.shields.io/badge/cdcea80327-fix-green" alt="fix - cdcea80327" /></a></td> <td>require WebMCP tool descriptions</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4289c4c8408056eb90cd25cdb76475d00de129d6"><img src="https://img.shields.io/badge/4289c4c840-fix-green" alt="fix - 4289c4c840" /></a></td> <td>update comment for Default change detection</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3dd433b39a66609412427f06162fb4ebc2b3e4aa"><img src="https://img.shields.io/badge/3dd433b39a-fix-green" alt="fix - 3dd433b39a" /></a></td> <td>use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5"><img src="https://img.shields.io/badge/045bb736b3-fix-green" alt="fix - 045bb736b3" /></a></td> <td>validate lowercase SVG animation attribute names</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014"><img src="https://img.shields.io/badge/11836a670a-fix-green" alt="fix - 11836a670a" /></a></td> <td>delay mcp reading the form model by a <code>tick</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd"><img src="https://img.shields.io/badge/85d2d100e3-fix-green" alt="fix - 85d2d100e3" /></a></td> <td>harden FormGroup control lookups against prototype shadowing</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae"><img src="https://img.shields.io/badge/e51ad374ea-fix-green" alt="fix - e51ad374ea" /></a></td> <td>remove animationstart listener on component destroy to prevent memory leak</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a"><img src="https://img.shields.io/badge/55b7b5a6b6-fix-green" alt="fix - 55b7b5a6b6" /></a></td> <td>set <code>additionalProperties: false</code> on generated WebMCP form</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297"><img src="https://img.shields.io/badge/ffb06c0514-fix-green" alt="fix - ffb06c0514" /></a></td> <td>ensure query parameters are inserted before URL fragments</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe"><img src="https://img.shields.io/badge/2dd65d21e6-fix-green" alt="fix - 2dd65d21e6" /></a></td> <td>pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> on post/patch requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320"><img src="https://img.shields.io/badge/4254eb416c-fix-green" alt="fix - 4254eb416c" /></a></td> <td>preserve empty referrer option in HttpRequest</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22"><img src="https://img.shields.io/badge/167bd4c162-fix-green" alt="fix - 167bd4c162" /></a></td> <td>Rejects non-HTTP(S) URLs in JSONP requests</td> </tr> </tbody> </table> <h3>language-service</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/43a0e2872908d1a614139317e8dfeb52d9f69f75"><img src="https://img.shields.io/badge/43a0e28729-fix-green" alt="fix - 43a0e28729" /></a></td> <td>prevent external template inlay hints from appearing in TS files</td> </tr> </tbody> </table> <h3>platform-server</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's changelog</a>.</em></p> <blockquote> <h1>22.0.1 (2026-06-10)</h1> <h2>Deprecations</h2> <h3>platform-server</h3> <ul> <li>XHR support in <code>@angular/platform-server</code> is deprecated. Use standard <code>fetch</code> APIs instead. (cherry picked from commit 8446e46f8bc33bd4419fa7f6106b8d117ca2e099)</li> </ul> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8">c4b5fa3c92</a></td> <td>fix</td> <td>escape CSS string-terminating characters in escapeCssUrl</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5">dfff57ede9</a></td> <td>fix</td> <td>Limits date format string length</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c">3c2892c8df</a></td> <td>fix</td> <td>prevent prototype pollution in formatDateTime</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1">1d87c49f6e</a></td> <td>fix</td> <td>use cryptographically secure SHA-256 for transfer cache key generation</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce">1ee224ca30</a></td> <td>fix</td> <td>disallow i18n event attributes</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136">a56f1cdf8f</a></td> <td>fix</td> <td>more robust logic to check if regex can be optimized</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b">5946c18275</a></td> <td>fix</td> <td>sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the MathML namespace</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918">393b84caf8</a></td> <td>fix</td> <td>sanitize two-way properties</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39">3d9ca2f173</a></td> <td>fix</td> <td>bind switch exhaustive check expressions</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/669146b0e74ab1bed4196ccebe1c3608f52fd4f8">669146b0e7</a></td> <td>fix</td> <td>disable WebMCP during SSR</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/562a566eadfdec3d9708f1a5e03e7dd2821d3432">562a566ead</a></td> <td>fix</td> <td>Handle synchronous errors in PendingTasks.run function</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/fa546f382de10af46d0508733c6630ffe4bef328">fa546f382d</a></td> <td>fix</td> <td>harden TransferState restoration against DOM clobbering</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/29fdb98684a57c99417efb5aac5a3b7f205e2c8f">29fdb98684</a></td> <td>fix</td> <td>prevent dangling prevConsumer reference from leaking destroyed views (<a href="https://redirect.github.com/angular/angular/pull/68681">#68681</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f">cdcea80327</a></td> <td>fix</td> <td>require WebMCP tool descriptions</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4289c4c8408056eb90cd25cdb76475d00de129d6">4289c4c840</a></td> <td>fix</td> <td>update comment for Default change detection</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3dd433b39a66609412427f06162fb4ebc2b3e4aa">3dd433b39a</a></td> <td>fix</td> <td>use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5">045bb736b3</a></td> <td>fix</td> <td>validate lowercase SVG animation attribute names</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014">11836a670a</a></td> <td>fix</td> <td>delay mcp reading the form model by a <code>tick</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd">85d2d100e3</a></td> <td>fix</td> <td>harden FormGroup control lookups against prototype shadowing</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae">e51ad374ea</a></td> <td>fix</td> <td>remove animationstart listener on component destroy to prevent memory leak</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a">55b7b5a6b6</a></td> <td>fix</td> <td>set <code>additionalProperties: false</code> on generated WebMCP form</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297">ffb06c0514</a></td> <td>fix</td> <td>ensure query parameters are inserted before URL fragments</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe">2dd65d21e6</a></td> <td>fix</td> <td>pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> on post/patch requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320">4254eb416c</a></td> <td>fix</td> <td>preserve empty referrer option in HttpRequest</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22">167bd4c162</a></td> <td>fix</td> <td>Rejects non-HTTP(S) URLs in JSONP requests</td> </tr> </tbody> </table> <h3>language-service</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/4b0c3b8b8f1dbdb6ba31cb6499c393b1ccd81c6c"><code>4b0c3b8</code></a> refactor(core): Update registerNgModuleType to support codegen typechecking</li> <li><a href="https://github.com/angular/angular/commit/dbf64c8eb55ef5d2480abfbb4e362edccf79f971"><code>dbf64c8</code></a> test(core): fix AI tools test flake</li> <li><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5"><code>045bb73</code></a> fix(core): validate lowercase SVG animation attribute names</li> <li><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce"><code>1ee224c</code></a> fix(compiler): disallow i18n event attributes</li> <li><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b"><code>5946c18</code></a> fix(compiler): sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the ...</li> <li><a href="https://github.com/angular/angular/commit/b1f02eb5c5fd6c4a62cadf4ff4f04a3046a65002"><code>b1f02eb</code></a> refactor(core): add internal utility</li> <li><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd"><code>85d2d10</code></a> fix(forms): harden FormGroup control lookups against prototype shadowing</li> <li><a href="https://github.com/angular/angular/commit/6e3d51d7df3c8a4013cee7ec96c03835e0eeb9e2"><code>6e3d51d</code></a> refactor(migrations): Improve <code>safeNavigationMigration</code> heuristic</li> <li><a href="https://github.com/angular/angular/commit/01ea640539efda57e35807cef61abaf403686fe9"><code>01ea640</code></a> refactor(core): Fix DirectiveDefinition interface to allow abstract classes</li> <li><a href="https://github.com/angular/angular/commit/a704b08379e92294c59e47af7703edfefdaff6b8"><code>a704b08</code></a> docs: add Signal Forms and v22 guidance to AI best-practices and llms.txt</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v22.0.1/packages/core">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-17 11:31:42 -07:00
dependabot[bot]	a9fce5ea1c	chore(deps-dev): bump @vitest/browser from 4.1.8 to 4.1.9 (#2539) ... Bumps [@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser) from 4.1.8 to 4.1.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser's releases</a>.</em></p> <blockquote> <h2>v4.1.9</h2> <h3>🐞 Bug Fixes</h3> <ul> <li>Fix <code>importOriginal</code> with optimizer and query import [backport to v4] - by <strong>Hiroshi Ogawa</strong>, <strong>David Harris</strong>, <strong>Codex</strong>and <strong>Vladimir</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10546">vitest-dev/vitest#10546</a> <a href="https://github.com/vitest-dev/vitest/commit/a5180190c"><!-- raw HTML omitted -->(a5180)<!-- raw HTML omitted --></a></li> <li><strong>browser</strong>: <ul> <li>Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by <strong>Vladimir</strong> and <strong>Séamus O'Connor</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10555">vitest-dev/vitest#10555</a> <a href="https://github.com/vitest-dev/vitest/commit/7fb29651a"><!-- raw HTML omitted -->(7fb29)<!-- raw HTML omitted --></a></li> <li>Wait for iframe tester readiness before preparing [backport to v4] - by <strong>Vladimir</strong> and <strong>Séamus O'Connor</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10497">vitest-dev/vitest#10497</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/10556">vitest-dev/vitest#10556</a> <a href="https://github.com/vitest-dev/vitest/commit/fbc626c40"><!-- raw HTML omitted -->(fbc62)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>mocker</strong>: <ul> <li>Hoist vi.mock() for vite-plus/test imports [backport to v4] - by <strong>Hiroshi Ogawa</strong>, <strong>LongYinan</strong>, <strong>Claude Opus 4.8</strong> and <strong>Vladimir</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10548">vitest-dev/vitest#10548</a> <a href="https://github.com/vitest-dev/vitest/commit/2c9559c02"><!-- raw HTML omitted -->(2c955)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>pool</strong>: <ul> <li>Prevent test run hang on worker crash [backport to v4] - by <strong>Ari Perkkiö</strong> and <strong>Jattioui Ismail</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10543">vitest-dev/vitest#10543</a> and <a href="https://redirect.github.com/vitest-dev/vitest/issues/10564">vitest-dev/vitest#10564</a> <a href="https://github.com/vitest-dev/vitest/commit/934b0f587"><!-- raw HTML omitted -->(934b0)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5><a href="https://github.com/vitest-dev/vitest/compare/v4.1.8...v4.1.9">View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/a7a61e78c7d0718f00173cff6800a91a344457d4"><code>a7a61e7</code></a> chore: release v4.1.9 (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/10598">#10598</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/fbc626c401ee9215ee07c0d19801cff820e289d6"><code>fbc626c</code></a> fix(browser): wait for iframe tester readiness before preparing (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/10497">#10497</a>) [bac...</li> <li><a href="https://github.com/vitest-dev/vitest/commit/7fb29651afbae2a9b0cefe6c031a9308f168ac60"><code>7fb2965</code></a> fix(browser): wait for orchestrator readiness before resolving browser sessio...</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/browser">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 20:54:33 -07:00
dependabot[bot]	7d8295dcca	chore(deps): bump hono from 4.12.23 to 4.12.25 (#2548) ... Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.25. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/honojs/hono/releases">hono's releases</a>.</em></p> <blockquote> <h2>v4.12.25</h2> <h2>Security fixes</h2> <p>This release includes fixes for the following security issues:</p> <h3>CORS Middleware reflects any Origin with credentials when <code>origin</code> defaults to the wildcard</h3> <p>Affects: <code>hono/cors</code>. Fixes the wildcard origin reflecting the request <code>Origin</code> and sending <code>Access-Control-Allow-Credentials: true</code> when <code>credentials: true</code> is set without an explicit <code>origin</code>, where any site a logged-in user visited could make credentialed cross-origin requests and read responses from cookie-authenticated endpoints. GHSA-88fw-hqm2-52qc</p> <h3>Body Limit Middleware can be bypassed on AWS Lambda by understating <code>Content-Length</code></h3> <p>Affects: <code>hono/body-limit</code> on AWS Lambda (<code>hono/aws-lambda</code>, <code>hono/lambda-edge</code>). Fixes the request being built with the client-declared <code>Content-Length</code> while the body is delivered fully buffered, where a client could declare a small <code>Content-Length</code> with a much larger body and slip past the configured size limit. GHSA-rv63-4mwf-qqc2</p> <h3>Path traversal in <code>serve-static</code> on Windows via encoded backslash (<code>%5C</code>)</h3> <p>Affects: <code>serveStatic</code> on Windows (Node, Bun, Deno adapters). Fixes the path guard allowing a lone backslash, where an encoded backslash (<code>%5C</code>) decoded to <code>\</code> was treated as a separator by the Windows path resolver, letting a single URL segment escape into a middleware-guarded subtree. GHSA-wwfh-h76j-fc44</p> <h3>AWS Lambda adapter merges multiple <code>Set-Cookie</code> headers into one value, dropping cookies on ALB single-header and Lattice</h3> <p>Affects: <code>hono/aws-lambda</code>. Fixes multiple <code>Set-Cookie</code> response headers being joined into one comma-separated value for ALB single-header responses and VPC Lattice v2, where the value could not be split back into individual cookies and clients silently dropped or misparsed them. GHSA-j6c9-x7qj-28xf</p> <h3>Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest</h3> <p>Affects: <code>hono/lambda-edge</code>. Fixes repeated request headers being written with overwrite instead of append, where only the last value of a header such as <code>X-Forwarded-For</code> reached the application and the remaining values were silently dropped. GHSA-wgpf-jwqj-8h8p</p> <h2>v4.12.24</h2> <h2>What's Changed</h2> <ul> <li>docs(contribution): simplifyAI Usage Policy by <a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4972">honojs/hono#4972</a></li> <li>chore: remove <code>@​types/glob</code> by <a href="https://github.com/rtritto"><code>@​rtritto</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4978">honojs/hono#4978</a></li> <li>fix(bearer-auth): mention verifyToken in missing-options error message by <a href="https://github.com/tan7vir"><code>@​tan7vir</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4987">honojs/hono#4987</a></li> <li>refactor(language): Test/improve tests on languages middleware by <a href="https://github.com/iNeoO"><code>@​iNeoO</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4980">honojs/hono#4980</a></li> <li>fix(utils/ipaddr): expand &quot;::&quot; to eight zero groups by <a href="https://github.com/youcefzemmar"><code>@​youcefzemmar</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4973">honojs/hono#4973</a></li> <li>fix: clean up config files trailing comma, stale excludes, typesVersions gaps, jsr paths by <a href="https://github.com/Mohammad-Faiz-Cloud-Engineer"><code>@​Mohammad-Faiz-Cloud-Engineer</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4982">honojs/hono#4982</a></li> <li>refactor(timing): Test/add test for middleware timing by <a href="https://github.com/iNeoO"><code>@​iNeoO</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4991">honojs/hono#4991</a></li> <li>fix(utils/ipaddr): render the unspecified address binary as &quot;::&quot; by <a href="https://github.com/sarathfrancis90"><code>@​sarathfrancis90</code></a> in <a href="https://redirect.github.com/honojs/hono/pull/4998">honojs/hono#4998</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/honojs/hono/compare/v4.12.23...v4.12.24">https://github.com/honojs/hono/compare/v4.12.23...v4.12.24</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/honojs/hono/commit/fce483e11466b72d27e61d44523c7e6edeb19e50"><code>fce483e</code></a> 4.12.25</li> <li><a href="https://github.com/honojs/hono/commit/751ba41ba26dff20351a13964c07627ddcf382b6"><code>751ba41</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/f0b094db8474696344d98e5665a4ac2a6d5f346e"><code>f0b094d</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/fa5f9bfcc25d65e08af85211cc2e5ecd0e0ea24b"><code>fa5f9bf</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/3892a6c2b54f974505de41013fcac88a71908e3d"><code>3892a6c</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/74c2cf8ef4f5cc29a876380df1ba230ff7128b3f"><code>74c2cf8</code></a> test(aws-lambda): update integration tests (<a href="https://redirect.github.com/honojs/hono/issues/5012">#5012</a>)</li> <li><a href="https://github.com/honojs/hono/commit/7ae7cbae5d0ed8a40e8b9cc353e13175b9d7e3e1"><code>7ae7cba</code></a> Merge commit from fork</li> <li><a href="https://github.com/honojs/hono/commit/1b1384815485f9d6590c6966e23a06fd07166cb7"><code>1b13848</code></a> chore(ci): bump codecov-action to v7.0.0 (<a href="https://redirect.github.com/honojs/hono/issues/5011">#5011</a>)</li> <li><a href="https://github.com/honojs/hono/commit/5fdde5ab5a7d7c89eba4d1ceab76f4a7c011cd3b"><code>5fdde5a</code></a> 4.12.24</li> <li><a href="https://github.com/honojs/hono/commit/c78932d745cdf6284ae131a156479ac930da0262"><code>c78932d</code></a> fix(utils/ipaddr): render the unspecified address binary as &quot;::&quot; (<a href="https://redirect.github.com/honojs/hono/issues/4998">#4998</a>)</li> <li>Additional commits viewable in <a href="https://github.com/honojs/hono/compare/v4.12.23...v4.12.25">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 19:33:25 -07:00
dependabot[bot]	1a42b9f21f	chore(deps): bump tar from 7.5.11 to 7.5.16 (#2547) ... Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.11 to 7.5.16. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-tar/commit/cf213384ac558b539c07c830ed7cca5ffc9e8550"><code>cf21338</code></a> 7.5.16</li> <li><a href="https://github.com/isaacs/node-tar/commit/21a822027658c8063542be330530bbecdf0dbbfe"><code>21a8220</code></a> do not apply PAX header fields to meta entries</li> <li><a href="https://github.com/isaacs/node-tar/commit/52632cf38fdbdbbc7ab86184d68a85b11fdb0970"><code>52632cf</code></a> update project deps</li> <li><a href="https://github.com/isaacs/node-tar/commit/302f51ff3f8eefeccc06be4caf7d0de9b7c321d7"><code>302f51f</code></a> fix inconsequential typo in PENDINGLINKS symbol name</li> <li><a href="https://github.com/isaacs/node-tar/commit/55dbb99b27640bb12b2ac059b26883c23523b3e3"><code>55dbb99</code></a> remove some uses of mutate-fs</li> <li><a href="https://github.com/isaacs/node-tar/commit/87cc309f13c21d598b0b833235d387a252455058"><code>87cc309</code></a> 7.5.15</li> <li><a href="https://github.com/isaacs/node-tar/commit/7aef486f0d21c10fd7790b16b1b28f04648cf334"><code>7aef486</code></a> fix: regression in pending links detection</li> <li><a href="https://github.com/isaacs/node-tar/commit/6244eb33846bbd407443f5d0e339bd8c91663cd6"><code>6244eb3</code></a> 7.5.14</li> <li><a href="https://github.com/isaacs/node-tar/commit/9704d8c6f639573775133cbbd541aba83cb46c9c"><code>9704d8c</code></a> stricter protection against hardlinks preempting their targets</li> <li><a href="https://github.com/isaacs/node-tar/commit/700734f9aeb113bcc5f1400d81b8be7d499e54a2"><code>700734f</code></a> update workflows and deps</li> <li>Additional commits viewable in <a href="https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.16">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 19:33:12 -07:00
dependabot[bot]	ada52690f6	chore(deps-dev): bump ws from 8.20.1 to 8.21.0 (#2546) ... Bumps [ws](https://github.com/websockets/ws) from 8.20.1 to 8.21.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/websockets/ws/releases">ws's releases</a>.</em></p> <blockquote> <h2>8.21.0</h2> <h1>Features</h1> <ul> <li>Introduced the <code>maxBufferedChunks</code> and <code>maxFragments</code> options (2b2abd45).</li> </ul> <h1>Bug fixes</h1> <ul> <li>Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).</li> </ul> <p>A high volume of tiny fragments and data chunks could be sent by a peer, using modest network traffic, to crash a <code>ws</code> server or client due to OOM.</p> <pre lang="js"><code>import { WebSocket, WebSocketServer } from 'ws'; <p>const wss = new WebSocketServer({ port: 0 }, function () { const data = Buffer.alloc(1); const options = { fin: false }; const { port } = wss.address(); const ws = new WebSocket(<code>ws://localhost:${port}</code>);</p> <p>ws.on('open', function () { (function send() { ws.send(data, options, function (err) { if (err) return; send(); }); })(); });</p> <p>ws.on('error', console.error); ws.on('close', function (code, reason) { console.log(<code>client close - code: ${code} reason: ${reason.toString()}</code>); }); });</p> <p>wss.on('connection', function (ws) { ws.on('error', console.error); ws.on('close', function (code, reason) { console.log(<code>server close - code: ${code} reason: ${reason.toString()}</code>); }); }); </code></pre></p> <p>The vulnerability was responsibly disclosed and fixed by <a href="https://github.com/Nadav0077">Nadav Magier</a>.</p> <p>In vulnerable versions, the issue can be mitigated by lowering the value of the <code>maxPayload</code> option if possible.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"><code>bca91ad</code></a> [dist] 8.21.0</li> <li><a href="https://github.com/websockets/ws/commit/2b2abd458a1b647d0b6033bd62a619c36189839a"><code>2b2abd4</code></a> [security] Limit retained message parts</li> <li><a href="https://github.com/websockets/ws/commit/78eabe2a6677b231bf9c82601bde86ff91639490"><code>78eabe2</code></a> [security] Add latest vulnerability to SECURITY.md</li> <li>See full diff in <a href="https://github.com/websockets/ws/compare/8.20.1...8.21.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 19:32:29 -07:00
dependabot[bot]	58a29a2e61	chore(deps-dev): bump vite from 8.0.5 to 8.0.16 (#2543) ... Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.5 to 8.0.16. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v8.0.16</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.15</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.15/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.14</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.14/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.13</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.13/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.12</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.12/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.11</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.11/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.10</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.10/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.9</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.9/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.8</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.8/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.7</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.7/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v8.0.6</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v8.0.6/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.15...v8.0.16">8.0.16</a> (2026-06-01)<!-- raw HTML omitted --></h2> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> reject UNC paths for launch-editor-middleware (<a href="https://redirect.github.com/vitejs/vite/issues/22571">#22571</a>) (<a href="https://github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9">50b9512</a>)</li> <li>reject windows alternate paths (<a href="https://redirect.github.com/vitejs/vite/issues/22572">#22572</a>) (<a href="https://github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546">dc245c7</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.14...v8.0.15">8.0.15</a> (2026-06-01)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>send 408 on request timeout (<a href="https://redirect.github.com/vitejs/vite/issues/22476">#22476</a>) (<a href="https://github.com/vitejs/vite/commit/c85c9eeb9aaf41f477b48b057146887bd5620797">c85c9ee</a>)</li> <li>update rolldown to 1.0.3 (<a href="https://redirect.github.com/vitejs/vite/issues/22538">#22538</a>) (<a href="https://github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575">646dbed</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>capitalize error messages and remove spurious space in parse error (<a href="https://redirect.github.com/vitejs/vite/issues/22488">#22488</a>) (<a href="https://github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3">85a0eff</a>)</li> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22511">#22511</a>) (<a href="https://github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa">2686d7d</a>)</li> <li><strong>dev:</strong> fix html-proxy cache key mismatch for /@fs/ HTML paths (<a href="https://redirect.github.com/vitejs/vite/issues/21762">#21762</a>) (<a href="https://github.com/vitejs/vite/commit/47c4213f134f562c41ed7c031e4788510cf7e31e">47c4213</a>)</li> <li><strong>glob:</strong> error on relative glob in virtual module when no files match (<a href="https://redirect.github.com/vitejs/vite/issues/22497">#22497</a>) (<a href="https://github.com/vitejs/vite/commit/5c8e98f8b584ac5d42f0f9b8580c49792213b13c">5c8e98f</a>)</li> <li><strong>optimizer:</strong> close the rolldown bundle when write() rejects (<a href="https://redirect.github.com/vitejs/vite/issues/22528">#22528</a>) (<a href="https://github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815">e3cfb9d</a>)</li> <li><strong>resolve:</strong> provide onWarn for viteResolvePlugin in JS plugin containers (<a href="https://redirect.github.com/vitejs/vite/issues/22509">#22509</a>) (<a href="https://github.com/vitejs/vite/commit/40985f1c09b7696e594e6c5695fbc315d2da2c83">40985f1</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22566">#22566</a>) (<a href="https://github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd">3052a67</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li>correct logic in <code>collectAllModules</code> function (<a href="https://redirect.github.com/vitejs/vite/issues/22562">#22562</a>) (<a href="https://github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c">6978a9c</a>)</li> </ul> <h2><!-- raw HTML omitted --><a href="https://github.com/vitejs/vite/compare/v8.0.13...v8.0.14">8.0.14</a> (2026-05-21)<!-- raw HTML omitted --></h2> <h3>Features</h3> <ul> <li>update rolldown to 1.0.2 (<a href="https://redirect.github.com/vitejs/vite/issues/22484">#22484</a>) (<a href="https://github.com/vitejs/vite/commit/96efc88570b6a6ddf1a910f106920cbac07b3cf0">96efc88</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update all non-major dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22471">#22471</a>) (<a href="https://github.com/vitejs/vite/commit/98b81632139d51820f82036e58d6fbbf122b77b3">98b8163</a>)</li> <li><strong>dev:</strong> handle errors when sending messages to vite server (<a href="https://redirect.github.com/vitejs/vite/issues/22450">#22450</a>) (<a href="https://github.com/vitejs/vite/commit/e8e9a34dcf2540139de558a10187630884d10217">e8e9a34</a>)</li> <li><strong>html:</strong> handle trailing slash paths in transformIndexHtml (<a href="https://redirect.github.com/vitejs/vite/issues/22480">#22480</a>) (<a href="https://github.com/vitejs/vite/commit/5d94d1bffdb2a15de9341194d89baec86ce1f693">5d94d1b</a>)</li> <li><strong>optimizer:</strong> pass oxc jsx options to transformSync in dependency scan (<a href="https://redirect.github.com/vitejs/vite/issues/22342">#22342</a>) (<a href="https://github.com/vitejs/vite/commit/b3132dacea9c6e0cf526cd9f0f09d850f577c262">b3132da</a>)</li> </ul> <h3>Miscellaneous Chores</h3> <ul> <li><strong>deps:</strong> update rolldown-related dependencies (<a href="https://redirect.github.com/vitejs/vite/issues/22470">#22470</a>) (<a href="https://github.com/vitejs/vite/commit/7cb728eb629cc677661f1bc52a044ffc0b87fc7f">7cb728e</a>)</li> <li>remove irrelevant commits from changelog (<a href="https://github.com/vitejs/vite/commit/2c69495f250edf01132d4a20128de19dbe836086">2c69495</a>)</li> </ul> <h3>Code Refactoring</h3> <ul> <li><strong>glob:</strong> do not rewrite import path for absolute base (<a href="https://redirect.github.com/vitejs/vite/issues/22310">#22310</a>) (<a href="https://github.com/vitejs/vite/commit/0ae2844ab6d6d1ccf78a2975b8132769fc35b302">0ae2844</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/f94df87ff03b40b65e29bacdc04cc18c7bccaa4a"><code>f94df87</code></a> release: v8.0.16</li> <li><a href="https://github.com/vitejs/vite/commit/dc245c71e5007ea4d891a025e2d69ac96c736546"><code>dc245c7</code></a> fix: reject windows alternate paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22572">#22572</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/50b951225bbf6151eb84a3ad5a454908ab4a76c9"><code>50b9512</code></a> fix(deps): reject UNC paths for launch-editor-middleware (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22571">#22571</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/8d1b0195fd186d0b3297d7cd17acff6c96797420"><code>8d1b019</code></a> release: v8.0.15</li> <li><a href="https://github.com/vitejs/vite/commit/2686d7d0b722402204d3bcc687a87adea1bcf9fa"><code>2686d7d</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22511">#22511</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/3052a67d9350f4c5076ab1c222c4a21a589cbcdd"><code>3052a67</code></a> chore(deps): update rolldown-related dependencies (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22566">#22566</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/e3cfb9deecff563550fa1b8abd27656b8b292815"><code>e3cfb9d</code></a> fix(optimizer): close the rolldown bundle when write() rejects (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22528">#22528</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/6978a9ceb942c4f5e211d52b8a1e569f8a65c80c"><code>6978a9c</code></a> refactor: correct logic in <code>collectAllModules</code> function (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22562">#22562</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/646dbedd2870f8ec48df0321177d8aa64bbd1575"><code>646dbed</code></a> feat: update rolldown to 1.0.3 (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22538">#22538</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/85a0eff1c82bbb7c99a0fe8e63704316578a40d3"><code>85a0eff</code></a> fix: capitalize error messages and remove spurious space in parse error (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/22488">#22488</a>)</li> <li>Additional commits viewable in <a href="https://github.com/vitejs/vite/commits/v8.0.16/packages/vite">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 19:31:52 -07:00
dependabot[bot]	932d31ae84	chore(deps): bump @angular/common from 22.0.0 to 22.0.1 (#2540) ... Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) from 22.0.0 to 22.0.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases">@​angular/common's releases</a>.</em></p> <blockquote> <h2>22.0.1</h2> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8"><img src="https://img.shields.io/badge/c4b5fa3c92-fix-green" alt="fix - c4b5fa3c92" /></a></td> <td>escape CSS string-terminating characters in escapeCssUrl</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5"><img src="https://img.shields.io/badge/dfff57ede9-fix-green" alt="fix - dfff57ede9" /></a></td> <td>Limits date format string length</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c"><img src="https://img.shields.io/badge/3c2892c8df-fix-green" alt="fix - 3c2892c8df" /></a></td> <td>prevent prototype pollution in formatDateTime</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1"><img src="https://img.shields.io/badge/1d87c49f6e-fix-green" alt="fix - 1d87c49f6e" /></a></td> <td>use cryptographically secure SHA-256 for transfer cache key generation</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce"><img src="https://img.shields.io/badge/1ee224ca30-fix-green" alt="fix - 1ee224ca30" /></a></td> <td>disallow i18n event attributes</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136"><img src="https://img.shields.io/badge/a56f1cdf8f-fix-green" alt="fix - a56f1cdf8f" /></a></td> <td>more robust logic to check if regex can be optimized</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b"><img src="https://img.shields.io/badge/5946c18275-fix-green" alt="fix - 5946c18275" /></a></td> <td>sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the MathML namespace</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918"><img src="https://img.shields.io/badge/393b84caf8-fix-green" alt="fix - 393b84caf8" /></a></td> <td>sanitize two-way properties</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39"><img src="https://img.shields.io/badge/3d9ca2f173-fix-green" alt="fix - 3d9ca2f173" /></a></td> <td>bind switch exhaustive check expressions</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/669146b0e74ab1bed4196ccebe1c3608f52fd4f8"><img src="https://img.shields.io/badge/669146b0e7-fix-green" alt="fix - 669146b0e7" /></a></td> <td>disable WebMCP during SSR</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/562a566eadfdec3d9708f1a5e03e7dd2821d3432"><img src="https://img.shields.io/badge/562a566ead-fix-green" alt="fix - 562a566ead" /></a></td> <td>Handle synchronous errors in PendingTasks.run function</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/fa546f382de10af46d0508733c6630ffe4bef328"><img src="https://img.shields.io/badge/fa546f382d-fix-green" alt="fix - fa546f382d" /></a></td> <td>harden TransferState restoration against DOM clobbering</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/29fdb98684a57c99417efb5aac5a3b7f205e2c8f"><img src="https://img.shields.io/badge/29fdb98684-fix-green" alt="fix - 29fdb98684" /></a></td> <td>prevent dangling prevConsumer reference from leaking destroyed views (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68681">#68681</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f"><img src="https://img.shields.io/badge/cdcea80327-fix-green" alt="fix - cdcea80327" /></a></td> <td>require WebMCP tool descriptions</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4289c4c8408056eb90cd25cdb76475d00de129d6"><img src="https://img.shields.io/badge/4289c4c840-fix-green" alt="fix - 4289c4c840" /></a></td> <td>update comment for Default change detection</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3dd433b39a66609412427f06162fb4ebc2b3e4aa"><img src="https://img.shields.io/badge/3dd433b39a-fix-green" alt="fix - 3dd433b39a" /></a></td> <td>use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5"><img src="https://img.shields.io/badge/045bb736b3-fix-green" alt="fix - 045bb736b3" /></a></td> <td>validate lowercase SVG animation attribute names</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014"><img src="https://img.shields.io/badge/11836a670a-fix-green" alt="fix - 11836a670a" /></a></td> <td>delay mcp reading the form model by a <code>tick</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd"><img src="https://img.shields.io/badge/85d2d100e3-fix-green" alt="fix - 85d2d100e3" /></a></td> <td>harden FormGroup control lookups against prototype shadowing</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae"><img src="https://img.shields.io/badge/e51ad374ea-fix-green" alt="fix - e51ad374ea" /></a></td> <td>remove animationstart listener on component destroy to prevent memory leak</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a"><img src="https://img.shields.io/badge/55b7b5a6b6-fix-green" alt="fix - 55b7b5a6b6" /></a></td> <td>set <code>additionalProperties: false</code> on generated WebMCP form</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297"><img src="https://img.shields.io/badge/ffb06c0514-fix-green" alt="fix - ffb06c0514" /></a></td> <td>ensure query parameters are inserted before URL fragments</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe"><img src="https://img.shields.io/badge/2dd65d21e6-fix-green" alt="fix - 2dd65d21e6" /></a></td> <td>pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> on post/patch requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320"><img src="https://img.shields.io/badge/4254eb416c-fix-green" alt="fix - 4254eb416c" /></a></td> <td>preserve empty referrer option in HttpRequest</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22"><img src="https://img.shields.io/badge/167bd4c162-fix-green" alt="fix - 167bd4c162" /></a></td> <td>Rejects non-HTTP(S) URLs in JSONP requests</td> </tr> </tbody> </table> <h3>language-service</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/43a0e2872908d1a614139317e8dfeb52d9f69f75"><img src="https://img.shields.io/badge/43a0e28729-fix-green" alt="fix - 43a0e28729" /></a></td> <td>prevent external template inlay hints from appearing in TS files</td> </tr> </tbody> </table> <h3>platform-server</h3> <p>| Commit | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's changelog</a>.</em></p> <blockquote> <h1>22.0.1 (2026-06-10)</h1> <h2>Deprecations</h2> <h3>platform-server</h3> <ul> <li>XHR support in <code>@angular/platform-server</code> is deprecated. Use standard <code>fetch</code> APIs instead. (cherry picked from commit 8446e46f8bc33bd4419fa7f6106b8d117ca2e099)</li> </ul> <h3>common</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8">c4b5fa3c92</a></td> <td>fix</td> <td>escape CSS string-terminating characters in escapeCssUrl</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5">dfff57ede9</a></td> <td>fix</td> <td>Limits date format string length</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c">3c2892c8df</a></td> <td>fix</td> <td>prevent prototype pollution in formatDateTime</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1">1d87c49f6e</a></td> <td>fix</td> <td>use cryptographically secure SHA-256 for transfer cache key generation</td> </tr> </tbody> </table> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1ee224ca30b9b5a7906b4f481135f1fb900fb3ce">1ee224ca30</a></td> <td>fix</td> <td>disallow i18n event attributes</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/a56f1cdf8fa24e335409250798ee804d95eae136">a56f1cdf8f</a></td> <td>fix</td> <td>more robust logic to check if regex can be optimized</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/5946c18275800539b2f47f80a573ee9312a45e8b">5946c18275</a></td> <td>fix</td> <td>sanitize <code>href</code>/<code>xlink:href</code> attributes of any element of the MathML namespace</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/393b84caf8bda05b31cfac014751deed142eb918">393b84caf8</a></td> <td>fix</td> <td>sanitize two-way properties</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/3d9ca2f1730689232f0ba1d6eddbd7dcedd1da39">3d9ca2f173</a></td> <td>fix</td> <td>bind switch exhaustive check expressions</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/669146b0e74ab1bed4196ccebe1c3608f52fd4f8">669146b0e7</a></td> <td>fix</td> <td>disable WebMCP during SSR</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/562a566eadfdec3d9708f1a5e03e7dd2821d3432">562a566ead</a></td> <td>fix</td> <td>Handle synchronous errors in PendingTasks.run function</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/fa546f382de10af46d0508733c6630ffe4bef328">fa546f382d</a></td> <td>fix</td> <td>harden TransferState restoration against DOM clobbering</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/29fdb98684a57c99417efb5aac5a3b7f205e2c8f">29fdb98684</a></td> <td>fix</td> <td>prevent dangling prevConsumer reference from leaking destroyed views (<a href="https://redirect.github.com/angular/angular/pull/68681">#68681</a>)</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/cdcea80327e8984981144d99194d7b194da4889f">cdcea80327</a></td> <td>fix</td> <td>require WebMCP tool descriptions</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4289c4c8408056eb90cd25cdb76475d00de129d6">4289c4c840</a></td> <td>fix</td> <td>update comment for Default change detection</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/3dd433b39a66609412427f06162fb4ebc2b3e4aa">3dd433b39a</a></td> <td>fix</td> <td>use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/045bb736b373a5a0301cde3a4469194404b289c5">045bb736b3</a></td> <td>fix</td> <td>validate lowercase SVG animation attribute names</td> </tr> </tbody> </table> <h3>forms</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/11836a670af5c64153d57a2d47b4688605379014">11836a670a</a></td> <td>fix</td> <td>delay mcp reading the form model by a <code>tick</code></td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/85d2d100e38999f1342742573166c7af0f29b4bd">85d2d100e3</a></td> <td>fix</td> <td>harden FormGroup control lookups against prototype shadowing</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/e51ad374ea628de33843332f6798635dc8af02ae">e51ad374ea</a></td> <td>fix</td> <td>remove animationstart listener on component destroy to prevent memory leak</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/55b7b5a6b6324c1886eca8dbc492e6af5fc4cd7a">55b7b5a6b6</a></td> <td>fix</td> <td>set <code>additionalProperties: false</code> on generated WebMCP form</td> </tr> </tbody> </table> <h3>http</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297">ffb06c0514</a></td> <td>fix</td> <td>ensure query parameters are inserted before URL fragments</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe">2dd65d21e6</a></td> <td>fix</td> <td>pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> on post/patch requests</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320">4254eb416c</a></td> <td>fix</td> <td>preserve empty referrer option in HttpRequest</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22">167bd4c162</a></td> <td>fix</td> <td>Rejects non-HTTP(S) URLs in JSONP requests</td> </tr> </tbody> </table> <h3>language-service</h3> <p>| Commit | Type | Description |</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/2dd65d21e656186cd2598a11dd51a34fcab2ecfe"><code>2dd65d2</code></a> fix(http): pass down the <code>reportUploadProgress</code> and <code>reportDownloadProgress</code> ...</li> <li><a href="https://github.com/angular/angular/commit/1bd5a562f54b8ec7378e7c7f928285be59091f97"><code>1bd5a56</code></a> docs: deprecate XHR support for server-side rendering in HTTP docs and recomm...</li> <li><a href="https://github.com/angular/angular/commit/3c2892c8dffbbbe32940306b53779cc0c4e3f73c"><code>3c2892c</code></a> fix(common): prevent prototype pollution in formatDateTime</li> <li><a href="https://github.com/angular/angular/commit/c4b5fa3c9263ac127f5053c5a03dd4b6313659b8"><code>c4b5fa3</code></a> fix(common): escape CSS string-terminating characters in escapeCssUrl</li> <li><a href="https://github.com/angular/angular/commit/4254eb416c81570a6d3313711aaeba7817305320"><code>4254eb4</code></a> fix(http): preserve empty referrer option in HttpRequest</li> <li><a href="https://github.com/angular/angular/commit/167bd4c162d6af87cd207650bbc41d6c7a073c22"><code>167bd4c</code></a> fix(http): Rejects non-HTTP(S) URLs in JSONP requests</li> <li><a href="https://github.com/angular/angular/commit/dfff57ede93dbc51a7eeac3311ff2b1279595ee5"><code>dfff57e</code></a> fix(common): Limits date format string length</li> <li><a href="https://github.com/angular/angular/commit/1d87c49f6ee4aac27146f39ef370a87ba707a2c1"><code>1d87c49</code></a> fix(common): use cryptographically secure SHA-256 for transfer cache key gene...</li> <li><a href="https://github.com/angular/angular/commit/ffb06c0514ace66e83160e544dec63f36340c297"><code>ffb06c0</code></a> fix(http): ensure query parameters are inserted before URL fragments</li> <li>See full diff in <a href="https://github.com/angular/angular/commits/v22.0.1/packages/common">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-16 19:12:32 -07:00
dependabot[bot]	696ed53e02	chore(deps): bump esbuild from 0.25.12 to 0.28.1 (#2532) ... Bumps [esbuild](https://github.com/evanw/esbuild) from 0.25.12 to 0.28.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/evanw/esbuild/releases">esbuild's releases</a>.</em></p> <blockquote> <h2>v0.28.1</h2> <ul> <li> <p>Disallow <code>\</code> in local development server HTTP requests (<a href="https://github.com/evanw/esbuild/security/advisories/GHSA-g7r4-m6w7-qqqr">GHSA-g7r4-m6w7-qqqr</a>)</p> <p>This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a <code>\</code> backslash character. It happened due to the use of Go's <code>path.Clean()</code> function, which only handles Unix-style <code>/</code> characters. HTTP requests with paths containing <code>\</code> are no longer allowed.</p> <p>Thanks to <a href="https://github.com/dellalibera"><code>@​dellalibera</code></a> for reporting this issue.</p> </li> <li> <p>Add integrity checks to the Deno API (<a href="https://github.com/evanw/esbuild/security/advisories/GHSA-gv7w-rqvm-qjhr">GHSA-gv7w-rqvm-qjhr</a>)</p> <p>The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.</p> <p>Note that esbuild's Deno API installs from <code>registry.npmjs.org</code> by default, but allows the <code>NPM_CONFIG_REGISTRY</code> environment variable to override this with a custom package registry. This change means that the esbuild executable served by <code>NPM_CONFIG_REGISTRY</code> must now match the expected content.</p> <p>Thanks to <a href="https://github.com/sondt99"><code>@​sondt99</code></a> for reporting this issue.</p> </li> <li> <p>Avoid inlining <code>using</code> and <code>await using</code> declarations (<a href="https://redirect.github.com/evanw/esbuild/issues/4482">#4482</a>)</p> <p>Previously esbuild's minifier sometimes incorrectly inlined <code>using</code> and <code>await using</code> declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for <code>let</code> and <code>const</code> declarations by avoiding doing it for <code>var</code> declarations, which no longer worked when more declaration types were added. Here's an example:</p> <pre lang="js"><code>// Original code { using x = new Resource() x.activate() } <p>// Old output (with --minify)<br /> new Resource().activate();</p> <p>// New output (with --minify)<br /> {using e=new Resource;e.activate()}<br /> </code></pre></p> </li> <li> <p>Fix module evaluation when an error is thrown (<a href="https://redirect.github.com/evanw/esbuild/issues/4461">#4461</a>, <a href="https://redirect.github.com/evanw/esbuild/pull/4467">#4467</a>)</p> <p>If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if <code>import()</code> or <code>require()</code> is used to import a module multiple times. The thrown error is supposed to be thrown by every call to <code>import()</code> or <code>require()</code>, not just the first. With this release, esbuild will now throw the same error every time you call <code>import()</code> or <code>require()</code> on a module that throws during its evaluation.</p> </li> <li> <p>Fix some edge cases around the <code>new</code> operator (<a href="https://redirect.github.com/evanw/esbuild/issues/4477">#4477</a>)</p> <p>Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a <code>new</code> expression (specifically an optional chain and/or a tagged template literal). The generated code for the <code>new</code> target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the <code>new</code> target in parentheses. Here is an example of some affected code:</p> <pre lang="js"><code>// Original code new (foo()`bar`)() new (foo()?.bar)() <p>// Old output<br /> new foo()<code>bar</code>();<br /> new (foo())?.bar();</p> <p></code></pre></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/evanw/esbuild/blob/main/CHANGELOG-2025.md">esbuild's changelog</a>.</em></p> <blockquote> <h1>Changelog: 2025</h1> <p>This changelog documents all esbuild versions published in the year 2025 (versions 0.25.0 through 0.27.2).</p> <h2>0.27.2</h2> <ul> <li> <p>Allow import path specifiers starting with <code>#/</code> (<a href="https://redirect.github.com/evanw/esbuild/pull/4361">#4361</a>)</p> <p>Previously the specification for <code>package.json</code> disallowed import path specifiers starting with <code>#/</code>, but this restriction <a href="https://redirect.github.com/nodejs/node/pull/60864">has recently been relaxed</a> and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping <code>#/*</code> to <code>./src/*</code> (previously you had to use another character such as <code>#_*</code> instead, which was more confusing). There is some more context in <a href="https://redirect.github.com/nodejs/node/issues/49182">nodejs/node#49182</a>.</p> <p>This change was contributed by <a href="https://github.com/hybrist"><code>@​hybrist</code></a>.</p> </li> <li> <p>Automatically add the <code>-webkit-mask</code> prefix (<a href="https://redirect.github.com/evanw/esbuild/issues/4357">#4357</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4358">#4358</a>)</p> <p>This release automatically adds the <code>-webkit-</code> vendor prefix for the <a href="https://developer.mozilla.org/en-US/docs/Web/CSS/Reference/Properties/mask"><code>mask</code></a> CSS shorthand property:</p> <pre lang="css"><code>/* Original code */ main { mask: url(x.png) center/5rem no-repeat } <p>/* Old output (with --target=chrome110) */<br /> main {<br /> mask: url(x.png) center/5rem no-repeat;<br /> }</p> <p>/* New output (with --target=chrome110) */<br /> main {<br /> -webkit-mask: url(x.png) center/5rem no-repeat;<br /> mask: url(x.png) center/5rem no-repeat;<br /> }<br /> </code></pre></p> <p>This change was contributed by <a href="https://github.com/BPJEnnova"><code>@​BPJEnnova</code></a>.</p> </li> <li> <p>Additional minification of <code>switch</code> statements (<a href="https://redirect.github.com/evanw/esbuild/issues/4176">#4176</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4359">#4359</a>)</p> <p>This release contains additional minification patterns for reducing <code>switch</code> statements. Here is an example:</p> <pre lang="js"><code>// Original code switch (x) { case 0: foo() break case 1: default: bar() } </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/evanw/esbuild/commit/bb9db84c02433fbe37b3509f53f9f3e3cc48725e"><code>bb9db84</code></a> publish 0.28.1 to npm</li> <li><a href="https://github.com/evanw/esbuild/commit/9ff053e53b8eeb990f59355dbea365277ac45ee2"><code>9ff053e</code></a> security: add integrity checks to the Deno API</li> <li><a href="https://github.com/evanw/esbuild/commit/0a9bf2135b67c7e28989a5ba19f0f000805a5ab5"><code>0a9bf21</code></a> enforce non-negative size in gzip parser</li> <li><a href="https://github.com/evanw/esbuild/commit/e2a1a7132058ee067fe736eac15f695861b8654e"><code>e2a1a71</code></a> security: forbid <code>\\</code> in local dev server requests</li> <li><a href="https://github.com/evanw/esbuild/commit/83a2cbfc35809f4fd5152da59572d7bed7739d78"><code>83a2cbf</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4482">#4482</a>: don't inline <code>using</code> declarations</li> <li><a href="https://github.com/evanw/esbuild/commit/308ad745d824c77bc607603451b257d0f2fd9a38"><code>308ad74</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4471">#4471</a>: renaming of nested <code>var</code> declarations</li> <li><a href="https://github.com/evanw/esbuild/commit/f013f5f99a015bce92ec48d49181d4ad3177b29b"><code>f013f5f</code></a> fix some typos</li> <li><a href="https://github.com/evanw/esbuild/commit/aafd6e48b1088336a5f5a17e930be7e840d43d8c"><code>aafd6e4</code></a> chore: fix some minor issues in comments (<a href="https://redirect.github.com/evanw/esbuild/issues/4462">#4462</a>)</li> <li><a href="https://github.com/evanw/esbuild/commit/15300c30b5e22f7cfcbed850c246d35095658386"><code>15300c3</code></a> follow up: cjs evaluation fixes</li> <li><a href="https://github.com/evanw/esbuild/commit/1bda0c31d7697c0af44b3ab39b81e599e559a395"><code>1bda0c3</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4461">#4461</a>, fix <a href="https://redirect.github.com/evanw/esbuild/issues/4467">#4467</a>: esm evaluation fixes</li> <li>Additional commits viewable in <a href="https://github.com/evanw/esbuild/compare/v0.25.12...v0.28.1">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for esbuild since your current version.</p> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/langchain-ai/langgraphjs/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-12 14:32:55 -07:00
Christian Bromann	9e114e55d3	chore(deps): remove uuid dependency in favor of embedded uuid in core (#2527) ... ## Summary - Remove the direct `uuid` npm dependency from `@langchain/langgraph`, `@langchain/langgraph-checkpoint`, `@langchain/langgraph-checkpoint-redis`, `@langchain/langgraph-api`, `@langchain/langgraph-supervisor`, and `@langchain/langgraph-sdk`. - Switch all UUID generation and validation to `@langchain/core/utils/uuid` (v4, v5, v6, v7, and `validate`). - Drop unused `@types/uuid` devDependencies from checkpoint backend packages that no longer reference `uuid` directly. fixes #2481	2026-06-12 10:54:29 -07:00