langchain-ai/langgraphjs
1
0
Fork 0
mirror of https://github.com/langchain-ai/langgraphjs.git synced 2026-08-24 21:51:39 -04:00
Code Issues 108 Packages Projects Releases 20 Wiki Activity
3,073 Commits 167 Branches 569 Tags
@langchain/vue@1.0.30
Commit Graph

3073 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
github-actions[bot] 9320c37da2 chore: version packages (#2674) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @langchain/langgraph-sdk@1.9.29

### Patch Changes

- [#2668](https://github.com/langchain-ai/langgraphjs/pull/2668)
[`f9c0e88`](https://github.com/langchain-ai/langgraphjs/commit/f9c0e885e25149fe614d7d2002c884b80ab54484)
Thanks [@edenbuilds](https://github.com/edenbuilds)! - Always attach the
underlying Response on HTTPError.

- [#2675](https://github.com/langchain-ai/langgraphjs/pull/2675)
[`3958305`](https://github.com/langchain-ai/langgraphjs/commit/3958305d3ee89419abc496f28602cf4b38f2a6b3)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): deliver input channel events on the root-bus fast path

`channelProjection` with `replay: false` (the `useChannelEffect`
default) compared `event.method` to channel names, so `input.requested`
never matched `"input"`. Match via `inferChannel` instead, same as the
slow path.

- [#2677](https://github.com/langchain-ai/langgraphjs/pull/2677)
[`4c0fd78`](https://github.com/langchain-ai/langgraphjs/commit/4c0fd78485e1778234ddb56c7579f8d823946f18)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): defer stream join until lazy thread create commits

Hydrating an externally-minted thread id that 404s still opened
`/stream/events` before `POST /commands` created the row. On
langgraph_api's in-mem runtime that join is accepted but dead, so the
first run delivered nothing until idle reconnect. Treat missing threads
like client-minted ones and start the root pump only after dispatch
succeeds.

- [#2672](https://github.com/langchain-ai/langgraphjs/pull/2672)
[`5be518f`](https://github.com/langchain-ai/langgraphjs/commit/5be518fe18f2497a28957dfec85522997e6df4f3)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): surface nested interrupts on stream.interrupts

`input.requested` events from subgraphs/subagents were dropped live by a
root-only filter, while hydrate seeded them from `state.tasks`, so HITL
UIs saw nested interrupts only after reload. Mirror every namespace onto
`rootStore.interrupts` (with `Interrupt.namespace`), and resolve that
namespace in `respond({ interruptId })` when callers omit it.

- [#2676](https://github.com/langchain-ai/langgraphjs/pull/2676)
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): resolve respond() namespace from interrupt id

  When callers pass `{ interruptId }` without `namespace`, look the
  namespace up on `thread.interrupts` instead of defaulting to root.
## @langchain/angular@1.0.30

### Patch Changes

- [#2676](https://github.com/langchain-ai/langgraphjs/pull/2676)
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): resolve respond() namespace from interrupt id

  When callers pass `{ interruptId }` without `namespace`, look the
  namespace up on `thread.interrupts` instead of defaulting to root.

- Updated dependencies
[[`f9c0e88`](https://github.com/langchain-ai/langgraphjs/commit/f9c0e885e25149fe614d7d2002c884b80ab54484),
[`3958305`](https://github.com/langchain-ai/langgraphjs/commit/3958305d3ee89419abc496f28602cf4b38f2a6b3),
[`4c0fd78`](https://github.com/langchain-ai/langgraphjs/commit/4c0fd78485e1778234ddb56c7579f8d823946f18),
[`5be518f`](https://github.com/langchain-ai/langgraphjs/commit/5be518fe18f2497a28957dfec85522997e6df4f3),
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)]:
  - @langchain/langgraph-sdk@1.9.29
## @langchain/react@1.0.30

### Patch Changes

- [#2676](https://github.com/langchain-ai/langgraphjs/pull/2676)
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): resolve respond() namespace from interrupt id

  When callers pass `{ interruptId }` without `namespace`, look the
  namespace up on `thread.interrupts` instead of defaulting to root.

- Updated dependencies
[[`f9c0e88`](https://github.com/langchain-ai/langgraphjs/commit/f9c0e885e25149fe614d7d2002c884b80ab54484),
[`3958305`](https://github.com/langchain-ai/langgraphjs/commit/3958305d3ee89419abc496f28602cf4b38f2a6b3),
[`4c0fd78`](https://github.com/langchain-ai/langgraphjs/commit/4c0fd78485e1778234ddb56c7579f8d823946f18),
[`5be518f`](https://github.com/langchain-ai/langgraphjs/commit/5be518fe18f2497a28957dfec85522997e6df4f3),
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)]:
  - @langchain/langgraph-sdk@1.9.29
## @langchain/svelte@1.0.30

### Patch Changes

- [#2676](https://github.com/langchain-ai/langgraphjs/pull/2676)
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): resolve respond() namespace from interrupt id

  When callers pass `{ interruptId }` without `namespace`, look the
  namespace up on `thread.interrupts` instead of defaulting to root.

- Updated dependencies
[[`f9c0e88`](https://github.com/langchain-ai/langgraphjs/commit/f9c0e885e25149fe614d7d2002c884b80ab54484),
[`3958305`](https://github.com/langchain-ai/langgraphjs/commit/3958305d3ee89419abc496f28602cf4b38f2a6b3),
[`4c0fd78`](https://github.com/langchain-ai/langgraphjs/commit/4c0fd78485e1778234ddb56c7579f8d823946f18),
[`5be518f`](https://github.com/langchain-ai/langgraphjs/commit/5be518fe18f2497a28957dfec85522997e6df4f3),
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)]:
  - @langchain/langgraph-sdk@1.9.29
## @langchain/vue@1.0.30

### Patch Changes

- [#2676](https://github.com/langchain-ai/langgraphjs/pull/2676)
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): resolve respond() namespace from interrupt id

  When callers pass `{ interruptId }` without `namespace`, look the
  namespace up on `thread.interrupts` instead of defaulting to root.

- Updated dependencies
[[`f9c0e88`](https://github.com/langchain-ai/langgraphjs/commit/f9c0e885e25149fe614d7d2002c884b80ab54484),
[`3958305`](https://github.com/langchain-ai/langgraphjs/commit/3958305d3ee89419abc496f28602cf4b38f2a6b3),
[`4c0fd78`](https://github.com/langchain-ai/langgraphjs/commit/4c0fd78485e1778234ddb56c7579f8d823946f18),
[`5be518f`](https://github.com/langchain-ai/langgraphjs/commit/5be518fe18f2497a28957dfec85522997e6df4f3),
[`b3c1ceb`](https://github.com/langchain-ai/langgraphjs/commit/b3c1ceb2cc16dcb15e7a9c1178fe6ddb98e5a93f)]:
  - @langchain/langgraph-sdk@1.9.29

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/angular@1.0.30 @langchain/langgraph-sdk@1.9.29 @langchain/react@1.0.30 @langchain/svelte@1.0.30 @langchain/vue@1.0.30 		2026-08-10 20:39:44 -07:00
Christian Bromann b3c1ceb2cc fix(sdk): resolve respond() namespace from interrupt id (#2676) 
`respond(response, { interruptId })` was sending resumes with the root
namespace whenever `namespace` was omitted. For subgraph interrupts that
mis-targets the resume even though the id already uniquely identifies
the pending interrupt on the thread.
Look the namespace up from `thread.interrupts` by id (same as
`respondAll` / the no-arg path). An explicit `namespace` still
overrides; unknown ids still fall back to root.
 2026-08-10 20:33:27 -07:00
Christian Bromann 4c0fd78485 fix(sdk): defer stream join until lazy thread create commits (#2677) 
Hydrating an externally-minted thread id that 404s still opened
`/stream/events` before `POST /commands` created the row. On
langgraph_api's in-mem runtime that join is accepted but dead, so the
first run delivered nothing until idle reconnect. Treat missing threads
like client-minted ones and start the root pump only after dispatch
succeeds.
 2026-08-10 20:14:42 -07:00
Christian Bromann 3958305d3e fix(sdk): deliver input channel events on the root-bus fast path (#2675) 
`channelProjection` with `replay: false` (the `useChannelEffect`
default) matched root-bus events by comparing `event.method` to channel
names. That works for `values` / `messages` / etc., but input events are
`input.requested`, so subscribers to `["input"]` got nothing and no
error.

The fast path now classifies with `inferChannel`, same as the slow
subscription path.

## Test plan
- [x] `pnpm exec vitest run src/stream/projections/channel.test.ts
src/client/stream/subscription.test.ts
src/stream/projections/channel-effect.test.ts` (from `libs/sdk`)
- [x] Changeset added for affected package(s)
- [ ] `useChannelEffect(stream, ["input"], { onEvent })` on a graph that
`interrupt()`s — callback fires without needing `replay: true`
 2026-08-10 16:39:12 -07:00
Christian Bromann 5be518fe18 fix(sdk): surface nested interrupts on stream.interrupts (#2672) 
Nested `interrupt()` calls (subgraphs / createDeepAgent subagents) never
showed up on `useStream().interrupts` while the run was live —
`#recordRootInterrupt` early-returned on non-root namespaces — but
hydrate seeded them from `state.tasks`, so the same interrupt appeared
after a reload. Mirror every `input.requested` onto
`rootStore.interrupts` with `Interrupt.namespace`, and look that
namespace up in `respond({ interruptId })` when it isn't passed
explicitly.
 2026-08-10 16:38:49 -07:00
edenbuilds f9c0e885e2 fix(sdk): always attach Response on HTTPError (#2668) 
## Summary
- Always pass `includeResponse: true` when converting failed `Response`
objects to `HTTPError`, so `error.response` is available without
registering `onFailedResponseHook`.

## Test plan
- [x] New unit test `should attach error.response without
onFailedResponseHook` passes with the fix
- [x] Same test fails with `response: undefined` when the fix is stashed
(`git stash` A/B)
- [x] Changeset for `@langchain/langgraph-sdk`

Fixes #2632

Co-authored-by: edenbuilds <279970382+edenbuilds@users.noreply.github.com>
 2026-08-10 12:11:59 -07:00
dependabot[bot] 6ac60da74f chore(deps): bump the langchain group across 1 directory with 5 updates (#2651) 
Bumps the langchain group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@langchain/anthropic](https://github.com/langchain-ai/langchainjs) |
`1.5.1` | `1.5.2` |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) |
`1.2.3` | `1.2.4` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.3` |
`1.5.4` |
| [@langchain/quickjs](https://github.com/langchain-ai/deepagentsjs) |
`0.6.0` | `1.0.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.4` |
`0.8.9` |


Updates `@langchain/anthropic` from 1.5.1 to 1.5.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/anthropic's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/anthropic</code><a
href="https://github.com/1"><code>@​1</code></a>.5.2</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11255">#11255</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
feat(anthropic): add claude-opus-5 support</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
feat(anthropic): add Claude Opus 5 support (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a>
chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a>
chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/3eeeb8ace227289625380dedf9e0fef3ce4ab466"><code>3eeeb8a</code></a>
chore(deps-dev): bump typeorm from 1.0.0 to 1.1.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11247">#11247</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/ee76ea0347fb611153e5ec7d0e70fa405f5293a3"><code>ee76ea0</code></a>
chore(deps): patch websocket-driver Dependabot advisories (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11213">#11213</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e5d9de5df9e48a54cbcd95c6fc22a4ac8e78e155"><code>e5d9de5</code></a>
fix(deps): resolve Dependabot security alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11212">#11212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/b7b5c525ddc3388e767474d3ad37cb9101424ff4"><code>b7b5c52</code></a>
chore: add Socket optimized dependency overrides (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11205">#11205</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a>
feat(langchain): add tool error middleware (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11201">#11201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/anthropic@1.5.1...@langchain/anthropic@1.5.2">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/core` from 1.2.3 to 1.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/core's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/core</code><a
href="https://github.com/1"><code>@​1</code></a>.2.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11190">#11190</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/9654bde694af4e78080a76a0b39d7edd35683449"><code>9654bde</code></a>
Thanks <a
href="https://github.com/pawel-twardziak"><code>@​pawel-twardziak</code></a>!
- Coalesce nested LangChain tracer callbacks that share run
bookkeeping.</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11153">#11153</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/84ce6d65ef0ab2c556d5a5a3b5651b5cf3d73303"><code>84ce6d6</code></a>
Thanks <a
href="https://github.com/parveshsaini"><code>@​parveshsaini</code></a>!
- fix(core): bind splitText when trimMessages receives a TextSplitter
instance</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f6dbb882d1d4a591d69020145b6a871fe7801b35"><code>f6dbb88</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11268">#11268</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/9654bde694af4e78080a76a0b39d7edd35683449"><code>9654bde</code></a>
fix(core): coalesce duplicate tracer copies sharing run state (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11190">#11190</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/84ce6d65ef0ab2c556d5a5a3b5651b5cf3d73303"><code>84ce6d6</code></a>
fix(core): bind splitText when trimMessages receives a TextSplitter
instance ...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/710d74f3fc0ff98d5088c8e0c86752829cfaaa2c"><code>710d74f</code></a>
fix: resolve open Dependabot alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11259">#11259</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5226cddb0d0b31d33bb78fc51230e4283cd6cc64"><code>5226cdd</code></a>
chore(deps-dev): bump <code>@​hono/node-server</code> from 2.0.4 to
2.0.10 in /libs/langcha...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
feat(anthropic): add Claude Opus 5 support (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a>
chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a>
chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.3...@langchain/core@1.2.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain` from 1.5.3 to 1.5.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">langchain's
releases</a>.</em></p>
<blockquote>
<h2>langchain@1.5.4</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11201">#11201</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
feat(langchain): add middleware for handling tool execution errors</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/d829cb490112454b3cf8718a526f28450ff37062"><code>d829cb4</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11204">#11204</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/c8bd4c4a6dbde07fb24deb5870c02dc29c51ab53"><code>c8bd4c4</code></a>
feat(anthropic): add Claude Opus 5 support (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11255">#11255</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/741f380ae54afd2e920495b3042ea6346865836a"><code>741f380</code></a>
chore(deps): bump <code>@​hono/node-server</code> from 2.0.4 to 2.0.10
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11244">#11244</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/5103cee12ae0e3e56038f0c20edda5159b252daa"><code>5103cee</code></a>
chore(deps): bump js-yaml from 5.1.0 to 5.2.2 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11256">#11256</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/db29a6a8060d9d8998f5fb566368e3bad5b32a5b"><code>db29a6a</code></a>
chore(deps): bump axios from 1.16.1 to 1.18.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11228">#11228</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/3eeeb8ace227289625380dedf9e0fef3ce4ab466"><code>3eeeb8a</code></a>
chore(deps-dev): bump typeorm from 1.0.0 to 1.1.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11247">#11247</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/ee76ea0347fb611153e5ec7d0e70fa405f5293a3"><code>ee76ea0</code></a>
chore(deps): patch websocket-driver Dependabot advisories (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11213">#11213</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e5d9de5df9e48a54cbcd95c6fc22a4ac8e78e155"><code>e5d9de5</code></a>
fix(deps): resolve Dependabot security alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11212">#11212</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/b7b5c525ddc3388e767474d3ad37cb9101424ff4"><code>b7b5c52</code></a>
chore: add Socket optimized dependency overrides (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11205">#11205</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a8cd4d9ae35ae8ae05e011115a351d976560ade9"><code>a8cd4d9</code></a>
feat(langchain): add tool error middleware (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11201">#11201</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.3...langchain@1.5.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/quickjs` from 0.6.0 to 1.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/deepagentsjs/releases">@​langchain/quickjs's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/quickjs</code><a
href="https://github.com/1"><code>@​1</code></a>.0.0</h2>
<p>No release notes provided.</p>
<h2><code>@​langchain/quickjs</code><a
href="https://github.com/1"><code>@​1</code></a>.0.0-rc.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126"><code>d25097f</code></a>,
<a
href="https://github.com/langchain-ai/deepagentsjs/commit/dd142fe4fc54c986d5bcf51211d9a839a427e931"><code>dd142fe</code></a>]:
<ul>
<li>deepagents@1.12.0-rc.0</li>
</ul>
</li>
</ul>
<h2><code>@​langchain/quickjs</code><a
href="https://github.com/1"><code>@​1</code></a>.0.0-alpha.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://github.com/langchain-ai/deepagentsjs/commit/4faca20343089ee2d8ecaf4c8ad3b5f8fcf1e8f8"><code>4faca20</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
feat(deepagents): support multimodal files for backends</p>
</li>
<li>
<p><a
href="https://github.com/langchain-ai/deepagentsjs/commit/07800c04d56bf2b9cb8ed99f769fd199908fd589"><code>07800c0</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
chore(deepagents): refactor backend method names - lsInfo -&gt; ls,
grepRaw -&gt; grep, globInfo -&gt; glob</p>
</li>
<li>
<p>Updated dependencies [<a
href="https://github.com/langchain-ai/deepagentsjs/commit/b1a2c8ddaef59f40aebe225cde458ce70d5fbdd3"><code>b1a2c8d</code></a>,
<a
href="https://github.com/langchain-ai/deepagentsjs/commit/bca71ed044edc438389a4ca19d81f43dabe01fa7"><code>bca71ed</code></a>,
<a
href="https://github.com/langchain-ai/deepagentsjs/commit/4faca20343089ee2d8ecaf4c8ad3b5f8fcf1e8f8"><code>4faca20</code></a>,
<a
href="https://github.com/langchain-ai/deepagentsjs/commit/07800c04d56bf2b9cb8ed99f769fd199908fd589"><code>07800c0</code></a>,
<a
href="https://github.com/langchain-ai/deepagentsjs/commit/6b76b39cfc6a87ccb034d6e27888f7f6f2f91b97"><code>6b76b39</code></a>]:</p>
<ul>
<li>deepagents@1.9.0-alpha.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/bed2d344bc815b5f550b35c6f1972f7a25fea603"><code>bed2d34</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/712">#712</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/b17714892227a0dbc797cf932bb4cd9a7e6cf437"><code>b177148</code></a>
chore: exit pre-release (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/711">#711</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/149f4585f1e5e9511ac40ab398c72bd13665fbe2"><code>149f458</code></a>
chore: version packages (rc) (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/709">#709</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/79e4654efaafb156ea1c39d2d6c1e0d4c17152cb"><code>79e4654</code></a>
fix(deps): resolve Dependabot alerts (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/710">#710</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/1225a7ff8673686c2a3c0411636a9511b7d8d0d0"><code>1225a7f</code></a>
feat(deepagents): make todo middleware opt-in (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/708">#708</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/71000c0b705226c3730fb97c7215dfbb8a6141ed"><code>71000c0</code></a>
build(deps): bump the minor-deps-updates-main group across 1 directory
with 1...</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/24ea7fa8ac4f0dd3319a375b721ef8cfd7657f64"><code>24ea7fa</code></a>
build(deps): bump the major-deps-updates-main group across 1 directory
with 2...</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/0e6a35b647fb872753fc7d3132d9a3f5026e88db"><code>0e6a35b</code></a>
fix(deno): extend reconnect readiness retry (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/706">#706</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/a55022dc2f4aa0d2701edcaebb39c33a67dd1df8"><code>a55022d</code></a>
chore: version packages (rc) (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/699">#699</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/d25097f78d0e66741da34e1d74551f3c19991126"><code>d25097f</code></a>
feat(deepagents): simplify prompting (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/703">#703</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/deepagentsjs/compare/@langchain/quickjs@0.6.0...@langchain/quickjs@1.0.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `langsmith` from 0.8.4 to 0.8.9
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.8.9</h2>
<h2>What's Changed</h2>
<ul>
<li>feat(sandbox): add JS Dockerfile snapshots by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2951">langchain-ai/langsmith-sdk#2951</a></li>
<li>chore(deps-dev): bump the js-minor-and-patch group across 1
directory with 11 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2931">langchain-ai/langsmith-sdk#2931</a></li>
<li>chore(deps): bump websockets from 15.0.1 to 16.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2811">langchain-ai/langsmith-sdk#2811</a></li>
<li>chore(deps): update myst-parser requirement from &gt;=3 to
&gt;=4.0.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2841">langchain-ai/langsmith-sdk#2841</a></li>
<li>chore(deps): bump the py-minor-and-patch group across 1 directory
with 19 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2934">langchain-ai/langsmith-sdk#2934</a></li>
<li>chore(deps): bump typescript from 5.9.3 to 6.0.3 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2839">langchain-ai/langsmith-sdk#2839</a></li>
<li>chore(deps-dev): bump google-adk from 1.10.0 to 2.1.0 in /python by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2960">langchain-ai/langsmith-sdk#2960</a></li>
<li>chore(deps-dev): bump wrapt from 1.17.3 to 2.2.1 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2961">langchain-ai/langsmith-sdk#2961</a></li>
<li>chore(deps-dev): bump the py-minor-and-patch group in /python with 6
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2958">langchain-ai/langsmith-sdk#2958</a></li>
<li>chore(deps-dev): bump types-tqdm from 4.67.3.20260408 to
4.67.3.20260518 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2959">langchain-ai/langsmith-sdk#2959</a></li>
<li>ci: add minimum workflow permissions by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2967">langchain-ai/langsmith-sdk#2967</a></li>
<li>chore: update dependabot.yml to comply with posture checks by <a
href="https://github.com/jkennedyvz"><code>@​jkennedyvz</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2966">langchain-ai/langsmith-sdk#2966</a></li>
<li>test(python): deflake test_tracing_queue_limit_drops_when_full by <a
href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2964">langchain-ai/langsmith-sdk#2964</a></li>
<li>feat(sandbox): size the dockerfile-build sandbox via vcpus/mem_bytes
(python) by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2979">langchain-ai/langsmith-sdk#2979</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.8...v0.8.9">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.8...v0.8.9</a></p>
<h2>v0.8.8</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(python): retry sandbox pool timeouts by <a
href="https://github.com/baskaryan"><code>@​baskaryan</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2953">langchain-ai/langsmith-sdk#2953</a></li>
<li>fix(sandbox): build Dockerfile snapshots off /tmp by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2956">langchain-ai/langsmith-sdk#2956</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.8">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.7...v0.8.8</a></p>
<h2>v0.8.7</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: reconnect sandbox command streams on EOF by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2941">langchain-ai/langsmith-sdk#2941</a></li>
<li>feat(sandbox): build snapshots from Dockerfiles by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2950">langchain-ai/langsmith-sdk#2950</a></li>
<li>fix(python): add organization id to context URLs by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2945">langchain-ai/langsmith-sdk#2945</a></li>
<li>fix(js): add organization id to context URLs by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2946">langchain-ai/langsmith-sdk#2946</a></li>
<li>release(py): 0.8.7 by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2947">langchain-ai/langsmith-sdk#2947</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.6...v0.8.7">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.6...v0.8.7</a></p>
<h2>v0.8.6</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump <code>@​google/genai</code> from 1.50.1 to
2.0.1 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2875">langchain-ai/langsmith-sdk#2875</a></li>
<li>chore(deps): bump mako from 1.3.11 to 1.3.12 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2880">langchain-ai/langsmith-sdk#2880</a></li>
<li>chore(deps): bump authlib from 1.6.11 to 1.6.12 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2888">langchain-ai/langsmith-sdk#2888</a></li>
<li>chore(deps): bump hono from 4.12.15 to 4.12.18 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2894">langchain-ai/langsmith-sdk#2894</a></li>
<li>chore(deps): bump fast-uri from 3.1.0 to 3.1.2 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2895">langchain-ai/langsmith-sdk#2895</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.94.0 to
0.95.0 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2881">langchain-ai/langsmith-sdk#2881</a></li>
<li>chore(deps): bump postcss from 8.5.8 to 8.5.14 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2898">langchain-ai/langsmith-sdk#2898</a></li>
<li>chore(deps): bump <code>@​protobufjs/utf8</code> from 1.1.0 to 1.1.1
in /js/internal/environment_tests/test-exports-vite in the npm_and_yarn
group across 1 directory by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2908">langchain-ai/langsmith-sdk#2908</a></li>
<li>chore(deps): bump hono from 4.12.18 to 4.12.19 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2909">langchain-ai/langsmith-sdk#2909</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1eda04b4e86a93befecbd869aef6022e7f516837"><code>1eda04b</code></a>
feat(sandbox): size the dockerfile-build sandbox via vcpus/mem_bytes
(python)...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/5960910cbe044dca6a0961f099577f41166f9601"><code>5960910</code></a>
test(python): deflake test_tracing_queue_limit_drops_when_full (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2964">#2964</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/846d4c5b17580b86618bd9a1573759e19d0cf647"><code>846d4c5</code></a>
chore: update dependabot.yml to comply with posture checks (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2966">#2966</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/48b66b3ccaa0d2a305ffd1656e18bd4297af019f"><code>48b66b3</code></a>
ci: add minimum workflow permissions (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2967">#2967</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d0a93ac8a2872cf2dc6f7cb7a17645b21816d9c7"><code>d0a93ac</code></a>
chore(deps-dev): bump types-tqdm from 4.67.3.20260408 to 4.67.3.20260518
in /...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/fc9ba745e3797950d0c97fce8d68c63c7915e60c"><code>fc9ba74</code></a>
chore(deps-dev): bump the py-minor-and-patch group in /python with 6
updates ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/d54e69b689029994d23cb6876a8e87c6e64a3e79"><code>d54e69b</code></a>
chore(deps-dev): bump wrapt from 1.17.3 to 2.2.1 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2961">#2961</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1d212585b886f79130db74c6741240ab79fc62bd"><code>1d21258</code></a>
chore(deps-dev): bump google-adk from 1.10.0 to 2.1.0 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2960">#2960</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/b66d791bfec699eb5fc26df1e81be8b9a6677c2c"><code>b66d791</code></a>
chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /js (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2839">#2839</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/a0f9eff836623cce60bdcabb2a33275d8ec741ee"><code>a0f9eff</code></a>
chore(deps): bump the py-minor-and-patch group across 1 directory with
19 upd...</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.4...v0.8.9">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christian Bromann <git@bromann.dev>
Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>
 2026-08-04 08:48:42 -07:00
dependabot[bot] 41da338742 chore(deps-dev): bump the react group across 1 directory with 3 updates (#2650) 
Bumps the react group with 3 updates in the / directory:
[@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react),
[@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom)
and
[@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react).

Updates `@types/react` from 19.2.17 to 19.2.18
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `@types/react-dom` from 19.2.3 to 19.2.4
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitejs/plugin-react` from 6.0.3 to 6.0.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/releases">@​vitejs/plugin-react's
releases</a>.</em></p>
<blockquote>
<h2>plugin-react@6.0.5</h2>
<h3>Fixed the react compiler preset filter to be linear (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1353">#1353</a>)</h3>
<p>The improved filter in v6.0.3 was non-linear and caused a performance
regression (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1349">#1349</a>).
The filter was changed to be linear to avoid that.</p>
<h2>plugin-react@6.0.4</h2>
<h3>Fixed <code>$RefreshSig$ is not defined</code> error when running
<code>vite dev</code> with <code>NODE_ENV=production</code></h3>
<p>When running <code>vite dev</code> with
<code>NODE_ENV=production</code>, the app errored with
<code>$RefreshSig$ is not defined</code>.
This error is now fixed.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md">@​vitejs/plugin-react's
changelog</a>.</em></p>
<blockquote>
<h2>6.0.5 (2026-07-30)</h2>
<h3>Fixed the react compiler preset filter to be linear (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/pull/1353">#1353</a>)</h3>
<p>The improved filter in v6.0.3 was non-linear and caused a performance
regression (<a
href="https://redirect.github.com/vitejs/vite-plugin-react/issues/1349">#1349</a>).
The filter was changed to be linear to avoid that.</p>
<h2>6.0.4 (2026-07-22)</h2>
<h3>Fixed <code>$RefreshSig$ is not defined</code> error when running
<code>vite dev</code> with <code>NODE_ENV=production</code></h3>
<p>When running <code>vite dev</code> with
<code>NODE_ENV=production</code>, the app errored with
<code>$RefreshSig$ is not defined</code>.
This error is now fixed.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/68c0cb8796ce18bd049c3d05c5210eaf0617eac0"><code>68c0cb8</code></a>
release: plugin-react@6.0.5 (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1362">#1362</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/555cdbc126506317b05404481374406771a41e70"><code>555cdbc</code></a>
fix(react): make the react compiler preset filter linear (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1353">#1353</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/a00a9f8240d5a7bb4062ee2a5bac68ea4f0defa6"><code>a00a9f8</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1327">#1327</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/f4b549822ec239799d746c030abb0b9a7d8f0a04"><code>f4b5498</code></a>
release: plugin-react@6.0.4</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/7a4065906e07e616aee23c4fcc76a76b74a7d694"><code>7a40659</code></a>
fix(react): <code>$RefreshSig$ is not defined</code> with
NODE_ENV=production vite dev ...</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/98b32d47a3f2517d52e8a51d8e28ff2ed13678a2"><code>98b32d4</code></a>
fix(deps): update react 19.2.8 (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1298">#1298</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/8ae5449be23079dd17fdefc64064a3d94be6fc39"><code>8ae5449</code></a>
fix: babel-plugin-react-compiler cannot be imported when used in a
framework ...</li>
<li><a
href="https://github.com/vitejs/vite-plugin-react/commit/f09ea01b0b66a4900c3e42cef2aa0147e78b097c"><code>f09ea01</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react/issues/1282">#1282</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.5/packages/plugin-react">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 02:00:41 -07:00
dependabot[bot] 162f8d3578 chore(deps): bump @hono/node-server from 2.0.12 to 2.1.0 (#2657) 
Bumps [@hono/node-server](https://github.com/honojs/node-server) from
2.0.12 to 2.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add Early Hints (HTTP 103) middleware by <a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li>fix(listener): avoid uncaught error when force-closing a
non-standard socket by <a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/bilal-azam"><code>@​bilal-azam</code></a> made
their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/378">honojs/node-server#378</a></li>
<li><a
href="https://github.com/mohamedramadan14"><code>@​mohamedramadan14</code></a>
made their first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/383">honojs/node-server#383</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/82ba34e6b19da49ca500d4cac95b5fb25ee48cc8"><code>82ba34e</code></a>
2.1.0</li>
<li><a
href="https://github.com/honojs/node-server/commit/1f2909a5ef3c7f3b024bd572e39f120dc5e6595a"><code>1f2909a</code></a>
fix(listener): avoid uncaught error when force-closing a non-standard
socket ...</li>
<li><a
href="https://github.com/honojs/node-server/commit/977a242557d03b59112ea77d70124996679c53ef"><code>977a242</code></a>
feat: add Early Hints (HTTP 103) middleware (<a
href="https://redirect.github.com/honojs/node-server/issues/378">#378</a>)</li>
<li>See full diff in <a
href="https://github.com/honojs/node-server/compare/v2.0.12...v2.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hono/node-server&package-manager=npm_and_yarn&previous-version=2.0.12&new-version=2.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 02:00:23 -07:00
dependabot[bot] 674d4e458c chore(deps-dev): bump svelte from 5.56.7 to 5.56.8 in the svelte group across 1 directory (#2642) 
Bumps the svelte group with 1 update in the / directory:
[svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte).

Updates `svelte` from 5.56.7 to 5.56.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/svelte/releases">svelte's
releases</a>.</em></p>
<blockquote>
<h2>svelte@5.56.8</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: call <code>onerror</code> and provide a working
<code>reset</code> when hydrating a failed boundary (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18556">#18556</a>)</p>
</li>
<li>
<p>fix: preserve select selection when spread attributes omit value (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18561">#18561</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md">svelte's
changelog</a>.</em></p>
<blockquote>
<h2>5.56.8</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: call <code>onerror</code> and provide a working
<code>reset</code> when hydrating a failed boundary (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18556">#18556</a>)</p>
</li>
<li>
<p>fix: preserve select selection when spread attributes omit value (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18561">#18561</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/svelte/commit/44a7813730579b94004e182e5a67aab27aa9d2a6"><code>44a7813</code></a>
Version Packages (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18572">#18572</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/3dde011d3a9e7b9145169da0b75dcd607a378c0e"><code>3dde011</code></a>
fix: call <code>onerror</code> and provide a working <code>reset</code>
when hydrating a failed bou...</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/2bace308e37ac1def958be750bd699ed302bb715"><code>2bace30</code></a>
fix: preserve select selection with spread attributes (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18561">#18561</a>)</li>
<li>See full diff in <a
href="https://github.com/sveltejs/svelte/commits/svelte@5.56.8/packages/svelte">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
 2026-08-04 08:26:42 +00:00
dependabot[bot] c1f05c0532 chore(deps): bump the angular group across 1 directory with 10 updates (#2652) 
Bumps the angular group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
|
[@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common)
| `22.0.8` | `22.1.0` |
|
[@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler)
| `22.0.8` | `22.1.0` |
|
[@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core)
| `22.0.8` | `22.1.0` |
|
[@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms)
| `22.0.8` | `22.1.0` |
|
[@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser)
| `22.0.8` | `22.1.0` |
|
[@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router)
| `22.0.8` | `22.1.0` |
| [@angular/build](https://github.com/angular/angular-cli) | `22.0.8` |
`22.1.2` |
| [@angular/cli](https://github.com/angular/angular-cli) | `22.0.8` |
`22.1.2` |
|
[@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli)
| `22.0.8` | `22.1.0` |
|
[@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic)
| `22.0.8` | `22.1.0` |


Updates `@angular/common` from 22.0.8 to 22.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/common's
releases</a>.</em></p>
<blockquote>
<h2>22.1.0</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img
src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix -
1ad6824d0d" /></a></td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img
src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat -
af5e4e1131" /></a></td>
<td>Add an error for --global-foo cases (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img
src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat -
d579ecaf73" /></a></td>
<td>Disable '--global-' error outside of g3 (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img
src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat -
f98547675c" /></a></td>
<td>Namespace CSS variables to the app (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img
src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat -
8c8b2f7783" /></a></td>
<td>Support css var namespacing in properties (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img
src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix -
292199aa4d" /></a></td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img
src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix -
25c744c4d0" /></a></td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img
src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix -
5bd00add07" /></a></td>
<td>support foreign components inside control flow blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img
src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf -
2e442f7876" /></a></td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img
src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix -
aeb55c8bc1" /></a></td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img
src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix -
7c60a98b3c" /></a></td>
<td>support import aliases in foreignImports (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img
src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat -
124ba10ead" /></a></td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img
src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat -
eab4847a8b" /></a></td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img
src="https://img.shields.io/badge/091456a214-fix-green" alt="fix -
091456a214" /></a></td>
<td>account for namespaces in host binding sanitization (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img
src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix -
b3748e9fe4" /></a></td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img
src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix -
11b206b919" /></a></td>
<td>introduce disposal mechanism for Angular views in foreign
<code>@content</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232"><img
src="https://img.shields.io/badge/56607967db-fix-green" alt="fix -
56607967db" /></a></td>
<td>introduce logical-only containers for foreign content</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><img
src="https://img.shields.io/badge/23cf1a828b-fix-green" alt="fix -
23cf1a828b" /></a></td>
<td>sanitize host bindings on concrete hosts (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b"><img
src="https://img.shields.io/badge/0c07356c5c-fix-green" alt="fix -
0c07356c5c" /></a></td>
<td>set current tnode in foreign component instruction on reuse</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67"><img
src="https://img.shields.io/badge/bbbd357bd2-fix-green" alt="fix -
bbbd357bd2" /></a></td>
<td>add utility to assert that value is a field tree</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded"><img
src="https://img.shields.io/badge/e3630c23c5-feat-blue" alt="feat -
e3630c23c5" /></a></td>
<td>add options to allow caching of credentialed and non-cacheable HTTP
requests</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><img
src="https://img.shields.io/badge/ec16a3d6c6-fix-green" alt="fix -
ec16a3d6c6" /></a></td>
<td>enable xsrf for root-provided HttpClient</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><img
src="https://img.shields.io/badge/39e362eea5-fix-green" alt="fix -
39e362eea5" /></a></td>
<td>match header values exactly when deleting</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><img
src="https://img.shields.io/badge/be46ca8696-fix-green" alt="fix -
be46ca8696" /></a></td>
<td>preserve immutability of materialized clones</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96"><img
src="https://img.shields.io/badge/c0cbd46bd7-fix-green" alt="fix -
c0cbd46bd7" /></a></td>
<td>skip transfer cache for fetch credentialed requests (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/69017">#69017</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5"><img
src="https://img.shields.io/badge/af04e266cc-refactor-yellow"
alt="refactor - af04e266cc" /></a></td>
<td>deprecate jsonp support</td>
</tr>
</tbody>
</table>
<h3>language-service</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7f0265e43ab9f6b1ab9ad0ae84e70a40db417417"><img
src="https://img.shields.io/badge/7f0265e43a-feat-blue" alt="feat -
7f0265e43a" /></a></td>
<td>compile non-exported classes if standalone (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68454">#68454</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f9c824dd9ec4462d29ed07b5e7916be86c19e84"><img
src="https://img.shields.io/badge/4f9c824dd9-feat-blue" alt="feat -
4f9c824dd9" /></a></td>
<td>Typecheck templates which would require inline typecheck blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/68454">#68454</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's
changelog</a>.</em></p>
<blockquote>
<h1>22.1.0 (2026-07-29)</h1>
<h2>Deprecations</h2>
<h3>http</h3>
<ul>
<li><code>HttpClient.jsonp</code>, <code>HttpClientJsonpModule</code>,
and related JSONP classes/functions are deprecated. Use standard HTTP
requests instead.</li>
</ul>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e">1ad6824d0d</a></td>
<td>fix</td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e">af5e4e1131</a></td>
<td>feat</td>
<td>Add an error for --global-foo cases (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee">d579ecaf73</a></td>
<td>feat</td>
<td>Disable '--global-' error outside of g3 (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb">f98547675c</a></td>
<td>feat</td>
<td>Namespace CSS variables to the app (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d">8c8b2f7783</a></td>
<td>feat</td>
<td>Support css var namespacing in properties (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4">292199aa4d</a></td>
<td>fix</td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b">25c744c4d0</a></td>
<td>fix</td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e">aeb55c8bc1</a></td>
<td>fix</td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff">7c60a98b3c</a></td>
<td>fix</td>
<td>support import aliases in foreignImports (<a
href="https://redirect.github.com/angular/angular/pull/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5">124ba10ead</a></td>
<td>feat</td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717">eab4847a8b</a></td>
<td>feat</td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0">091456a214</a></td>
<td>fix</td>
<td>account for namespaces in host binding sanitization (<a
href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452">b3748e9fe4</a></td>
<td>fix</td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a">11b206b919</a></td>
<td>fix</td>
<td>introduce disposal mechanism for Angular views in foreign
<code>@content</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232">56607967db</a></td>
<td>fix</td>
<td>introduce logical-only containers for foreign content</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544">23cf1a828b</a></td>
<td>fix</td>
<td>sanitize host bindings on concrete hosts (<a
href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b">0c07356c5c</a></td>
<td>fix</td>
<td>set current tnode in foreign component instruction on reuse</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67">bbbd357bd2</a></td>
<td>fix</td>
<td>add utility to assert that value is a field tree</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded">e3630c23c5</a></td>
<td>feat</td>
<td>add options to allow caching of credentialed and non-cacheable HTTP
requests</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64">ec16a3d6c6</a></td>
<td>fix</td>
<td>enable xsrf for root-provided HttpClient</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea">39e362eea5</a></td>
<td>fix</td>
<td>match header values exactly when deleting</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81">be46ca8696</a></td>
<td>fix</td>
<td>preserve immutability of materialized clones</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96">c0cbd46bd7</a></td>
<td>fix</td>
<td>skip transfer cache for fetch credentialed requests (<a
href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5">af04e266cc</a></td>
<td>refactor</td>
<td>deprecate jsonp support</td>
</tr>
</tbody>
</table>
<h3>language-service</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/79a37f3d0b690a9e9cc893a10cef4ef4cdce4c3b"><code>79a37f3</code></a>
refactor(common): replaces the deprecated positional
<code>subscribe</code> arguments wi...</li>
<li><a
href="https://github.com/angular/angular/commit/6dcb534e127d8b9971103596844ca1c0e736596b"><code>6dcb534</code></a>
refactor(common): remove duplicate helper function</li>
<li><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><code>ec16a3d</code></a>
fix(http): enable xsrf for root-provided HttpClient</li>
<li><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><code>39e362e</code></a>
fix(http): match header values exactly when deleting</li>
<li><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><code>be46ca8</code></a>
fix(http): preserve immutability of materialized clones</li>
<li><a
href="https://github.com/angular/angular/commit/d14696e4308c5cd95cf2184cae3582b52f7c7cf3"><code>d14696e</code></a>
fix(common): preserve crossorigin on image preloads</li>
<li><a
href="https://github.com/angular/angular/commit/3192dccaa3e1488f8bf351864ea48e44a21246aa"><code>3192dcc</code></a>
fix(http): prevent transfer cache key collisions</li>
<li><a
href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185"><code>359fb50</code></a>
fix(common): avoid prototype lookups in date format caches</li>
<li><a
href="https://github.com/angular/angular/commit/6d043f86573e317f20039ccec031d6e63c01b656"><code>6d043f8</code></a>
fix(http): prevent interceptor signal reads from leaking into calling
reactiv...</li>
<li><a
href="https://github.com/angular/angular/commit/c1829f6d7cc37aec73217a53da1e8314690c8c79"><code>c1829f6</code></a>
docs(docs-infra): Add build-time validation for API and guide links
using rou...</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/v22.1.0/packages/common">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/compiler` from 22.0.8 to 22.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/compiler's
releases</a>.</em></p>
<blockquote>
<h2>22.1.0</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img
src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix -
1ad6824d0d" /></a></td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img
src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat -
af5e4e1131" /></a></td>
<td>Add an error for --global-foo cases (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img
src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat -
d579ecaf73" /></a></td>
<td>Disable '--global-' error outside of g3 (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img
src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat -
f98547675c" /></a></td>
<td>Namespace CSS variables to the app (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img
src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat -
8c8b2f7783" /></a></td>
<td>Support css var namespacing in properties (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img
src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix -
292199aa4d" /></a></td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img
src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix -
25c744c4d0" /></a></td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img
src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix -
5bd00add07" /></a></td>
<td>support foreign components inside control flow blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img
src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf -
2e442f7876" /></a></td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img
src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix -
aeb55c8bc1" /></a></td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img
src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix -
7c60a98b3c" /></a></td>
<td>support import aliases in foreignImports (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img
src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat -
124ba10ead" /></a></td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img
src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat -
eab4847a8b" /></a></td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img
src="https://img.shields.io/badge/091456a214-fix-green" alt="fix -
091456a214" /></a></td>
<td>account for namespaces in host binding sanitization (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img
src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix -
b3748e9fe4" /></a></td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img
src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix -
11b206b919" /></a></td>
<td>introduce disposal mechanism for Angular views in foreign
<code>@content</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232"><img
src="https://img.shields.io/badge/56607967db-fix-green" alt="fix -
56607967db" /></a></td>
<td>introduce logical-only containers for foreign content</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><img
src="https://img.shields.io/badge/23cf1a828b-fix-green" alt="fix -
23cf1a828b" /></a></td>
<td>sanitize host bindings on concrete hosts (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b"><img
src="https://img.shields.io/badge/0c07356c5c-fix-green" alt="fix -
0c07356c5c" /></a></td>
<td>set current tnode in foreign component instruction on reuse</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67"><img
src="https://img.shields.io/badge/bbbd357bd2-fix-green" alt="fix -
bbbd357bd2" /></a></td>
<td>add utility to assert that value is a field tree</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded"><img
src="https://img.shields.io/badge/e3630c23c5-feat-blue" alt="feat -
e3630c23c5" /></a></td>
<td>add options to allow caching of credentialed and non-cacheable HTTP
requests</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><img
src="https://img.shields.io/badge/ec16a3d6c6-fix-green" alt="fix -
ec16a3d6c6" /></a></td>
<td>enable xsrf for root-provided HttpClient</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><img
src="https://img.shields.io/badge/39e362eea5-fix-green" alt="fix -
39e362eea5" /></a></td>
<td>match header values exactly when deleting</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><img
src="https://img.shields.io/badge/be46ca8696-fix-green" alt="fix -
be46ca8696" /></a></td>
<td>preserve immutability of materialized clones</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96"><img
src="https://img.shields.io/badge/c0cbd46bd7-fix-green" alt="fix -
c0cbd46bd7" /></a></td>
<td>skip transfer cache for fetch credentialed requests (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69017">#69017</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5"><img
src="https://img.shields.io/badge/af04e266cc-refactor-yellow"
alt="refactor - af04e266cc" /></a></td>
<td>deprecate jsonp support</td>
</tr>
</tbody>
</table>
<h3>language-service</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7f0265e43ab9f6b1ab9ad0ae84e70a40db417417"><img
src="https://img.shields.io/badge/7f0265e43a-feat-blue" alt="feat -
7f0265e43a" /></a></td>
<td>compile non-exported classes if standalone (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68454">#68454</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f9c824dd9ec4462d29ed07b5e7916be86c19e84"><img
src="https://img.shields.io/badge/4f9c824dd9-feat-blue" alt="feat -
4f9c824dd9" /></a></td>
<td>Typecheck templates which would require inline typecheck blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68454">#68454</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's
changelog</a>.</em></p>
<blockquote>
<h1>22.1.0 (2026-07-29)</h1>
<h2>Deprecations</h2>
<h3>http</h3>
<ul>
<li><code>HttpClient.jsonp</code>, <code>HttpClientJsonpModule</code>,
and related JSONP classes/functions are deprecated. Use standard HTTP
requests instead.</li>
</ul>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e">1ad6824d0d</a></td>
<td>fix</td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e">af5e4e1131</a></td>
<td>feat</td>
<td>Add an error for --global-foo cases (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee">d579ecaf73</a></td>
<td>feat</td>
<td>Disable '--global-' error outside of g3 (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb">f98547675c</a></td>
<td>feat</td>
<td>Namespace CSS variables to the app (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d">8c8b2f7783</a></td>
<td>feat</td>
<td>Support css var namespacing in properties (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4">292199aa4d</a></td>
<td>fix</td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b">25c744c4d0</a></td>
<td>fix</td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e">aeb55c8bc1</a></td>
<td>fix</td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff">7c60a98b3c</a></td>
<td>fix</td>
<td>support import aliases in foreignImports (<a
href="https://redirect.github.com/angular/angular/pull/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5">124ba10ead</a></td>
<td>feat</td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717">eab4847a8b</a></td>
<td>feat</td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0">091456a214</a></td>
<td>fix</td>
<td>account for namespaces in host binding sanitization (<a
href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452">b3748e9fe4</a></td>
<td>fix</td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a">11b206b919</a></td>
<td>fix</td>
<td>introduce disposal mechanism for Angular views in foreign
<code>@content</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232">56607967db</a></td>
<td>fix</td>
<td>introduce logical-only containers for foreign content</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544">23cf1a828b</a></td>
<td>fix</td>
<td>sanitize host bindings on concrete hosts (<a
href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b">0c07356c5c</a></td>
<td>fix</td>
<td>set current tnode in foreign component instruction on reuse</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67">bbbd357bd2</a></td>
<td>fix</td>
<td>add utility to assert that value is a field tree</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded">e3630c23c5</a></td>
<td>feat</td>
<td>add options to allow caching of credentialed and non-cacheable HTTP
requests</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64">ec16a3d6c6</a></td>
<td>fix</td>
<td>enable xsrf for root-provided HttpClient</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea">39e362eea5</a></td>
<td>fix</td>
<td>match header values exactly when deleting</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81">be46ca8696</a></td>
<td>fix</td>
<td>preserve immutability of materialized clones</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96">c0cbd46bd7</a></td>
<td>fix</td>
<td>skip transfer cache for fetch credentialed requests (<a
href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5">af04e266cc</a></td>
<td>refactor</td>
<td>deprecate jsonp support</td>
</tr>
</tbody>
</table>
<h3>language-service</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><code>091456a</code></a>
fix(core): account for namespaces in host binding sanitization (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><code>23cf1a8</code></a>
fix(core): sanitize host bindings on concrete hosts (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69558">#69558</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/8201cebc49c2d43307731191479749fb4dc3e854"><code>8201ceb</code></a>
refactor(compiler): enforce exhaustive defer trigger handling</li>
<li><a
href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34"><code>68ac204</code></a>
fix(core): ignore processing instruction syntax in templates</li>
<li><a
href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c"><code>da52137</code></a>
fix(compiler): parsing of an empty template literal interpolation</li>
<li><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><code>5bd00ad</code></a>
fix(compiler): support foreign components inside control flow blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/69674">#69674</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><code>2e442f7</code></a>
perf(compiler): do not emit tag name when control flow root is foreign
compon...</li>
<li><a
href="https://github.com/angular/angular/commit/a19c02706fd84d831298c6e2e37dd19fc1b00e4e"><code>a19c027</code></a>
refactor(compiler-cli): support foreign imports with isolated
declarations</li>
<li><a
href="https://github.com/angular/angular/commit/997b772f28f92de64b416263bb6dc02dc9e7598d"><code>997b772</code></a>
fix(compiler): use regular optional chaining expression for safe
function cal...</li>
<li><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><code>d579eca</code></a>
feat(compiler): Disable '--global-' error outside of g3 (<a
href="https://github.com/angular/angular/tree/HEAD/packages/compiler/issues/68846">#68846</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/v22.1.0/packages/compiler">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/core` from 22.0.8 to 22.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/core's
releases</a>.</em></p>
<blockquote>
<h2>22.1.0</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img
src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix -
1ad6824d0d" /></a></td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img
src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat -
af5e4e1131" /></a></td>
<td>Add an error for --global-foo cases (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img
src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat -
d579ecaf73" /></a></td>
<td>Disable '--global-' error outside of g3 (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img
src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat -
f98547675c" /></a></td>
<td>Namespace CSS variables to the app (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img
src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat -
8c8b2f7783" /></a></td>
<td>Support css var namespacing in properties (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img
src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix -
292199aa4d" /></a></td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img
src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix -
25c744c4d0" /></a></td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img
src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix -
5bd00add07" /></a></td>
<td>support foreign components inside control flow blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img
src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf -
2e442f7876" /></a></td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img
src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix -
aeb55c8bc1" /></a></td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img
src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix -
7c60a98b3c" /></a></td>
<td>support import aliases in foreignImports (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img
src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat -
124ba10ead" /></a></td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img
src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat -
eab4847a8b" /></a></td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img
src="https://img.shields.io/badge/091456a214-fix-green" alt="fix -
091456a214" /></a></td>
<td>account for namespaces in host binding sanitization (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img
src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix -
b3748e9fe4" /></a></td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img
src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix -
11b206b919" /></a></td>
<td>introduce disposal mechanism for Angular views in foreign
<code>@content</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232"><img
src="https://img.shields.io/badge/56607967db-fix-green" alt="fix -
56607967db" /></a></td>
<td>introduce logical-only containers for foreign content</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><img
src="https://img.shields.io/badge/23cf1a828b-fix-green" alt="fix -
23cf1a828b" /></a></td>
<td>sanitize host bindings on concrete hosts (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b"><img
src="https://img.shields.io/badge/0c07356c5c-fix-green" alt="fix -
0c07356c5c" /></a></td>
<td>set current tnode in foreign component instruction on reuse</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67"><img
src="https://img.shields.io/badge/bbbd357bd2-fix-green" alt="fix -
bbbd357bd2" /></a></td>
<td>add utility to assert that value is a field tree</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded"><img
src="https://img.shields.io/badge/e3630c23c5-feat-blue" alt="feat -
e3630c23c5" /></a></td>
<td>add options to allow caching of credentialed and non-cacheable HTTP
requests</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64"><img
src="https://img.shields.io/badge/ec16a3d6c6-fix-green" alt="fix -
ec16a3d6c6" /></a></td>
<td>enable xsrf for root-provided HttpClient</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea"><img
src="https://img.shields.io/badge/39e362eea5-fix-green" alt="fix -
39e362eea5" /></a></td>
<td>match header values exactly when deleting</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81"><img
src="https://img.shields.io/badge/be46ca8696-fix-green" alt="fix -
be46ca8696" /></a></td>
<td>preserve immutability of materialized clones</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96"><img
src="https://img.shields.io/badge/c0cbd46bd7-fix-green" alt="fix -
c0cbd46bd7" /></a></td>
<td>skip transfer cache for fetch credentialed requests (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69017">#69017</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5"><img
src="https://img.shields.io/badge/af04e266cc-refactor-yellow"
alt="refactor - af04e266cc" /></a></td>
<td>deprecate jsonp support</td>
</tr>
</tbody>
</table>
<h3>language-service</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7f0265e43ab9f6b1ab9ad0ae84e70a40db417417"><img
src="https://img.shields.io/badge/7f0265e43a-feat-blue" alt="feat -
7f0265e43a" /></a></td>
<td>compile non-exported classes if standalone (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68454">#68454</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f9c824dd9ec4462d29ed07b5e7916be86c19e84"><img
src="https://img.shields.io/badge/4f9c824dd9-feat-blue" alt="feat -
4f9c824dd9" /></a></td>
<td>Typecheck templates which would require inline typecheck blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/68454">#68454</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's
changelog</a>.</em></p>
<blockquote>
<h1>22.1.0 (2026-07-29)</h1>
<h2>Deprecations</h2>
<h3>http</h3>
<ul>
<li><code>HttpClient.jsonp</code>, <code>HttpClientJsonpModule</code>,
and related JSONP classes/functions are deprecated. Use standard HTTP
requests instead.</li>
</ul>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e">1ad6824d0d</a></td>
<td>fix</td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e">af5e4e1131</a></td>
<td>feat</td>
<td>Add an error for --global-foo cases (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee">d579ecaf73</a></td>
<td>feat</td>
<td>Disable '--global-' error outside of g3 (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb">f98547675c</a></td>
<td>feat</td>
<td>Namespace CSS variables to the app (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d">8c8b2f7783</a></td>
<td>feat</td>
<td>Support css var namespacing in properties (<a
href="https://redirect.github.com/angular/angular/pull/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4">292199aa4d</a></td>
<td>fix</td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b">25c744c4d0</a></td>
<td>fix</td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e">aeb55c8bc1</a></td>
<td>fix</td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff">7c60a98b3c</a></td>
<td>fix</td>
<td>support import aliases in foreignImports (<a
href="https://redirect.github.com/angular/angular/pull/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5">124ba10ead</a></td>
<td>feat</td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717">eab4847a8b</a></td>
<td>feat</td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0">091456a214</a></td>
<td>fix</td>
<td>account for namespaces in host binding sanitization (<a
href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452">b3748e9fe4</a></td>
<td>fix</td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a">11b206b919</a></td>
<td>fix</td>
<td>introduce disposal mechanism for Angular views in foreign
<code>@content</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/56607967dbba25e63f86fd128ec0c1c4ce3e5232">56607967db</a></td>
<td>fix</td>
<td>introduce logical-only containers for foreign content</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544">23cf1a828b</a></td>
<td>fix</td>
<td>sanitize host bindings on concrete hosts (<a
href="https://redirect.github.com/angular/angular/pull/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0c07356c5c9dc76a532d7d4ecf43d8fce81b405b">0c07356c5c</a></td>
<td>fix</td>
<td>set current tnode in foreign component instruction on reuse</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bbbd357bd2b29f0b04578e3fa651418df4aefc67">bbbd357bd2</a></td>
<td>fix</td>
<td>add utility to assert that value is a field tree</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/e3630c23c59445fc8bace5117283f20d6379dded">e3630c23c5</a></td>
<td>feat</td>
<td>add options to allow caching of credentialed and non-cacheable HTTP
requests</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ec16a3d6c6785992197bc0ae81afb1e699232f64">ec16a3d6c6</a></td>
<td>fix</td>
<td>enable xsrf for root-provided HttpClient</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39e362eea5603fa36bda436c9f03d9304960c1ea">39e362eea5</a></td>
<td>fix</td>
<td>match header values exactly when deleting</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be46ca869642aefebb0236fd87843c9e2367ea81">be46ca8696</a></td>
<td>fix</td>
<td>preserve immutability of materialized clones</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0cbd46bd77443749444f816de1e0df4ede28c96">c0cbd46bd7</a></td>
<td>fix</td>
<td>skip transfer cache for fetch credentialed requests (<a
href="https://redirect.github.com/angular/angular/pull/69017">#69017</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af04e266cc9df4502802b565ccbb9928f10f51f5">af04e266cc</a></td>
<td>refactor</td>
<td>deprecate jsonp support</td>
</tr>
</tbody>
</table>
<h3>language-service</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/ada038fca8ec59c90a9b5773e0a1d5411ee67073"><code>ada038f</code></a>
refactor(core): Migrate more tests off <code>fakeAsync</code></li>
<li><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><code>091456a</code></a>
fix(core): account for namespaces in host binding sanitization (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/23cf1a828be0d5bd29ce84cb904b5df9ed67f544"><code>23cf1a8</code></a>
fix(core): sanitize host bindings on concrete hosts (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/69558">#69558</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/5d5b2ea72d03ffc2350e66e202cbca0bf491a5f2"><code>5d5b2ea</code></a>
fix(migrations): correctly detect <code>then</code>/<code>else</code>
keywords in control flow migr...</li>
<li><a
href="https://github.com/angular/angular/commit/350ea416b64c98929bdfbcc1dded220bef0df378"><code>350ea41</code></a>
refactor(core): align navigation types with built in ones</li>
<li><a
href="https://github.com/angular/angular/commit/49672c437b440564e9c20b77a7ff151fbf316706"><code>49672c4</code></a>
fix(migrations): correctly migrate ngClass with mixed space-separated
keys</li>
<li><a
href="https://github.com/angular/angular/commit/3499a1321bfe4801c38744ddb500715486680366"><code>3499a13</code></a>
fix(core): ensure SVG animation attributeName is checked
case-insensitively</li>
<li><a
href="https://github.com/angular/angular/commit/223e40279f3f6df979a323f79cb370528366c24a"><code>223e402</code></a>
fix(migrations): preserve NgClass import on partial migration</li>
<li><a
href="https://github.com/angular/angular/commit/f034c02e67d25018ca3ff952904d9bcaf43175d4"><code>f034c02</code></a>
build: update cross-repo angular dependencies to v22.1.0-next.4</li>
<li><a
href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41"><code>0ae6d81</code></a>
fix(core): preserve explicit input transform write type</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/v22.1.0/packages/core">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/forms` from 22.0.8 to 22.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/forms's
releases</a>.</em></p>
<blockquote>
<h2>22.1.0</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1ad6824d0dd17a0515ad0544cf435d1e3af6982e"><img
src="https://img.shields.io/badge/1ad6824d0d-fix-green" alt="fix -
1ad6824d0d" /></a></td>
<td>skip transfer cache for uncacheable HTTP traffic (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69017">#69017</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/af5e4e113130427ba8152166b4d904dd177c982e"><img
src="https://img.shields.io/badge/af5e4e1131-feat-blue" alt="feat -
af5e4e1131" /></a></td>
<td>Add an error for --global-foo cases (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d579ecaf733db325f628cc11a28688fa0dad85ee"><img
src="https://img.shields.io/badge/d579ecaf73-feat-blue" alt="feat -
d579ecaf73" /></a></td>
<td>Disable '--global-' error outside of g3 (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f98547675cd2026bb755671b28dea4e6d48eb7bb"><img
src="https://img.shields.io/badge/f98547675c-feat-blue" alt="feat -
f98547675c" /></a></td>
<td>Namespace CSS variables to the app (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c8b2f77831236b23ca99ccb62e6197ff43b400d"><img
src="https://img.shields.io/badge/8c8b2f7783-feat-blue" alt="feat -
8c8b2f7783" /></a></td>
<td>Support css var namespacing in properties (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68846">#68846</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/292199aa4dd4cbf09f14c20bd7049d6ab55d83f4"><img
src="https://img.shields.io/badge/292199aa4d-fix-green" alt="fix -
292199aa4d" /></a></td>
<td>permissive whitespace parsing in default never blocks</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/25c744c4d0abd3bfe863ed2d528fea756ec5801b"><img
src="https://img.shields.io/badge/25c744c4d0-fix-green" alt="fix -
25c744c4d0" /></a></td>
<td>support foreign components defined outside top-level scope</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194"><img
src="https://img.shields.io/badge/5bd00add07-fix-green" alt="fix -
5bd00add07" /></a></td>
<td>support foreign components inside control flow blocks (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049"><img
src="https://img.shields.io/badge/2e442f7876-perf-orange" alt="perf -
2e442f7876" /></a></td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/aeb55c8bc101dc313dc64f83f4428ddfad28d54e"><img
src="https://img.shields.io/badge/aeb55c8bc1-fix-green" alt="fix -
aeb55c8bc1" /></a></td>
<td>allow passing uninvoked signals as foreign component props</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7c60a98b3ccc2090f3bfb3c76d6207f37a5df0ff"><img
src="https://img.shields.io/badge/7c60a98b3c-fix-green" alt="fix -
7c60a98b3c" /></a></td>
<td>support import aliases in foreignImports (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/68674">#68674</a>)</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/124ba10ead58c9f93b0b74c4102022c4674db1f5"><img
src="https://img.shields.io/badge/124ba10ead-feat-blue" alt="feat -
124ba10ead" /></a></td>
<td>add custom set option to linkedSignal</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/eab4847a8bd1b47ba630ca9b20c85770f990c717"><img
src="https://img.shields.io/badge/eab4847a8b-feat-blue" alt="feat -
eab4847a8b" /></a></td>
<td>Adds deep linking from Performance panel to DevTools</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/091456a2146d81b225fa9322a9ebde24695aaad0"><img
src="https://img.shields.io/badge/091456a214-fix-green" alt="fix -
091456a214" /></a></td>
<td>account for namespaces in host binding sanitization (<a
href="https://github.com/angular/angular/tree/HEAD/packages/forms/issues/69558">#69558</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/b3748e9fe4a4f9f56f9843b448db59674ad01452"><img
src="https://img.shields.io/badge/b3748e9fe4-fix-green" alt="fix -
b3748e9fe4" /></a></td>
<td>correct container anchor collection order to match DOM layout</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/11b206b919074149f2db6e3640a55284aecfe48a"><img
src="https://img.shields.io/badge/11b206b919-fix-green" alt="fix -
11b206b919" /></a></td>
<td>introduce disposal mechanism for Angular views in foreign ...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-04 01:13:29 -07:00
github-actions[bot] 5f9915234a chore: version packages (#2655) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @langchain/langgraph-api@1.4.4

### Patch Changes

- [#2645](https://github.com/langchain-ai/langgraphjs/pull/2645)
[`059f3b8`](https://github.com/langchain-ai/langgraphjs/commit/059f3b8200d1f2f6bd701eb26bac24675395918a)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(langgraph-api): stop wiping graph recursionLimit with undefined

  When a run omitted `config.recursion_limit`, the server still passed
`recursionLimit: undefined` into `streamEvents`. Pregel spreads that
over the
graph's `withConfig` default, so agents fell back to langchain-core's
25.
  Omit undefined keys so bound limits (and deepagents' 10000) stick.

- Updated dependencies
[[`059f3b8`](https://github.com/langchain-ai/langgraphjs/commit/059f3b8200d1f2f6bd701eb26bac24675395918a)]:
  - @langchain/langgraph-ui@1.4.4
## @langchain/langgraph-cli@1.4.4

### Patch Changes

- [#2645](https://github.com/langchain-ai/langgraphjs/pull/2645)
[`059f3b8`](https://github.com/langchain-ai/langgraphjs/commit/059f3b8200d1f2f6bd701eb26bac24675395918a)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(langgraph-api): stop wiping graph recursionLimit with undefined

  When a run omitted `config.recursion_limit`, the server still passed
`recursionLimit: undefined` into `streamEvents`. Pregel spreads that
over the
graph's `withConfig` default, so agents fell back to langchain-core's
25.
  Omit undefined keys so bound limits (and deepagents' 10000) stick.

- Updated dependencies
[[`059f3b8`](https://github.com/langchain-ai/langgraphjs/commit/059f3b8200d1f2f6bd701eb26bac24675395918a)]:
  - @langchain/langgraph-api@1.4.4
## @langchain/langgraph@1.4.9

### Patch Changes

- [#2653](https://github.com/langchain-ai/langgraphjs/pull/2653)
[`7880055`](https://github.com/langchain-ai/langgraphjs/commit/7880055ac7303483e424380cdd52f54cd094e311)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(langgraph): checkpoint Topic as a flat values list

Match Python Topic checkpoints so Host JS graphs no longer put
`__pregel_tasks: [[], []]` through the Python checkpointer. Keep reading
legacy `[seen, values]` checkpoints for restore compatibility.
## @langchain/langgraph-ui@1.4.4

### Patch Changes

- [#2645](https://github.com/langchain-ai/langgraphjs/pull/2645)
[`059f3b8`](https://github.com/langchain-ai/langgraphjs/commit/059f3b8200d1f2f6bd701eb26bac24675395918a)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(langgraph-api): stop wiping graph recursionLimit with undefined

  When a run omitted `config.recursion_limit`, the server still passed
`recursionLimit: undefined` into `streamEvents`. Pregel spreads that
over the
graph's `withConfig` default, so agents fell back to langchain-core's
25.
  Omit undefined keys so bound limits (and deepagents' 10000) stick.

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/langgraph-api@1.4.4 @langchain/langgraph-cli@1.4.4 @langchain/langgraph-ui@1.4.4 @langchain/langgraph@1.4.9 		2026-08-03 16:20:31 -07:00
Christian Bromann 7880055ac7 fix(langgraph): checkpoint Topic as a flat values list (#2653) 
Topic checkpoints now emit a flat values list like Python, so Host no
longer sees empty `__pregel_tasks` as `[[], []]` and fails
checkpointer_put. Legacy `[seen, values]` checkpoints still restore.

## Test plan
- [x] `pnpm test src/tests/channels.test.ts` (langgraph-core)
- [x] `pnpm exec vitest run src/tests/pregel.test.ts -t 'obtain correct
channel values|PregelExecutableTasks'`
- [x] Changeset added for affected package(s)
 2026-08-03 16:11:21 -07:00
Christian Bromann 059f3b8200 fix(langgraph-api): stop wiping graph recursionLimit with undefined (#2645) 
When a run omitted `config.recursion_limit`, we still passed
`recursionLimit: undefined` into `streamEvents`. Pregel merges that over
the graph's `withConfig` default, so agents (including deepagents with a
bound 10000) fell back to langchain-core's 25 and hit
`GraphRecursionError` early.

Omit undefined keys from stream/assistant config objects so bound limits
stick.

## Test plan
- [x] `pnpm test tests/stream.test.mts` in `libs/langgraph-api` (8
passed)
- [x] Changeset added for affected package(s)
 2026-08-03 16:03:57 -07:00
dependabot[bot] 2ba482196e chore(deps): bump hono from 4.12.31 to 4.12.34 (#2654) 
Bumps [hono](https://github.com/honojs/hono) from 4.12.31 to 4.12.34.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/hono/releases">hono's
releases</a>.</em></p>
<blockquote>
<h2>v4.12.34</h2>
<h2>Security fixes</h2>
<p>This release includes fixes for the following security issues:</p>
<h3><code>memo()</code> retains SSR output across requests, leading to
cross-user data disclosure</h3>
<p>Affects: <code>hono/jsx</code> (server-side rendering). Fixes
<code>memo()</code> reusing a retained render result across requests
when props compare equal, where a component reading request-scoped
values from ambient context — <code>useContext()</code>,
<code>useRequestContext()</code>, or <code>getContext()</code> — could
serve HTML rendered for another user's request, disclosing account data
or request-scoped secrets such as CSRF tokens. GHSA-f23p-vx2j-j53r</p>
<h3>ReDoS in CORS middleware via
<code>Access-Control-Request-Headers</code></h3>
<p>Affects: <code>hono/cors</code>. Fixes a whitespace-tolerant regular
expression with quadratic backtracking used to parse the
<code>Access-Control-Request-Headers</code> preflight header when
<code>allowHeaders</code> is not configured (the default), where a
single preflight request carrying a long whitespace run could consume
seconds of CPU and stall request processing. GHSA-8j4g-w8fx-2239</p>
<h3>Algorithmic complexity DoS in Language Middleware</h3>
<p>Affects: <code>hono/language</code>. Fixes quadratic string
processing in language-tag normalization, where a crafted language tag
with a large number of hyphen-separated subtags — supplied via a query
parameter, cookie, or <code>Accept-Language</code> header — could cause
excessive CPU consumption and block the event loop.
GHSA-54fx-42gc-7vw4</p>
<h3>Proxy Helper does not remove response headers listed in the
<code>Connection</code> header</h3>
<p>Affects: <code>hono/proxy</code>. Fixes <code>proxy()</code>
forwarding response headers that the origin's <code>Connection</code>
header designates as connection-scoped, where headers intended only for
the immediate peer — per RFC 9110 Section 7.6.1 — could be exposed to
clients, disclosing connection-scoped or internal metadata.
GHSA-79qm-7rj5-m7r9</p>
<hr />
<p>Users who use <code>hono/jsx</code> for server-side rendering,
<code>hono/cors</code>, <code>hono/language</code>, or
<code>hono/proxy</code> are strongly encouraged to upgrade to this
version.</p>
<h2>v4.12.33</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(cookie): relax name validation when parsing Cookie header in <a
href="https://redirect.github.com/honojs/hono/pull/5164">honojs/hono#5164</a></li>
<li>chore: bump <code>@hono/node-server</code> in <a
href="https://redirect.github.com/honojs/hono/pull/5167">honojs/hono#5167</a></li>
<li>fix(jsx): handle useSyncExternalStore subscription and snapshot
changes in <a
href="https://redirect.github.com/honojs/hono/pull/5166">honojs/hono#5166</a></li>
<li>chore: remove undici in favor of global fetch in <a
href="https://redirect.github.com/honojs/hono/pull/5168">honojs/hono#5168</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.32...v4.12.33">https://github.com/honojs/hono/compare/v4.12.32...v4.12.33</a></p>
<h2>v4.12.32</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: enable reports for type &amp; bundle size check in <a
href="https://redirect.github.com/honojs/hono/pull/5148">honojs/hono#5148</a></li>
<li>fix(aws-lambda): add jwt and lambda authorizer types for API Gateway
v2 in <a
href="https://redirect.github.com/honojs/hono/pull/5142">honojs/hono#5142</a></li>
<li>fix(sse): emit empty id field to reset Last-Event-ID in <a
href="https://redirect.github.com/honojs/hono/pull/5138">honojs/hono#5138</a></li>
<li>test(cloudflare-workers): add coverage for onClose, onError, send,
and close in Cloudflare Workers websocket adapter in <a
href="https://redirect.github.com/honojs/hono/pull/5145">honojs/hono#5145</a></li>
<li>fix: use <code>Object.create(null)</code> when parsing query,
headers, and params in <a
href="https://redirect.github.com/honojs/hono/pull/5161">honojs/hono#5161</a></li>
<li>fix(secure-headers): keep CSP callbacks scoped to their header in <a
href="https://redirect.github.com/honojs/hono/pull/5147">honojs/hono#5147</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.31...v4.12.32">https://github.com/honojs/hono/compare/v4.12.31...v4.12.32</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/hono/commit/734755ace341607628219ea1dd8ca17f01bf1a5c"><code>734755a</code></a>
4.12.34</li>
<li><a
href="https://github.com/honojs/hono/commit/9839ff32a349bf088b6ddfa604010879dd2d3a05"><code>9839ff3</code></a>
chore: update <code>bun.lock</code> (<a
href="https://redirect.github.com/honojs/hono/issues/5182">#5182</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/0c45036d6b0ddf42ab2fa44639dc8710825d5c0f"><code>0c45036</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/720b566290793d4358bf39843adcb7cf4da4548f"><code>720b566</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/f70e2c31684387b3231cc38512a31df6ca76a1c7"><code>f70e2c3</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/93fc250d8b4df58ea542cb945171de8013d5e6d5"><code>93fc250</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/51db3131d5e97076327edaa0afdb60ebb77c264f"><code>51db313</code></a>
4.12.33</li>
<li><a
href="https://github.com/honojs/hono/commit/aed146364d5c48a8336b8c82fedfabebf8063d07"><code>aed1463</code></a>
chore: remove undici in favor of global fetch (<a
href="https://redirect.github.com/honojs/hono/issues/5168">#5168</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/224d2f5cbf2b4bc2ebb7482d0592149a8d9f0574"><code>224d2f5</code></a>
fix(jsx): handle useSyncExternalStore subscription and snapshot changes
(<a
href="https://redirect.github.com/honojs/hono/issues/5166">#5166</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/df653cea0450657977887d56a5188368387456c8"><code>df653ce</code></a>
chore: bump <code>@hono/node-server</code> (<a
href="https://redirect.github.com/honojs/hono/issues/5167">#5167</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/hono/compare/v4.12.31...v4.12.34">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hono&package-manager=npm_and_yarn&previous-version=4.12.31&new-version=4.12.34)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-08-03 16:03:28 -07:00
dependabot[bot] cac6d31065 chore(deps): bump the vite-vitest group across 1 directory with 6 updates (#2644) 
Bumps the vite-vitest group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [turbo](https://github.com/vercel/turborepo) | `2.9.14` | `2.10.8` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) |
`8.0.16` | `8.2.0` |
| [rollup](https://github.com/rollup/rollup) | `4.59.0` | `4.62.3` |
|
[vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest)
| `4.1.9` | `4.1.10` |
|
[@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright)
| `4.1.9` | `4.1.10` |
|
[@vitest/browser-webdriverio](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-webdriverio)
| `4.1.9` | `4.1.10` |


Updates `turbo` from 2.9.14 to 2.10.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vercel/turborepo/releases">turbo's
releases</a>.</em></p>
<blockquote>
<h2>Turborepo v2.10.8</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Changelog</h3>
<ul>
<li>fix: Scroll TUI task list with mouse wheel by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13479">vercel/turborepo#13479</a></li>
<li>fix: Make releases resumable by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13486">vercel/turborepo#13486</a></li>
<li>refactor: Expose knowledge-backed package scope views by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13456">vercel/turborepo#13456</a></li>
<li>chore: Release Turborepo 2.10.7 by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13489">vercel/turborepo#13489</a></li>
<li>refactor: Use package knowledge for configuration scopes by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13457">vercel/turborepo#13457</a></li>
<li>refactor: Use package knowledge for run scope enumeration by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13458">vercel/turborepo#13458</a></li>
<li>release(turborepo): 2.10.8-canary.1 by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/vercel/turborepo/pull/13490">vercel/turborepo#13490</a></li>
<li>refactor: Use package knowledge in repository views by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13459">vercel/turborepo#13459</a></li>
<li>refactor: Use package knowledge in package integrations by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13460">vercel/turborepo#13460</a></li>
<li>ci: Parallelize environment setup steps by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13491">vercel/turborepo#13491</a></li>
<li>release(turborepo): 2.10.8-canary.2 by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/vercel/turborepo/pull/13492">vercel/turborepo#13492</a></li>
<li>refactor: Use package knowledge for task hashing paths by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13461">vercel/turborepo#13461</a></li>
<li>refactor: Use package knowledge for run-cache paths by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13462">vercel/turborepo#13462</a></li>
<li>refactor: Bind toolchain callbacks to package knowledge by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13463">vercel/turborepo#13463</a></li>
<li>refactor: Use package knowledge for microfrontend commands by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13464">vercel/turborepo#13464</a></li>
<li>refactor: Use package knowledge for run summaries by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13465">vercel/turborepo#13465</a></li>
<li>refactor: Use package knowledge for watcher paths by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13466">vercel/turborepo#13466</a></li>
<li>ci: Enable remote cache for types codegen by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13495">vercel/turborepo#13495</a></li>
<li>docs: Fix llms.txt links to page markdown routes by <a
href="https://github.com/molebox"><code>@​molebox</code></a> in <a
href="https://redirect.github.com/vercel/turborepo/pull/13497">vercel/turborepo#13497</a></li>
<li>refactor: Use package knowledge for prune paths by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13467">vercel/turborepo#13467</a></li>
<li>refactor: Use package knowledge in the LSP by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13468">vercel/turborepo#13468</a></li>
<li>refactor: Use consistent repository construction by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13469">vercel/turborepo#13469</a></li>
<li>refactor: Delete legacy package and scope authority by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13470">vercel/turborepo#13470</a></li>
<li>perf: Cache telemetry salt instead of re-reading config on every
hash by <a
href="https://github.com/charpeni"><code>@​charpeni</code></a> in <a
href="https://redirect.github.com/vercel/turborepo/pull/13498">vercel/turborepo#13498</a></li>
<li>feat: Support Android (Termux) by <a
href="https://github.com/gtbuchanan"><code>@​gtbuchanan</code></a> in <a
href="https://redirect.github.com/vercel/turborepo/pull/12735">vercel/turborepo#12735</a></li>
<li>ci: Restore Cargo targets on all test platforms by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13505">vercel/turborepo#13505</a></li>
<li>fix: Resolve gitdir for linked worktrees in repo index by <a
href="https://github.com/charpeni"><code>@​charpeni</code></a> in <a
href="https://redirect.github.com/vercel/turborepo/pull/13503">vercel/turborepo#13503</a></li>
<li>test: Characterize relationship projections by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13499">vercel/turborepo#13499</a></li>
<li>refactor: Produce native relationship observations by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13500">vercel/turborepo#13500</a></li>
<li>feat: Resolve GitHub Actions remote base refs behind future flag by
<a
href="https://github.com/louis-bompart"><code>@​louis-bompart</code></a>
in <a
href="https://redirect.github.com/vercel/turborepo/pull/10732">vercel/turborepo#10732</a></li>
<li>refactor: Add core relationship projections by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13502">vercel/turborepo#13502</a></li>
<li>refactor: Define external resolution contracts by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13507">vercel/turborepo#13507</a></li>
<li>refactor: Move repository tasks into Turbo configuration by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13504">vercel/turborepo#13504</a></li>
<li>refactor: Build JavaScript external resolution generations by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13508">vercel/turborepo#13508</a></li>
<li>refactor: Contribute Cargo external resolutions by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13509">vercel/turborepo#13509</a></li>
<li>refactor: Migrate external declaration consumers by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13511">vercel/turborepo#13511</a></li>
<li>ci: Auto-merge release PRs by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13510">vercel/turborepo#13510</a></li>
<li>chore: Release Turborepo 2.10.8-canary.3 by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13512">vercel/turborepo#13512</a></li>
<li>fix: Use tokenless release review gate by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13513">vercel/turborepo#13513</a></li>
<li>refactor: Use resolution fingerprints for task hashes by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13514">vercel/turborepo#13514</a></li>
<li>fix: Support fork PRs in review gate by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13516">vercel/turborepo#13516</a></li>
<li>refactor: Migrate lockfile affectedness by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13519">vercel/turborepo#13519</a></li>
<li>refactor: Migrate external resolution summaries by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13520">vercel/turborepo#13520</a></li>
<li>refactor: Migrate external package queries to resolution knowledge
by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13523">vercel/turborepo#13523</a></li>
<li>fix: Serialize macOS Homebrew setup by <a
href="https://github.com/anthonyshew"><code>@​anthonyshew</code></a> in
<a
href="https://redirect.github.com/vercel/turborepo/pull/13549">vercel/turborepo#13549</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vercel/turborepo/commit/2515f8b181ad49aaf933893b1688fb08447001a3"><code>2515f8b</code></a>
publish 2.10.8 to registry</li>
<li><a
href="https://github.com/vercel/turborepo/commit/dd87718f0036b93324df66b26fdf37056094b5d0"><code>dd87718</code></a>
test: Add uv workspace integration coverage (<a
href="https://redirect.github.com/vercel/turborepo/issues/13602">#13602</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/b3dc99b98a6fb7db9eabd23ae0b601100cb66162"><code>b3dc99b</code></a>
fix: Fall back to polling on macOS (<a
href="https://redirect.github.com/vercel/turborepo/issues/13622">#13622</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/f8f288e6b16f59a0261d9ef2c47e698b472b39b2"><code>f8f288e</code></a>
feat: Prune uv workspaces (<a
href="https://redirect.github.com/vercel/turborepo/issues/13613">#13613</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/b2e25d4971ac18373f872a98796d13ecfc26128b"><code>b2e25d4</code></a>
feat: Watch uv workspace changes (<a
href="https://redirect.github.com/vercel/turborepo/issues/13612">#13612</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/00538d09752961e2e42654a26196b739b7d00e20"><code>00538d0</code></a>
fix: Make Windows Cap'n Proto cache relocatable (<a
href="https://redirect.github.com/vercel/turborepo/issues/13621">#13621</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/e14de24864ca2e0682de9adfa275ccda1a0fb134"><code>e14de24</code></a>
feat: Hash uv lockfile closures (<a
href="https://redirect.github.com/vercel/turborepo/issues/13611">#13611</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/4195e4122b710b40a5012ded88fd764e728b1599"><code>4195e41</code></a>
feat: Run native uv tasks (<a
href="https://redirect.github.com/vercel/turborepo/issues/13610">#13610</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/87156466a1e99bedd783ed25e1f2d71f55707a90"><code>8715646</code></a>
feat: Discover uv workspaces (<a
href="https://redirect.github.com/vercel/turborepo/issues/13609">#13609</a>)</li>
<li><a
href="https://github.com/vercel/turborepo/commit/5cf35ad3da3437baf1506e47f720544f887397d3"><code>5cf35ad</code></a>
ci: Invalidate Cap'n Proto caches (<a
href="https://redirect.github.com/vercel/turborepo/issues/13616">#13616</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vercel/turborepo/compare/v2.9.14...v2.10.8">compare
view</a></li>
</ul>
</details>
<br />

Updates `vite` from 8.0.16 to 8.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/releases">vite's
releases</a>.</em></p>
<blockquote>
<h2>create-vite@8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.2.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.2.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.2.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.2.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.2.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.2.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.5</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.5/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.4</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.4/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.3</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.3/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.2</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.2/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.1</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.1/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>create-vite@8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/create-vite@8.1.0/packages/create-vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>plugin-legacy@8.1.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/plugin-legacy@8.1.0-beta.0/packages/plugin-legacy/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
<h2>v8.1.0-beta.0</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite/blob/v8.1.0-beta.0/packages/vite/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md">vite's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/vitejs/vite/compare/v8.2.0-beta.0...v8.2.0">8.2.0</a>
(2026-07-30)</h2>
<h3>Features</h3>
<ul>
<li>add <code>input</code> to <code>server.fs.allow</code> (<a
href="https://redirect.github.com/vitejs/vite/issues/23035">#23035</a>)
(<a
href="https://github.com/vitejs/vite/commit/95a3cdab83e1125b03d2e8dd942fb6b64209e5fa">95a3cda</a>)</li>
<li><strong>bundled-dev:</strong> reload once after rebuild instead of
via the fallback page (<a
href="https://redirect.github.com/vitejs/vite/issues/23106">#23106</a>)
(<a
href="https://github.com/vitejs/vite/commit/b24381d741941b9ce2b1c07db62cc5f4d7bad981">b24381d</a>)</li>
<li><strong>bundled-dev:</strong> support worker file update accepted by
HMR (<a
href="https://redirect.github.com/vitejs/vite/issues/23068">#23068</a>)
(<a
href="https://github.com/vitejs/vite/commit/0d04351fdc12258c75b9f1cda5780fdb836ed0ef">0d04351</a>)</li>
<li><strong>config:</strong> include column in config incompatibility
location (<a
href="https://redirect.github.com/vitejs/vite/issues/23064">#23064</a>)
(<a
href="https://github.com/vitejs/vite/commit/8a245726944ed29225920d49be77c33c6e03afc8">8a24572</a>)</li>
<li><strong>dev:</strong> resolve interface name for explicit host in
network URLs (<a
href="https://redirect.github.com/vitejs/vite/issues/22965">#22965</a>)
(<a
href="https://github.com/vitejs/vite/commit/3ac77d9dd742968961af38a5a91ed6b061ceda7d">3ac77d9</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bundledDev:</strong> print build errors to the terminal when
an HMR update fails (<a
href="https://redirect.github.com/vitejs/vite/issues/23024">#23024</a>)
(<a
href="https://github.com/vitejs/vite/commit/41c465896e8b11b1eb9c5fbdafbdcc528e189a2c">41c4658</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/23069">#23069</a>)
(<a
href="https://github.com/vitejs/vite/commit/4c07b74416f859d7e8bdace13409ef2d080edf76">4c07b74</a>)</li>
<li><strong>hmr:</strong> preserve environment snapshot during server
restart (<a
href="https://redirect.github.com/vitejs/vite/issues/22992">#22992</a>)
(<a
href="https://github.com/vitejs/vite/commit/b1186c36d06bb94941c58e8272fc4acb8512c93b">b1186c3</a>)</li>
<li><strong>importAnalysis:</strong> interop imports injected into
optimized dep files by plugins (<a
href="https://redirect.github.com/vitejs/vite/issues/23029">#23029</a>)
(<a
href="https://github.com/vitejs/vite/commit/8c2a87d41fb24536e59643351758084cde4d0dd7">8c2a87d</a>)</li>
<li><strong>module-runner:</strong> keep stack trace interception
working when <code>Object.prototype</code> is frozen (<a
href="https://redirect.github.com/vitejs/vite/issues/23073">#23073</a>)
(<a
href="https://github.com/vitejs/vite/commit/599c5b02a8b6879b05ede988020f1331e877aaea">599c5b0</a>)</li>
<li><strong>server:</strong> strip base in indexHtml module graph lookup
(<a
href="https://redirect.github.com/vitejs/vite/issues/22932">#22932</a>)
(<a
href="https://github.com/vitejs/vite/commit/fa005d19af5d847931c6dbefc63841c137383e6c">fa005d1</a>)</li>
<li>support resolving top-level input option with plugins (<a
href="https://redirect.github.com/vitejs/vite/issues/23101">#23101</a>)
(<a
href="https://github.com/vitejs/vite/commit/41df81a6a4c3eef08f7a9a8ac9530cd136c0eafa">41df81a</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>config:</strong> correct cacheDir default fallback
description (<a
href="https://redirect.github.com/vitejs/vite/issues/23060">#23060</a>)
(<a
href="https://github.com/vitejs/vite/commit/aafa103af5d71fb59d7c3dd617d0cbef3b222f1f">aafa103</a>)</li>
</ul>
<h3>Tests</h3>
<ul>
<li>config CJS module vars in ESM case (<a
href="https://redirect.github.com/vitejs/vite/issues/23010">#23010</a>)
(<a
href="https://github.com/vitejs/vite/commit/d8cd38830251b95fd7dddcd0eee0ce94cc61c2f4">d8cd388</a>)</li>
</ul>
<h2><a
href="https://github.com/vitejs/vite/compare/v8.1.5...v8.2.0-beta.0">8.2.0-beta.0</a>
(2026-07-22)</h2>
<h3>Features</h3>
<ul>
<li>add <code>input</code> option (<a
href="https://redirect.github.com/vitejs/vite/issues/22642">#22642</a>)
(<a
href="https://github.com/vitejs/vite/commit/9beae37d7221b25463a011feb40b0303ca328d87">9beae37</a>)</li>
<li><strong>config:</strong> warn features incompatible with native
loader in bundle loader (<a
href="https://redirect.github.com/vitejs/vite/issues/22850">#22850</a>)
(<a
href="https://github.com/vitejs/vite/commit/05302b07267f6b4f9dbeac5b1d73fcc3dc06d730">05302b0</a>)</li>
<li><strong>css:</strong> export PostCSS config type for type-safe
configs (<a
href="https://redirect.github.com/vitejs/vite/issues/22792">#22792</a>)
(<a
href="https://github.com/vitejs/vite/commit/302c755a8125b9a26214e3b413922b5513e41981">302c755</a>)</li>
<li><strong>dev:</strong> label network URLs with their interface name
(<a
href="https://redirect.github.com/vitejs/vite/issues/22830">#22830</a>)
(<a
href="https://github.com/vitejs/vite/commit/78accc42a5b8887d9df624f7d4a934d3ead677d1">78accc4</a>)</li>
<li><strong>optimizer:</strong> support aube lockfile (<a
href="https://redirect.github.com/vitejs/vite/issues/22813">#22813</a>)
(<a
href="https://github.com/vitejs/vite/commit/6319827116c5be2a19c1b91c84ba3d38ad26a41c">6319827</a>)</li>
<li><strong>optimizer:</strong> support nub lockfile (<a
href="https://redirect.github.com/vitejs/vite/issues/22891">#22891</a>)
(<a
href="https://github.com/vitejs/vite/commit/65d3604f6fdbfcf6e86244d7fe3c1ca86acae701">65d3604</a>)</li>
<li>update rolldown-related dependencies and use client-side HMR in
bundled-dev (<a
href="https://redirect.github.com/vitejs/vite/issues/22961">#22961</a>)
(<a
href="https://github.com/vitejs/vite/commit/960e9efbc1372000caac46cc2f123cef4824e2bb">960e9ef</a>)</li>
<li><strong>wasm:</strong> expand test suite, unwrap WebAssembly.Global
and enable js-string builtins (<a
href="https://redirect.github.com/vitejs/vite/issues/22674">#22674</a>)
(<a
href="https://github.com/vitejs/vite/commit/9e79b51579457a9af4fa623b68a0bfabbf38010b">9e79b51</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>build:</strong> map CSS chunks in chunk import maps (fix <a
href="https://redirect.github.com/vitejs/vite/issues/22946">#22946</a>)
(<a
href="https://redirect.github.com/vitejs/vite/issues/22947">#22947</a>)
(<a
href="https://github.com/vitejs/vite/commit/e16ff3a1199293ac9cdfa6132c08fdea162215f3">e16ff3a</a>)</li>
<li><strong>config:</strong> exclude virtual modules from native config
compat check (<a
href="https://redirect.github.com/vitejs/vite/issues/22979">#22979</a>)
(<a
href="https://github.com/vitejs/vite/commit/2ced1fe4e4e480ed78cb7aa5c78319e57bfa7783">2ced1fe</a>)</li>
<li><strong>css:</strong> rewrite urls in OnceExit-injected content (<a
href="https://redirect.github.com/vitejs/vite/issues/22983">#22983</a>)
(<a
href="https://github.com/vitejs/vite/commit/abb793e18c92592c21fbb8e1f3fc450b5839f04f">abb793e</a>)</li>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite/issues/22985">#22985</a>)
(<a
href="https://github.com/vitejs/vite/commit/04f345b37064cd0bba6447eb5c32be5c22162f3d">04f345b</a>)</li>
<li><strong>deps:</strong> update dependency magic-string to v1 (<a
href="https://redirect.github.com/vitejs/vite/issues/22998">#22998</a>)
(<a
href="https://github.com/vitejs/vite/commit/c60b4d7cdb85b7d4f78671cdcfb863e5f8b66bb7">c60b4d7</a>)</li>
<li><strong>hmr:</strong> remove hot data after prune (<a
href="https://redirect.github.com/vitejs/vite/issues/23002">#23002</a>)
(<a
href="https://github.com/vitejs/vite/commit/be9631658f5191ee5c5665e780239d42a330280a">be96316</a>)</li>
<li>resolve root to real path (<a
href="https://redirect.github.com/vitejs/vite/issues/22832">#22832</a>)
(<a
href="https://github.com/vitejs/vite/commit/55bba7bbd9de40d031360e4408fe91bff5b29ec9">55bba7b</a>)</li>
</ul>
<h3>Performance Improvements</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite/commit/24a611f1c83a976d32262628d42f683609746635"><code>24a611f</code></a>
release: v7.2.4</li>
<li><a
href="https://github.com/vitejs/vite/commit/2d66b7b14aa6dfd62f3d6a59ee8382ed5ca6fd32"><code>2d66b7b</code></a>
fix: revert &quot;perf(deps): replace debug with obug (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)&quot;</li>
<li><a
href="https://github.com/vitejs/vite/commit/a668014dba377c2b82a32d8124f1761e9ea74f82"><code>a668014</code></a>
release: v7.2.3</li>
<li><a
href="https://github.com/vitejs/vite/commit/acfe939e1f7c303c34b0b39b883cc302da767fa2"><code>acfe939</code></a>
perf(deps): replace debug with obug (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21107">#21107</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/4f8171eb3046bd70c83964689897dab4c6b58bc0"><code>4f8171e</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21128">#21128</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/50297208452241061cb44d09a4bbdf77a11ac01e"><code>5029720</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21127">#21127</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/5909efd8fbfd1bf1eab65427aea0613124b2797a"><code>5909efd</code></a>
fix: allow multiple <code>bindCLIShortcuts</code> calls with shortcut
merging (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21103">#21103</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/39a0a15fd24ed37257c48b795097a3794e54d255"><code>39a0a15</code></a>
chore(deps): update rolldown-related dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21095">#21095</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/6a34ac3422686e7cf7cc9a25d299cb8e5a8d92a0"><code>6a34ac3</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21096">#21096</a>)</li>
<li><a
href="https://github.com/vitejs/vite/commit/02ceaec45e17bef19159188a28d9196fed1761be"><code>02ceaec</code></a>
chore(deps): update dependency <code>@​rollup/plugin-commonjs</code> to
v29 (<a
href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/21099">#21099</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vitejs/vite/commits/create-vite@8.2.0/packages/vite">compare
view</a></li>
</ul>
</details>
<br />

Updates `rollup` from 4.59.0 to 4.62.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rollup/rollup/releases">rollup's
releases</a>.</em></p>
<blockquote>
<h2>v4.62.3</h2>
<h2>4.62.3</h2>
<p><em>2026-07-26</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Sanitize illegal characters preserved modules input base (<a
href="https://redirect.github.com/rollup/rollup/issues/6439">#6439</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6421">#6421</a>:
docs: update x_google_ignoreList link to canonical URL (<a
href="https://github.com/DucMinhNe"><code>@​DucMinhNe</code></a>, <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6422">#6422</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6423">#6423</a>:
chore(deps): update actions/checkout action to v7 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6424">#6424</a>:
chore(deps): update dependency eslint-plugin-unicorn to v68 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6425">#6425</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6426">#6426</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6432">#6432</a>:
fix: make isLegal idempotent by not using a global-flag regex (<a
href="https://github.com/spokodev"><code>@​spokodev</code></a>, <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6433">#6433</a>:
docs: clarify sideEffects and moduleSideEffects (<a
href="https://github.com/ishaanlabs-gg"><code>@​ishaanlabs-gg</code></a>,
<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6434">#6434</a>:
chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6435">#6435</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6436">#6436</a>:
chore(deps): update actions/cache action to v6 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6438">#6438</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6439">#6439</a>:
Sanitize input base before computing preserved module chunk names (<a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>, <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6443">#6443</a>:
chore(deps): update dependency eslint-plugin-unicorn to v71 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6444">#6444</a>:
fix(deps): update rust crate swc_compiler_base to v60 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6446">#6446</a>:
chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6447">#6447</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6448">#6448</a>:
chore(deps): update actions/setup-node action to v7 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6449">#6449</a>:
chore(deps): update dependency eslint-plugin-unicorn to v72 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6450">#6450</a>:
chore(deps): update dependency pinia to v4 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6451">#6451</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6455">#6455</a>:
docs: fix broken commonjs namedExports link in troubleshooting (<a
href="https://github.com/Hashim1999164"><code>@​Hashim1999164</code></a>,
<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6456">#6456</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6457">#6457</a>:
chore(deps): update dependency magic-string to v1 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6458">#6458</a>:
fix(deps): update swc monorepo (major) (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6459">#6459</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6460">#6460</a>:
Fix build:docs after rollup update (<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<h2>v4.62.2</h2>
<h2>4.62.2</h2>
<p><em>2026-06-19</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Do not add spurious side-effect-free external imports to chunks when
using minChunkSize (<a
href="https://redirect.github.com/rollup/rollup/issues/6411">#6411</a>)</li>
</ul>
<h3>Pull Requests</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/rollup/rollup/blob/master/CHANGELOG.md">rollup's
changelog</a>.</em></p>
<blockquote>
<h2>4.62.3</h2>
<p><em>2026-07-26</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Sanitize illegal characters preserved modules input base (<a
href="https://redirect.github.com/rollup/rollup/issues/6439">#6439</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6421">#6421</a>:
docs: update x_google_ignoreList link to canonical URL (<a
href="https://github.com/DucMinhNe"><code>@​DucMinhNe</code></a>, <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6422">#6422</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6423">#6423</a>:
chore(deps): update actions/checkout action to v7 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6424">#6424</a>:
chore(deps): update dependency eslint-plugin-unicorn to v68 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6425">#6425</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6426">#6426</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6432">#6432</a>:
fix: make isLegal idempotent by not using a global-flag regex (<a
href="https://github.com/spokodev"><code>@​spokodev</code></a>, <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6433">#6433</a>:
docs: clarify sideEffects and moduleSideEffects (<a
href="https://github.com/ishaanlabs-gg"><code>@​ishaanlabs-gg</code></a>,
<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6434">#6434</a>:
chore(deps): update dtolnay/rust-toolchain digest to 4be7066 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6435">#6435</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6436">#6436</a>:
chore(deps): update actions/cache action to v6 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6438">#6438</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6439">#6439</a>:
Sanitize input base before computing preserved module chunk names (<a
href="https://github.com/MahinAnowar"><code>@​MahinAnowar</code></a>, <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6443">#6443</a>:
chore(deps): update dependency eslint-plugin-unicorn to v71 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6444">#6444</a>:
fix(deps): update rust crate swc_compiler_base to v60 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6446">#6446</a>:
chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6447">#6447</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6448">#6448</a>:
chore(deps): update actions/setup-node action to v7 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6449">#6449</a>:
chore(deps): update dependency eslint-plugin-unicorn to v72 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6450">#6450</a>:
chore(deps): update dependency pinia to v4 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6451">#6451</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6455">#6455</a>:
docs: fix broken commonjs namedExports link in troubleshooting (<a
href="https://github.com/Hashim1999164"><code>@​Hashim1999164</code></a>,
<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6456">#6456</a>:
fix(deps): update minor/patch updates (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6457">#6457</a>:
chore(deps): update dependency magic-string to v1 (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot], <a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6458">#6458</a>:
fix(deps): update swc monorepo (major) (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6459">#6459</a>:
chore(deps): lock file maintenance (<a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot])</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6460">#6460</a>:
Fix build:docs after rollup update (<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<h2>4.62.2</h2>
<p><em>2026-06-19</em></p>
<h3>Bug Fixes</h3>
<ul>
<li>Do not add spurious side-effect-free external imports to chunks when
using minChunkSize (<a
href="https://redirect.github.com/rollup/rollup/issues/6411">#6411</a>)</li>
</ul>
<h3>Pull Requests</h3>
<ul>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6411">#6411</a>:
Skip side-effect-free external imports when hoisting is disabled (<a
href="https://github.com/morgan-coded"><code>@​morgan-coded</code></a>,
<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
<li><a
href="https://redirect.github.com/rollup/rollup/pull/6416">#6416</a>:
refactor(rust/parser_ast): extract property AstConverter write buffer
kind logic to new method (<a
href="https://github.com/fabianbernhart"><code>@​fabianbernhart</code></a>,
<a
href="https://github.com/lukastaegert"><code>@​lukastaegert</code></a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rollup/rollup/commit/a80a1974c584bfa8b694fb5d1a20f3fa75ebaf0a"><code>a80a197</code></a>
4.62.3</li>
<li><a
href="https://github.com/rollup/rollup/commit/e87e19b31e87a1dd6a749a6c11afe4cb9183cf8d"><code>e87e19b</code></a>
Update audit resolve</li>
<li><a
href="https://github.com/rollup/rollup/commit/72f98e99228ad90a8e13d79709c009a827a4ef34"><code>72f98e9</code></a>
Fix build:docs after rollup update (<a
href="https://redirect.github.com/rollup/rollup/issues/6460">#6460</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/e3821cd714d4b1498b9c2d8c3070c9ff8febd7e4"><code>e3821cd</code></a>
fix: make isLegal idempotent by not using a global-flag regex (<a
href="https://redirect.github.com/rollup/rollup/issues/6432">#6432</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/db0c477a34a5b160c04cd52840f7ded8f57c446f"><code>db0c477</code></a>
Sanitize input base before computing preserved module chunk names (<a
href="https://redirect.github.com/rollup/rollup/issues/6439">#6439</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/a65f21ce941523761497810e4727ec6d1101a618"><code>a65f21c</code></a>
chore(deps): update dependency magic-string to v1 (<a
href="https://redirect.github.com/rollup/rollup/issues/6457">#6457</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/a43aae4c0c703dbd4e167345da6c9d41eafe48e6"><code>a43aae4</code></a>
docs: fix broken commonjs namedExports link in troubleshooting (<a
href="https://redirect.github.com/rollup/rollup/issues/6455">#6455</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/41c28d7db566c501c2a0a0588407aa6e86bb0ea9"><code>41c28d7</code></a>
chore(deps): lock file maintenance (<a
href="https://redirect.github.com/rollup/rollup/issues/6459">#6459</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/894136eb13ef629bc0b6324e88cfc26c65a6d88b"><code>894136e</code></a>
chore(deps): update dtolnay/rust-toolchain digest to 4cda84d (<a
href="https://redirect.github.com/rollup/rollup/issues/6446">#6446</a>)</li>
<li><a
href="https://github.com/rollup/rollup/commit/fad0ba38db5793b730eb6e44483e3cec7c5f2f15"><code>fad0ba3</code></a>
fix(deps): update swc monorepo (major) (<a
href="https://redirect.github.com/rollup/rollup/issues/6458">#6458</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/rollup/rollup/compare/v4.59.0...v4.62.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest` from 4.1.9 to 4.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">vitest's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/10718">#10718</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/bae52b5112a6fd8200101b88bf8af9685d077295"><code>bae52b5</code></a>
fix(vm): fix external module resolve error with deps optimizer query for
enco...</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitest/browser-playwright` from 4.1.9 to 4.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser-playwright's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright/issues/10718">#10718</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f"><code>5c18dd2</code></a>
fix(browser): check fs access in builtin commands [backport to v4] (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright/issues/10680">#10680</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-playwright">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitest/browser-webdriverio` from 4.1.9 to 4.1.10
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser-webdriverio's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-webdriverio/issues/10718">#10718</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f"><code>5c18dd2</code></a>
fix(browser): check fs access in builtin commands [backport to v4] (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-webdriverio/issues/10680">#10680</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-webdriverio">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
 2026-08-03 15:49:15 -07:00
ostapondo 92dcaaf60f fix(api): widen the scheduled-run window in the in-flight cancel test (#2649) 
Fixes #2648.

`update state while run in flight` schedules a run 2 seconds out and
assumes the create, update-state, and cancel round trips finish inside
that window. Since the GitHub runners moved to Node 26.5.1 (undici
8.9.0), client-side fetch dispatch under the suite's concurrent load can
stall ~1.5s, the cancel misses the window, and the run ends `"error"`
instead of `"interrupted"` — every CI run since Aug 1 is red on 26.x.
Full analysis with the undici A/B and `diagnostics_channel` trace is in
the issue.

Scheduling the run 5 seconds out fits the sequence even with slow
dispatch. The happy path cancels the run before it starts, so the test's
duration is unchanged.

Verified locally on unmodified logic: 3/3 failing runs on Node 26.5.1
before the change, 3/3 green after, still green on 26.5.0.

Not covered: the underlying undici 8.8.0 dispatch regression (needs a
standalone repro before an upstream report) and the question of whether
cancelling an already-running run should end it as `"interrupted"` —
both noted in the issue.
 2026-08-03 15:46:56 -07:00
dependabot[bot] 56728fd3bd chore(deps): bump @hono/node-server from 1.19.15 to 2.0.12 (#2635) 
Bumps [@hono/node-server](https://github.com/honojs/node-server) from
1.19.15 to 2.0.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.12</h2>
<h2>What's Changed</h2>
<ul>
<li>test: replace supertest by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/379">honojs/node-server#379</a></li>
<li>fix(response): copy headers when init is a foreign Response by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/382">honojs/node-server#382</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12">https://github.com/honojs/node-server/compare/v2.0.11...v2.0.12</a></p>
<h2>v2.0.11</h2>
<h2>What's Changed</h2>
<ul>
<li>test: use a custom helper for path traversal tests by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li>
<li>perf(request): fast-path QUERY methods by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li>
<li>perf(request): fast-path PATCH method by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p>
<h2>v2.0.10</h2>
<h2>Security fixes</h2>
<p>This release includes a fix for the following security issue:</p>
<h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3>
<p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request
with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked
the request's <code>IncomingMessage</code> and left a promise pending,
even though no connection was established. Since the route is reachable
pre-handshake without authentication, an attacker could flood it to
gradually exhaust memory. <a
href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p>
<hr />
<p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to
this version.</p>
<h2>v2.0.9</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(websocket): polyfill missing ErrorEvent global by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
<li>fix(serve-static): correct Range header parsing edge cases by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li>
<li>fix: recover complete request bodies after client disconnect by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their
first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9">https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9</a></p>
<h2>v2.0.8</h2>
<h2>What's Changed</h2>
<ul>
<li>ci(release): add <code>--no-git-checks</code> option for <code>pnpm
stage publish</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/369">honojs/node-server#369</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8">https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8</a></p>
<h2>v2.0.7</h2>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/honojs/node-server/commits/v2.0.12">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hono/node-server&package-manager=npm_and_yarn&previous-version=1.19.15&new-version=2.0.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-28 23:24:25 -07:00
John Kennedy a41e4185dd fix: resolve Dependabot alerts (#2634) 
## Summary
- raise security overrides for the 18 open Dependabot alerts
- refresh the pnpm lockfile to patched dependency versions
- also resolve the newer `brace-expansion` advisory reported by `pnpm
audit`

## Verification
- `pnpm install --frozen-lockfile --ignore-scripts`
- `pnpm audit --prod --audit-level=low` — no known vulnerabilities
- `pnpm format:check`
- `git diff --check`

## Note
- `pnpm build` completed 10/15 tasks, then failed in the existing
`@langchain/langgraph-api` TypeScript build (`pnpm tsc --outDir dist`)
without diagnostics in the wrapper output.

Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>
 2026-07-26 01:28:12 +00:00
dependabot[bot] 07ba620415 chore(deps-dev): bump the svelte group across 1 directory with 3 updates (#2618) 
Bumps the svelte group with 3 updates in the / directory:
[@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte),
[svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte)
and
[vitest-browser-svelte](https://github.com/vitest-community/vitest-browser-svelte).

Updates `@sveltejs/vite-plugin-svelte` from 7.1.2 to 7.2.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/vite-plugin-svelte/releases">@​sveltejs/vite-plugin-svelte's
releases</a>.</em></p>
<blockquote>
<h2><code>@​sveltejs/vite-plugin-svelte</code><a
href="https://github.com/7"><code>@​7</code></a>.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>feat(inspector): add a context menu with current component stack (<a
href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1370">#1370</a>)</li>
</ul>
<h2><code>@​sveltejs/vite-plugin-svelte</code><a
href="https://github.com/7"><code>@​7</code></a>.1.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: enforce ltr styles for inspector (<a
href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1324">#1324</a>)</li>
</ul>
<h2><code>@​sveltejs/vite-plugin-svelte</code><a
href="https://github.com/7"><code>@​7</code></a>.1.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: ensure the inspector is injected into the client correctly for
Vite+ projects (<a
href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1355">#1355</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md">@​sveltejs/vite-plugin-svelte's
changelog</a>.</em></p>
<blockquote>
<h2>7.2.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>feat(inspector): add a context menu with current component stack (<a
href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1370">#1370</a>)</li>
</ul>
<h2>7.1.4</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: enforce ltr styles for inspector (<a
href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1324">#1324</a>)</li>
</ul>
<h2>7.1.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>fix: ensure the inspector is injected into the client correctly for
Vite+ projects (<a
href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1355">#1355</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/02981fd9bb395b6aa5453e2bc3166778ae71e326"><code>02981fd</code></a>
Version Packages (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1371">#1371</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/4158aa2da85af8362364844548a9ba6787111719"><code>4158aa2</code></a>
feat: context menu with component stack (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1370">#1370</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/c867a3ac277a61d8f398c21fc561fd33e8970e15"><code>c867a3a</code></a>
Version Packages (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1368">#1368</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/dbdb2552c0d050178f1d89dfb0ae5fa98d5c2f2b"><code>dbdb255</code></a>
fix: inspector rtl host styles (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1324">#1324</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/694bc9585e65e047cc12f4fa875bd3a56281302f"><code>694bc95</code></a>
chore(deps): update dependency typescript to v6 (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1315">#1315</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/9281816ffb8ac12a29f2195e27cd6473b782f950"><code>9281816</code></a>
chore(deps): update all non-major dependencies (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1365">#1365</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/02d370d6741c3d439329163acf0ba43974ad5141"><code>02d370d</code></a>
Version Packages (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1361">#1361</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/3b581de58debac3784f27bf2d5613ef438335156"><code>3b581de</code></a>
Revert &quot;feat: support <code>.svelte.mjs</code> and
<code>.svelte.mts</code> files&quot; (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1366">#1366</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/5545e1aac9c7bfcc068ae3fb65c47f7898da2e58"><code>5545e1a</code></a>
feat: support <code>.svelte.mjs</code> and <code>.svelte.mts</code>
files (<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1293">#1293</a>)</li>
<li><a
href="https://github.com/sveltejs/vite-plugin-svelte/commit/2cb977e28defa5324ee696b1cb234c6c7086730b"><code>2cb977e</code></a>
fix(inspector): activate under Vite+ by matching its client module path
(<a
href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1355">#1355</a>)</li>
<li>See full diff in <a
href="https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.2.0/packages/vite-plugin-svelte">compare
view</a></li>
</ul>
</details>
<br />

Updates `svelte` from 5.56.4 to 5.56.7
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/svelte/releases">svelte's
releases</a>.</em></p>
<blockquote>
<h2>svelte@5.56.7</h2>
<h3>Patch Changes</h3>
<ul>
<li>chore: provide <code>indent</code> option for <code>print</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18474">#18474</a>)</li>
</ul>
<h2>svelte@5.56.6</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>perf: skip unnecessary blocker analysis when compiling components
without top-level await (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18548">#18548</a>)</p>
</li>
<li>
<p>fix: rerun derived that had an abort controller on reconnection (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18551">#18551</a>)</p>
</li>
</ul>
<h2>svelte@5.56.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>chore: drop dead code that make TSGO fail (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18496">#18496</a>)</p>
</li>
<li>
<p>fix: don't (re)connect deriveds when read inside branch/root effects
(<a
href="https://redirect.github.com/sveltejs/svelte/pull/18527">#18527</a>)</p>
</li>
<li>
<p>fix: skip unnecessary derived effect in earlier batch (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18525">#18525</a>)</p>
</li>
<li>
<p>fix: avoid declaration tag warning in event handlers (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18500">#18500</a>)</p>
</li>
<li>
<p>fix: abort deriveds own AbortSignal when it disconnects (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18400">#18400</a>)</p>
</li>
<li>
<p>fix: ensure <code>$state.eager()</code> is correctly transormed for
SSR output (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18530">#18530</a>)</p>
</li>
<li>
<p>fix: correctly transform declaration tags during SSR (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18492">#18492</a>)</p>
</li>
<li>
<p>fix: transform computed keys in keyed <code>{#each}</code>
destructuring patterns (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18521">#18521</a>)</p>
</li>
<li>
<p>fix: chain preprocessor sourcemaps with an empty
<code>sources[0]</code> instead of dropping them (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18518">#18518</a>)</p>
</li>
<li>
<p>fix: clear previous_task reference after abort in Tween to prevent
memory leak on interrupted tweens (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18541">#18541</a>)</p>
</li>
<li>
<p>fix: don't treat declaration tags as parts inside each blocks (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18507">#18507</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md">svelte's
changelog</a>.</em></p>
<blockquote>
<h2>5.56.7</h2>
<h3>Patch Changes</h3>
<ul>
<li>chore: provide <code>indent</code> option for <code>print</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18474">#18474</a>)</li>
</ul>
<h2>5.56.6</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>perf: skip unnecessary blocker analysis when compiling components
without top-level await (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18548">#18548</a>)</p>
</li>
<li>
<p>fix: rerun derived that had an abort controller on reconnection (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18551">#18551</a>)</p>
</li>
</ul>
<h2>5.56.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>chore: drop dead code that make TSGO fail (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18496">#18496</a>)</p>
</li>
<li>
<p>fix: don't (re)connect deriveds when read inside branch/root effects
(<a
href="https://redirect.github.com/sveltejs/svelte/pull/18527">#18527</a>)</p>
</li>
<li>
<p>fix: skip unnecessary derived effect in earlier batch (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18525">#18525</a>)</p>
</li>
<li>
<p>fix: avoid declaration tag warning in event handlers (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18500">#18500</a>)</p>
</li>
<li>
<p>fix: abort deriveds own AbortSignal when it disconnects (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18400">#18400</a>)</p>
</li>
<li>
<p>fix: ensure <code>$state.eager()</code> is correctly transormed for
SSR output (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18530">#18530</a>)</p>
</li>
<li>
<p>fix: correctly transform declaration tags during SSR (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18492">#18492</a>)</p>
</li>
<li>
<p>fix: transform computed keys in keyed <code>{#each}</code>
destructuring patterns (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18521">#18521</a>)</p>
</li>
<li>
<p>fix: chain preprocessor sourcemaps with an empty
<code>sources[0]</code> instead of dropping them (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18518">#18518</a>)</p>
</li>
<li>
<p>fix: clear previous_task reference after abort in Tween to prevent
memory leak on interrupted tweens (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18541">#18541</a>)</p>
</li>
<li>
<p>fix: don't treat declaration tags as parts inside each blocks (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18507">#18507</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/svelte/commit/b29d7002ecf9bc0036b18647c0b7677a7cb0a914"><code>b29d700</code></a>
Version Packages (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18560">#18560</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/b791cac54e2db43317f2bc6c8e41e694245c551e"><code>b791cac</code></a>
chore: provide <code>indent</code> option for <code>print</code> (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18474">#18474</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/4a6a85b5f149cc96514ed3bf5e59083b9246d394"><code>4a6a85b</code></a>
Version Packages (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18552">#18552</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/d0dbe1a48013b9c405b518511f8330baf3a27bc9"><code>d0dbe1a</code></a>
perf: skip quadratic blocker analysis when no top-level await (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18548">#18548</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/22e0adb75a07442015feb0465cee1d3a61729e90"><code>22e0adb</code></a>
fix: rerun derived that had an abort controller on reconnection (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18551">#18551</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/602a873b6b82bba4e6edc91b039e2f6defbe3fc4"><code>602a873</code></a>
Version Packages (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18497">#18497</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/a4fd67e361914df612ae432ff75283c2d332ae18"><code>a4fd67e</code></a>
fix: $state.eager() is sometimes incorrect in SSR (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18530">#18530</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/199ffebca375b29b65fcac53fc1825b452175a53"><code>199ffeb</code></a>
fix: clear previous_task reference after abort in Tween (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18541">#18541</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/edeef1f9f713ab1ffdba698ff6d92cce8da1c5b4"><code>edeef1f</code></a>
chore: add some failing tests (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18528">#18528</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/a91b0687866c8b2f78692010702bb811bf27b9a8"><code>a91b068</code></a>
fix: abort deriveds own AbortSignal when it disconnects (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18400">#18400</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sveltejs/svelte/commits/svelte@5.56.7/packages/svelte">compare
view</a></li>
</ul>
</details>
<br />

Updates `vitest-browser-svelte` from 2.2.0 to 3.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-community/vitest-browser-svelte/releases">vitest-browser-svelte's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<h3>   🚨 Breaking Changes</h3>
<ul>
<li>Make render async-only  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> and
<strong>Codex</strong> in <a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/29">vitest-community/vitest-browser-svelte#29</a>
<a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/fbd5d33"><!--
raw HTML omitted -->(fbd5d)<!-- raw HTML omitted --></a></li>
</ul>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li>Ensure all <code>pure</code> exports are re-exported  -  by <a
href="https://github.com/mcous"><code>@​mcous</code></a> in <a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/42">vitest-community/vitest-browser-svelte#42</a>
<a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/25afcc8"><!--
raw HTML omitted -->(25afc)<!-- raw HTML omitted --></a></li>
<li><strong>types</strong>: Export <code>RenderResult</code>  -  by <a
href="https://github.com/Jungzl"><code>@​Jungzl</code></a> in <a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/40">vitest-community/vitest-browser-svelte#40</a>
<a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/2555e88"><!--
raw HTML omitted -->(2555e)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.2.1...v3.0.0">View
changes on GitHub</a></h5>
<h2>v2.2.1</h2>
<p><em>No significant changes</em></p>
<h5>    <a
href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.2.0...v2.2.1">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/544765466f25f4a2d63935f7f33f7e027eb495ff"><code>5447654</code></a>
chore: release v3.0.0 (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/43">#43</a>)</li>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/fbd5d3309acc621a42a65f48d3764359ec3b2017"><code>fbd5d33</code></a>
feat!: make render async-only (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/29">#29</a>)</li>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/25afcc8603221944a35bc99fbb0d811acb229100"><code>25afcc8</code></a>
fix: ensure all <code>pure</code> exports are re-exported (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/42">#42</a>)</li>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/8500e8f051830d5514a634c6e625aefad757d695"><code>8500e8f</code></a>
refactor(types): remove JSDoc type comments (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/41">#41</a>)</li>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/2555e884d659e47124e18efb4a3b565b9e64c992"><code>2555e88</code></a>
fix(types): export <code>RenderResult</code> (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/40">#40</a>)</li>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/878bd966f78d8ef962098d0536d28099dfa606db"><code>878bd96</code></a>
chore: release v2.2.1 (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/39">#39</a>)</li>
<li><a
href="https://github.com/vitest-community/vitest-browser-svelte/commit/20c97e63dc8ef0190afb043ad6e62d7775eebe3d"><code>20c97e6</code></a>
build: switch from JSDoc to TypeScript (<a
href="https://redirect.github.com/vitest-community/vitest-browser-svelte/issues/34">#34</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-community/vitest-browser-svelte/compare/v2.2.0...v3.0.0">compare
view</a></li>
</ul>
</details>
<br />

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>
 2026-07-24 14:44:02 -07:00
dependabot[bot] b508ae1edc chore(deps): bump @hono/node-server from 2.0.10 to 2.0.11 (#2629) 
Bumps [@hono/node-server](https://github.com/honojs/node-server) from
2.0.10 to 2.0.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.11</h2>
<h2>What's Changed</h2>
<ul>
<li>test: use a custom helper for path traversal tests by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/377">honojs/node-server#377</a></li>
<li>perf(request): fast-path QUERY methods by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/376">honojs/node-server#376</a></li>
<li>perf(request): fast-path PATCH method by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/380">honojs/node-server#380</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/834e54f15cf12b80cf82823c845b2bab41056cf0"><code>834e54f</code></a>
2.0.11</li>
<li><a
href="https://github.com/honojs/node-server/commit/ba72bcd8c563fbe1e9678e7ef27794a0aa4a6158"><code>ba72bcd</code></a>
perf(request): fast-path PATCH method (<a
href="https://redirect.github.com/honojs/node-server/issues/380">#380</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/962baa463879da394008f27510d68dc90b640e99"><code>962baa4</code></a>
perf(request): fast-path QUERY methods (<a
href="https://redirect.github.com/honojs/node-server/issues/376">#376</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/62284d659380cb0354510d0359c160c8d970764d"><code>62284d6</code></a>
test: use a custom helper for path traversal tests (<a
href="https://redirect.github.com/honojs/node-server/issues/377">#377</a>)</li>
<li>See full diff in <a
href="https://github.com/honojs/node-server/compare/v2.0.10...v2.0.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@hono/node-server&package-manager=npm_and_yarn&previous-version=2.0.10&new-version=2.0.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-24 18:23:24 +00:00
dependabot[bot] 5d817d0f2e chore(deps): bump the angular group across 1 directory with 12 updates (#2617) 
Bumps the angular group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
|
[@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common)
| `22.0.4` | `22.0.8` |
|
[@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler)
| `22.0.4` | `22.0.8` |
|
[@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core)
| `22.0.4` | `22.0.8` |
|
[@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms)
| `22.0.4` | `22.0.8` |
|
[@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser)
| `22.0.4` | `22.0.8` |
|
[@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router)
| `22.0.4` | `22.0.8` |
| [@angular/build](https://github.com/angular/angular-cli) | `22.0.5` |
`22.0.8` |
| [@angular/cli](https://github.com/angular/angular-cli) | `22.0.5` |
`22.0.8` |
|
[@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli)
| `22.0.4` | `22.0.8` |
| [@analogjs/vite-plugin-angular](https://github.com/analogjs/analog) |
`2.6.2` | `2.6.4` |
| [@analogjs/vitest-angular](https://github.com/analogjs/analog) |
`2.6.2` | `2.6.4` |
|
[@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic)
| `22.0.4` | `22.0.8` |


Updates `@angular/common` from 22.0.4 to 22.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/common's
releases</a>.</em></p>
<blockquote>
<h2>22.0.8</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img
src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix -
c0368f2278" /></a></td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img
src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix -
8616ba9db6" /></a></td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img
src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix -
d302c7ab83" /></a></td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img
src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix -
9d40f8aefe" /></a></td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img
src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix -
388daea2fc" /></a></td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img
src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix -
bb39cda648" /></a></td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<h2>22.0.7</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img
src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix -
91e33aa1de" /></a></td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img
src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix -
5b516e3a58" /></a></td>
<td>parsing of an empty template literal interpolation</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img
src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix -
c88ddde1c9" /></a></td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img
src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix -
94d9591b51" /></a></td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img
src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix -
c89f71a74c" /></a></td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img
src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix -
70500e4067" /></a></td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img
src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix -
1b9964675f" /></a></td>
<td>allow multiple async validators</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img
src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix -
64d6d47a0c" /></a></td>
<td>preserve intermediate number values in signal forms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img
src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix -
6cf7446afa" /></a></td>
<td>prevent stale CVA writeback during debounce</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<p>| Commit | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's
changelog</a>.</em></p>
<blockquote>
<h1>22.0.8 (2026-07-22)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td>
<td>fix</td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td>
<td>fix</td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td>
<td>fix</td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td>
<td>fix</td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td>
<td>fix</td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td>
<td>fix</td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.1.0-next.6 (2026-07-15)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td>
<td>fix</td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td>
<td>fix</td>
<td>parsing of an empty template literal interpolation</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td>
<td>fix</td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td>
<td>fix</td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td>
<td>fix</td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td>
<td>fix</td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><code>c0368f2</code></a>
fix(common): preserve crossorigin on image preloads</li>
<li><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><code>9d40f8a</code></a>
fix(http): prevent transfer cache key collisions</li>
<li><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><code>91e33aa</code></a>
fix(common): avoid prototype lookups in date format caches</li>
<li><a
href="https://github.com/angular/angular/commit/20b7dc3023df9ccde232cf9fef1d2b1d3ae68b23"><code>20b7dc3</code></a>
fix(http): prevent interceptor signal reads from leaking into calling
reactiv...</li>
<li><a
href="https://github.com/angular/angular/commit/748faa4f95dfdae1570057f7af1bc7031e80a94a"><code>748faa4</code></a>
docs(docs-infra): Add build-time validation for API and guide links
using rou...</li>
<li><a
href="https://github.com/angular/angular/commit/8e6d7f71906e35181577b9e66474695ba3077599"><code>8e6d7f7</code></a>
fix(router): use safe hasOwnProperty when parsing query params</li>
<li><a
href="https://github.com/angular/angular/commit/eb8fb9fe58687fe0f341dc3beb5d0fb469605179"><code>eb8fb9f</code></a>
fix(common): use Object.hasOwn in I18nSelectPipe to handle
null-prototype and...</li>
<li>See full diff in <a
href="https://github.com/angular/angular/commits/v22.0.8/packages/common">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/compiler` from 22.0.4 to 22.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/compiler's
releases</a>.</em></p>
<blockquote>
<h2>22.0.8</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img
src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix -
c0368f2278" /></a></td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img
src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix -
8616ba9db6" /></a></td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img
src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix -
d302c7ab83" /></a></td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img
src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix -
9d40f8aefe" /></a></td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img
src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix -
388daea2fc" /></a></td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img
src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix -
bb39cda648" /></a></td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<h2>22.0.7</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img
src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix -
91e33aa1de" /></a></td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img
src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix -
5b516e3a58" /></a></td>
<td>parsing of an empty template literal interpolation</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img
src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix -
c88ddde1c9" /></a></td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img
src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix -
94d9591b51" /></a></td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img
src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix -
c89f71a74c" /></a></td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img
src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix -
70500e4067" /></a></td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img
src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix -
1b9964675f" /></a></td>
<td>allow multiple async validators</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img
src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix -
64d6d47a0c" /></a></td>
<td>preserve intermediate number values in signal forms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img
src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix -
6cf7446afa" /></a></td>
<td>prevent stale CVA writeback during debounce</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<p>| Commit | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's
changelog</a>.</em></p>
<blockquote>
<h1>22.0.8 (2026-07-22)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td>
<td>fix</td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td>
<td>fix</td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td>
<td>fix</td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td>
<td>fix</td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td>
<td>fix</td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td>
<td>fix</td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.1.0-next.6 (2026-07-15)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td>
<td>fix</td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td>
<td>fix</td>
<td>parsing of an empty template literal interpolation</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td>
<td>fix</td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td>
<td>fix</td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td>
<td>fix</td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td>
<td>fix</td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/3854174ec4a25e21abaef4ddd9d968a5b46fc832"><code>3854174</code></a>
refactor(compiler): enforce exhaustive defer trigger handling</li>
<li><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><code>c89f71a</code></a>
fix(core): ignore processing instruction syntax in templates</li>
<li><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><code>5b516e3</code></a>
fix(compiler): parsing of an empty template literal interpolation</li>
<li><a
href="https://github.com/angular/angular/commit/fd4ddcafed340dbc116df9718f03ee9e16c41c18"><code>fd4ddca</code></a>
fix(compiler): use regular optional chaining expression for safe
function cal...</li>
<li><a
href="https://github.com/angular/angular/commit/b5ea3408ce1414c5c93a4d252a298e1ef18f447e"><code>b5ea340</code></a>
refactor(compiler): remove <code>visitAttributeComment</code></li>
<li>See full diff in <a
href="https://github.com/angular/angular/commits/v22.0.8/packages/compiler">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/core` from 22.0.4 to 22.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/core's
releases</a>.</em></p>
<blockquote>
<h2>22.0.8</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img
src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix -
c0368f2278" /></a></td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img
src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix -
8616ba9db6" /></a></td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img
src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix -
d302c7ab83" /></a></td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img
src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix -
9d40f8aefe" /></a></td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img
src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix -
388daea2fc" /></a></td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img
src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix -
bb39cda648" /></a></td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<h2>22.0.7</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img
src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix -
91e33aa1de" /></a></td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img
src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix -
5b516e3a58" /></a></td>
<td>parsing of an empty template literal interpolation</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img
src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix -
c88ddde1c9" /></a></td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img
src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix -
94d9591b51" /></a></td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img
src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix -
c89f71a74c" /></a></td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img
src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix -
70500e4067" /></a></td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img
src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix -
1b9964675f" /></a></td>
<td>allow multiple async validators</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img
src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix -
64d6d47a0c" /></a></td>
<td>preserve intermediate number values in signal forms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img
src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix -
6cf7446afa" /></a></td>
<td>prevent stale CVA writeback during debounce</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<p>| Commit | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's
changelog</a>.</em></p>
<blockquote>
<h1>22.0.8 (2026-07-22)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td>
<td>fix</td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td>
<td>fix</td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td>
<td>fix</td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td>
<td>fix</td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td>
<td>fix</td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td>
<td>fix</td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.1.0-next.6 (2026-07-15)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td>
<td>fix</td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td>
<td>fix</td>
<td>parsing of an empty template literal interpolation</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td>
<td>fix</td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td>
<td>fix</td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td>
<td>fix</td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td>
<td>fix</td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><code>388daea</code></a>
fix(migrations): correctly migrate ngClass with mixed space-separated
keys</li>
<li><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><code>8616ba9</code></a>
fix(core): ensure SVG animation attributeName is checked
case-insensitively</li>
<li><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><code>bb39cda</code></a>
fix(migrations): preserve NgClass import on partial migration</li>
<li><a
href="https://github.com/angular/angular/commit/829d98e9ae08b12a2c4a624a64f87660d6dfde26"><code>829d98e</code></a>
build: update cross-repo angular dependencies to v22.0.7</li>
<li><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><code>70500e4</code></a>
fix(core): preserve explicit input transform write type</li>
<li><a
href="https://github.com/angular/angular/commit/e881b962cc45ddc7d60da095bac496a7709f25cb"><code>e881b96</code></a>
refactor(core): move signal debug graph interfaces to
primitives/devtools</li>
<li><a
href="https://github.com/angular/angular/commit/1046fd9e56b607ddc3f22ffd86af7c3bddec40ce"><code>1046fd9</code></a>
refactor(core): remove deprecated <code>unregisterTool</code> from
<code>ModelContext</code></li>
<li><a
href="https://github.com/angular/angular/commit/5936ffb80cf729667951a43b2da479d663fb5c98"><code>5936ffb</code></a>
refactor(core): update WebMCP tool registration to be asynchronous</li>
<li><a
href="https://github.com/angular/angular/commit/c82ae67e3d866daea488c9cb312c45bbb19c7b33"><code>c82ae67</code></a>
Revert &quot;fix(core): allow static attributes for explicit input
transforms&quot;</li>
<li><a
href="https://github.com/angular/angular/commit/ec9b4793e88828257cae38ac75b8e1c5392022ff"><code>ec9b479</code></a>
build: update cross-repo angular dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/v22.0.8/packages/core">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/forms` from 22.0.4 to 22.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/forms's
releases</a>.</em></p>
<blockquote>
<h2>22.0.8</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img
src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix -
c0368f2278" /></a></td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img
src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix -
8616ba9db6" /></a></td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img
src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix -
d302c7ab83" /></a></td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img
src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix -
9d40f8aefe" /></a></td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img
src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix -
388daea2fc" /></a></td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img
src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix -
bb39cda648" /></a></td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<h2>22.0.7</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img
src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix -
91e33aa1de" /></a></td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img
src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix -
5b516e3a58" /></a></td>
<td>parsing of an empty template literal interpolation</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img
src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix -
c88ddde1c9" /></a></td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img
src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix -
94d9591b51" /></a></td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img
src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix -
c89f71a74c" /></a></td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img
src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix -
70500e4067" /></a></td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img
src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix -
1b9964675f" /></a></td>
<td>allow multiple async validators</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img
src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix -
64d6d47a0c" /></a></td>
<td>preserve intermediate number values in signal forms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img
src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix -
6cf7446afa" /></a></td>
<td>prevent stale CVA writeback during debounce</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<p>| Commit | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/forms's
changelog</a>.</em></p>
<blockquote>
<h1>22.0.8 (2026-07-22)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td>
<td>fix</td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td>
<td>fix</td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td>
<td>fix</td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td>
<td>fix</td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td>
<td>fix</td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td>
<td>fix</td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.1.0-next.6 (2026-07-15)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td>
<td>fix</td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td>
<td>fix</td>
<td>parsing of an empty template literal interpolation</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td>
<td>fix</td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td>
<td>fix</td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td>
<td>fix</td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td>
<td>fix</td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><code>d302c7a</code></a>
fix(forms): ensure <code>pending</code> status propagates to the root
form in signal forms</li>
<li><a
href="https://github.com/angular/angular/commit/e14ead1093a40200bc1bd4162611dcb9862fc714"><code>e14ead1</code></a>
Revert &quot;fix(forms): preserve intermediate number values in signal
forms&quot;</li>
<li><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><code>64d6d47</code></a>
fix(forms): preserve intermediate number values in signal forms</li>
<li><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><code>70500e4</code></a>
fix(core): preserve explicit input transform write type</li>
<li><a
href="https://github.com/angular/angular/commit/a6174d5900570ec0ce72683438bdbbc39158f96d"><code>a6174d5</code></a>
refactor(forms): warn when a text input receives a null value in Signal
Forms</li>
<li><a
href="https://github.com/angular/angular/commit/5936ffb80cf729667951a43b2da479d663fb5c98"><code>5936ffb</code></a>
refactor(core): update WebMCP tool registration to be asynchronous</li>
<li><a
href="https://github.com/angular/angular/commit/5d06fcb1092d121a8990ef7934bfba0b599ff6f2"><code>5d06fcb</code></a>
test(forms): register writeback test control as CVA</li>
<li><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><code>6cf7446</code></a>
fix(forms): prevent stale CVA writeback during debounce</li>
<li><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><code>1b99646</code></a>
fix(forms): allow multiple async validators</li>
<li><a
href="https://github.com/angular/angular/commit/eca3395019cf019452e2d1b6eacc43555c313e2d"><code>eca3395</code></a>
removed console log</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/v22.0.8/packages/forms">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/platform-browser` from 22.0.4 to 22.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/platform-browser's
releases</a>.</em></p>
<blockquote>
<h2>22.0.8</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img
src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix -
c0368f2278" /></a></td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img
src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix -
8616ba9db6" /></a></td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img
src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix -
d302c7ab83" /></a></td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img
src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix -
9d40f8aefe" /></a></td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img
src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix -
388daea2fc" /></a></td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img
src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix -
bb39cda648" /></a></td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<h2>22.0.7</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img
src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix -
91e33aa1de" /></a></td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img
src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix -
5b516e3a58" /></a></td>
<td>parsing of an empty template literal interpolation</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img
src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix -
c88ddde1c9" /></a></td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img
src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix -
94d9591b51" /></a></td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img
src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix -
c89f71a74c" /></a></td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img
src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix -
70500e4067" /></a></td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img
src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix -
1b9964675f" /></a></td>
<td>allow multiple async validators</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img
src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix -
64d6d47a0c" /></a></td>
<td>preserve intermediate number values in signal forms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img
src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix -
6cf7446afa" /></a></td>
<td>prevent stale CVA writeback during debounce</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<p>| Commit | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/platform-browser's
changelog</a>.</em></p>
<blockquote>
<h1>22.0.8 (2026-07-22)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4">c0368f2278</a></td>
<td>fix</td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b">8616ba9db6</a></td>
<td>fix</td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7">d302c7ab83</a></td>
<td>fix</td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2">9d40f8aefe</a></td>
<td>fix</td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846">388daea2fc</a></td>
<td>fix</td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221">bb39cda648</a></td>
<td>fix</td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.1.0-next.6 (2026-07-15)</h1>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/359fb503b8f262db7a053febc18c416f966e8185">359fb503b8</a></td>
<td>fix</td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/da52137724b8cce79b036026fa1aa07bc730389c">da52137724</a></td>
<td>fix</td>
<td>parsing of an empty template literal interpolation</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5bd00add071e404ddab318eea82db81b5715a194">5bd00add07</a></td>
<td>fix</td>
<td>support foreign components inside control flow blocks (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/2e442f787627a1f44d8b6463a1cb979ef6f7e049">2e442f7876</a></td>
<td>perf</td>
<td>do not emit tag name when control flow root is foreign component (<a
href="https://redirect.github.com/angular/angular/pull/69674">#69674</a>)</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/ae0ec7315c6fbc45ce40581a08a8243a008a91ec">ae0ec7315c</a></td>
<td>fix</td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9b9b0e93c90c0ecfc7f075a64908cce00eb03f38">9b9b0e93c9</a></td>
<td>fix</td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/68ac20407466f0d3e6f5c5016f1273672b5d2b34">68ac204074</a></td>
<td>fix</td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0ae6d81ed2a83b1ebbb75dabc53af77b8db86c41">0ae6d81ed2</a></td>
<td>fix</td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/b34bf0dce855bca3c6dfcf7e19d38b3b39288a16"><code>b34bf0d</code></a>
fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP</li>
<li><a
href="https://github.com/angular/angular/commit/ab18f5ff0bfdd7ef5f3050c1a271c1553b30f608"><code>ab18f5f</code></a>
refactor(core): cleanup Meta service</li>
<li><a
href="https://github.com/angular/angular/commit/748faa4f95dfdae1570057f7af1bc7031e80a94a"><code>748faa4</code></a>
docs(docs-infra): Add build-time validation for API and guide links
using rou...</li>
<li><a
href="https://github.com/angular/angular/commit/97197786b3d77154ace1c8e638c12ccc12b4610f"><code>9719778</code></a>
docs: add NG05200 error reference page for
SANITIZATION_UNSAFE_SCRIPT</li>
<li>See full diff in <a
href="https://github.com/angular/angular/commits/v22.0.8/packages/platform-browser">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/router` from 22.0.4 to 22.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/router's
releases</a>.</em></p>
<blockquote>
<h2>22.0.8</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c0368f227846024bb26d3628c59541e870bb36e4"><img
src="https://img.shields.io/badge/c0368f2278-fix-green" alt="fix -
c0368f2278" /></a></td>
<td>preserve crossorigin on image preloads</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8616ba9db6240f3fbf8b905342d07326e096302b"><img
src="https://img.shields.io/badge/8616ba9db6-fix-green" alt="fix -
8616ba9db6" /></a></td>
<td>ensure SVG animation attributeName is checked
case-insensitively</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/d302c7ab833c0bd3bba951135e76e0c48273b3d7"><img
src="https://img.shields.io/badge/d302c7ab83-fix-green" alt="fix -
d302c7ab83" /></a></td>
<td>ensure <code>pending</code> status propagates to the root form in
signal forms</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9d40f8aefef9dcd893db5d01bc58d3e65e1cb4c2"><img
src="https://img.shields.io/badge/9d40f8aefe-fix-green" alt="fix -
9d40f8aefe" /></a></td>
<td>prevent transfer cache key collisions</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/388daea2fc188aad3ab69fb81bd3f893ac3cd846"><img
src="https://img.shields.io/badge/388daea2fc-fix-green" alt="fix -
388daea2fc" /></a></td>
<td>correctly migrate ngClass with mixed space-separated keys</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bb39cda6483de2edab2f8221459b0ed5b73ef221"><img
src="https://img.shields.io/badge/bb39cda648-fix-green" alt="fix -
bb39cda648" /></a></td>
<td>preserve NgClass import on partial migration</td>
</tr>
</tbody>
</table>
<h2>22.0.7</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/91e33aa1de47d250d8cde21047597e8df771f07d"><img
src="https://img.shields.io/badge/91e33aa1de-fix-green" alt="fix -
91e33aa1de" /></a></td>
<td>avoid prototype lookups in date format caches</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5b516e3a58e1233f2e01cbb53267b9563a72d5f1"><img
src="https://img.shields.io/badge/5b516e3a58-fix-green" alt="fix -
5b516e3a58" /></a></td>
<td>parsing of an empty template literal interpolation</td>
</tr>
</tbody>
</table>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c88ddde1c9f56e3b5c5cf264e87217b86a036a58"><img
src="https://img.shields.io/badge/c88ddde1c9-fix-green" alt="fix -
c88ddde1c9" /></a></td>
<td>re-tag SourceFiles after TsCreateProgramDriver.updateFiles()</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/94d9591b512c94577080c77911dbd1c3516a8a81"><img
src="https://img.shields.io/badge/94d9591b51-fix-green" alt="fix -
94d9591b51" /></a></td>
<td>allow static attributes for explicit input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c89f71a74ce312f9f6522796a106eac48bd33ebb"><img
src="https://img.shields.io/badge/c89f71a74c-fix-green" alt="fix -
c89f71a74c" /></a></td>
<td>ignore processing instruction syntax in templates</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70500e4067e74e5b5f79a15774b5d2f01524f397"><img
src="https://img.shields.io/badge/70500e4067-fix-green" alt="fix -
70500e4067" /></a></td>
<td>preserve explicit input transform write type</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1b9964675f0cfee30a0e8f6df664d1961a3dc3ae"><img
src="https://img.shields.io/badge/1b9964675f-fix-green" alt="fix -
1b9964675f" /></a></td>
<td>allow multiple async validators</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/64d6d47a0c67709ce887a90666fc214c40a283c4"><img
src="https://img.shields.io/badge/64d6d47a0c-fix-green" alt="fix -
64d6d47a0c" /></a></td>
<td>preserve intermediate number values in signal forms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6cf7446afaedd461b9e28291e326f6f2372fa157"><img
src="https://img.shields.io/badge/6cf7446afa-fix-green" alt="fix -
6cf7446afa" /></a></td>
<td>prevent stale CVA writeback during debounce</td>
</tr>
</tbody>
</table>
<h3>h...

_Description has been truncated_

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-24 11:13:54 -07:00
dependabot[bot] 708770350b chore(deps): bump @hono/node-server from 1.19.13 to 2.0.10 (#2628) 
Bumps [@hono/node-server](https://github.com/honojs/node-server) from
1.19.13 to 2.0.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/node-server/releases">@​hono/node-server's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.10</h2>
<h2>Security fixes</h2>
<p>This release includes a fix for the following security issue:</p>
<h3>Unauthenticated memory-leak DoS via aborted WebSocket handshake</h3>
<p>Affects: <code>upgradeWebSocket</code>. A WebSocket upgrade request
with a missing or malformed <code>Sec-WebSocket-Key</code> header leaked
the request's <code>IncomingMessage</code> and left a promise pending,
even though no connection was established. Since the route is reachable
pre-handshake without authentication, an attacker could flood it to
gradually exhaust memory. <a
href="https://github.com/honojs/node-server/security/advisories/GHSA-9mqv-5hh9-4cgg">GHSA-9mqv-5hh9-4cgg</a></p>
<hr />
<p>Users of <code>upgradeWebSocket</code> are encouraged to upgrade to
this version.</p>
<h2>v2.0.9</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(websocket): polyfill missing ErrorEvent global by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
<li>fix(serve-static): correct Range header parsing edge cases by <a
href="https://github.com/otnc"><code>@​otnc</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/372">honojs/node-server#372</a></li>
<li>fix: recover complete request bodies after client disconnect by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/375">honojs/node-server#375</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/otnc"><code>@​otnc</code></a> made their
first contribution in <a
href="https://redirect.github.com/honojs/node-server/pull/371">honojs/node-server#371</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9">https://github.com/honojs/node-server/compare/v2.0.8...v2.0.9</a></p>
<h2>v2.0.8</h2>
<h2>What's Changed</h2>
<ul>
<li>ci(release): add <code>--no-git-checks</code> option for <code>pnpm
stage publish</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/369">honojs/node-server#369</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8">https://github.com/honojs/node-server/compare/v2.0.7...v2.0.8</a></p>
<h2>v2.0.7</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: migrate to pnpm by <a
href="https://github.com/BlankParticle"><code>@​BlankParticle</code></a>
in <a
href="https://redirect.github.com/honojs/node-server/pull/367">honojs/node-server#367</a></li>
<li>fix(serve-static): serve precompressed files for
application/octet-stream by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/366">honojs/node-server#366</a></li>
<li>chore: bump <code>supertest</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/368">honojs/node-server#368</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.6...v2.0.7">https://github.com/honojs/node-server/compare/v2.0.6...v2.0.7</a></p>
<h2>v2.0.6</h2>
<h2>What's Changed</h2>
<ul>
<li>ci: publish to npm from CI with OIDC trusted publishing and bump
<code>np</code> by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/361">honojs/node-server#361</a></li>
<li>ci: use npm Staged publishing by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/364">honojs/node-server#364</a></li>
<li>fix: preserve status and statusText when cloning a Response with
liveheaders by <a
href="https://github.com/usualoma"><code>@​usualoma</code></a> in <a
href="https://redirect.github.com/honojs/node-server/pull/363">honojs/node-server#363</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/node-server/compare/v2.0.5...v2.0.6">https://github.com/honojs/node-server/compare/v2.0.5...v2.0.6</a></p>
<h2>v2.0.5</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/node-server/commit/7c1457ed5536c02fdd2f001129fae67bcbca54a1"><code>7c1457e</code></a>
2.0.10</li>
<li><a
href="https://github.com/honojs/node-server/commit/3a21938c418340e980cb7ffa88e78369f78392d1"><code>3a21938</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/node-server/commit/98420217e53a17a238ef1aa1a6bef0b2b70136c5"><code>9842021</code></a>
2.0.9</li>
<li><a
href="https://github.com/honojs/node-server/commit/51f3bf56f56d9691ec0f7e1562a96f0b485a7dd9"><code>51f3bf5</code></a>
fix: recover complete request bodies after client disconnect (<a
href="https://redirect.github.com/honojs/node-server/issues/375">#375</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/fdb87badbe313cfbfe6bb2355e9893dc0698d2bd"><code>fdb87ba</code></a>
fix(serve-static): correct Range header parsing edge cases (<a
href="https://redirect.github.com/honojs/node-server/issues/372">#372</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/912e3fd80c4311756f724bd566de1433c8d772d9"><code>912e3fd</code></a>
fix(websocket): polyfill missing ErrorEvent global (<a
href="https://redirect.github.com/honojs/node-server/issues/371">#371</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/114c15efb38dabaf81af774ddb764409e3d156d8"><code>114c15e</code></a>
2.0.8</li>
<li><a
href="https://github.com/honojs/node-server/commit/5db2d5df662cd69ff5c4cc23b8ecb3a6f63e4e38"><code>5db2d5d</code></a>
ci(release): add <code>--no-git-checks</code> option for <code>pnpm
stage publish</code> (<a
href="https://redirect.github.com/honojs/node-server/issues/369">#369</a>)</li>
<li><a
href="https://github.com/honojs/node-server/commit/a528a77ed2c28dc12775c849abc6b6df6d4cb44c"><code>a528a77</code></a>
2.0.7</li>
<li><a
href="https://github.com/honojs/node-server/commit/b2d610c1e37a96639fbb2eae662e858800aa8906"><code>b2d610c</code></a>
chore: bump <code>supertest</code> (<a
href="https://redirect.github.com/honojs/node-server/issues/368">#368</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/node-server/compare/v1.19.13...v2.0.10">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for <code>@​hono/node-server</code> since your current
version.</p>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-23 13:14:43 -07:00
dependabot[bot] fa9892117d chore(deps-dev): bump @vitest/browser from 4.1.9 to 4.1.10 (#2624) 
Bumps
[@vitest/browser](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser)
from 4.1.9 to 4.1.10.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitest-dev/vitest/releases">@​vitest/browser's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.10</h2>
<h3>   🐞 Bug Fixes</h3>
<ul>
<li><strong>browser</strong>: Check fs access in builtin commands
[backport to v4]  -  by <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a>,
<strong>Hiroshi Ogawa</strong> and <strong>OpenCode
(claude-opus-4-8)</strong> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10680">vitest-dev/vitest#10680</a>
<a href="https://github.com/vitest-dev/vitest/commit/5c18dd267"><!-- raw
HTML omitted -->(5c18d)<!-- raw HTML omitted --></a></li>
<li><strong>vm</strong>: Fix external module resolve error with deps
optimizer query for encoded URI [backport to v4]  -  by <a
href="https://github.com/SveLil"><code>@​SveLil</code></a> and <a
href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a
href="https://redirect.github.com/vitest-dev/vitest/issues/10661">vitest-dev/vitest#10661</a>
<a href="https://github.com/vitest-dev/vitest/commit/bae52b511"><!-- raw
HTML omitted -->(bae52)<!-- raw HTML omitted --></a></li>
</ul>
<h5>    <a
href="https://github.com/vitest-dev/vitest/compare/v4.1.9...v4.1.10">View
changes on GitHub</a></h5>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitest-dev/vitest/commit/db616d227b6e0cb07a94f5d1bba262ee95db7e46"><code>db616d2</code></a>
chore: release v4.1.10 (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/10718">#10718</a>)</li>
<li><a
href="https://github.com/vitest-dev/vitest/commit/5c18dd267ff7f47f24cab2f615a16b37d90feb7f"><code>5c18dd2</code></a>
fix(browser): check fs access in builtin commands [backport to v4] (<a
href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser/issues/10680">#10680</a>)</li>
<li>See full diff in <a
href="https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-23 13:13:18 -07:00
dependabot[bot] cdffd18d19 chore(deps): bump the langchain group across 1 directory with 6 updates (#2616) 
Bumps the langchain group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@langchain/core](https://github.com/langchain-ai/langchainjs) |
`1.2.1` | `1.2.3` |
| [langchain](https://github.com/langchain-ai/langchainjs) | `1.5.2` |
`1.5.3` |
| [@langchain/openai](https://github.com/langchain-ai/langchainjs) |
`1.5.3` | `1.5.5` |
| [@langchain/classic](https://github.com/langchain-ai/langchainjs) |
`1.0.38` | `1.0.40` |
| [@langchain/quickjs](https://github.com/langchain-ai/deepagentsjs) |
`0.5.1` | `0.6.0` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.8.0` |
`0.8.4` |


Updates `@langchain/core` from 1.2.1 to 1.2.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/core's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/core</code><a
href="https://github.com/1"><code>@​1</code></a>.2.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11200">#11200</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/08e588865927c3bf0eb2ec418cfb3fba527e14bb"><code>08e5888</code></a>
Thanks <a href="https://github.com/hntrl"><code>@​hntrl</code></a>! -
fix(aws): normalize and safely replay Bedrock reasoning blocks</p>
<p>Emit standard reasoning blocks with preserved signatures, omit
incomplete signature-only reasoning during replay, and retain
compatibility with legacy and redacted Bedrock reasoning.</p>
</li>
</ul>
<h2><code>@​langchain/core</code><a
href="https://github.com/1"><code>@​1</code></a>.2.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11171">#11171</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
Thanks <a
href="https://github.com/christian-bromann"><code>@​christian-bromann</code></a>!
- fix(core): coerce string v1 AIMessage content to text blocks</p>
<p>Prevent <code>contentBlocks.push is not a function</code> when
constructing an
<code>AIMessage</code> with <code>response_metadata.output_version ===
&quot;v1&quot;</code> and string
<code>content</code> (common in serialized LangGraph stream
payloads).</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82a6b8ebf1a876b0ac819f2ee0ae6c6582031cb5"><code>82a6b8e</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11202">#11202</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/08e588865927c3bf0eb2ec418cfb3fba527e14bb"><code>08e5888</code></a>
fix(aws): normalize Bedrock reasoning blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11200">#11200</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/21aaeb0b2ea5f526702bf6b8f7e1f6da34a21d2e"><code>21aaeb0</code></a>
fix: patch 13 high/critical Dependabot alerts (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11199">#11199</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/782c7f2b2b5c67352736686c8d124e5f85e97fd0"><code>782c7f2</code></a>
chore(dev): bump <code>@​types/node</code> from 25.9.1 to 26.1.0 in the
types group across ...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
fix(openai): drop <code>tool_call</code> content blocks from chat
completions input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
fix(openai): filter out content blocks the chat completions api rejects
as in...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
fix(core): coerce string v1 AIMessage content to text blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/core@1.2.1...@langchain/core@1.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `langchain` from 1.5.2 to 1.5.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">langchain's
releases</a>.</em></p>
<blockquote>
<h2>langchain@1.5.3</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11167">#11167</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(langchain): malformed tool input schemas are unrecoverable</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
fix(langchain): malformed tool input schemas are unrecoverable (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a>
chore(deps): bump the aws group across 1 directory with 7 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/553155b5807becca67dcca790b8e42b4e7950b50"><code>553155b</code></a>
chore(deps): bump js-yaml from 5.0.0 to 5.1.0 (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11142">#11142</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/24bde73901daa41b626eac843453a7a951ff98c3"><code>24bde73</code></a>
chore(deps): bump prettier from 3.8.3 to 3.9.4 in the typescript-eslint
group...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8db72635b93f2f9c8dd79472414741a624c375a9"><code>8db7263</code></a>
fix: remove duplicate pnpm lockfile entries (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11141">#11141</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/99449de42a492ac5302f61f294f11836779e7b16"><code>99449de</code></a>
chore(deps): bump the langchain group with 5 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11131">#11131</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/39c17d7388e76cea7f4eb59c3833b2d62df297cb"><code>39c17d7</code></a>
chore(deps): bump google-auth-library from 10.6.2 to 10.9.0 in the
google gro...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/32613bee109a3e72423fbe4a3fa774ec12f20e63"><code>32613be</code></a>
chore(deps): bump the build-and-test group with 2 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11133">#11133</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/2ecacad5912bb8f9289a01828c0583f2a17e7b79"><code>2ecacad</code></a>
chore(deps): bump the gh-actions-minor-and-patch group with 2 updates
(<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11129">#11129</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/langchain@1.5.2...langchain@1.5.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/openai` from 1.5.3 to 1.5.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/openai's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/openai</code><a
href="https://github.com/1"><code>@​1</code></a>.5.5</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11175">#11175</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(openai): filter out content blocks the chat completions api rejects
as input</p>
</li>
<li>
<p><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11177">#11177</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(openai): drop tool_call content blocks from chat completions
input</p>
</li>
</ul>
<h2><code>@​langchain/openai</code><a
href="https://github.com/1"><code>@​1</code></a>.5.4</h2>
<h3>Patch Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/langchainjs/pull/11169">#11169</a>
<a
href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
fix(openai): emit output_text for assistant content in responses
input</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
fix(openai): drop <code>tool_call</code> content blocks from chat
completions input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
fix(openai): filter out content blocks the chat completions api rejects
as in...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
fix(core): coerce string v1 AIMessage content to text blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>
fix(openai): emit <code>output_text</code> for assistant content in
responses input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
fix(langchain): malformed tool input schemas are unrecoverable (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a>
chore(deps): bump the aws group across 1 directory with 7 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/openai@1.5.3...@langchain/openai@1.5.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/classic` from 1.0.38 to 1.0.40
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langchainjs/releases">@​langchain/classic's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/classic</code><a
href="https://github.com/1"><code>@​1</code></a>.0.40</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>,
<a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>]:
<ul>
<li><code>@​langchain/openai</code><a
href="https://github.com/1"><code>@​1</code></a>.5.5</li>
</ul>
</li>
</ul>
<h2><code>@​langchain/classic</code><a
href="https://github.com/1"><code>@​1</code></a>.0.39</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a
href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>]:
<ul>
<li><code>@​langchain/openai</code><a
href="https://github.com/1"><code>@​1</code></a>.5.4</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/f51f338cf4dd3ba188b048b3bfa8134e9b9a64cf"><code>f51f338</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11176">#11176</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/09e7f6d3408323fee5e19fc9af277114b1e8c89d"><code>09e7f6d</code></a>
fix(openai): drop <code>tool_call</code> content blocks from chat
completions input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/a9f123a49c1c50fd32d54fe4cb15963d21252d5d"><code>a9f123a</code></a>
fix(openai): filter out content blocks the chat completions api rejects
as in...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/cc39f564a9df18655ee4ae92de3f32e251021db8"><code>cc39f56</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11172">#11172</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/82bef01ad3dd5e0317e48da40707be6bccc52f94"><code>82bef01</code></a>
fix(core): coerce string v1 AIMessage content to text blocks (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11171">#11171</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/8a7c5f83e570c615c6b34e1234f5972dc7a2169c"><code>8a7c5f8</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11170">#11170</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/988ca7dc9f1debd48278c6e888553e11c7845ca3"><code>988ca7d</code></a>
fix(openai): emit <code>output_text</code> for assistant content in
responses input (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11">#11</a>...</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/e233f4192475cfb97dbd8907b2fb69b812b6950a"><code>e233f41</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11168">#11168</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/4c7a06ec3e4728bb036a28f678dd8ec2521e1c82"><code>4c7a06e</code></a>
fix(langchain): malformed tool input schemas are unrecoverable (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11167">#11167</a>)</li>
<li><a
href="https://github.com/langchain-ai/langchainjs/commit/1a1fe3ca9cd779abda3baf23529434dca601f00b"><code>1a1fe3c</code></a>
chore(deps): bump the aws group across 1 directory with 7 updates (<a
href="https://redirect.github.com/langchain-ai/langchainjs/issues/11134">#11134</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langchainjs/compare/@langchain/classic@1.0.38...@langchain/classic@1.0.40">compare
view</a></li>
</ul>
</details>
<br />

Updates `@langchain/quickjs` from 0.5.1 to 0.6.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/deepagentsjs/releases">@​langchain/quickjs's
releases</a>.</em></p>
<blockquote>
<h2><code>@​langchain/quickjs</code><a
href="https://github.com/0"><code>@​0</code></a>.6.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><a
href="https://redirect.github.com/langchain-ai/deepagentsjs/pull/606">#606</a>
<a
href="https://github.com/langchain-ai/deepagentsjs/commit/3c8f8b2ea6f0204353c63bf49c3fdc6655bf1069"><code>3c8f8b2</code></a>
Thanks <a
href="https://github.com/colifran"><code>@​colifran</code></a>! -
chore(quickjs): disallow task as a configurable ptc tool</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/ff8cc5c4b4d17dc0c784e162a1b69563305fcbdc"><code>ff8cc5c</code></a>
chore: version packages (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/607">#607</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/1a2b2df5528f0f61870b054fff8291355f6a2a0b"><code>1a2b2df</code></a>
fix(deepagents): default unknown file extensions to text/plain (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/656">#656</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/5f93c114759399002a3981a93e3df13981514b1d"><code>5f93c11</code></a>
fix(modal): modal sandboxes fail to upload files (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/657">#657</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/ff7d82a791456b268c0e9bf70a9e455295ffb4b9"><code>ff7d82a</code></a>
build(deps): bump the minor-deps-updates-main group with 8 updates (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/640">#640</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/88986a241743ca6b8db513c1c9926a7b59d3ca27"><code>88986a2</code></a>
build(deps): bump the major-deps-updates-main group with 3 updates (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/641">#641</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/9217edd307d7815fe201541951d70a44d70918bc"><code>9217edd</code></a>
build(deps): bump the patch-deps-updates-main group with 15 updates (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/639">#639</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/4f1b6cfd71e6a309f8754e700cca3ef9367638b7"><code>4f1b6cf</code></a>
build(deps): bump actions/checkout from 6.0.1 to 7.0.0 in the
major-deps-upda...</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/1cca3d32bb8f992e29322ed041308555fda39cfe"><code>1cca3d3</code></a>
build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in the
minor-deps-...</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/331b80f8d00a568ba58ab7af4d02f4dfa097d4ce"><code>331b80f</code></a>
build(deps): bump the patch-deps-updates group with 2 updates (<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/636">#636</a>)</li>
<li><a
href="https://github.com/langchain-ai/deepagentsjs/commit/5b462f2ab2400fba52906e8f1485a500ec5b6e17"><code>5b462f2</code></a>
fix: migrate Daytona SDK dependency [closes <a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/609">#609</a>]
(<a
href="https://redirect.github.com/langchain-ai/deepagentsjs/issues/614">#614</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/deepagentsjs/compare/@langchain/quickjs@0.5.1...@langchain/quickjs@0.6.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `langsmith` from 0.8.0 to 0.8.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/langchain-ai/langsmith-sdk/releases">langsmith's
releases</a>.</em></p>
<blockquote>
<h2>v0.8.4</h2>
<h2>What's Changed</h2>
<ul>
<li>release(js): 0.6.3 by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2864">langchain-ai/langsmith-sdk#2864</a></li>
<li>chore(deps): bump python-multipart from 0.0.26 to 0.0.27 in /python
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2859">langchain-ai/langsmith-sdk#2859</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.91.1 to
0.92.0 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2858">langchain-ai/langsmith-sdk#2858</a></li>
<li>chore(deps): bump postcss from 8.5.8 to 8.5.14 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2857">langchain-ai/langsmith-sdk#2857</a></li>
<li>chore(deps): bump hono from 4.12.15 to 4.12.18 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2860">langchain-ai/langsmith-sdk#2860</a></li>
<li>chore(deps-dev): bump langchain-core from 1.3.2 to 1.3.3 in /python
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2867">langchain-ai/langsmith-sdk#2867</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.92.0 to
0.93.0 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2869">langchain-ai/langsmith-sdk#2869</a></li>
<li>chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /python by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2873">langchain-ai/langsmith-sdk#2873</a></li>
<li>chore(deps): bump the py-minor-and-patch group across 1 directory
with 12 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2876">langchain-ai/langsmith-sdk#2876</a></li>
<li>chore(deps-dev): bump the js-minor-and-patch group across 1
directory with 16 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2877">langchain-ai/langsmith-sdk#2877</a></li>
<li>chore(deps): bump the py-minor-and-patch group across 1 directory
with 11 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2879">langchain-ai/langsmith-sdk#2879</a></li>
<li>chore(deps): bump the npm_and_yarn group across 2 directories with 2
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2868">langchain-ai/langsmith-sdk#2868</a></li>
<li>chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.93.0 to
0.94.0 in /js by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2878">langchain-ai/langsmith-sdk#2878</a></li>
<li>sdk(js): rename experimental/sandbox -&gt; sandbox (breaking) by <a
href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2885">langchain-ai/langsmith-sdk#2885</a></li>
<li>sdk(py): drop sandbox alpha/experimental warnings by <a
href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2884">langchain-ai/langsmith-sdk#2884</a></li>
<li>feat(sandbox): make snapshot optional and add TS options overload by
<a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2887">langchain-ai/langsmith-sdk#2887</a></li>
<li>release(py): 0.8.4 by <a
href="https://github.com/ramon-langchain"><code>@​ramon-langchain</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2889">langchain-ai/langsmith-sdk#2889</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.3...v0.8.4">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.3...v0.8.4</a></p>
<h2>v0.8.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(js): prevent sending [object Object] as span attribute when
dealing with nested objects, send full langsmith.usage_metadata if
present by <a href="https://github.com/dqbd"><code>@​dqbd</code></a> in
<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2845">langchain-ai/langsmith-sdk#2845</a></li>
<li>release(js): bump to 0.6.2 by <a
href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2856">langchain-ai/langsmith-sdk#2856</a></li>
<li>sdk(py): replace ttl_seconds with idle_ttl_seconds +
delete_after_stop_seconds by <a
href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2853">langchain-ai/langsmith-sdk#2853</a></li>
<li>sdk(js): replace ttlSeconds with idleTtlSeconds +
deleteAfterStopSeconds by <a
href="https://github.com/DanielKneipp"><code>@​DanielKneipp</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2854">langchain-ai/langsmith-sdk#2854</a></li>
<li>Fix push_agent URL owner for name-only identifiers by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2862">langchain-ai/langsmith-sdk#2862</a></li>
<li>docs(langsmith): clarify trust boundaries when working with hub by
<a href="https://github.com/eyurtsev"><code>@​eyurtsev</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2861">langchain-ai/langsmith-sdk#2861</a></li>
<li>release(py): 0.8.3 by <a
href="https://github.com/vishnu-ssuresh"><code>@​vishnu-ssuresh</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2863">langchain-ai/langsmith-sdk#2863</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.2...v0.8.3">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.2...v0.8.3</a></p>
<h2>v0.8.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump JS SDK version to 0.6.1 by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2847">langchain-ai/langsmith-sdk#2847</a></li>
<li>fix: parse urllib3 version with packaging.Version by <a
href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2851">langchain-ai/langsmith-sdk#2851</a></li>
<li>Bump Python SDK version to 0.8.2 by <a
href="https://github.com/langchain-infra"><code>@​langchain-infra</code></a>
in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2855">langchain-ai/langsmith-sdk#2855</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/justinwolfington"><code>@​justinwolfington</code></a>
made their first contribution in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2851">langchain-ai/langsmith-sdk#2851</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.1...v0.8.2">https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.1...v0.8.2</a></p>
<h2>v0.8.1</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(js): remove experimental opencode integration by <a
href="https://github.com/dqbd"><code>@​dqbd</code></a> in <a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/pull/2836">langchain-ai/langsmith-sdk#2836</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/273f8f9b0deccb7b21f899fbe6ee0474702a9860"><code>273f8f9</code></a>
release(py): 0.8.4 (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2889">#2889</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/afbf4fb970f1b1d5bc4b8fb3e233a8bef1a5eac9"><code>afbf4fb</code></a>
feat(sandbox): make snapshot optional and add TS options overload (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2887">#2887</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/54da5410a2ab7ee67b2eed9137f8dcbbc1426355"><code>54da541</code></a>
sdk(py): drop sandbox alpha/experimental warnings (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2884">#2884</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/1536e2bb61b35acd9bf7ef4b14fa3305f349fd24"><code>1536e2b</code></a>
sdk(js): rename experimental/sandbox -&gt; sandbox (breaking) (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2885">#2885</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/8f635fbb0e787b0db7450e12e4fed234053a2b1b"><code>8f635fb</code></a>
chore(deps-dev): bump <code>@​anthropic-ai/sdk</code> from 0.93.0 to
0.94.0 in /js (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2878">#2878</a>)</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/ce0f40f3852ff938df2b9c1922b352c2559e5acc"><code>ce0f40f</code></a>
chore(deps): bump the npm_and_yarn group across 2 directories with 2
updates ...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/061c197e3aefee98024ca3ad280c8530e5140a67"><code>061c197</code></a>
chore(deps): bump the py-minor-and-patch group across 1 directory with
11 upd...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/ab5d5f3f2253415f8697aa4b7561c47ea0b0de33"><code>ab5d5f3</code></a>
chore(deps-dev): bump the js-minor-and-patch group across 1 directory
with 16...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/3dc69de1025cb08f1fda8a63447ebba2c13a4b16"><code>3dc69de</code></a>
chore(deps): bump the py-minor-and-patch group across 1 directory with
12 upd...</li>
<li><a
href="https://github.com/langchain-ai/langsmith-sdk/commit/6754bd3bec2b88db8471b4d4726cf95021bc4476"><code>6754bd3</code></a>
chore(deps): bump urllib3 from 2.6.3 to 2.7.0 in /python (<a
href="https://redirect.github.com/langchain-ai/langsmith-sdk/issues/2873">#2873</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/langchain-ai/langsmith-sdk/compare/v0.8.0...v0.8.4">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-23 12:04:59 -07:00
github-actions[bot] 483e6df5ea chore: version packages (#2621) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @langchain/langgraph-sdk@1.9.28

### Patch Changes

- [#2622](https://github.com/langchain-ai/langgraphjs/pull/2622)
[`cf2407a`](https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): clear hydrate interrupt allowlist on respond()

`submit()` already cleared `#hydratedActiveInterruptIds` so a new run's
live `input.requested` events were not dropped as historical.
`respond()` / `respondAll()` (via `dispatchResume`) did not, so a
follow-on HITL after resume never appeared on `stream.interrupt` and
free-text submits could resume with the wrong payload.

- [#2613](https://github.com/langchain-ai/langgraphjs/pull/2613)
[`82a320f`](https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061)
Thanks [@sreeramsama](https://github.com/sreeramsama)! - Fix `useStream`
crash (`TypeError: Cannot read properties of null (reading 'fetch')`)
when a thread is cleared while hydration is in flight. The stale hydrate
now bails immediately after the `getState()` await — it no longer
applies the fetched state to the thread that was left, nor opens a
reconnect via `threads.stream(null, …)`.
## @langchain/angular@1.0.29

### Patch Changes

- Updated dependencies
[[`cf2407a`](https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca),
[`82a320f`](https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061)]:
  - @langchain/langgraph-sdk@1.9.28
## @langchain/react@1.0.29

### Patch Changes

- Updated dependencies
[[`cf2407a`](https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca),
[`82a320f`](https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061)]:
  - @langchain/langgraph-sdk@1.9.28
## @langchain/svelte@1.0.29

### Patch Changes

- Updated dependencies
[[`cf2407a`](https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca),
[`82a320f`](https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061)]:
  - @langchain/langgraph-sdk@1.9.28
## @langchain/vue@1.0.29

### Patch Changes

- Updated dependencies
[[`cf2407a`](https://github.com/langchain-ai/langgraphjs/commit/cf2407a31657a8308312873a13863f496b34f3ca),
[`82a320f`](https://github.com/langchain-ai/langgraphjs/commit/82a320faf6876238f8bac8aa6a7c593bef2be061)]:
  - @langchain/langgraph-sdk@1.9.28

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/angular@1.0.29 @langchain/langgraph-sdk@1.9.28 @langchain/react@1.0.29 @langchain/svelte@1.0.29 @langchain/vue@1.0.29 		2026-07-21 15:53:00 -07:00
dependabot[bot] c15239f5c9 chore(deps): bump tar from 7.5.16 to 7.5.19 (#2625) 
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.19.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad"><code>be440da</code></a>
7.5.19</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3"><code>2812e93</code></a>
add maxDecompressionRatio guard against explosive decompression</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93"><code>9ecd4d2</code></a>
7.5.18</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5"><code>9e78bf0</code></a>
refuse to let header size be less than 0</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b"><code>e02a4e9</code></a>
pax: parse values according to known types</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946"><code>9cbdb31</code></a>
7.5.17</li>
<li><a
href="https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3"><code>7a635c2</code></a>
terminate pax strings on nul bytes</li>
<li>See full diff in <a
href="https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.19">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar&package-manager=npm_and_yarn&previous-version=7.5.16&new-version=7.5.19)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:50:29 -07:00
dependabot[bot] 2dfb9211b6 chore(deps): bump hono from 4.12.25 to 4.12.27 (#2627) 
Bumps [hono](https://github.com/honojs/hono) from 4.12.25 to 4.12.27.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/honojs/hono/releases">hono's
releases</a>.</em></p>
<blockquote>
<h2>v4.12.27</h2>
<h2>Security fixes</h2>
<p>This release includes fixes for the following security issues:</p>
<h3>hono/jsx does not isolate context per request</h3>
<p>Affects: <code>hono/jsx</code>, <code>hono/jsx-renderer</code>.
During SSR, context was stored process-wide instead of per request, so
<code>useContext()</code>/<code>useRequestContext()</code> read after an
<code>await</code> in an async component could return another concurrent
request's value — leading to cross-request data disclosure or
authorization checks against the wrong request. GHSA-hvrm-45r6-mjfj</p>
<h3>Server-Side XSS via JSX escaping bypass in cx()</h3>
<p>Affects: <code>hono/css</code>. <code>cx()</code> marked its composed
class name as already-escaped without escaping the input, so untrusted
input passed as a class name could break out of the JSX
<code>class</code> attribute during SSR and inject markup (XSS).
GHSA-w62v-xxxg-mg59</p>
<h3>API Gateway v1 adapter can drop a repeated request header value</h3>
<p>Affects: <code>hono/aws-lambda</code>. The API Gateway v1 (and VPC
Lattice) adapter de-duplicated repeated header values by substring
instead of exact match, dropping a value that is a substring of another
(e.g. <code>203.0.113.1</code> dropped when <code>203.0.113.10</code> is
present) — affecting logic such as <code>X-Forwarded-For</code>-based IP
restriction. GHSA-xgm2-5f3f-mvvc</p>
<hr />
<p>Users of <code>hono/jsx</code>/<code>hono/jsx-renderer</code>,
<code>hono/css</code> (<code>cx()</code>), or the
<code>hono/aws-lambda</code> API Gateway v1 / VPC Lattice adapters are
encouraged to upgrade.</p>
<h2>v4.12.26</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(lambda-edge): satisfy Deno lib types for Content-Length body
encoding by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5013">honojs/hono#5013</a></li>
<li>ci: publish to npm from CI with OIDC trusted publishing by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5028">honojs/hono#5028</a></li>
<li>chore: remove unused devcontainer and gitpod configs by <a
href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5029">honojs/hono#5029</a></li>
<li>chore: replace arg and glob with Bun native APIs in build script by
<a href="https://github.com/yusukebe"><code>@​yusukebe</code></a> in <a
href="https://redirect.github.com/honojs/hono/pull/5030">honojs/hono#5030</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/honojs/hono/compare/v4.12.25...v4.12.26">https://github.com/honojs/hono/compare/v4.12.25...v4.12.26</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/honojs/hono/commit/97c6fe1f12298c715eb7b2da65b4b6e0d81682bb"><code>97c6fe1</code></a>
4.12.27</li>
<li><a
href="https://github.com/honojs/hono/commit/aa921770d09bc35970362d5a2630a878f6d982fd"><code>aa92177</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/cd3f6f7194f0e5c9d4b26ae0cf232018d0f388fc"><code>cd3f6f7</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/d4853a8f2794ce982818783f123e388a6dedd966"><code>d4853a8</code></a>
fix(jsx): make merged context-isolation tests pass tsc type check (<a
href="https://redirect.github.com/honojs/hono/issues/5037">#5037</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/6735fea78db8ca72e8606001f57b10ee6a96b349"><code>6735fea</code></a>
fix(jsx): cast awaitedFallback through unknown to fix Deno type check
(<a
href="https://redirect.github.com/honojs/hono/issues/5036">#5036</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/fab3b13639339cbd5ba1166a5b23d9ac30c5f64f"><code>fab3b13</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/honojs/hono/commit/9f0dadf141a3242a6c3b77462c7d33c6ce0f599d"><code>9f0dadf</code></a>
ci: use npm Staged publishing (<a
href="https://redirect.github.com/honojs/hono/issues/5035">#5035</a>)</li>
<li><a
href="https://github.com/honojs/hono/commit/27b7992f821bc10c2f62ad0ad86bd94eea251862"><code>27b7992</code></a>
4.12.26</li>
<li><a
href="https://github.com/honojs/hono/commit/d29982cc40c3babb417db625ab0671d982398646"><code>d29982c</code></a>
chore: replace arg and glob with Bun native APIs in build script</li>
<li><a
href="https://github.com/honojs/hono/commit/16215d5f509099b81b00d60a2777bc6b5ac06827"><code>16215d5</code></a>
chore: remove unused devcontainer and gitpod configs (<a
href="https://redirect.github.com/honojs/hono/issues/5029">#5029</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/honojs/hono/compare/v4.12.25...v4.12.27">compare
view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a
href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new
releaser for hono since your current version.</p>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=hono&package-manager=npm_and_yarn&previous-version=4.12.25&new-version=4.12.27)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:50:14 -07:00
dependabot[bot] bed89394e0 chore(deps-dev): bump typeorm from 0.3.29 to 0.3.31 (#2626) 
Bumps [typeorm](https://github.com/typeorm/typeorm) from 0.3.29 to
0.3.31.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/typeorm/typeorm/releases">typeorm's
releases</a>.</em></p>
<blockquote>
<h2>0.3.31</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cache:</strong> release query runner on error in
storeInCache (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12545">#12545</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/a84b9b3d39c44cc0e5809b4680a5f046bda602cd">a84b9b3</a>)</li>
<li>correct grammar in AlreadyHasActiveConnectionError message (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12554">#12554</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/304d1290a4b6bd47d7d38269bae6a8514f378c9c">304d129</a>)</li>
<li><strong>entity-manager:</strong> default invalidWhereValuesBehavior
to throw on the write path (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12690">#12690</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/44d8052ba4d226364c26e722826340d4ceb1419b">44d8052</a>)</li>
<li><strong>entity-manager:</strong> validate where criteria in
increment/decrement (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12692">#12692</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/8a51b756bf31c885da1e1d92cb17d94819c7040a">8a51b75</a>)</li>
<li><strong>mongodb:</strong> use cursor.transform for doc to entity
transformation and skip load broadcast in next if toArray (<a
href="https://redirect.github.com/typeorm/typeorm/issues/11926">#11926</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/0bbefc914ef69b3826a4a2075b0b008c9a02e807">0bbefc9</a>)</li>
<li>move hashing function to PlatformTools (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12648">#12648</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/c456cbd5d40aa2e797314bd202956449f64efbac">c456cbd</a>)</li>
<li>multiple recursive cte problems (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12490">#12490</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/7c26654f430a7190c331242d68e75111fb334ea3">7c26654</a>)</li>
<li>normalization of FindOptionsWhere for arrays and Buffers (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12577">#12577</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/a8173fcdf325c44bf3eb2101c6318b45c573102b">a8173fc</a>)</li>
<li><strong>persistence:</strong> preserve select false columns on the
in-memory entity after save() (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12501">#12501</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/324c46cd8669270dd5f22173cd78a7cab591349c">324c46c</a>)</li>
<li><strong>postgres:</strong> improve normalizeDatetimeFunction for
tstzrange data type (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12182">#12182</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/bf47c9f1171b15523292e8914cfbdcfee542ef07">bf47c9f</a>)</li>
<li><strong>query-builder:</strong> reject empty where criteria on
update and delete operations (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12629">#12629</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/81b946625d84bcf3ce720fea7d406003270169ee">81b9466</a>)</li>
<li><strong>query-builder:</strong> wrap inner joins under left joins
correctly (<a
href="https://redirect.github.com/typeorm/typeorm/issues/11137">#11137</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/d5f4b9d7e0f0aca63a9dd66e7ae26a15f7e8eee0">d5f4b9d</a>)</li>
<li>remove <code>require()</code> calls that break bundlers (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12647">#12647</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/30f9fc717bcfaa472d56680437105a6b9581014d">30f9fc7</a>)</li>
<li><strong>tree-entity:</strong> tree entity schema propagation in
internal TreeRepository methods (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12590">#12590</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/7fb7c2c7c30d57489921eed458dfb97a5d08d4b8">7fb7c2c</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/typeorm/typeorm/compare/0.3.30...0.3.31">https://github.com/typeorm/typeorm/compare/0.3.30...0.3.31</a></p>
<h2>0.3.30</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: scope invalidWhereValuesBehavior to high-level abstractions
only by <a
href="https://github.com/naorpeled"><code>@​naorpeled</code></a> in <a
href="https://redirect.github.com/typeorm/typeorm/pull/11878">typeorm/typeorm#11878</a></li>
<li>fix: scope computed-columns join to correct table in MSSQL schema
query by <a
href="https://github.com/PreAgile"><code>@​PreAgile</code></a> in <a
href="https://redirect.github.com/typeorm/typeorm/pull/12288">typeorm/typeorm#12288</a></li>
<li>fix: preserve user-defined shared join columns in change set by <a
href="https://github.com/PreAgile"><code>@​PreAgile</code></a> in <a
href="https://redirect.github.com/typeorm/typeorm/pull/12354">typeorm/typeorm#12354</a></li>
<li>revert: fix up limit with joins by <a
href="https://github.com/alumni"><code>@​alumni</code></a></li>
<li>fix(find-options): allow array values in JsonContains by <a
href="https://github.com/kyungseopk1m"><code>@​kyungseopk1m</code></a>
in <a
href="https://redirect.github.com/typeorm/typeorm/pull/12420">typeorm/typeorm#12420</a></li>
<li>fix(cockroachdb): adjust join in loadTables to load correct table
columns by <a
href="https://github.com/Cprakhar"><code>@​Cprakhar</code></a> in <a
href="https://redirect.github.com/typeorm/typeorm/pull/12413">typeorm/typeorm#12413</a></li>
<li>ci: use the v0.3 branch as base for detect-changes by <a
href="https://github.com/alumni"><code>@​alumni</code></a></li>
<li>chore(release): release 0.3.30 by <a
href="https://github.com/alumni"><code>@​alumni</code></a> in <a
href="https://redirect.github.com/typeorm/typeorm/pull/12511">typeorm/typeorm#12511</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/typeorm/typeorm/compare/0.3.29...0.3.30">https://github.com/typeorm/typeorm/compare/0.3.29...0.3.30</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/typeorm/typeorm/blob/0.3.31/CHANGELOG.md">typeorm's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/typeorm/typeorm/compare/0.3.30...0.3.31">0.3.31</a>
(2026-07-13)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>docs:</strong> correct project name in release flow (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12519">#12519</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/3b9faa31ced080db2073cd92c42905dd402fa636">3b9faa3</a>)</li>
<li><strong>docs:</strong> resolve docs workflow issues (<a
href="https://github.com/typeorm/typeorm/commit/c3c09b043f68ad4b19cc7b02bbeb85e2f720305c">c3c09b0</a>)</li>
<li><strong>docs:</strong> resolve docs workflow issues (<a
href="https://github.com/typeorm/typeorm/commit/f7b4b634647bd1a3e340fa421760183ebfb867be">f7b4b63</a>)</li>
<li><strong>entity-manager:</strong> validate where criteria in
increment/decrement (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12692">#12692</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/a69a8c6816a493461f043c3bce8364a51fbf91ce">a69a8c6</a>)</li>
<li><strong>migration:</strong> escape backslashes and interpolation in
generated template literals (<a
href="https://github.com/typeorm/typeorm/commit/b175f9b8be422edd2a2ac035ba90c3f2ce782dfe">b175f9b</a>)</li>
<li>normalization of FindOptionsWhere for arrays and Buffers (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12577">#12577</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/a309182c4495c8606dea96ed71ab3f2236663d64">a309182</a>)</li>
<li><strong>persistence:</strong> preserve select false columns on the
in-memory entity after save() (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12501">#12501</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/d8e91274662b85effbf6c79ff5d7379970839d27">d8e9127</a>)</li>
<li><strong>query-builder:</strong> reject empty where criteria on
update and delete operations (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12629">#12629</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/dfd972b80b9c79f4df429cd4a3cf171481928874">dfd972b</a>)</li>
<li><strong>tree-entity:</strong> tree entity schema propagation in
internal TreeRepository methods (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12590">#12590</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/e1f93da606576660b7e907c9f8d90520394ed495">e1f93da</a>)</li>
</ul>
<h2><a
href="https://github.com/typeorm/typeorm/compare/0.3.29...0.3.30">0.3.30</a>
(2026-05-18)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cockroachdb:</strong> adjust join in loadTables to load
correct table columns (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12413">#12413</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/d93402e57523b8e2f7373f052b2e7872ce87012b">d93402e</a>)</li>
<li><strong>find-options:</strong> allow array values in JsonContains
(<a
href="https://redirect.github.com/typeorm/typeorm/issues/12420">#12420</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/90f169d6988ee60ad5f1243d3e7c839be2a76b3d">90f169d</a>)</li>
<li>preserve user-defined shared join columns in change set (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12354">#12354</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/0aba011264bda823ef258a8d090fd3d99098bb26">0aba011</a>)</li>
<li>scope computed-columns join to correct table in MSSQL schema query
(<a
href="https://redirect.github.com/typeorm/typeorm/issues/12288">#12288</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/6170be6dfcbbbb0aa3a9b35c2dab5d0f60a7a1b3">6170be6</a>)</li>
<li>scope invalidWhereValuesBehavior to high-level abstractions only (<a
href="https://redirect.github.com/typeorm/typeorm/issues/11878">#11878</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/1e10fb86a6bac2fe012452d86867c4d4bb67568a">1e10fb8</a>),
closes <a href="https://github.com/hi/issues/level">hi#level</a></li>
</ul>
<h3>Reverts</h3>
<ul>
<li>fix up limit with joins (<a
href="https://redirect.github.com/typeorm/typeorm/issues/11987">#11987</a>)
(<a
href="https://github.com/typeorm/typeorm/commit/66f1ff80fb66d2a33d56b35f50e110686d81829b">66f1ff8</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/typeorm/typeorm/commit/797320375fb83b2e9af4a6455e0b1b4483be329d"><code>7973203</code></a>
ci: publish to npm from <code>v0</code> using the <code>legacy</code>
tag</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/92e92767e3b9567bb97ca7552c752e8a57c15518"><code>92e9276</code></a>
ci: use <code>npm@11</code></li>
<li><a
href="https://github.com/typeorm/typeorm/commit/099c23ef51caf86407a06c7292881316337d7db3"><code>099c23e</code></a>
chore: prepare release 0.3.31 (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12676">#12676</a>)</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/b175f9b8be422edd2a2ac035ba90c3f2ce782dfe"><code>b175f9b</code></a>
Merge commit from fork</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/a69a8c6816a493461f043c3bce8364a51fbf91ce"><code>a69a8c6</code></a>
fix(entity-manager): validate where criteria in increment/decrement (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12692">#12692</a>)</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/dfd972b80b9c79f4df429cd4a3cf171481928874"><code>dfd972b</code></a>
fix(query-builder): reject empty where criteria on update and delete
operatio...</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/a2d43639fdd762192a4d25716b6750a5618dfaf0"><code>a2d4363</code></a>
chore: update deps (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12661">#12661</a>)</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/e1f93da606576660b7e907c9f8d90520394ed495"><code>e1f93da</code></a>
fix(tree-entity): tree entity schema propagation in internal
TreeRepository m...</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/a309182c4495c8606dea96ed71ab3f2236663d64"><code>a309182</code></a>
fix: normalization of FindOptionsWhere for arrays and Buffers (<a
href="https://redirect.github.com/typeorm/typeorm/issues/12577">#12577</a>)</li>
<li><a
href="https://github.com/typeorm/typeorm/commit/d8e91274662b85effbf6c79ff5d7379970839d27"><code>d8e9127</code></a>
fix(persistence): preserve select false columns on the in-memory entity
after...</li>
<li>Additional commits viewable in <a
href="https://github.com/typeorm/typeorm/compare/0.3.29...0.3.31">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=typeorm&package-manager=npm_and_yarn&previous-version=0.3.29&new-version=0.3.31)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/langchain-ai/langgraphjs/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:49:59 -07:00
Christian Bromann cf2407a316 fix(sdk): clear hydrate interrupt allowlist on respond() (#2622) 
## Summary
- Clear the hydrate-window interrupt allowlist in `dispatchResume()`
(same as `submit()`), so `respond()` / `respondAll()` accept genuinely
new live `input.requested` events from the resumed run.
- Without this, a second HITL after answering the first never appeared
on `stream.interrupt`, and clients could free-text `submit` into an
implicit resume with the wrong payload (`KeyError: 'decisions'` on HITL
middleware).
- Add a regression test covering hydrate → `respond()` → follow-on
interrupt id.
 2026-07-21 15:49:43 -07:00
dependabot[bot] 582dc0d359 chore(deps): bump the major group with 2 updates (#2615) 
Bumps the major group with 2 updates:
[actions/setup-node](https://github.com/actions/setup-node) and
[actions/setup-python](https://github.com/actions/setup-python).

Updates `actions/setup-node` from 6.4.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Add cache-primary-key and cache-matched-key as outputs by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1577">actions/setup-node#1577</a></li>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1574">actions/setup-node#1574</a></li>
</ul>
<h3>Bug fixes:</h3>
<ul>
<li>Remove dummy NODE_AUTH_TOKEN export by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-node/pull/1558">actions/setup-node#1558</a></li>
<li>Only use <code>mirrorToken</code> in <code>getManifest</code> if
it's provided by <a
href="https://github.com/deiga"><code>@​deiga</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
</ul>
<h3>Documentation updates:</h3>
<ul>
<li>Add documentation for publishing to npm with Trusted Publisher
(OIDC) by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li>docs: Update restore-only cache documentation by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1550">actions/setup-node#1550</a></li>
<li>docs: Update caching recommendations to mitigate cache poisoning
risks by <a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1567">actions/setup-node#1567</a></li>
</ul>
<h3>Dependency update:</h3>
<ul>
<li>Upgrade <code>@​actions/cache</code> to 5.1.0, log cache write
denied by <a
href="https://github.com/jasongin"><code>@​jasongin</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/chiranjib-swain"><code>@​chiranjib-swain</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1536">actions/setup-node#1536</a></li>
<li><a href="https://github.com/deiga"><code>@​deiga</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1548">actions/setup-node#1548</a></li>
<li><a href="https://github.com/jasongin"><code>@​jasongin</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1569">actions/setup-node#1569</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6...v7.0.0">https://github.com/actions/setup-node/compare/v6...v7.0.0</a></p>
<h2>v6.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@​actions/cache</code> to 5.1.0 and add security
overrides for undici and fast-xml-parser by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1579">actions/setup-node#1579</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0">https://github.com/actions/setup-node/compare/v6.4.0...v6.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/820762786026740c76f36085b0efc47a31fe5020"><code>8207627</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1574">#1574</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/04be95cf3511ea51ebf9f224ddfb99cc7ab87cd4"><code>04be95c</code></a>
Add cache-primary-key and cache-matched-key as outputs (<a
href="https://redirect.github.com/actions/setup-node/issues/1577">#1577</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/7c2c68d20d402ed6a201ada70a81341941093140"><code>7c2c68d</code></a>
docs: Update caching recommendations to mitigate cache poisoning risks
(<a
href="https://redirect.github.com/actions/setup-node/issues/1567">#1567</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/6a61c0375d66246de94630495909f12cf8dac84d"><code>6a61c03</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1569">#1569</a>
from jasongin/update-actions-cache-5.1.0</li>
<li><a
href="https://github.com/actions/setup-node/commit/30eb73b41ded577900c1ebf968ef95cdf8f7434f"><code>30eb73b</code></a>
Resolve high-severity audit issues</li>
<li><a
href="https://github.com/actions/setup-node/commit/4e1a87a501d0302f99e30e2748568adcb388d09f"><code>4e1a87a</code></a>
Update dist</li>
<li><a
href="https://github.com/actions/setup-node/commit/360237f0c01778d0c17291f75c56d6feae4f7574"><code>360237f</code></a>
Strict equality</li>
<li><a
href="https://github.com/actions/setup-node/commit/4f8aac5beb2f0854bc79651567a18c67eb0b9de3"><code>4f8aac5</code></a>
Bump <code>@​actions/cache</code> to 5.1.0, log cache write denied</li>
<li><a
href="https://github.com/actions/setup-node/commit/f4a67bbeca970f103397d3d2b9462cf787cd2980"><code>f4a67bb</code></a>
Only use <code>mirrorToken</code> in <code>getManifest</code> if it's
provided (<a
href="https://redirect.github.com/actions/setup-node/issues/1548">#1548</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/0355742c943ddb13ca8a6b700f824231caa91e75"><code>0355742</code></a>
Remove dummy NODE_AUTH_TOKEN export (<a
href="https://redirect.github.com/actions/setup-node/issues/1558">#1558</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/setup-python` from 6.3.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements</h3>
<ul>
<li>Migrate to ESM and upgrade dependencies by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1330">actions/setup-python#1330</a></li>
<li>Pin SHA commits and update docs with latest versions by <a
href="https://github.com/HarithaVattikuti"><code>@​HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1338">actions/setup-python#1338</a></li>
<li>Remove the pip-install input by <a
href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in
<a
href="https://redirect.github.com/actions/setup-python/pull/1336">actions/setup-python#1336</a></li>
</ul>
<h3>Bug Fix</h3>
<ul>
<li>Fix to Classify stderr warning messages as warnings instead of
errors in annotations by <a
href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li>Validate and retry manifest fetch to prevent silent failures by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1332">actions/setup-python#1332</a></li>
</ul>
<h3>Dependency Upgrade</h3>
<ul>
<li>Bump certifi from 2020.6.20 to 2024.7.4 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1328">actions/setup-python#1328</a></li>
<li>Remove EOL Python versions and Bumps numpy text fixture by <a
href="https://github.com/priya-kinthali"><code>@​priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1333">actions/setup-python#1333</a></li>
<li>Upgrade <code>@​actions/cache</code> to 6.2.0 by <a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/lmvysakh"><code>@​lmvysakh</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li>
<li><a
href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v6...v7.0.0">https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97"><code>5fda3b9</code></a>
Pin SHA commits and update docs with latest versions (<a
href="https://redirect.github.com/actions/setup-python/issues/1338">#1338</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-python/issues/1337">#1337</a>
from actions/philip-gai/bump-actions-cache-6-2-0</li>
<li><a
href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a>
Remove the pip-install input (<a
href="https://redirect.github.com/actions/setup-python/issues/1336">#1336</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932"><code>f8cf429</code></a>
Migrate to ESM and upgrade dependencies (<a
href="https://redirect.github.com/actions/setup-python/issues/1330">#1330</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5"><code>54baeea</code></a>
Validate and retry manifest fetch to prevent silent failures (<a
href="https://redirect.github.com/actions/setup-python/issues/1332">#1332</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a>
Annotation code fix (<a
href="https://redirect.github.com/actions/setup-python/issues/1335">#1335</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a>
remove EOL Python versions and Bumps numpy text fixture (<a
href="https://redirect.github.com/actions/setup-python/issues/1333">#1333</a>)</li>
<li><a
href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a>
Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data
(<a
href="https://redirect.github.com/actions/setup-python/issues/1328">#1328</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:40:10 -07:00
dependabot[bot] 34a14f2072 chore(deps): bump the minor-and-patch group with 2 updates (#2614) 
Bumps the minor-and-patch group with 2 updates:
[actions/checkout](https://github.com/actions/checkout) and
[dorny/paths-filter](https://github.com/dorny/paths-filter).

Updates `actions/checkout` from 7.0.0 to 7.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>skip running unsafe pr check if input is default by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li>
<li>trim only ascii whitespace for branch by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li>
<li>escape values passed to --unset by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li>
<li>Various dependency updates</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v7...v7.0.1">https://github.com/actions/checkout/compare/v7...v7.0.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v7.0.1</h2>
<ul>
<li>Skip running unsafe pr check if input is default by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2518">actions/checkout#2518</a></li>
<li>Trim only ascii whitespace for branch by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2521">actions/checkout#2521</a></li>
<li>Escape values passed to --unset by <a
href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2530">actions/checkout#2530</a></li>
<li>Various dependency updates</li>
</ul>
<h2>v7.0.0</h2>
<ul>
<li>Block checking out fork PR for pull_request_target and workflow_run
by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li>
<li>Various dependency updates</li>
</ul>
<h2>v6.0.3</h2>
<ul>
<li>Fix checkout init for SHA-256 repositories by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li>
<li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a
href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li>
</ul>
<h2>v6.0.2</h2>
<ul>
<li>Fix tag handling: preserve annotations and explicit fetch-tags by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li>
</ul>
<h2>v6.0.1</h2>
<ul>
<li>Add worktree support for persist-credentials includeIf by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li>
</ul>
<h2>v6.0.0</h2>
<ul>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
</ul>
<h2>v5.0.1</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<h2>v5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>v4.3.1</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<h2>v4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/3d3c42e5aac5ba805825da76410c181273ba90b1"><code>3d3c42e</code></a>
prep v7.0.1 release (<a
href="https://redirect.github.com/actions/checkout/issues/2531">#2531</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/28802689a136bfcdb721715abd713740beecbe07"><code>2880268</code></a>
escape values passed to --unset (<a
href="https://redirect.github.com/actions/checkout/issues/2530">#2530</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/12cd2235efa0937479335606d7c3ac9f6c0973b1"><code>12cd223</code></a>
trim only ascii whitespace for branch (<a
href="https://redirect.github.com/actions/checkout/issues/2521">#2521</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/62661c4e71a304b2823ed026347b8d34c3eac541"><code>62661c4</code></a>
skip running unsafe pr check if input is default (<a
href="https://redirect.github.com/actions/checkout/issues/2518">#2518</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8d4307400f9427dba7cb98e488d6ab85f1cec5f"><code>e8d4307</code></a>
Bump the minor-actions-dependencies group with 2 updates (<a
href="https://redirect.github.com/actions/checkout/issues/2499">#2499</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/631c942040754b6e095e929c1677c07e10ed4f87"><code>631c942</code></a>
eslint 9 (<a
href="https://redirect.github.com/actions/checkout/issues/2474">#2474</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/4f1f4aec02e41874fa0262ea8ff5172d7978ad1e"><code>4f1f4ae</code></a>
Bump actions/upload-artifact from 4 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2476">#2476</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/ba097532fb203f7e88c9c3c0b899b49469908a92"><code>ba09753</code></a>
Bump actions/checkout from 6 to 7 (<a
href="https://redirect.github.com/actions/checkout/issues/2488">#2488</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/b9e0990d219a03df7633c93f6f005a8fecbcab22"><code>b9e0990</code></a>
Bump docker/login-action from 3.3.0 to 4.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2479">#2479</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e8cb398be4a550817e382abf69e4c12c76fce1f2"><code>e8cb398</code></a>
Bump docker/build-push-action from 6.5.0 to 7.2.0 (<a
href="https://redirect.github.com/actions/checkout/issues/2478">#2478</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1">compare
view</a></li>
</ul>
</details>
<br />

Updates `dorny/paths-filter` from 4.0.1 to 4.0.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/releases">dorny/paths-filter's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix warning message by <a
href="https://github.com/cgundy"><code>@​cgundy</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282">dorny/paths-filter#282</a></li>
<li>chore: fix GitHub spelling in logs by <a
href="https://github.com/squat"><code>@​squat</code></a> in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278">dorny/paths-filter#278</a></li>
<li>fix: use rev-parse instead of branch --show-current for older git
compat by <a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/303">dorny/paths-filter#303</a></li>
<li>fix: work around git dubious ownership errors in container jobs by
<a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/317">dorny/paths-filter#317</a></li>
<li>docs: update changelog for v4.0.2 by <a
href="https://github.com/saschabratton"><code>@​saschabratton</code></a>
in <a
href="https://redirect.github.com/dorny/paths-filter/pull/318">dorny/paths-filter#318</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/cgundy"><code>@​cgundy</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/282">dorny/paths-filter#282</a></li>
<li><a href="https://github.com/squat"><code>@​squat</code></a> made
their first contribution in <a
href="https://redirect.github.com/dorny/paths-filter/pull/278">dorny/paths-filter#278</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2">https://github.com/dorny/paths-filter/compare/v4.0.1...v4.0.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md">dorny/paths-filter's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/317">Work
around git dubious ownership errors in container jobs</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/303">Use
rev-parse instead of branch --show-current for older git compat</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/282">Fix
warning message</a></li>
</ul>
<h2>v4.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/255">Support
merge queue</a></li>
</ul>
<h2>v4.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/294">Update
action runtime to node24</a></li>
</ul>
<h2>v3.0.3</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/279">Add
missing predicate-quantifier</a></li>
</ul>
<h2>v3.0.2</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/224">Add
config parameter for predicate quantifier</a></li>
</ul>
<h2>v3.0.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/133">Compare
base and ref when token is empty</a></li>
</ul>
<h2>v3.0.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/210">Update to
Node.js 20</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/215">Update
all dependencies</a></li>
</ul>
<h2>v2.11.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/167">Update
@​actions/core to v1.10.0 - Fixes warning about deprecated
set-output</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/168">Document
need for pull-requests: read permission</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/164">Updating
to actions/checkout@v3</a></li>
</ul>
<h2>v2.11.0</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/157">Set
list-files input parameter as not required</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/161">Update
Node.js</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/162">Fix
incorrect handling of Unicode characters in exec()</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/163">Use
Octokit pagination</a></li>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/160">Updates
real world links</a></li>
</ul>
<h2>v2.10.2</h2>
<ul>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/91">Fix
getLocalRef() returns wrong ref</a></li>
</ul>
<h2>v2.10.1</h2>
<ul>
<li><a
href="https://redirect.github.com/dorny/paths-filter/pull/85">Improve
robustness of change detection</a></li>
</ul>
<h2>v2.10.0</h2>
<ul>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/82">Add
ref input parameter</a></li>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/83">Fix
change detection in PR when pullRequest.changed_files is
incorrect</a></li>
</ul>
<h2>v2.9.3</h2>
<ul>
<li><a href="https://redirect.github.com/dorny/paths-filter/pull/78">Fix
change detection when base is a tag</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dorny/paths-filter/commit/7b450fff21473bca461d4b92ce414b9d0420d706"><code>7b450ff</code></a>
docs: update changelog for v4.0.2 (<a
href="https://redirect.github.com/dorny/paths-filter/issues/318">#318</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/928037783a71f24983ea250c6e55290c1b2de54f"><code>9280377</code></a>
fix: work around git dubious ownership errors in container jobs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/317">#317</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/f3ceefdc7ef57bc2d8560787d4b6c33e44044cec"><code>f3ceefd</code></a>
fix: use rev-parse instead of branch --show-current for older git compat
(<a
href="https://redirect.github.com/dorny/paths-filter/issues/303">#303</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/61f87a10cd2c304679af17bb73ef192addf33c1c"><code>61f87a1</code></a>
chore: fix GitHub spelling in logs (<a
href="https://redirect.github.com/dorny/paths-filter/issues/278">#278</a>)</li>
<li><a
href="https://github.com/dorny/paths-filter/commit/b82ff81ffbe6fb4b636bb5b47e37fd8d12b32632"><code>b82ff81</code></a>
fix warning message (<a
href="https://redirect.github.com/dorny/paths-filter/issues/282">#282</a>)</li>
<li>See full diff in <a
href="https://github.com/dorny/paths-filter/compare/fbd0ab8f3e69293af611ebaee6363fc25e6d187d...7b450fff21473bca461d4b92ce414b9d0420d706">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:39:57 -07:00
dependabot[bot] 119b49c6f8 chore(deps): bump the vue group with 2 updates (#2619) 
Bumps the vue group with 2 updates: [vue](https://github.com/vuejs/core)
and
[@vitejs/plugin-vue](https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue).

Updates `vue` from 3.5.39 to 3.5.40
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vuejs/core/releases">vue's
releases</a>.</em></p>
<blockquote>
<h2>v3.5.40</h2>
<p>For stable releases, please refer to <a
href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">CHANGELOG.md</a>
for details.
For pre-releases, please refer to <a
href="https://github.com/vuejs/core/blob/minor/CHANGELOG.md">CHANGELOG.md</a>
of the <code>minor</code> branch.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vuejs/core/blob/main/CHANGELOG.md">vue's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/vuejs/core/compare/v3.5.39...v3.5.40">3.5.40</a>
(2026-07-16)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>compiler-core:</strong> avoid leaking slot branch keys (<a
href="https://redirect.github.com/vuejs/core/issues/15051">#15051</a>)
(<a
href="https://github.com/vuejs/core/commit/20c9d263d3bfafdfbcc1921f259fd8f711e18659">20c9d26</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/15048">#15048</a></li>
<li><strong>hydration:</strong> pass namespace when patching dynamic
props (<a
href="https://redirect.github.com/vuejs/core/issues/15082">#15082</a>)
(<a
href="https://github.com/vuejs/core/commit/e0d27234ddd2061383cb5dcc475d6b9558ed8e4f">e0d2723</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/15081">#15081</a> <a
href="https://redirect.github.com/vuejs/core/issues/15050">#15050</a></li>
<li><strong>reactivity:</strong> handle effect removal during scope stop
(<a
href="https://redirect.github.com/vuejs/core/issues/15084">#15084</a>)
(<a
href="https://github.com/vuejs/core/commit/378f9783248a4a4f20781d665d4f7089f39cae6e">378f978</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/15083">#15083</a></li>
<li><strong>runtime-core:</strong> skip lazy hydration for detached
roots (<a
href="https://redirect.github.com/vuejs/core/issues/15092">#15092</a>)
(<a
href="https://github.com/vuejs/core/commit/97f3525551ad06103083eb2cbf9858c5e57cd58e">97f3525</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/15091">#15091</a></li>
<li><strong>runtime-core:</strong> unwind dangling blocks when slot
content throws (<a
href="https://redirect.github.com/vuejs/core/issues/15071">#15071</a>)
(<a
href="https://github.com/vuejs/core/commit/ddc132d7c054ecd2029ddcc95bcba770cd44f022">ddc132d</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/15070">#15070</a></li>
<li><strong>runtime-dom:</strong> respect current select model type (<a
href="https://redirect.github.com/vuejs/core/issues/15010">#15010</a>)
(<a
href="https://github.com/vuejs/core/commit/eb89e935a771ab7fc3f8e67a82bc8fc7ea28bdaa">eb89e93</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/15009">#15009</a></li>
<li><strong>server-renderer:</strong> handle errors in optimized
component renders (<a
href="https://redirect.github.com/vuejs/core/issues/12601">#12601</a>)
(<a
href="https://github.com/vuejs/core/commit/474907c0f01d021c564545137051a2b56eb4a769">474907c</a>),
closes <a
href="https://redirect.github.com/vuejs/core/issues/12575">#12575</a></li>
<li><strong>server-renderer:</strong> remove package dependency cycle
(<a
href="https://redirect.github.com/vuejs/core/issues/15063">#15063</a>)
(<a
href="https://github.com/vuejs/core/commit/4d35ecadb6f625b0f7407ccee0e357c2dd8084c7">4d35eca</a>)</li>
<li><strong>shared:</strong> prevent SSR comment escaping from creating
closing delimiters (<a
href="https://redirect.github.com/vuejs/core/issues/15045">#15045</a>)
(<a
href="https://github.com/vuejs/core/commit/bd962bbaca746d8f65775a07723420406ebad0da">bd962bb</a>)</li>
<li><strong>types:</strong> don't constrain component $el type to
Element (<a
href="https://redirect.github.com/vuejs/core/issues/15040">#15040</a>)
(<a
href="https://github.com/vuejs/core/commit/164460a52988c44dc34a541219c88120078372a0">164460a</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vuejs/core/commit/fa2885d8c48768d26f1666a01bd540ffe3b20f9b"><code>fa2885d</code></a>
release: v3.5.40</li>
<li><a
href="https://github.com/vuejs/core/commit/20c9d263d3bfafdfbcc1921f259fd8f711e18659"><code>20c9d26</code></a>
fix(compiler-core): avoid leaking slot branch keys (<a
href="https://redirect.github.com/vuejs/core/issues/15051">#15051</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/7da6334f6162927cd41f9f369145722509540990"><code>7da6334</code></a>
Revert &quot;fix(runtime-core): pause tracking when invoking function
refs&quot; (<a
href="https://redirect.github.com/vuejs/core/issues/15094">#15094</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/90aecb1d21b7d029543e6dc4825c3d80dd769312"><code>90aecb1</code></a>
chore(deps): update all non-major dependencies (<a
href="https://redirect.github.com/vuejs/core/issues/15026">#15026</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/97f3525551ad06103083eb2cbf9858c5e57cd58e"><code>97f3525</code></a>
fix(runtime-core): skip lazy hydration for detached roots (<a
href="https://redirect.github.com/vuejs/core/issues/15092">#15092</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/fe1c0f8494c10bc677b0bf8ec7fa518e3f15569e"><code>fe1c0f8</code></a>
chore(deps): update test (<a
href="https://redirect.github.com/vuejs/core/issues/15025">#15025</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/e41c45a78a97b4f7422059eb274479d8e8b5886f"><code>e41c45a</code></a>
chore(deps): update dependency conventional-changelog to v8 (<a
href="https://redirect.github.com/vuejs/core/issues/15078">#15078</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/3eb66a9f6238d99632ce0dd2971ed66b7fc6a671"><code>3eb66a9</code></a>
chore(deps): update actions/cache action to v6 (<a
href="https://redirect.github.com/vuejs/core/issues/15076">#15076</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/40178ddfc2b80c77db0f25a3d69819c9f5a3b689"><code>40178dd</code></a>
chore(deps): update lint (<a
href="https://redirect.github.com/vuejs/core/issues/15075">#15075</a>)</li>
<li><a
href="https://github.com/vuejs/core/commit/7f122b9bb85349e323ad3d025cdb4eab28d76de0"><code>7f122b9</code></a>
chore(deps): update dependency conventional-changelog-angular to v9 (<a
href="https://redirect.github.com/vuejs/core/issues/15079">#15079</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/vuejs/core/compare/v3.5.39...v3.5.40">compare
view</a></li>
</ul>
</details>
<br />

Updates `@vitejs/plugin-vue` from 6.0.7 to 6.0.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-vue/releases">@​vitejs/plugin-vue's
releases</a>.</em></p>
<blockquote>
<h2>plugin-vue@6.0.8</h2>
<p>Please refer to <a
href="https://github.com/vitejs/vite-plugin-vue/blob/plugin-vue@6.0.8/packages/plugin-vue/CHANGELOG.md">CHANGELOG.md</a>
for details.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/vitejs/vite-plugin-vue/blob/main/packages/plugin-vue/CHANGELOG.md">@​vitejs/plugin-vue's
changelog</a>.</em></p>
<blockquote>
<h2><!-- raw HTML omitted --><a
href="https://github.com/vitejs/vite-plugin-vue/compare/plugin-vue@6.0.7...plugin-vue@6.0.8">6.0.8</a>
(2026-07-14)<!-- raw HTML omitted --></h2>
<h3>Features</h3>
<ul>
<li><strong>plugin-vue:</strong> add forced vapor mode option (<a
href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/766">#766</a>)
(<a
href="https://github.com/vitejs/vite-plugin-vue/commit/d59c3c04b0c5cd920bab5f0f6000bedfef901e1c">d59c3c0</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> update all non-major dependencies (<a
href="https://redirect.github.com/vitejs/vite-plugin-vue/issues/781">#781</a>)
(<a
href="https://github.com/vitejs/vite-plugin-vue/commit/d369e5a57592ed525c4da5ef0458cb89a6977ad2">d369e5a</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/vitejs/vite-plugin-vue/commit/d8ff7d0e8f557a7c1975c07b30e232c69bdbbc03"><code>d8ff7d0</code></a>
release: plugin-vue@6.0.8</li>
<li><a
href="https://github.com/vitejs/vite-plugin-vue/commit/d59c3c04b0c5cd920bab5f0f6000bedfef901e1c"><code>d59c3c0</code></a>
feat(plugin-vue): add forced vapor mode option (<a
href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue/issues/766">#766</a>)</li>
<li><a
href="https://github.com/vitejs/vite-plugin-vue/commit/d369e5a57592ed525c4da5ef0458cb89a6977ad2"><code>d369e5a</code></a>
fix(deps): update all non-major dependencies (<a
href="https://github.com/vitejs/vite-plugin-vue/tree/HEAD/packages/plugin-vue/issues/781">#781</a>)</li>
<li>See full diff in <a
href="https://github.com/vitejs/vite-plugin-vue/commits/plugin-vue@6.0.8/packages/plugin-vue">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:38:58 -07:00
dependabot[bot] c14b070b96 chore(deps): bump the react group with 2 updates (#2620) 
Bumps the react group with 2 updates:
[react](https://github.com/react/react/tree/HEAD/packages/react) and
[react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom).

Updates `react` from 19.2.7 to 19.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react's
releases</a>.</em></p>
<blockquote>
<h2>19.2.8 (July 21st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Performance improvements when decoding
(<a
href="https://redirect.github.com/facebook/react/pull/37087">#37087</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a>
[FlightReply] Performance improvements when decoding (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/37087">#37087</a>)</li>
<li><a
href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a>
[19.2.x] Update required references to GitHub repo (<a
href="https://github.com/react/react/tree/HEAD/packages/react/issues/36753">#36753</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.2.8/packages/react">compare
view</a></li>
</ul>
</details>
<br />

Updates `react-dom` from 19.2.7 to 19.2.8
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/react/react/releases">react-dom's
releases</a>.</em></p>
<blockquote>
<h2>19.2.8 (July 21st, 2026)</h2>
<h2>React Server Components</h2>
<ul>
<li>Performance improvements when decoding
(<a
href="https://redirect.github.com/facebook/react/pull/37087">#37087</a>
by <a href="https://github.com/eps1lon"><code>@​eps1lon</code></a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/react/react/commit/1dd4ecbdabf826f527fc9a58c05ea70375b7d170"><code>1dd4ecb</code></a>
[FlightReply] Performance improvements when decoding (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/37087">#37087</a>)</li>
<li><a
href="https://github.com/react/react/commit/b0d2fdb78bdfae075a7fa02ddcebbf25f90952c2"><code>b0d2fdb</code></a>
[19.2.x] Update required references to GitHub repo (<a
href="https://github.com/react/react/tree/HEAD/packages/react-dom/issues/36753">#36753</a>)</li>
<li>See full diff in <a
href="https://github.com/react/react/commits/v19.2.8/packages/react-dom">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-21 15:38:46 -07:00
Sreeram Sama 82a320faf6 fix(sdk): guard useStream hydrate reconnect against a cleared thread id (#2613) 
## Summary

`useStream`'s mount-time **hydrate → reconnect** path can call
`client.threads.stream(null, …)` when the thread id is cleared while
hydration is in flight, throwing an uncaught `TypeError: Cannot read
properties of null (reading 'fetch')`. This adds a post-`await` guard in
the controller (root cause) and makes `ThreadsClient.stream` null-safe
at the boundary (defense-in-depth), plus a regression test.

## Root cause

`StreamController.hydrate()` null-guards `#currentThreadId` **before**
the `await`, then re-reads it **after** to open the reconnect, with no
re-check in between:

```ts
// controller.ts
if (this.#currentThreadId == null) { …; return; }   // guard BEFORE await (L538)
…
const state = await this.#fetchHydrationState();      // getState() — async gap (L564)
…
const thread = this.#ensureThread(this.#currentThreadId, !threadActive);  // L731, no re-check
```

`#ensureThread` forwards the id to `client.threads.stream(threadId, {
fetch, … })`. If `#currentThreadId` becomes `null` **during the await**
(the host clears the id, `hydrate(null)` runs, or the component unmounts
during navigation), `hydrate` resumes and calls `threads.stream(null,
{…})`. In `ThreadsClient.stream`, a non-string first arg is treated as
the **options** object, so `null` becomes `options` and `options.fetch`
throws:

```ts
// client/threads/index.ts
const { threadId, options } = typeof threadIdOrOptions === "string"
  ? { threadId: threadIdOrOptions, options: maybeOptions }
  : { threadId: uuidv7(), options: threadIdOrOptions };  // null ⇒ options = null
const userFetch = options.fetch;                          // null.fetch → throw
```

## Why it's intermittent

The null has to land inside the narrow `await #fetchHydrationState()`
window, and only for an **active** thread (idle/finished threads take
the deferred path and skip `#ensureThread`). It needs a concurrent
thread-id clear (navigation/unmount) racing an in-flight hydrate — so
it's flaky, not deterministic.

## Changes

- **`stream/controller.ts` (root fix):** re-check `this.#disposed` /
`this.#currentThreadId != null` after the `await`, before
`#ensureThread(...)`. Hydration is already settled by then, so an early
return is safe. Mirrors the existing post-await guard idiom (e.g.
`controller.ts` discovery-seed path).
- **`client/threads/index.ts` (defense-in-depth):** treat a nullish
first arg as the generate-thread-id form (use the second arg as options)
instead of binding `null` to `options`.
- **`stream/controller.test.ts`:** regression test — `getState()`
resolves *after* the thread id is cleared mid-hydrate; asserts the
reconnect is never opened with a null id.

## Risk

Low. The controller guard only early-returns when there's no thread to
reconnect. The `stream` overload change preserves behavior for the
string- and object-first calls; it only fixes the nullish-first-arg
case.

## How it was found

Surfaced as a flaky teardown `pageerror` in a downstream app's
Playwright E2E (agent editor: create → chat → delete). Confirmed against
`@langchain/langgraph-sdk@1.9.27` and reproduced on `main` (this
branch).

## Notes for reviewers

- Opened as **draft**: the regression test was authored to match
existing `controller.test.ts` conventions but **not run** in my
environment (SDK deps weren't installed) — please verify it in CI /
locally.
- Either change fixes the reported crash on its own; the
`threads.stream` hardening is optional but cheap.
 2026-07-21 15:02:41 -07:00
John Kennedy ceb4fa7788 ci: cover missing Dependabot dependency roots (#2612) 
## Summary

- Add Dependabot Docker coverage for Docker Compose roots used by
root/package integration tests.
- Cover the root integration-test compose file, internal
environment-test compose file, and checkpoint package compose files.
- Keep existing GitHub Actions and root pnpm workspace coverage
unchanged.

## Test Plan

- [x] Parse `.github/dependabot.yml` with Ruby YAML.
- [x] Run `git diff --check`.
- [x] Inspect the diff to confirm it only changes
`.github/dependabot.yml`.

Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
 2026-07-21 14:38:25 -07:00
github-actions[bot] afb42cd7fe chore: version packages (#2607) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @langchain/langgraph-sdk@1.9.27

### Patch Changes

- [#2606](https://github.com/langchain-ai/langgraphjs/pull/2606)
[`fa4658c`](https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): omit carried `since` on SSE reconnect

Protocol `seq` is connection-scoped: a new `POST /stream/events`
re-numbers Redis replay from 1, so advancing `since` from observed seqs
and sending it after a successful open filtered out the full history
(heartbeats only). An explicit caller `since` is still sent until the
stream connects (including pre-ready retries); post-connect reconnects
omit `since` and rely on durable `event_id` dedup.
## @langchain/angular@1.0.28

### Patch Changes

- Updated dependencies
[[`fa4658c`](https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831)]:
  - @langchain/langgraph-sdk@1.9.27
## @langchain/react@1.0.28

### Patch Changes

- Updated dependencies
[[`fa4658c`](https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831)]:
  - @langchain/langgraph-sdk@1.9.27
## @langchain/svelte@1.0.28

### Patch Changes

- Updated dependencies
[[`fa4658c`](https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831)]:
  - @langchain/langgraph-sdk@1.9.27
## @langchain/vue@1.0.28

### Patch Changes

- Updated dependencies
[[`fa4658c`](https://github.com/langchain-ai/langgraphjs/commit/fa4658c79489eb5fb3e38744c34a6f5bf2373831)]:
  - @langchain/langgraph-sdk@1.9.27

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/angular@1.0.28 @langchain/langgraph-sdk@1.9.27 @langchain/react@1.0.28 @langchain/svelte@1.0.28 @langchain/vue@1.0.28 		2026-07-15 11:21:35 -07:00
Christian Bromann fa4658c794 fix(sdk): omit since on SSE reconnect (#2606) 
## Summary
- Stop sending body `since` on SSE (re)connect in
`ProtocolSseTransportAdapter`.
- Protocol `seq` is connection-scoped; a new POST re-numbers Redis
history from 1, so a prior session's `since` (e.g. `146`) dropped the
entire replay and left only heartbeats after QUIC/idle drops.
- Clients continue to deduplicate via durable `event_id`. A durable
cursor can replace this later.
 2026-07-15 10:58:05 -07:00
github-actions[bot] 3dccad1391 chore: version packages (#2603) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @langchain/langgraph-api@1.4.3

### Patch Changes

- Updated dependencies []:
  - @langchain/langgraph-ui@1.4.3
## @langchain/langgraph-cli@1.4.3

### Patch Changes

- [#2595](https://github.com/langchain-ai/langgraphjs/pull/2595)
[`dac8c2f`](https://github.com/langchain-ai/langgraphjs/commit/dac8c2fa7edfd643aa393a1d6407759b6cd8acf4)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
chore: bump langsmith to ^0.8.0

- Updated dependencies []:
  - @langchain/langgraph-api@1.4.3
## @langchain/langgraph@1.4.8

### Patch Changes

- [#2604](https://github.com/langchain-ai/langgraphjs/pull/2604)
[`42ec394`](https://github.com/langchain-ai/langgraphjs/commit/42ec39460bfe0c3be017fb043c668c3204c8a175)
Thanks [@hntrl](https://github.com/hntrl)! - fix(pregel): wait for
completed-superstep persistence with sync durability

- Updated dependencies
[[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa),
[`c201256`](https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b)]:
  - @langchain/langgraph-sdk@1.9.26
## @langchain/langgraph-sdk@1.9.26

### Patch Changes

- [#2605](https://github.com/langchain-ai/langgraphjs/pull/2605)
[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): keep SSE reconnect enabled with custom fetch

Auth/proxy fetch shims previously forced `maxReconnectAttempts: 0`, so
HITL waits that lost `/stream/events` (e.g. `ERR_QUIC_PROTOCOL_ERROR`)
never recovered and left `respond()`/`submit()` spinning. Fail-fast test
mocks should pass `maxReconnectAttempts: 0` explicitly. Also plumbs
reconnect options through framework `useStream` bindings.

- [#2602](https://github.com/langchain-ai/langgraphjs/pull/2602)
[`c201256`](https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b)
Thanks [@HugoDurand](https://github.com/HugoDurand)! - fix(sdk): support
clearing a cron's end time via `crons.update(cronId, { endTime: null })`

`CronsClient.update` now accepts `endTime: null` to clear a previously
set cron end time; omitting `endTime` still leaves it unchanged. The
field was typed `string`, so callers could not express "clear" even
though the request already forwards an explicit `null`.
## @langchain/angular@1.0.27

### Patch Changes

- [#2605](https://github.com/langchain-ai/langgraphjs/pull/2605)
[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): keep SSE reconnect enabled with custom fetch

Auth/proxy fetch shims previously forced `maxReconnectAttempts: 0`, so
HITL waits that lost `/stream/events` (e.g. `ERR_QUIC_PROTOCOL_ERROR`)
never recovered and left `respond()`/`submit()` spinning. Fail-fast test
mocks should pass `maxReconnectAttempts: 0` explicitly. Also plumbs
reconnect options through framework `useStream` bindings.

- Updated dependencies
[[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa),
[`c201256`](https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b)]:
  - @langchain/langgraph-sdk@1.9.26
## @langchain/react@1.0.27

### Patch Changes

- [#2605](https://github.com/langchain-ai/langgraphjs/pull/2605)
[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): keep SSE reconnect enabled with custom fetch

Auth/proxy fetch shims previously forced `maxReconnectAttempts: 0`, so
HITL waits that lost `/stream/events` (e.g. `ERR_QUIC_PROTOCOL_ERROR`)
never recovered and left `respond()`/`submit()` spinning. Fail-fast test
mocks should pass `maxReconnectAttempts: 0` explicitly. Also plumbs
reconnect options through framework `useStream` bindings.

- Updated dependencies
[[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa),
[`c201256`](https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b)]:
  - @langchain/langgraph-sdk@1.9.26
## @langchain/svelte@1.0.27

### Patch Changes

- [#2605](https://github.com/langchain-ai/langgraphjs/pull/2605)
[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): keep SSE reconnect enabled with custom fetch

Auth/proxy fetch shims previously forced `maxReconnectAttempts: 0`, so
HITL waits that lost `/stream/events` (e.g. `ERR_QUIC_PROTOCOL_ERROR`)
never recovered and left `respond()`/`submit()` spinning. Fail-fast test
mocks should pass `maxReconnectAttempts: 0` explicitly. Also plumbs
reconnect options through framework `useStream` bindings.

- Updated dependencies
[[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa),
[`c201256`](https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b)]:
  - @langchain/langgraph-sdk@1.9.26
## @langchain/vue@1.0.27

### Patch Changes

- [#2605](https://github.com/langchain-ai/langgraphjs/pull/2605)
[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(sdk): keep SSE reconnect enabled with custom fetch

Auth/proxy fetch shims previously forced `maxReconnectAttempts: 0`, so
HITL waits that lost `/stream/events` (e.g. `ERR_QUIC_PROTOCOL_ERROR`)
never recovered and left `respond()`/`submit()` spinning. Fail-fast test
mocks should pass `maxReconnectAttempts: 0` explicitly. Also plumbs
reconnect options through framework `useStream` bindings.

- Updated dependencies
[[`f326b89`](https://github.com/langchain-ai/langgraphjs/commit/f326b89365043bfa846e0b428564bcafafab4aaa),
[`c201256`](https://github.com/langchain-ai/langgraphjs/commit/c201256b27d55c9aa333d3d15f6ec16c2fd7de9b)]:
  - @langchain/langgraph-sdk@1.9.26
## @langchain/langgraph-ui@1.4.3

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/angular@1.0.27 @langchain/langgraph-api@1.4.3 @langchain/langgraph-cli@1.4.3 @langchain/langgraph-sdk@1.9.26 @langchain/langgraph-ui@1.4.3 @langchain/langgraph@1.4.8 @langchain/react@1.0.27 @langchain/svelte@1.0.27 @langchain/vue@1.0.27 		2026-07-14 21:47:29 -07:00
Christian Bromann f326b89365 fix(sdk): keep SSE reconnect enabled with custom fetch (#2605) 
## Summary
- Keep SSE auto-reconnect and idle-reconnect enabled when a custom
`fetch` is supplied (auth/proxy shims), instead of silently forcing
`maxReconnectAttempts: 0`.
- Plumb `maxReconnectAttempts`, `streamIdleReconnect`,
`reconnectDelayMs`, and `onReconnect` through `StreamController` and
React/Vue/Svelte/Angular `useStream`.
- Add transport unit coverage plus browser interrupt tests that drop
`/stream/events` mid-HITL and assert `respond()` still completes.
 2026-07-14 21:45:12 -07:00
Hunter Lovell 42ec39460b fix(core): enforce sync durability barriers (#2604) 
## Summary

Makes `durability: "sync"` enforce its superstep boundary: persistence
produced by a completed superstep must settle before the scheduler
prepares and dispatches the next one. Previously, persistence was
tracked and awaited at final cleanup but could overlap later supersteps.

## Changes

- Snapshot and await the current run's tracked `putWrites()` and ordered
checkpoint `put()` promises after each completed superstep when
durability is `sync`.
- Preserve asynchronous and exit-only durability behavior, including the
existing final persistence settlement path.
- Add gated `StateGraph` regression coverage for `invoke`, `stream`, and
`streamEvents`, plus coverage that async mode may progress while
persistence is pending.
- Add a patch changeset for `@langchain/langgraph`.
 2026-07-14 19:12:09 -07:00
Christian Bromann dac8c2fa7e chore: bump langsmith to ^0.8.0 (#2595) 
## Description

The langsmith SDK published v0.8.0. This updates the `langsmith`
dependency in the workspaces that pin it via a caret range
(`langgraph-cli`) to `^0.8.0` and refreshes `pnpm-lock.yaml` so the
workspace packages resolve to `0.8.0`. The broad peer/dependency range
in `langgraph-api` (`>=0.5.19 <1.0.0`) already permits `0.8.0` and is
left unchanged, matching prior langsmith bump PRs. Transitive
`langsmith` versions pulled in by published `@langchain/*` packages are
left untouched.

## Test Plan
- [ ] `pnpm install --frozen-lockfile` resolves without changes

Made by [Open
SWE](https://openswe.vercel.app/agents/019f436f-3343-7169-a06a-5f64fe70e3af)

---------

Signed-off-by: Christian Bromann <git@bromann.dev>
Co-authored-by: Christian Bromann <731337+christian-bromann@users.noreply.github.com>
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
 2026-07-14 14:08:13 -07:00
Hunter Lovell 644892c7db docs(langgraph): fix README logo paths (#2599) 
## Summary

Fix the LangGraph README logo references so they render correctly from
both the repository root and the `libs/langgraph-core` package
directory.

## Changes

- Replace context-dependent relative logo paths with absolute raw GitHub
URLs.
- Preserve dark- and light-mode logo selection in the shared README.
 2026-07-14 10:29:29 -07:00
Hugo DURAND c201256b27 fix(sdk): support clearing cron end_time via update({ endTime: null }) (#2602) 
## What & why

`CronsClient.update` could not clear a cron's `end_time`. The field was
typed `endTime?: string`, so a type-checked caller had no way to express
"remove the end time" — even though, unlike the Python SDK, the JS
request builder was already correct at runtime: it uses per-field `if
(payload?.endTime !== undefined)` guards (not a `None`-strip), and `null
!== undefined`, so a `null` would already be forwarded and
`JSON.stringify` preserves it.

So the defect was purely a **type imprecision**, and the fix is at the
source — the model — rather than a workaround in the request logic:

- `CronsUpdatePayload.endTime`: `string` → `string | null`. PATCH
semantics are now the standard tri-state:
  - **omit `endTime`** → keep the existing value
  - **`endTime: null`** → clear it
  - **`endTime: "<iso>"`** → set it
- `CronsCreatePayload.endTime` is intentionally left `string` — create
never needs to clear.

This mirrors the Python SDK change in langchain-ai/langgraph#8334
(`update(end_time=None)`), and requires an Agent Server that supports
clearing `end_time` via `PATCH /runs/crons/{id}` (`end_time: null`).
Against an older server, `update(id, { endTime: null })` is a harmless
no-op for clearing (the server coalesces `null` back to the stored
value), and a clear-only patch may 400.

## Also in this PR (unify `update()`)

While here, `update()`'s payload construction is unified with the
existing `create()` / `createForThread()` style: the 16 repetitive `if
(payload?.X !== undefined) json.Y = payload.X` guards become a single
declarative object literal. `JSON.stringify` drops `undefined` keys and
keeps `null`, so the wire output is **identical** — this is a
behaviour-preserving refactor, pinned by the pre-existing "only sends
defined fields" / "sends all updatable fields" tests. Net −44 lines in
the method.

## Test plan

- [x] `vitest run` on `libs/sdk/src/client/crons/index.test.ts` — **9
passed** (8 existing + 1 new: `update(id, { endTime: null })` sends body
`{ end_time: null }`), no type errors.
- [x] `pnpm build` (tsc compile + `attw` + `publint`) — clean.
- [x] `oxlint` — 0 warnings / 0 errors; `oxfmt --check` — clean.
- [x] Changeset added (`@langchain/langgraph-sdk`: patch).
 2026-07-14 13:05:05 -04:00
John Kennedy a34543a0dd build: add Socket optimized pnpm overrides (#2600) 
## Summary

- Add Socket optimized registry overrides for supported transitive
dependencies.
- Regenerate the root pnpm lockfile with the Socket registry packages.
- Add Socket GitHub App configuration scoped to dependency manifest and
lockfile changes.

## Test plan

- `sfw pnpm install --lockfile-only --no-frozen-lockfile`
- `git diff --check`
- JSON/YAML parsing for `package.json` and `socket.yml`

The install reported existing workspace peer/deprecation warnings and a
missing docs patch path.

---------

Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>
 2026-07-14 07:48:37 +00:00
langsmith-fleet[bot] ada0b67696 fix: store auth filter enforcement (#2597) 
## Summary

Fixes the store API authorization filter issue flagged by Corridor by
capturing and applying `handleAuthEvent()` filters for store operations.

Changes:
- Capture auth filters for `list_namespaces`, `search`, `put`, `delete`,
and `get` store endpoints.
- Evaluate filters against store item value fields plus synthetic
`namespace` and `key` metadata.
- Use the mutable value returned by auth handlers for `store:put`,
allowing handlers to inject ownership fields before persistence.
- Filter list/search responses before returning them, applying
pagination after auth filtering when filters are present.
- Return 404 for existing items that are outside auth scope and 403 for
unauthorized new/missing write targets.
- Add auth test coverage for filter-based namespace isolation on broad
store search/list calls.

## Security

Addresses Corridor category 3: High/Medium store API authorization
filters discarded.

Primary finding cluster:
- Store search/get/put/delete/list_namespaces discarded
`handleAuthEvent()` filters, preventing item/namespace-level
authorization enforcement.

## Test plan

- `git diff --check` passed.
- Targeted test/typecheck not run locally because this sandbox did not
have dependencies installed, and Socket Firewall (`sfw`) installation
failed while downloading the required binary from GitHub with HTTP 502.
CI should run the package tests on the PR.

---------

Co-authored-by: Langster Security Agent <john@langchain.dev>
Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
 2026-07-09 04:04:14 +00:00
corridor-security[bot] 5b4f120fe8 fix: Unauthenticated /internal/truncate endpoint allows complete data wipe (#2596) 
## Summary
This PR was generated by [Corridor](https://corridor.dev) to fix:

- Unauthenticated /internal/truncate endpoint allows complete data wipe

## Changes
The vulnerability stemmed from route registration order, which allowed
unauthenticated access to POST /internal/truncate and destructive data
loss. The fix moves the route registration to occur after the CORS,
request logger, and especially after the authentication middleware,
ensuring the truncate endpoint is protected by the centralized auth
policy; no handler logic or validation changes were made, and endpoints
remain reachable when auth is not configured to preserve existing
behavior.

---
Generated by Corridor

Co-authored-by: corridor-security[bot] <203152403+corridor-security[bot]@users.noreply.github.com>
 2026-07-09 03:14:27 +00:00
langsmith-fleet[bot] c9a5b303bb chore: Add guarded Dependabot auto-merge workflow (#2594) 
## Summary
- add a Dependabot-only workflow to auto-approve and enable GitHub
auto-merge for guarded low-risk dependency updates
- use pinned dependabot/fetch-metadata metadata to classify update type,
dependency type, ecosystem, group, and maintainer changes
- deny auto-merge for major updates, direct production runtime
dependencies, sensitive dependency names, large diffs, and
infra/deploy/workflow-risk file changes

## Safety notes
- uses pull_request_target but does not checkout or execute PR code
- restricts execution to Dependabot PRs whose head repo is
langchain-ai/langgraphjs
- relies on branch protection / required checks before GitHub auto-merge
can complete

## Test plan
- parsed workflow YAML with Ruby Psych
- ran git diff --check
- actionlint was unavailable in the sandbox

---------

Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
Co-authored-by: John Kennedy <jkennedyvz@users.noreply.github.com>
 2026-07-08 17:09:38 -07:00
github-actions[bot] 96876a4bf0 chore: version packages (#2583) 
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @langchain/langgraph-api@1.4.2

### Patch Changes

- [#2590](https://github.com/langchain-ai/langgraphjs/pull/2590)
[`f71e00c`](https://github.com/langchain-ai/langgraphjs/commit/f71e00c52600a6dafacccdde1363e83c17c8d97b)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(api): inject langgraph_auth_user on protocol-v2 run.start

Stamp authenticated user fields onto run config in createOrResumeRun so
v2 streaming matches the REST runs API. Shared helpers also dedupe REST
  run config auth/header enrichment.

- [#2575](https://github.com/langchain-ai/langgraphjs/pull/2575)
[`e1b40c2`](https://github.com/langchain-ai/langgraphjs/commit/e1b40c29e14f8e9fb2696acc62d611e14a813f43)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(cli): support node_version 24 in langgraph.json

Allow Node 24 in the CLI config schema and Docker base image resolution.
  The langgraphjs-api:24 image is already published from langgraph-api.

- Updated dependencies
[[`f71e00c`](https://github.com/langchain-ai/langgraphjs/commit/f71e00c52600a6dafacccdde1363e83c17c8d97b),
[`e1b40c2`](https://github.com/langchain-ai/langgraphjs/commit/e1b40c29e14f8e9fb2696acc62d611e14a813f43)]:
  - @langchain/langgraph-ui@1.4.2
## @langchain/langgraph-cli@1.4.2

### Patch Changes

- [#2590](https://github.com/langchain-ai/langgraphjs/pull/2590)
[`f71e00c`](https://github.com/langchain-ai/langgraphjs/commit/f71e00c52600a6dafacccdde1363e83c17c8d97b)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(api): inject langgraph_auth_user on protocol-v2 run.start

Stamp authenticated user fields onto run config in createOrResumeRun so
v2 streaming matches the REST runs API. Shared helpers also dedupe REST
  run config auth/header enrichment.

- [#2575](https://github.com/langchain-ai/langgraphjs/pull/2575)
[`e1b40c2`](https://github.com/langchain-ai/langgraphjs/commit/e1b40c29e14f8e9fb2696acc62d611e14a813f43)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(cli): support node_version 24 in langgraph.json

Allow Node 24 in the CLI config schema and Docker base image resolution.
  The langgraphjs-api:24 image is already published from langgraph-api.

- Updated dependencies
[[`f71e00c`](https://github.com/langchain-ai/langgraphjs/commit/f71e00c52600a6dafacccdde1363e83c17c8d97b),
[`e1b40c2`](https://github.com/langchain-ai/langgraphjs/commit/e1b40c29e14f8e9fb2696acc62d611e14a813f43)]:
  - @langchain/langgraph-api@1.4.2
## @langchain/langgraph-ui@1.4.2

### Patch Changes

- [#2590](https://github.com/langchain-ai/langgraphjs/pull/2590)
[`f71e00c`](https://github.com/langchain-ai/langgraphjs/commit/f71e00c52600a6dafacccdde1363e83c17c8d97b)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(api): inject langgraph_auth_user on protocol-v2 run.start

Stamp authenticated user fields onto run config in createOrResumeRun so
v2 streaming matches the REST runs API. Shared helpers also dedupe REST
  run config auth/header enrichment.

- [#2575](https://github.com/langchain-ai/langgraphjs/pull/2575)
[`e1b40c2`](https://github.com/langchain-ai/langgraphjs/commit/e1b40c29e14f8e9fb2696acc62d611e14a813f43)
Thanks [@christian-bromann](https://github.com/christian-bromann)! -
fix(cli): support node_version 24 in langgraph.json

Allow Node 24 in the CLI config schema and Docker base image resolution.
  The langgraphjs-api:24 image is already published from langgraph-api.

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@langchain/langgraph-api@1.4.2 @langchain/langgraph-cli@1.4.2 @langchain/langgraph-ui@1.4.2 		2026-07-05 17:58:08 -07:00
Christian Bromann f71e00c526 fix(api): inject langgraph_auth_user on protocol-v2 run.start (#2590) 
## Summary
- Inject `langgraph_auth_user`, `langgraph_auth_user_id`, and
`langgraph_auth_permissions` into run config in protocol v2
`createOrResumeRun`, matching the REST `createValidRun` behavior.
- Extract shared `applyAuthToRunConfig` /
`applyRequestHeadersToRunConfig` helpers and use them from both REST and
protocol paths.
- Pass `userId` into `runs.put()` from the protocol path for parity with
REST.
 2026-07-05 17:55:52 -07:00