Skip to content

build: update all non-major dependencies (main) #32481

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
angular-robot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

build: update all non-major dependencies (main) #32481

angular-robot wants to merge 1 commit into from
+565 −504

Conversation

@angular-robot
Copy link
Contributor

@angular-robot angular-robot commented Feb 12, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/generator (source) 7.29.0 → 7.29.1 age adoption passing confidence
@modelcontextprotocol/sdk (source) 1.25.3 → 1.26.0 age adoption passing confidence
@typescript-eslint/eslint-plugin (source) 8.54.0 → 8.55.0 age adoption passing confidence
@typescript-eslint/parser (source) 8.54.0 → 8.55.0 age adoption passing confidence
algoliasearch (source) 5.47.0 → 5.48.0 age adoption passing confidence
esbuild 0.27.2 → 0.27.3 age adoption passing confidence
esbuild-wasm 0.27.2 → 0.27.3 age adoption passing confidence
less-loader 12.3.0 → 12.3.1 age adoption passing confidence
ora 9.2.0 → 9.3.0 age adoption passing confidence
pacote 21.1.0 → 21.3.1 age adoption passing confidence
rolldown (source) 1.0.0-rc.3 → 1.0.0-rc.4 age adoption passing confidence
sass-loader 16.0.6 → 16.0.7 age adoption passing confidence
semver 7.7.3 → 7.7.4 age adoption passing confidence
undici (source) 7.20.0 → 7.21.0 age adoption passing confidence
webpack 5.105.0 → 5.105.1 age adoption passing confidence

Release Notes

babel/babel (@​babel/generator)

v7.29.1

Compare Source

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.26.0

Compare Source

Addresses "Sharing server/transport instances can leak cross-client response data" in this GHSA GHSA-345p-7cg4-v4c7

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.25.3...v1.26.0

typescript-eslint/typescript-eslint (@​typescript-eslint/eslint-plugin)

v8.55.0

Compare Source

🚀 Features
  • utils: deprecate defaultOptions in favor of meta.defaultOptions (#​11992)
🩹 Fixes
  • eslint-plugin: [no-useless-default-assignment] reduce param index to ts this handling (#​11949)
  • eslint-plugin: [no-useless-default-assignment] report unnecessary defaults in ternary expressions (#​11984)
  • eslint-plugin: [no-useless-default-assignment] require strictNullChecks (#​11966, #​12000)
  • eslint-plugin: [no-unused-vars] remove trailing newline when removing entire import (#​11990)
❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

typescript-eslint/typescript-eslint (@​typescript-eslint/parser)

v8.55.0

Compare Source

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

algolia/algoliasearch-client-javascript (algoliasearch)

v5.48.0

Compare Source

BREAKING CHANGES: this minor version includes multiple breaking changes related to fixes on different APIs. See below for more details.

evanw/esbuild (esbuild)

v0.27.3

Compare Source

  • Preserve URL fragments in data URLs (#​4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
<html>
  <head><link rel="stylesheet" href="icons.css"></head>
  <body><div class="triangle"></div></body>
</html>

    • icons.css:

      .triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url(./triangle.svg#x);
}

    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
  <defs>
    <clipPath id="x">
      <path d="M0 0H10V10Z"/>
    </clipPath>
  </defs>
</svg>

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
.triangle {
  width: 10px;
  height: 10px;
  background: currentColor;
  clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
}

  • Parse and print CSS @scope rules (#​4322)

    This release includes dedicated support for parsing @scope rules in CSS. These rules include optional "start" and "end" selector lists. One important consequence of this is that the local/global status of names in selector lists is now respected, which improves the correctness of esbuild's support for CSS modules. Minification of selectors inside @scope rules has also improved slightly.

    Here's an example:

    /* Original code */
@&#8203;scope (:global(.foo)) to (:local(.bar)) {
  .bar {
    color: red;
  }
}

/* Old output (with --loader=local-css --minify) */
@&#8203;scope (:global(.foo)) to (:local(.bar)){.o{color:red}}

/* New output (with --loader=local-css --minify) */
@&#8203;scope(.foo)to (.o){.o{color:red}}

  • Fix a minification bug with lowering of for await (#​4378, #​4385)

    This release fixes a bug where the minifier would incorrectly strip the variable in the automatically-generated catch clause of lowered for await loops. The code that generated the loop previously failed to mark the internal variable references as used.

  • Update the Go compiler from v1.25.5 to v1.25.7 (#​4383, #​4388)

    This PR was contributed by @​MikeWillCook.

webpack/less-loader (less-loader)

v12.3.1

Compare Source

sindresorhus/ora (ora)

v9.3.0

Compare Source

  • Reduce flicker in rendering 2ab4f76
npm/pacote (pacote)

v21.3.1

Compare Source

Bug Fixes
Chores

v21.3.0

Compare Source

Features

v21.2.0

Compare Source

Features
rolldown/rolldown (rolldown)

v1.0.0-rc.4

Compare Source

🚀 Features
🐛 Bug Fixes
🚜 Refactor
📚 Documentation
🧪 Testing
  • ensure runtime module is preserved even if it's not used but has side effects (#​8213) by @​hyf0
⚙️ Miscellaneous Tasks
webpack/sass-loader (sass-loader)

v16.0.7

Compare Source

npm/node-semver (semver)

v7.7.4

Compare Source

Bug Fixes
Documentation
Dependencies
Chores
nodejs/undici (undici)

v7.21.0

Compare Source

What's Changed
New Contributors

Full Changelog: nodejs/undici@v7.20.0...v7.21.0

webpack/webpack (webpack)

v5.105.1

Compare Source

Patch Changes

  • Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @​xiaoxiaojx in #​20424)

  • Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @​hai-x in #​20433)

  • Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @​hai-x in #​20433)

  • If you want to rebase/retry this PR, check this box

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Feb 12, 2026
@angular-robot
build: update all non-major dependencies
cfcdb69 
See associated pull request for more information.
@angular-robot angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch from 0bb3b6b to cfcdb69 Compare February 12, 2026 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@angular-robot