Skip to content

Bump tar, @angular-devkit/build-angular, @angular/cli and ng-packagr - #73

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-ed13cb3d6a
Open

Bump tar, @angular-devkit/build-angular, @angular/cli and ng-packagr#73
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-ed13cb3d6a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown

Bumps tar to 7.5.21 and updates ancestor dependencies tar, @angular-devkit/build-angular, @angular/cli and ng-packagr. These dependencies need to be updated together.

Updates tar from 6.2.0 to 7.5.21

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @angular-devkit/build-angular from 13.3.11 to 19.2.27

Release notes

Sourced from @​angular-devkit/build-angular's releases.

19.2.27

@​angular/ssr

Commit Description
fix - 2c0dfc2ac add support for configuring trusted proxy headers via environment variable

19.2.26

@​angular/ssr

Commit Description
fix - 842fee029 allow all hosts in common engine rendering options to prevent validation errors

19.2.25

@​angular-devkit/build-angular

Commit Description
fix - 49ae0ad2d upgrade postcss to 8.5.12

@​angular/build

Commit Description
fix - 2d53feca5 update esbuild to 0.28.0

@​angular/ssr

Commit Description
fix - 02ce8bf26 introduce trustProxyHeaders option to safely validate and sanitize proxy headers

19.2.24

@​angular/build

Commit Description
fix - f4595d599 update vite to 6.4.2

19.2.23

@​angular/cli

Commit Description
fix - 67cfbe32f update picomatch to 4.0.4

@​angular-devkit/build-angular

Commit Description
fix - 771b979e7 update picomatch to 4.0.4

@​angular-devkit/core

Commit Description
fix - de2da4874 update picomatch to 4.0.4

@​angular/build

Commit Description
fix - 27a9ce4a7 update picomatch to 4.0.4

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

19.2.27 (2026-06-02)

@​angular/ssr

Commit Type Description
2c0dfc2ac fix add support for configuring trusted proxy headers via environment variable

21.2.13 (2026-05-27)

@​angular-devkit/build-angular

Commit Type Description
3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server

@​angular/build

Commit Type Description
2b3e95517 fix assert that asset input paths are within workspace root

21.2.12 (2026-05-20)

@​angular/build

Commit Type Description
cbad57579 fix ignore virtual esbuild paths with (disabled):

21.2.11 (2026-05-13)

@​angular/cli

Commit Type Description
bbd63b7a5 fix robustly parse npm manifest from array

... (truncated)

Commits
  • 4bfcaa0 release: cut the v19.2.27 release
  • 2c0dfc2 fix(@​angular/ssr): add support for configuring trusted proxy headers via envi...
  • 9640d1f release: cut the v19.2.26 release
  • 842fee0 fix(@​angular/ssr): allow all hosts in common engine rendering options to prev...
  • 1aa23cd release: cut the v19.2.25 release
  • 49ae0ad fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.12
  • bf387fb refactor: ensure prerender routes start with a forward slash and update packa...
  • 02ce8bf fix(@​angular/ssr): introduce trustProxyHeaders option to safely validate and...
  • 2d53fec fix(@​angular/build): update esbuild to 0.28.0
  • a7625d1 release: cut the v19.2.24 release
  • Additional commits viewable in compare view

Updates @angular/cli from 13.3.11 to 22.0.7

Release notes

Sourced from @​angular/cli's releases.

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces

22.0.6

@​angular/build

Commit Description
fix - df49966c6 fallback to build target preserveSymlinks option in karma runner
fix - 9906add5b prevent externalizing builder-injected i18n locale data
fix - 070155f6e strip all vite id prefixes from minified code with external dependencies

@​angular/ssr

Commit Description
fix - c9aa354b1 replace all route parameters when resolving relative redirects

22.0.5

@​schematics/angular

Commit Description
fix - 862a38069 remove unused app tsconfig outDir

@​angular/cli

Commit Description
fix - f099e641c gracefully handle package manager errors in command handler
fix - cf033ec48 respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

Commit Description
fix - f75085f4b prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit Description
fix - dfee1e7b1 auto-inject localize/init in library unit tests
fix - aba718403 inherit preserveSymlinks option from build target in unit-test builder
fix - 7c0d9f03c load zone.js dynamically for library unit tests
fix - 4288e4452 scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit Description
fix - 5f774f891 preserve response headers during redirect

22.0.4

@​angular/build

Commit Description
fix - 46185ceac aggregate parallel worker performance timings on the main thread

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.7 (2026-07-15)

@​angular/cli

Commit Type Description
e85c10ccb fix copy packageManager field and yarn config for temp installs
b87cafec0 fix support resolving subproject dependencies in pnpm workspaces

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

... (truncated)

Commits
  • e744701 release: cut the v22.0.7 release
  • a902c38 build: lock file maintenance
  • 12fb387 build: update pnpm to v10.34.5
  • 22d843e build: update cross-repo angular dependencies to v22.0.6
  • b87cafe fix(@​angular/cli): support resolving subproject dependencies in pnpm workspaces
  • e85c10c fix(@​angular/cli): copy packageManager field and yarn config for temp installs
  • 5584a58 build: update babel monorepo to v7.29.7
  • cc45a54 build: update dependency http-proxy-middleware to v3.0.7
  • 31345b6 build: lock file maintenance
  • dbd61b1 release: cut the v22.0.6 release
  • Additional commits viewable in compare view

Updates ng-packagr from 13.3.1 to 22.0.1

Release notes

Sourced from ng-packagr's releases.

22.0.1

Bug Fixes

  • ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (44bc3a7), closes #3343
  • ng-packagr: prevent concurrent compilation and stale cache results (c4fd75f)

Performance

  • ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (1b6ac8e)

22.0.0

⚠ BREAKING CHANGES

  • ng-packagr: TypeScript versions older than 6.0 are no longer supported.
  • Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

Features

  • update @​angular/compiler-cli peer dependency to support Angular v22 (1fd8eb1)
  • support Node.js 26 (4360fea)
  • ng-packagr: drop support for TypeScript 5.9 (b59e280)

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (e7d8e38)
  • ng-packagr: handle package.json files with export subpaths (89e195d)
  • ensure dts sourcemaps point to original ts files (28424e2)
  • allow TypeScript 6 peer dependency (fdb49da)
  • update minimum supported Node.js versions (f7e5ef5)

22.0.0-next.5

Bug Fixes

  • ng-packagr: handle package.json files with export subpaths (89e195d)

22.0.0-next.4

Features

22.0.0-next.3

⚠ BREAKING CHANGES

  • ng-packagr: TypeScript versions older than 6.0 are no longer supported.

Features

... (truncated)

Changelog

Sourced from ng-packagr's changelog.

22.0.1 (2026-07-01)

Bug Fixes

  • ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (44bc3a7), closes #3343
  • ng-packagr: prevent concurrent compilation and stale cache results (c4fd75f)

Performance

  • ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (1b6ac8e)

22.1.0-next.2 (2026-06-11)

Bug Fixes

  • ng-packagr: prevent concurrent compilation and stale cache results (e5d77a7)

22.1.0-next.1 (2026-06-03)

22.1.0-next.0 (2026-06-03)

22.0.0 (2026-06-03)

⚠ BREAKING CHANGES

  • ng-packagr: TypeScript versions older than 6.0 are no longer supported.
  • Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

Features

  • update @​angular/compiler-cli peer dependency to support Angular v22 (1fd8eb1)
  • support Node.js 26 (4360fea)
  • ng-packagr: drop support for TypeScript 5.9 (b59e280)

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (e7d8e38)
  • ng-packagr: handle package.json files with export subpaths (89e195d)
  • ensure dts sourcemaps point to original ts files (28424e2)
  • allow TypeScript 6 peer dependency (fdb49da)
  • update minimum supported Node.js versions (f7e5ef5)

22.0.0-rc.0 (2026-05-18)

22.0.0-next.5 (2026-05-18)

... (truncated)

Commits
  • bb2a3af release: cut 22.0.1
  • 44bc3a7 fix(ng-packagr): generate specific .npmignore entries for secondary entry-poi...
  • 1b6ac8e perf(ng-packagr): implement semaphore backpressure throttling in SassWorkerIm...
  • c4fd75f fix(ng-packagr): prevent concurrent compilation and stale cache results
  • c2e12fb Update CHANGELOG.md
  • dd927c6 docs: update changelog for version 22.0.0 release
  • e918dc3 release: cut 22.0.0
  • 7f8a814 build: update @​angular/compiler-cli peer dependency range to support version ...
  • e7d8e38 fix(ng-packagr): invalidate angularDiagnosticCache for html changes
  • 7204d85 build: update pnpm workspace configuration and remove redundant pnpm settings
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ng-packagr since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.21 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [@angular/cli](https://github.com/angular/angular-cli) and [ng-packagr](https://github.com/ng-packagr/ng-packagr). These dependencies need to be updated together.


Updates `tar` from 6.2.0 to 7.5.21
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v7.5.21)

Updates `@angular-devkit/build-angular` from 13.3.11 to 19.2.27
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@13.3.11...v19.2.27)

Updates `@angular/cli` from 13.3.11 to 22.0.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@13.3.11...v22.0.7)

Updates `ng-packagr` from 13.3.1 to 22.0.1
- [Release notes](https://github.com/ng-packagr/ng-packagr/releases)
- [Changelog](https://github.com/ng-packagr/ng-packagr/blob/main/CHANGELOG.md)
- [Commits](ng-packagr/ng-packagr@v13.3.1...22.0.1)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.21
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 19.2.27
  dependency-type: direct:development
- dependency-name: "@angular/cli"
  dependency-version: 22.0.7
  dependency-type: direct:development
- dependency-name: ng-packagr
  dependency-version: 22.0.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants