Skip to content

Bump the npm_and_yarn group across 3 directories with 18 updates - #1

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/npm_and_yarn-296e3be44f
Open

Bump the npm_and_yarn group across 3 directories with 18 updates#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/npm_and_yarn-296e3be44f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 2 updates in the /src directory: semver and brace-expansion.
Bumps the npm_and_yarn group with 2 updates in the /publish directory: brace-expansion and minimatch.
Bumps the npm_and_yarn group with 10 updates in the /demo-angular directory:

Package From To
brace-expansion 1.1.11 1.1.18
@angular/common 8.2.14 22.1.4
@angular/compiler 8.2.14 20.3.27
@angular/core 8.2.14 22.1.4
body-parser 1.19.0 1.20.6
express 4.17.1 4.22.2
browserify-sign 4.0.4 4.2.6
cipher-base 1.0.4 1.0.7
lodash 4.17.15 4.18.1
ws 6.2.1 6.2.6

Updates semver from 5.7.1 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

5.7

  • Add minVersion method

5.6

  • Move boolean loose param to an options object, with backwards-compatibility protection.
  • Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

  • Add version coercion capabilities

5.4

  • Add intersection checking

5.3

  • Add minSatisfying method

5.2

  • Add prerelease(v) that returns prerelease components

5.1

  • Add Backus-Naur for ranges
  • Remove excessively cute inspection methods

5.0

  • Remove AMD/Browserified build artifacts
  • Fix ltr and gtr when using the * range
  • Fix for range * with a prerelease identifier
Commits
Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.


Updates brace-expansion from 1.1.11 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates brace-expansion from 1.1.11 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates minimatch from 3.0.4 to 3.1.5

Commits

Updates brace-expansion from 1.1.11 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

  • Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

juliangruber/brace-expansion@v1.1.11...v1.1.12

Commits

Updates @angular/common from 8.2.14 to 22.1.4

Release notes

Sourced from @​angular/common's releases.

22.1.4

common

Commit Description
fix - 60a874c3fb avoid prototype member collisions
fix - e8378dfeab use locale NaN symbol in number formatting

compiler

Commit Description
fix - 05c7c725a5 scope animations declared in minified nested rules

compiler-cli

Commit Description
fix - afe8499a14 default template diagnostic related message source file to template
fix - 079a846263 Produce correct tcb expression for optional chaining
fix - 55eeb46418 retain metadata for strict standalone errors

core

Commit Description
fix - 3da35cbab9 avoid prototype member collisions
fix - b199bdfa2a explicitly reject foreign components in JIT mode
fix - 9a8e4826b9 preserve namespace for dynamic component hosts
fix - 7c752d4815 prevent TransferState prototype pollution
fix - 7546b7a805 throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit Description
fix - c8eb7f0056 use dot-access for readonly rule configuration

language-service

Commit Description
fix - 93d7f718d2 honor quote style preference when generating imports

migrations

Commit Description
fix - 85c8829ac1 preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit Description
fix - 71e52d1396 avoid stripping unicode whitespace during url resolution

22.1.3

animations

Commit Description
fix - d9620e0f1b detect object trigger values with Object.hasOwn

common

Commit Description
fix - b3c78a5081 preserve literal key union in KeyValuePipe.transform()

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

22.1.4 (2026-08-26)

common

Commit Type Description
60a874c3fb fix avoid prototype member collisions
e8378dfeab fix use locale NaN symbol in number formatting

compiler

Commit Type Description
05c7c725a5 fix scope animations declared in minified nested rules

compiler-cli

Commit Type Description
afe8499a14 fix default template diagnostic related message source file to template
079a846263 fix Produce correct tcb expression for optional chaining
55eeb46418 fix retain metadata for strict standalone errors

core

Commit Type Description
3da35cbab9 fix avoid prototype member collisions
b199bdfa2a fix explicitly reject foreign components in JIT mode
9a8e4826b9 fix preserve namespace for dynamic component hosts
7c752d4815 fix prevent TransferState prototype pollution
7546b7a805 fix throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit Type Description
c8eb7f0056 fix use dot-access for readonly rule configuration

language-service

Commit Type Description
93d7f718d2 fix honor quote style preference when generating imports

migrations

Commit Type Description
85c8829ac1 fix preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit Type Description
71e52d1396 fix avoid stripping unicode whitespace during url resolution

22.1.3 (2026-08-19)

animations

Commit Type Description
d9620e0f1b fix detect object trigger values with Object.hasOwn

common

... (truncated)

Commits
  • e8378df fix(common): use locale NaN symbol in number formatting
  • 60a874c fix(common): avoid prototype member collisions
  • 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
  • b3c78a5 fix(common): preserve literal key union in KeyValuePipe.transform()
  • 0cd635e fix(http): cancel oversized fetch response bodies
  • 4f7e998 fix(http): always decode JSON responses as UTF-8
  • ac3728e fix(http): avoid aborting completed requests in FetchBackend
  • f99e916 refactor(common): modernize directive tests to rely on whenStable
  • 32af9b5 fix(http): strip RFC 6265 DQUOTE characters and handle URIError in parseCooki...
  • 688a0a7 fix(http): respect content-type charset in fetch backend text decoder
  • Additional commits viewable in compare view

Updates @angular/compiler from 8.2.14 to 20.3.27

Release notes

Sourced from @​angular/compiler's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

20.3.26 (2026-07-08)

compiler-cli

Commit Type Description
406aaa31e6 fix update babel dependencies to latest v7

core

Commit Type Description
26831d0cbd fix avoid caching missing locale data
8eb7aea08b fix reject dynamic script host elements

http

Commit Type Description
b963f61028 fix prevent caching of responses with Set-Cookie headers

service-worker

Commit Type Description

... (truncated)

Commits
  • db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
  • 5dbcd0e fix(compiler): disallow i18n event attributes
  • a68ec70 fix(compiler): sanitize two-way properties
  • d40acc6 fix(compiler): prevent namespaced SVG <style> elements from being stripped
  • 7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
  • 36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
  • 823b37f test(compiler): remove obsolete schema_extractor import (#68926)
  • e345a58 fix(core): normalize tag names in runtime i18n attribute security context loo...
  • 8f35b18 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
  • 64a89e9 fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
  • Additional commits viewable in compare view

Updates @angular/core from 8.2.14 to 22.1.4

Release notes

Sourced from @​angular/core's releases.

22.1.4

common

Commit Description
fix - 60a874c3fb avoid prototype member collisions
fix - e8378dfeab use locale NaN symbol in number formatting

compiler

Commit Description
fix - 05c7c725a5 scope animations declared in minified nested rules

compiler-cli

Commit Description
fix - afe8499a14 default template diagnostic related message source file to template
fix - 079a846263 Produce correct tcb expression for optional chaining
fix - 55eeb46418 retain metadata for strict standalone errors

core

Commit Description
fix - 3da35cbab9 avoid prototype member collisions
fix - b199bdfa2a explicitly reject foreign components in JIT mode
fix - 9a8e4826b9 preserve namespace for dynamic component hosts
fix - 7c752d4815 prevent TransferState prototype pollution
fix - 7546b7a805 throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit Description
fix - c8eb7f0056 use dot-access for readonly rule configuration

language-service

Commit Description
fix - 93d7f718d2 honor quote style preference when generating imports

migrations

Commit Description
fix - 85c8829ac1 preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit Description
fix - 71e52d1396 avoid stripping unicode whitespace during url resolution

22.1.3

animations

Commit Description
fix - d9620e0f1b detect object trigger values with Object.hasOwn

common

Commit Description
fix - b3c78a5081 preserve literal key union in KeyValuePipe.transform()

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

22.1.4 (2026-08-26)

common

Commit Type Description
60a874c3fb fix avoid prototype member collisions
e8378dfeab fix use locale NaN symbol in number formatting

compiler

Commit Type Description
05c7c725a5 fix scope animations declared in minified nested rules

compiler-cli

Commit Type Description
afe8499a14 fix default template diagnostic related message source file to template
079a846263 fix Produce correct tcb expression for optional chaining
55eeb46418 fix retain metadata for strict standalone errors

core

Commit Type Description
3da35cbab9 fix avoid prototype member collisions
b199bdfa2a fix explicitly reject foreign components in JIT mode
9a8e4826b9 fix preserve namespace for dynamic component hosts
7c752d4815 fix prevent TransferState prototype pollution
7546b7a805 fix throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit Type Description
c8eb7f0056 fix use dot-access for readonly rule configuration

language-service

Commit Type Description
93d7f718d2 fix honor quote style preference when generating imports

migrations

Commit Type Description
85c8829ac1 fix preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit Type Description
71e52d1396 fix avoid stripping unicode whitespace during url resolution

22.1.3 (2026-08-19)

animations

Commit Type Description
d9620e0f1b fix detect object trigger values with Object.hasOwn

common

... (truncated)

Commits
  • 9bf7113 build: update cross-repo angular dependencies
  • 151a8f2 refactor(core): Decouple ɵɵFactoryDeclaration and ɵɵInjectableDeclaration fro...
  • b199bdf fix(core): explicitly reject foreign components in JIT mode
  • 7546b7a fix(core): throw coded RuntimeErrors instead of crashing when hydration/rende...
  • 7c752d4 fix(core): prevent TransferState prototype pollution
  • f58f5fd refactor(core): loosen return type of ɵɵFactoryDeclaration to any
  • 85c8829 fix(migrations): preserve registerLocaleData calls in standalone bootstrap mi...
  • 9a8e482 fix(core): preserve namespace for dynamic component hosts
  • 3da35cb fix(core): avoid prototype member collisions
  • 7709f2c refactor(core): widen ɵɵclassProp value parameter type to any
  • Additional commits viewable in compare view

Updates body-parser from 1.19.0 to 1.20.6

Release notes

Sourced from body-parser's releases.

1.20.6

Important: Security

What's Changed

Full Changelog: expressjs/body-parser@1.20.5...1.20.6

v1.20.5

What's Changed

The reason for this release is a fix to the extended urlencoded parser returning objects instead of arrays for large array inputs (> 100) on qs@6.14.2+. (expressjs/body-parser#716)

New Contributors

Special thanks to triager @​krzysdz for keeping this on our radar and effectively triaging the specific issue!

Full Changelog: expressjs/body-parser@1.20.4...1.20.5

1.20.4

What's Changed

Full Changelog: expressjs/body-parser@1.20.3...1.20.4

1.20.3

What's Changed

Important

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity). Documentation

... (truncated)

Changelog

Sourced from body-parser's changelog.

1.20.6 / 2026-07-09

  • Security fix for GHSA-v422-hmwv-36x6
  • fix: improve limit option validation (#698)
    • Invalid limit values (e.g. unparseable strings or NaN) now throw instead of being silently ignored, which previously disabled size limit enforcement
    • null and undefined fall back to the default 100kb limit

1.20.5 / 2026-04-24

  • refactor(json): simplify strict mode error string construction
  • fix: extended urlencoded parsing of arrays with >100 elements (#716)
  • deps: qs@~6.15.1

1.20.4 / 2025-12-01

  • deps: qs@~6.14.0
  • deps: use tilde notation for dependencies
  • deps: http-errors@~2.0.1
  • deps: raw-body@~2.5.3

1.20.3 / 2024-09-10

  • deps: qs@6.13.0
  • add depth option to customize the depth level in the parser
  • IMPORTANT: The default depth level for parsing URL-encoded data is now 32 (previously was Infinity)

1.20.2 / 2023-02-21

  • Fix strict json error message on Node.js 19+
  • deps: content-type@~1.0.5
    • perf: skip value escaping when unnecessary
  • deps: raw-body@2.5.2

1.20.1 / 2022-10-06

  • deps: qs@6.11.0
  • perf: remove unnecessary object clone

1.20.0 / 2022-04-02

  • Fix error message for json parse whitespace in strict
  • Fix internal error when inflated body exceeds limit
  • Prevent loss of async hooks context
  • Prevent hanging when request already read
  • deps: depd@2.0.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for body-parser since your current version.


Updates express from 4.17.1 to 4.22.2

Release notes

Sourced from express's releases.

v4.22.2

What's Changed

  • fix: restore >20 array parsing for req.query repeated keys (8d09bfe6)
    • This also unifies array-cap behavior across notations. Indexed notation (a[0]=...) was historically capped at qs's default arrayLimit of 20 even in older qs versions; after this change it also allows up to 1000 items.
  • deps: qs@~6.15.1
  • deps: body-parser@~1.20.5

New Contributors

Full Changelog: expressjs/express@v4.22.1...v4.22.2

v4.22.1

What's Changed

[!IMPORTANT]
The prior release (4.22.0) included an erroneous breaking change related to the extended query parser. There is no actual security vulnerability associated with this behavior (CVE-2024-51999 has been rejected). The change has been fully reverted in this release.

Full Changelog: expressjs/express@4.22.0...v4.22.1

4.22.0

Important: Security

What's Changed

@dependabot
Bump the npm_and_yarn group across 3 directories with 18 updates
d29a85e 
Bumps the npm_and_yarn group with 2 updates in the /src directory: [semver](https://github.com/npm/node-semver) and [brace-expansion](https://github.com/juliangruber/brace-expansion).
Bumps the npm_and_yarn group with 2 updates in the /publish directory: [brace-expansion](https://github.com/juliangruber/brace-expansion) and [minimatch](https://github.com/isaacs/minimatch).
Bumps the npm_and_yarn group with 10 updates in the /demo-angular directory:

| Package | From | To |
| --- | --- | --- |
| [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.18` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `8.2.14` | `22.1.4` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `8.2.14` | `20.3.27` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `8.2.14` | `22.1.4` |
| [body-parser](https://github.com/expressjs/body-parser) | `1.19.0` | `1.20.6` |
| [express](https://github.com/expressjs/express) | `4.17.1` | `4.22.2` |
| [browserify-sign](https://github.com/crypto-browserify/browserify-sign) | `4.0.4` | `4.2.6` |
| [cipher-base](https://github.com/crypto-browserify/cipher-base) | `1.0.4` | `1.0.7` |
| [lodash](https://github.com/lodash/lodash) | `4.17.15` | `4.18.1` |
| [ws](https://github.com/websockets/ws) | `6.2.1` | `6.2.6` |



Updates `semver` from 5.7.1 to 5.7.2
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/v5.7.2/CHANGELOG.md)
- [Commits](npm/node-semver@v5.7.1...v5.7.2)

Updates `brace-expansion` from 1.1.11 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.18)

Updates `brace-expansion` from 1.1.11 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.18)

Updates `minimatch` from 3.0.4 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.0.4...v3.1.5)

Updates `brace-expansion` from 1.1.11 to 1.1.18
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@1.1.11...v1.1.18)

Updates `@angular/common` from 8.2.14 to 22.1.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v22.1.4/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.1.4/packages/common)

Updates `@angular/compiler` from 8.2.14 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v20.3.27/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler)

Updates `@angular/core` from 8.2.14 to 22.1.4
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v22.1.4/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.1.4/packages/core)

Updates `body-parser` from 1.19.0 to 1.20.6
- [Release notes](https://github.com/expressjs/body-parser/releases)
- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)
- [Commits](expressjs/body-parser@1.19.0...1.20.6)

Updates `express` from 4.17.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](expressjs/express@4.17.1...v4.22.2)

Updates `browserify-sign` from 4.0.4 to 4.2.6
- [Changelog](https://github.com/browserify/browserify-sign/blob/main/CHANGELOG.md)
- [Commits](browserify/browserify-sign@v4.0.4...v4.2.6)

Updates `cipher-base` from 1.0.4 to 1.0.7
- [Changelog](https://github.com/browserify/cipher-base/blob/master/CHANGELOG.md)
- [Commits](browserify/cipher-base@v1.0.4...v1.0.7)

Updates `cookie` from 0.4.0 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](jshttp/cookie@v0.4.0...v0.7.2)

Updates `elliptic` from 6.5.2 to 6.6.1
- [Commits](indutny/elliptic@v6.5.2...v6.6.1)

Updates `express` from 4.17.1 to 4.22.2
- [Release notes](https://github.com/expressjs/express/releases)
- [Changelog](https://github.com/expressjs/express/blob/v4.22.2/History.md)
- [Commits](expressjs/express@4.17.1...v4.22.2)

Updates `lodash` from 4.17.15 to 4.18.1
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.15...4.18.1)

Updates `pbkdf2` from 3.0.17 to 3.1.6
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md)
- [Commits](browserify/pbkdf2@v3.0.17...v3.1.6)

Updates `send` from 0.17.1 to 0.19.2
- [Release notes](https://github.com/pillarjs/send/releases)
- [Changelog](https://github.com/pillarjs/send/blob/master/HISTORY.md)
- [Commits](pillarjs/send@0.17.1...0.19.2)

Updates `serve-static` from 1.14.1 to 1.16.3
- [Release notes](https://github.com/expressjs/serve-static/releases)
- [Changelog](https://github.com/expressjs/serve-static/blob/master/HISTORY.md)
- [Commits](expressjs/serve-static@v1.14.1...v1.16.3)

Updates `sha.js` from 2.4.11 to 2.4.12
- [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md)
- [Commits](browserify/sha.js@v2.4.11...v2.4.12)

Updates `ws` from 6.2.1 to 6.2.6
- [Release notes](https://github.com/websockets/ws/releases)
- [Commits](websockets/ws@6.2.1...6.2.6)

---
updated-dependencies:
- dependency-name: semver
  dependency-version: 5.7.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: brace-expansion
  dependency-version: 1.1.18
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular/common"
  dependency-version: 22.1.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular/compiler"
  dependency-version: 20.3.27
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular/core"
  dependency-version: 22.1.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: body-parser
  dependency-version: 1.20.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: browserify-sign
  dependency-version: 4.2.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cipher-base
  dependency-version: 1.0.7
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: elliptic
  dependency-version: 6.6.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: express
  dependency-version: 4.22.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.18.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: pbkdf2
  dependency-version: 3.1.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: send
  dependency-version: 0.19.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: serve-static
  dependency-version: 1.16.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: sha.js
  dependency-version: 2.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: ws
  dependency-version: 6.2.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants