Skip to content

chore(deps): bump serialize-javascript and @angular-devkit/build-angular#2295

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-a2ba177d77
Open

chore(deps): bump serialize-javascript and @angular-devkit/build-angular#2295
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-a2ba177d77

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2026

Removes serialize-javascript. It's no longer used after updating ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Removes serialize-javascript

Updates @angular-devkit/build-angular from 19.2.23 to 21.2.5

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.5

@​angular/cli

Commit Description
feat - cadf9b201 support custom port in MCP devserver start tool

@​angular/ssr

Commit Description
fix - bbc255419 allow underscores in host validation
fix - b1fe66a7f patch Headers.forEach in cloneRequestAndPatchHeaders

21.2.4

@​angular/cli

Commit Description
fix - a7787d092 restore console methods after logger completes

@​angular/build

Commit Description
fix - 7170599ab deduplicate and merge coverage excludes with vitest
fix - c73f13797 prevent reporter duplicates by explicitly overriding Vitest configuration
fix - 956ccaa71 remove default for unit-test coverage option
fix - 36978db7e warn about performance of test.exclude in vitest configuration
fix - 6ec36f5be warn when vitest watch config conflicts with builder

@​angular/ssr

Commit Description
fix - 9bdf782c8 apply forwarded prefix and vary header in accept-language redirects
fix - 628c58672 support '*' in allowedHosts and warn about security risks

21.2.3

@​angular/cli

Commit Description
fix - 1505164bb use parsed package name for migrate-only updates

@​angular/build

Commit Description
fix - 75fa94cad alias createRequire banner import to avoid duplicate binding
fix - d009aa1ec only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Description
fix - f3e0e82c2 disallow x-forwarded-prefix starting with a backslash
fix - b8bcd59b4 ensure unique values in redirect response Vary header
fix - 84385411d support custom headers in redirect responses

21.2.2

@​angular/cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.5 (2026-03-27)

@​angular/cli

Commit Type Description
cadf9b201 feat support custom port in MCP devserver start tool

@​angular/ssr

Commit Type Description
bbc255419 fix allow underscores in host validation
b1fe66a7f fix patch Headers.forEach in cloneRequestAndPatchHeaders

20.3.22 (2026-03-27)

@​angular-devkit/build-angular

Commit Type Description
5978eeeff fix update picomatch to 4.0.4

@​angular-devkit/core

Commit Type Description
6e9b92612 fix update picomatch to 4.0.4

@​angular/build

Commit Type Description
6f209c26d fix update picomatch to 4.0.4

Commits
  • 3018612 release: cut the v21.2.5 release
  • 349bd43 build: update dependency picomatch to v4.0.4
  • cadf9b2 feat(@​angular/cli): support custom port in MCP devserver start tool
  • bbc2554 fix(@​angular/ssr): allow underscores in host validation
  • 88ac998 build: update cross-repo angular dependencies
  • 022e0ef build: update github/codeql-action action to v4.34.1
  • c363f19 build: update dependency node to v22.22.2
  • b1fe66a fix(@​angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders
  • 2aa93fc release: cut the v21.2.4 release
  • f33826e build: update cross-repo angular dependencies
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot) labels Mar 29, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 29, 2026 03:03
@dependabot dependabot bot added the npm npm package updates (e.g. dependabot) label Mar 29, 2026
@github-actions github-actions bot enabled auto-merge March 29, 2026 03:03
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-a2ba177d77 branch 8 times, most recently from 312ef0d to a50f0d2 Compare April 2, 2026 14:51
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-a2ba177d77 branch 2 times, most recently from 056c60a to b9caf0b Compare April 6, 2026 18:32
Removes [serialize-javascript](https://github.com/yahoo/serialize-javascript). It's no longer used after updating ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Removes `serialize-javascript`

Updates `@angular-devkit/build-angular` from 19.2.22 to 21.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v19.2.22...v21.2.5)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-a2ba177d77 branch from b9caf0b to c2211d7 Compare April 10, 2026 23:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants