Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 8, 2025

Bumps the npm_and_yarn group with 4 updates in the / directory: esbuild, @angular-devkit/build-angular, tmp and @angular/cli.

Updates esbuild from 0.23.1 to 0.25.8

Release notes

Sourced from esbuild's releases.

v0.25.8

  • Fix another TypeScript parsing edge case (#4248)

    This fixes a regression with a change in the previous release that tries to more accurately parse TypeScript arrow functions inside the ?: operator. The regression specifically involves parsing an arrow function containing a #private identifier inside the middle of a ?: ternary operator inside a class body. This was fixed by propagating private identifier state into the parser clone used to speculatively parse the arrow function body. Here is an example of some affected code:

    class CachedDict {
      #has = (a: string) => dict.has(a);
      has = window
        ? (word: string): boolean => this.#has(word)
        : this.#has;
    }
  • Fix a regression with the parsing of source phase imports

    The change in the previous release to parse source phase imports failed to properly handle the following cases:

    import source from 'bar'
    import source from from 'bar'
    import source type foo from 'bar'

    Parsing for these cases should now be fixed. The first case was incorrectly treated as a syntax error because esbuild was expecting the second case. And the last case was previously allowed but is now forbidden. TypeScript hasn't added this feature yet so it remains to be seen whether the last case will be allowed, but it's safer to disallow it for now. At least Babel doesn't allow the last case when parsing TypeScript, and Babel was involved with the source phase import specification.

v0.25.7

  • Parse and print JavaScript imports with an explicit phase (#4238)

    This release adds basic syntax support for the defer and source import phases in JavaScript:

    • defer

      This is a stage 3 proposal for an upcoming JavaScript feature that will provide one way to eagerly load but lazily initialize imported modules. The imported module is automatically initialized on first use. Support for this syntax will also be part of the upcoming release of TypeScript 5.9. The syntax looks like this:

      import defer * as foo from "<specifier>";
      const bar = await import.defer("<specifier>");

      Note that this feature deliberately cannot be used with the syntax import defer foo from "<specifier>" or import defer { foo } from "<specifier>".

    • source

      This is a stage 3 proposal for an upcoming JavaScript feature that will provide another way to eagerly load but lazily initialize imported modules. The imported module is returned in an uninitialized state. Support for this syntax may or may not be a part of TypeScript 5.9 (see this issue for details). The syntax looks like this:

      import source foo from "<specifier>";
      const bar = await import.source("<specifier>");

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
      "compilerOptions": {
        "target": "ES2024"
      }
    }

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
      get
      *x() {}
      set
      *y() {}
    }

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits
  • 8c71947 publish 0.25.8 to npm
  • 0508f24 some parsing fixes for source phase imports
  • 6e4be2f js parser: recover from bad #private identifiers
  • c9c6357 fix #4248: #private ids in arrow fn body in ?:
  • 9b42f68 publish 0.25.7 to npm
  • 9ba01d1 abs-paths: js api and tests
  • ca196c9 fix for parser backtracking crash
  • 2979b84 fix #4241: ts arrow function type backtrack (hack)
  • 1180410 fix an unused variable warning
  • fc3da57 fix #4238: add defer and source import phases
  • Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 16.2.16 to 20.1.5

Release notes

Sourced from @​angular-devkit/build-angular's releases.

20.1.5

@​angular/cli

Commit Description
fix - 48ca04474 cache MCP best practices content and add tool annotations

20.1.4

@​angular/cli

Commit Description
fix - 2d753cc62 skip workspace-specific tools when outside a workspace

@​angular/build

Commit Description
fix - 42d72ef4d skip vite transformation of CSS-like assets

20.1.3

@​angular/build

Commit Description
fix - ea5cd0e81 update vite to 7.0.6

20.1.2

@​angular/cli

Commit Description
fix - 96785224f define option is being included multiple times in the JSON help

@​angular-devkit/core

Commit Description
fix - 0d0040bdf use crypto.randomUUID instead of Date.now for unique string in tmp file names

20.1.1

@​angular/build

Commit Description
fix - 541b33f8d emit a warning when outputHashing is set to all or bundles when HMR is enabled
fix - 558a0fe92 normalize code coverage include paths to POSIX

20.1.0

@​schematics/angular

Commit Description
feat - 1c19e0dcd use signal in app component

@​angular/cli

Commit Description
feat - dc45c186e add initial MCP server implementation

@​angular-devkit/build-angular

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

20.1.5 (2025-08-06)

@​angular/cli

Commit Type Description
48ca04474 fix cache MCP best practices content and add tool annotations

20.2.0-next.2 (2025-07-30)

@​angular/cli

Commit Type Description
193b39416 fix skip workspace-specific tools when outside a workspace

@​angular/build

Commit Type Description
7a183730c fix skip vite transformation of CSS-like assets

20.1.4 (2025-07-30)

@​angular/cli

Commit Type Description
2d753cc62 fix skip workspace-specific tools when outside a workspace

@​angular/build

Commit Type Description
42d72ef4d fix skip vite transformation of CSS-like assets

20.1.3 (2025-07-24)

... (truncated)

Commits
  • 2c0e973 release: cut the v20.1.5 release
  • 761bc78 build: update to latest dev-infra in the workspace
  • 48ca044 fix(@​angular/cli): cache MCP best practices content and add tool annotations
  • 8601f06 refactor(@​angular/cli): update suggested MCP server configuration output
  • 2ed9c37 test(@​angular/cli): add initial e2e test for MCP server tool registration
  • 9a2b642 refactor(@​angular/cli): add instructional text to MCP server
  • ffc4c67 release: cut the v20.1.4 release
  • 2d753cc fix(@​angular/cli): skip workspace-specific tools when outside a workspace
  • 42d72ef fix(@​angular/build): skip vite transformation of CSS-like assets
  • 0489fe7 refactor(@​angular/build): update MCP best practices guide content
  • Additional commits viewable in compare view

Updates @babel/runtime from 7.22.6 to 7.27.6

Release notes

Sourced from @​babel/runtime's releases.

v7.27.6 (2025-06-05)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-generator, babel-parser, babel-types

Committers: 3

v7.27.5 (2025-06-03)

Thanks @​NullVoxPopuli for your first PR!

🐛 Bug Fix

💅 Polish

Committers: 4

v7.27.4 (2025-05-30)

👓 Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management

💅 Polish

🔬 Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

... (truncated)

Changelog

Sourced from @​babel/runtime's changelog.

v7.27.6 (2025-06-05)

🐛 Bug Fix

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-generator, babel-parser, babel-types

v7.27.5 (2025-06-03)

🐛 Bug Fix

💅 Polish

v7.27.4 (2025-05-30)

👓 Spec Compliance

  • babel-parser, babel-plugin-proposal-explicit-resource-management

💅 Polish

🔬 Output optimization

  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3
  • babel-core, babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-classes, babel-plugin-transform-destructuring, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone

v7.27.3 (2025-05-27)

🐛 Bug Fix

  • babel-generator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-plugin-proposal-explicit-resource-management
  • babel-plugin-proposal-decorators, babel-types
    • #17321 fix(converter): Remove abstract modifiers in class declaration to expression conversion (@​magic-akari)
  • babel-helper-module-transforms, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
    • #17257 Preserve class id when transforming using declarations with exported class (@​JLHwung)

... (truncated)

Commits

Updates tmp from 0.0.33 to 0.2.5

Changelog

Sourced from tmp's changelog.

v0.2.2 (2024-02-28)

🐛 Bug Fix

📝 Documentation

Committers: 5

v0.2.1 (2020-04-28)

🚀 Enhancement

🏠 Internal

Committers: 1

v0.2.0 (2020-04-25)

🚀 Enhancement

🐛 Bug Fix

📝 Documentation

🏠 Internal

... (truncated)

Commits

Updates @angular/cli from 16.2.16 to 20.1.5

Release notes

Sourced from @​angular/cli's releases.

20.1.5

@​angular/cli

Commit Description
fix - 48ca04474 cache MCP best practices content and add tool annotations

20.1.4

@​angular/cli

Commit Description
fix - 2d753cc62 skip workspace-specific tools when outside a workspace

@​angular/build

Commit Description
fix - 42d72ef4d skip vite transformation of CSS-like assets

20.1.3

@​angular/build

Commit Description
fix - ea5cd0e81 update vite to 7.0.6

20.1.2

@​angular/cli

Commit Description
fix - 96785224f define option is being included multiple times in the JSON help

@​angular-devkit/core

Commit Description
fix - 0d0040bdf use crypto.randomUUID instead of Date.now for unique string in tmp file names

20.1.1

@​angular/build

Commit Description
fix - 541b33f8d emit a warning when outputHashing is set to all or bundles when HMR is enabled
fix - 558a0fe92 normalize code coverage include paths to POSIX

20.1.0

@​schematics/angular

Commit Description
feat - 1c19e0dcd use signal in app component

@​angular/cli

Commit Description
feat - dc45c186e add initial MCP server implementation

@​angular-devkit/build-angular

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

20.1.5 (2025-08-06)

@​angular/cli

Commit Type Description
48ca04474 fix cache MCP best practices content and add tool annotations

20.2.0-next.2 (2025-07-30)

@​angular/cli

Commit Type Description
193b39416 fix skip workspace-specific tools when outside a workspace

@​angular/build

Commit Type Description
7a183730c fix skip vite transformation of CSS-like assets

20.1.4 (2025-07-30)

@​angular/cli

Commit Type Description
2d753cc62 fix skip workspace-specific tools when outside a workspace

@​angular/build

Commit Type Description
42d72ef4d fix skip vite transformation of CSS-like assets

20.1.3 (2025-07-24)

... (truncated)

Commits
  • 2c0e973 release: cut the v20.1.5 release
  • 761bc78 build: update to latest dev-infra in the workspace
  • 48ca044 fix(@​angular/cli): cache MCP best practices content and add tool annotations
  • 8601f06 refactor(@​angular/cli): update suggested MCP server configuration output
  • 2ed9c37 test(@​angular/cli): add initial e2e test for MCP server tool registration
  • 9a2b642 refactor(@​angular/cli): add instructional text to MCP server
  • ffc4c67 release: cut the v20.1.4 release
  • 2d753cc fix(@​angular/cli): skip workspace-specific tools when outside a workspace
  • 42d72ef fix(@​angular/build): skip vite transformation of CSS-like assets
  • 0489fe7 refactor(@​angular/build): update MCP best practices guide content
  • Additional commits viewable in compare view

Updates vite from 4.5.5 to 7.0.6

Release notes

Sourced from vite's releases.

v7.0.6

Please refer to CHANGELOG.md for details.

v7.0.5

Please refer to CHANGELOG.md for details.

v7.0.4

Please refer to CHANGELOG.md for details.

v7.0.3

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.0.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.0.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.0.0

Please refer to CHANGELOG.md for details.

v7.0.0-beta.2

Please refer to CHANGELOG.md for details.

v7.0.0-beta.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.0.6 (2025-07-24)

Bug Fixes

  • deps: update all non-major dependencies (#20442) (e49f505)
  • dev: incorrect sourcemap when optimized CJS is imported (#20458) (ead2dec)
  • module-runner: normalize file:// on windows (#20449) (1c9cb49)
  • respond with correct headers and status code for HEAD requests (#20421) (23d04fc)

Miscellaneous Chores

Code Refactoring

7.0.5 (2025-07-17)

Bug Fixes

  • deps: update all non-major dependencies (#20406) (1a1cc8a)
  • remove special handling for Accept: text/html (#20376) (c9614b9)
  • watch assets referenced by new URL(, import.meta.url) (#20382) (6bc8bf6)

Miscellaneous Chores

  • deps: update dependency rolldown to ^1.0.0-beta.27 (#20405) (1165667)

Code Refactoring

  • use foo.endsWith("bar") instead of /bar$/.test(foo) (#20413) (862e192)

7.0.4 (2025-07-10)

Bug Fixes

  • allow resolving bare specifiers to relative paths for entries (#20379) (324669c)

Build System

7.0.3 (2025-07-08)

Bug Fixes

  • client: protect against window being defined but addEv undefined (#20359) (31d1467)
  • define: replace optional values (#20338) (9465ae1)
  • deps: update all non-major dependencies (#20366) (43ac73d)

Miscellaneous Chores

... (truncated)

Commits

Updates webpack-dev-server from 4.15.1 to 5.2.2

Release notes

Sourced from webpack-dev-server's releases.

v5.2.2

5.2.2 (2025-06-03)

Bug Fixes

  • "Overlay enabled" false positive (18e72ee)
  • do not crush when error is null for runtime errors (#5447) (309991f)
  • remove unnecessary header X_TEST (#5451) (64a6124)
  • respect the allowedHosts option for cross-origin header check (#5510) (03d1214)

v5.2.1

5.2.1 (2025-03-26)

Security

  • cross-origin requests are not allowed unless allowed by Access-Control-Allow-Origin header
  • requests with an IP addresses in the Origin header are not allowed to connect to WebSocket server unless configured by allowedHosts or it different from the Host header

The above changes may make the dev server not work if you relied on such behavior, but unfortunately they carry security risks, so they were considered as fixes.

Bug Fixes

  • prevent overlay for errors caught by React error boundaries (#5431) (8c1abc9)
  • take the first network found instead of the last one, this restores the same behavior as 5.0.4 (#5411) (ffd0b86)

v5.2.0

5.2.0 (2024-12-11)

Features

  • added getClientEntry and getClientHotEntry methods to get clients entries (dc642a8)

Bug Fixes

  • speed up initial client bundling (145b5d0)

v5.1.0

5.1.0 (2024-09-03)

Features

  • add visual progress indicators (a8f40b7)
  • added the app option to be Function (by default only with connect compatibility frameworks) (3096148)
  • allow the server option to be Function (#5275) (02a1c6d)
  • http2 support for connect and connect compatibility frameworks which support HTTP2 (

Bumps the npm_and_yarn group with 4 updates in the / directory: [esbuild](https://github.com/evanw/esbuild), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [tmp](https://github.com/raszi/node-tmp) and [@angular/cli](https://github.com/angular/angular-cli).


Updates `esbuild` from 0.23.1 to 0.25.8
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.23.1...v0.25.8)

Updates `@angular-devkit/build-angular` from 16.2.16 to 20.1.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.2.16...20.1.5)

Updates `@babel/runtime` from 7.22.6 to 7.27.6
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.6/packages/babel-runtime)

Updates `tmp` from 0.0.33 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.0.33...v0.2.5)

Updates `@angular/cli` from 16.2.16 to 20.1.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.2.16...20.1.5)

Updates `vite` from 4.5.5 to 7.0.6
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.0.6/packages/vite)

Updates `webpack-dev-server` from 4.15.1 to 5.2.2
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v4.15.1...v5.2.2)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.25.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 20.1.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.27.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tmp
  dependency-version: 0.2.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular/cli"
  dependency-version: 20.1.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.0.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: webpack-dev-server
  dependency-version: 5.2.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 8, 2025
Copy link

vercel bot commented Aug 8, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
nufacturing ❌ Failed (Inspect) Aug 8, 2025 11:36pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants