Skip to content

Bump the angular-tooling group in /samples/aspire-with-javascript/AspireJavaScript.Angular with 2 updates - #1848

Merged
microsoft-github-policy-service[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/aspire-with-javascript/AspireJavaScript.Angular/angular-tooling-c7f2c3ebb3
Jul 29, 2026
Merged

Bump the angular-tooling group in /samples/aspire-with-javascript/AspireJavaScript.Angular with 2 updates#1848
microsoft-github-policy-service[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/aspire-with-javascript/AspireJavaScript.Angular/angular-tooling-c7f2c3ebb3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the angular-tooling group in /samples/aspire-with-javascript/AspireJavaScript.Angular with 2 updates: @angular-devkit/build-angular and typescript.

Updates @angular-devkit/build-angular from 22.0.0 to 22.0.8

Release notes

Sourced from @​angular-devkit/build-angular's releases.

22.0.8

@​angular/cli

Commit Description
fix - 41c356256 batch Prettier invocations during migration formatting
fix - bc87c85c3 update MCP devserver tool names to conform to spec regex

@​angular/build

Commit Description
fix - 5724bf632 canonicalize drive letter casing for workspace root on Windows
fix - b8bdbaa1e ensure import map integrity keys are valid URL-like specifiers
fix - 212a7bb21 favor istanbul coverage provider when browser testing is enabled
fix - bc760b005 preserve custom config options in runnerConfig for vitest
fix - 19cda7415 remap metafile paths when workspace root is a symlink or junction
perf - fdcc98c79 skip semantic affected-file walk when type checking is disabled

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces

22.0.6

@​angular/build

Commit Description
fix - df49966c6 fallback to build target preserveSymlinks option in karma runner
fix - 9906add5b prevent externalizing builder-injected i18n locale data
fix - 070155f6e strip all vite id prefixes from minified code with external dependencies

@​angular/ssr

Commit Description
fix - c9aa354b1 replace all route parameters when resolving relative redirects

22.0.5

@​schematics/angular

Commit Description
fix - 862a38069 remove unused app tsconfig outDir

@​angular/cli

Commit Description
fix - f099e641c gracefully handle package manager errors in command handler
fix - cf033ec48 respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

Commit Description
fix - f75085f4b prevent OS command injection in ssr-dev-server builder

@​angular/build

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

22.0.8 (2026-07-23)

@​angular/cli

Commit Type Description
41c356256 fix batch Prettier invocations during migration formatting
bc87c85c3 fix update MCP devserver tool names to conform to spec regex

@​angular/build

Commit Type Description
5724bf632 fix canonicalize drive letter casing for workspace root on Windows
b8bdbaa1e fix ensure import map integrity keys are valid URL-like specifiers
212a7bb21 fix favor istanbul coverage provider when browser testing is enabled
bc760b005 fix preserve custom config options in runnerConfig for vitest
19cda7415 fix remap metafile paths when workspace root is a symlink or junction
fdcc98c79 perf skip semantic affected-file walk when type checking is disabled

22.1.0-next.4 (2026-07-15)

@​angular/cli

Commit Type Description
3789ceee1 fix copy packageManager field and yarn config for temp installs
b0b3a47ae fix support resolving subproject dependencies in pnpm workspaces

@​schematics/angular

Commit Type Description
b345bb54d fix remove unused spec tsconfig outDir

@​angular/build

Commit Type Description
0c18dc0f6 feat emit debug ids for stable subresource integrity hashes
291caab61 fix prevent stripping nested sourceMappingURL comments

... (truncated)

Commits
  • beac493 release: cut the v22.0.8 release
  • 1bb2cc5 build: update devinfra digest to 8819f0b
  • 83eede6 build: update all github actions
  • 15b8616 build: update dependency aspect_rules_ts to v3.9.2
  • bc87c85 fix(@​angular/cli): update MCP devserver tool names to conform to spec regex
  • 212a7bb fix(@​angular/build): favor istanbul coverage provider when browser testing is...
  • 0c69328 Revert "perf(@​angular/build): skip semantic affected-file walk when type chec...
  • ecc7aba build: update cross-repo angular dependencies
  • ce5e5d0 build: lock file maintenance
  • fdcc98c perf(@​angular/build): skip semantic affected-file walk when type checking is ...
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the angular-tooling group in /samples/aspire-with-javascript/AspireJavaScript.Angular with 2 updates: [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [typescript](https://github.com/microsoft/TypeScript).


Updates `@angular-devkit/build-angular` from 22.0.0 to 22.0.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v22.0.0...v22.0.8)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 22.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular-tooling
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: angular-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI review requested due to automatic review settings July 29, 2026 00:44

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the Angular sample’s dev toolchain versions.

Changes:

  • Bumped @angular-devkit/build-angular from ^22.0.0 to ^22.0.8
  • Updated typescript from ~6.0.3 to ~7.0.2

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@microsoft-github-policy-service microsoft-github-policy-service Bot added dependencies Pull requests that update a dependency file auto-merge labels Jul 29, 2026
@microsoft-github-policy-service
microsoft-github-policy-service Bot enabled auto-merge (squash) July 29, 2026 00:45

@microsoft-github-policy-service microsoft-github-policy-service Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved; this PR will merge when all required status checks pass.

@microsoft-github-policy-service
microsoft-github-policy-service Bot merged commit c8a7248 into main Jul 29, 2026
4 of 5 checks passed
@microsoft-github-policy-service
microsoft-github-policy-service Bot deleted the dependabot/npm_and_yarn/samples/aspire-with-javascript/AspireJavaScript.Angular/angular-tooling-c7f2c3ebb3 branch July 29, 2026 00:45
David Pine (IEvangelist) pushed a commit that referenced this pull request Jul 30, 2026
…rity patches

The angular-tooling group bump (main #1848) set typescript ~7.0.2, which
violates @angular-devkit/build-angular@22's peer requirement
(typescript >=6.0 <6.1). This breaks `npm ci` for the Angular sample
(run via AppHost .WithNpm(installCommand: "ci")) and has left main red.
Revert typescript to ~6.0.3 to restore a resolvable dependency tree.

Reset this sample's package.json/package-lock.json to the upstream/main
baseline and apply three surgical leaf patches:
- typescript 7.0.2 -> 6.0.3 (drops 20 orphaned @typescript/typescript-* platform pkgs)
- postcss    8.5.10 -> 8.5.18  (GHSA-r28c-9q8g-f849 #630, GHSA-6g55-p6wh-862q #629)
- js-yaml    4.2.0  -> 4.3.0   (GHSA-52cp-r559-cp3m #601)

Remaining Angular alerts (fast-uri #624, webpack-dev-server #604/#603/#563,
@hono/node-server #617, brace-expansion #600) are deferred to a follow-up
once CI is verified green.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Jul 31, 2026
…rity patches

The angular-tooling group bump (main #1848) set typescript ~7.0.2, which
violates @angular-devkit/build-angular@22's peer requirement
(typescript >=6.0 <6.1). This breaks `npm ci` for the Angular sample
(run via AppHost .WithNpm(installCommand: "ci")) and has left main red.
Revert typescript to ~6.0.3 to restore a resolvable dependency tree.

Reset this sample's package.json/package-lock.json to the upstream/main
baseline and apply three surgical leaf patches:
- typescript 7.0.2 -> 6.0.3 (drops 20 orphaned @typescript/typescript-* platform pkgs)
- postcss    8.5.10 -> 8.5.18  (GHSA-r28c-9q8g-f849 #630, GHSA-6g55-p6wh-862q #629)
- js-yaml    4.2.0  -> 4.3.0   (GHSA-52cp-r559-cp3m #601)

Remaining Angular alerts (fast-uri #624, webpack-dev-server #604/#603/#563,
@hono/node-server #617, brace-expansion #600) are deferred to a follow-up
once CI is verified green.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
David Pine (IEvangelist) pushed a commit that referenced this pull request Aug 3, 2026
…rity patches

The angular-tooling group bump (main #1848) set typescript ~7.0.2, which
violates @angular-devkit/build-angular@22's peer requirement
(typescript >=6.0 <6.1). This breaks `npm ci` for the Angular sample
(run via AppHost .WithNpm(installCommand: "ci")) and has left main red.
Revert typescript to ~6.0.3 to restore a resolvable dependency tree.

Reset this sample's package.json/package-lock.json to the upstream/main
baseline and apply three surgical leaf patches:
- typescript 7.0.2 -> 6.0.3 (drops 20 orphaned @typescript/typescript-* platform pkgs)
- postcss    8.5.10 -> 8.5.18  (GHSA-r28c-9q8g-f849 #630, GHSA-6g55-p6wh-862q #629)
- js-yaml    4.2.0  -> 4.3.0   (GHSA-52cp-r559-cp3m #601)

Remaining Angular alerts (fast-uri #624, webpack-dev-server #604/#603/#563,
@hono/node-server #617, brace-expansion #600) are deferred to a follow-up
once CI is verified green.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-engineering-systems auto-merge dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant