Skip to content

fix(deps): update weekly-non-major-updates - #4670

Merged
sleidig merged 1 commit into
masterfrom
renovate/weekly-non-major-updates
Nov 9, 2026
Merged

fix(deps): update weekly-non-major-updates#4670
sleidig merged 1 commit into
masterfrom
renovate/weekly-non-major-updates

Conversation

@renovate

@renovate renovate Bot commented Nov 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@angular-devkit/build-angular ^22.2.5 → ^22.2.6 age confidence
@angular/build ^22.2.5 → ^22.2.6 age confidence
@angular/cdk ^22.2.5 → ^22.2.6 age confidence
@angular/cli ^22.2.5 → ^22.2.6 age confidence
@angular/common (source) ^22.2.4 → ^22.2.5 age confidence
@angular/compiler (source) ^22.2.4 → ^22.2.5 age confidence
@angular/compiler-cli (source) ^22.2.4 → ^22.2.5 age confidence
@angular/core (source) ^22.2.4 → ^22.2.5 age confidence
@angular/forms (source) ^22.2.4 → ^22.2.5 age confidence
@angular/localize ^22.2.4 → ^22.2.5 age confidence
@angular/material ^22.2.5 → ^22.2.6 age confidence
@angular/material-moment-adapter ^22.2.5 → ^22.2.6 age confidence
@angular/platform-browser (source) ^22.2.4 → ^22.2.5 age confidence
@angular/router (source) ^22.2.4 → ^22.2.5 age confidence
@angular/service-worker (source) ^22.2.4 → ^22.2.5 age confidence
@babel/core (source) ^8.0.10 → ^8.1.0 age confidence
@playwright/test (source) 1.64.1 → 1.65.0 age confidence
@schematics/angular ^22.2.5 → ^22.2.6 age confidence
@sentry/angular (source) ^11.10.0 → ^11.11.0 age confidence
@storybook/addon-docs (source) ^10.6.5 → ^10.6.6 age confidence
@storybook/angular (source) ^10.6.5 → ^10.6.6 age confidence
@vitest/coverage-v8 (source) ^5.0.5 → ^5.1.0 age confidence
commander ^15.0.0 → ^15.1.0 age confidence
eslint-plugin-storybook (source) ^10.6.5 → ^10.6.6 age confidence
firebase (source, changelog) ^13.1.0 → ^13.2.0 age confidence
serve ^14.2.6 → ^14.2.7 age confidence
storybook (source) ^10.6.5 → ^10.6.6 age confidence
vitest (source) ^5.0.5 → ^5.1.0 age confidence

Release Notes

angular/angular-cli (@​angular-devkit/build-angular)

v22.2.6

Compare Source

@​angular/cli
Commit Type Description
8317b7037a fix allow command arguments named help
7de6927af8 fix also clean the worktree-local cache in a git worktree
34d53918e2 fix default ignoreScripts to true when install options are provided
d872eebfad fix handle modern yarn registry error output and 404 detection
0d622f0ebd fix ignore registry manifests that do not match the requested version
b50147fd3a fix strip terminal escape sequences in modern yarn error parser
da76a2ef69 fix use unquoted specifier for registry manifest cache keys
eda9d64f18 fix validate dist-tags and manifest caching under modern yarn
@​schematics/angular
Commit Type Description
d1bdea533c fix add a TODO for spy strategies configured with withArgs in refactor-jasmine-vitest
8c8910792c fix do not drop callThrough() on existing spies in refactor-jasmine-vitest
3dea2f6b32 fix generate pnpm-workspace.yaml with allowBuilds for pnpm projects
e91c414ce6 fix keep existing worker tsconfig when generating another web worker
a532d0549b fix keep the meaning of negated toHaveBeenCalledOnceWith in refactor-jasmine-vitest
2aa56cce06 fix migrate serviceWorker: true to a config path in use-application-builder
17134ccb77 fix update the PostCSS configuration used by the build in tailwind
@​angular/build
Commit Type Description
1931eac4e5 fix copy assets replaced by a rename in watch mode
a4ce7bf461 fix elide non-value aliases and remaining type-only AST constructs
b5dd8e2634 fix enable oxc WASI fallback in WebContainer environments
244a1c7d15 fix include source map hashes in optimized chunk hashes
0f63a03bae fix quote weak ETags of assets served by the dev server
42bdb75f1a fix remove every output of a deleted asset in watch mode
76b585fb5a fix require only the launchers the karma configuration loads
631ac8aa66 fix use oxc-parser fallback when stripping source-map comments (#​34632)
@​angular/ssr
Commit Type Description
f8f9f48bfa fix destroy platform when request is aborted during rendering
dcd5029bbd fix validate prerender parameter values
@​ngtools/webpack
Commit Type Description
4b6caacbc7 fix elide imports used only in type re-exports or type declarations
ea46fd855f fix elide non-value aliases and remaining type-only AST constructs
angular/components (@​angular/cdk)

v22.2.6

Compare Source

aria
Commit Type Description
883fd65024e08 fix accordion: move listeners to trigger (#​34053)
e7dc3254ce3b0 fix combobox: prevent selecting filtered-out options on Enter (#​34045)
cdk
Commit Type Description
fefbe067b2b6e fix observers: do not replay other element entries (#​34050)
b93e452da2e13 fix portal: insert DOM portal in right location (#​34055)
3ed6bca260716 fix testing: enable bubbling for input-related events (#​34020)
ee54e1deb454f fix testing: option selection with latest angular version (#​34040)
material
Commit Type Description
d078eefde8e2b fix schematics: remove waitForAsync from generated tests
1c66cc4927efc fix slider: prevent out of memory errors from tick marks on the server (#​34037)
angular/angular (@​angular/common)

v22.2.5

Compare Source

core
Commit Type Description
6f06af76c9 fix add debugName option to rxResource
8c426b6cbc fix escape comment markers which share characters
ca3afffbdc fix remove attribute when img/video attr.src is null or undefined
forms
Commit Type Description
545eb3d07b fix reflect required validators in compat fields
a7b0e8ef9d fix support updateOn blur and submit for custom FormValueControl
96b027ebf6 perf avoid creating unused field injectors
router
Commit Type Description
ca42fefa56 fix read focusReset from the navigation extras
585271376a perf run loadComponent and loadChildren in root environment injector (g3-only)
babel/babel (@​babel/core)

v8.1.0

Compare Source

🚀 New Feature
  • babel-helper-module-transforms, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-filtered-namespaces, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-dynamic-import, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime, babel-standalone
  • babel-generator, babel-helper-import-to-platform-api, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-modules, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-traverse, babel-types
  • Other
  • babel-helper-import-to-platform-api, babel-helper-transform-fixture-test-runner, babel-helpers, babel-plugin-proposal-bytes-modules, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-text-modules, babel-plugin-transform-json-modules, babel-runtime-corejs3, babel-runtime
  • babel-generator, babel-parser, babel-traverse, babel-types
  • babel-generator, babel-parser, babel-types
  • babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-export-namespace-from, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-types
  • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • babel-core
  • babel-core, babel-plugin-transform-classes
🐛 Bug Fix
  • babel-parser
  • babel-helper-skip-transparent-expression-wrappers, babel-plugin-transform-optional-chaining
🔬 Output optimization
microsoft/playwright (@​playwright/test)

v1.65.0

Compare Source

🥟 Run tests with Bun

The test runner now runs under Bun. Bun transpiles your TypeScript test files itself, so Playwright does not use Babel or its compilation cache. Pass the --bun flag, because without it bunx playwright test runs on Node.js:

bunx --bun playwright test

Our CI runs the test runner tests under Bun 1.4.3 on Linux. Some features work differently under Bun:

  • There is no watch mode. UI mode does not run tests again when files change, and --only-changed does not follow imports.
  • Bun loads modules itself, so --tsconfig and the JSX options in tsconfig.json have no effect, and custom ESM loaders are not supported.
  • Stack traces do not include async frames, and API names do not include the class name: click instead of locator.click. This changes some step locations, step titles and error messages.
  • Console output of a test does not get into the trace and UI mode.

🚨 Reports with only failures

New failures reporter prints failures and successful retries as they occur, followed by a summary, without progress output.

New onlyFailures option of the HTML, JSON and JUnit reporters keeps only tests with unexpected outcomes, flaky tests and interrupted tests:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  reporter: [
    ['failures'],
    ['html', { onlyFailures: true }],
  ],
});

🎯 Test runner

  • New built-in -exclusive- test lock runs a test only when no other tests are running. All other tests continue to run in parallel with each other:

    test('restart the server', { lock: '-exclusive-' }, async () => {
  // No other test runs while this one is running.
});

  • test.skip(), test.fixme(), test.fail() and test.slow() now accept only a description. It is recorded in the test annotation:

    test('upload a file', async ({ page }) => {
  test.skip('Not implemented yet');
});

  • New PLAYWRIGHT_TRANSFORM_CACHE_DIR environment variable sets the directory for transpiled test files, for example on a Linux machine shared with other users.

New APIs

Breaking Changes ⚠️

  • TypeScript class fields now follow useDefineForClassFields from your tsconfig.json, the same as tsc. It is enabled for ES2022 and later targets, and when target is not specified. A field initializer that reads a constructor parameter property now fails, because the initializer runs first:

    class LoginPage {
  // TypeError: Cannot read properties of undefined (reading 'getByRole')
  readonly submit = this.page.getByRole('button', { name: 'Submit' });

  constructor(private readonly page: Page) {}
}

    Move the initialization to the constructor, or set "useDefineForClassFields": false in your tsconfig.json.

  • Actions such as locator.click(), locator.check(), locator.tap(), locator.fill(), locator.clear() and locator.selectOption() now wait for the element to be not inert. An action on an element with the inert attribute, or inside such an element, now times out if the element stays inert.

  • A sharded run now fails with "No tests found" when no tests match across all shards. Pass --pass-with-no-tests to allow this. An empty shard still passes when other shards have tests.

  • Cookie matching now follows RFC 6265. With a URL, browserContext.cookies() and apiRequestContext.cookies() no longer return host-only cookies for subdomains or Path=/api cookies for /apiv2, and a Path=/foo/ cookie does not match /foo. APIRequestContext sends a cookie without a name as Cookie: x instead of Cookie: =x, and stores Set-Cookie: token as a cookie without a name.

  • Proxy credentials are no longer sent to websites. The credentials in the proxy option now answer only proxy challenges. To authenticate on a website, use httpCredentials.

  • Text that the browser does not render, such as text that is not assigned to a slot or text directly inside a closed <details>, is no longer part of accessible names and aria snapshots. This can change the results of page.getByRole() with a name, locator.ariaSnapshot() and expect(locator).toMatchAriaSnapshot().

  • String and URLSearchParams values of the params option in APIRequestContext requests are now appended to the query that the URL already has, instead of replacing it.

  • .css, .less and .scss imports in test files now load as empty modules instead of being removed, so the imported file must exist.

  • The blob reporter again deletes the content of its output directory before it writes the report. Playwright 1.64 kept reports with other names.

  • Test locations of imported calls such as test( in CommonJS output now point to the start of the callee, for example a.spec.ts:3:7 instead of a.spec.ts:3:11. This is the same as in ESM.

Announcements

  • ⚠️ Playwright no longer tests on Node.js 20. Use Node.js 22, 24 or 26, as listed in the system requirements.
  • 🐳 Docker images now include Node.js 26 instead of Node.js 24, and the latest patch of Chromium on the same branch.

Browser Versions

  • Chromium 158.0.8127.18
  • Mozilla Firefox 159.0
  • WebKit 27.2

This version was also tested against the following stable channels:

  • Google Chrome 157
  • Microsoft Edge 156
getsentry/sentry-javascript (@​sentry/angular)

v11.11.0

Compare Source

Important Changes

  • ref(cloudflare): Use the shared request handler wrapper (#​25588)

    Cloudflare Workers now use the same request handler wrapper as Deno.serve and Bun.serve. Changes for Cloudflare users:

    • Request spans now set client.address from the CF-Connecting-IP header (or another forwarding header), as on the other runtimes. This follows dataCollection.userInfo, which is true by default. To leave it out, set dataCollection: { userInfo: false }.
    • Request spans now have the response header attributes, and events have the response context with the status code.
    • When the source of a streamed response fails, the SDK now captures the error and marks the span as failed. With captureErrors: false, it does not capture it.
    • Request spans now list every Set-Cookie header of a response, as on Deno and Bun.
    • Without AsyncLocalStorage (for example on Shopify Oxygen), events now also get the request URL and method.

  • feat(nestjs): Add an option to monitor every @​Cron method (#​25471)

    Set monitorCronJobs: true on nestIntegration() to send check-ins for every @Cron() method, without adding @SentryCron to each one. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use excludeCronJobs to skip jobs by slug. Methods that also have @SentryCron check in once, with the slug and options passed to @SentryCron.

  • feat(node): Add cronJobIntegration to monitor cron jobs (#​25477)

    Add Sentry.cronJobIntegration() to integrations to send check-ins for every named CronJob of the cron package (4.3+), with the job name as the monitor slug. It's off by default. Each monitored job creates a monitor in Sentry, and monitors are billed. Use excludeJobs to skip jobs by name. Sentry.cron.instrumentCron is deprecated; use cronJobIntegration instead.

  • fix(server-utils): Instrument @​anthropic-ai/sdk 1.x and turn off its own OTel spans (#​25750)

    The Anthropic integration now instruments @anthropic-ai/sdk 1.x. Since 0.134 the SDK also records its own OpenTelemetry spans, such as anthropic.messages.create, which duplicated Sentry's gen_ai spans. Once Sentry instruments the SDK, it sets ANTHROPIC_OPEN_TELEMETRY=false to turn those spans off. To keep them, set ANTHROPIC_OPEN_TELEMETRY=true or pass the openTelemetry option to the Anthropic client.

  • feat(nextjs): Mark pageloads of cached pages (#​25318)

    When Next.js serves a page from its cache, for example an ISR page or a cacheComponents shell, the pageload now has the page.server_rendering.type attribute. It is static if the whole page came from the cache, and partially_static if parts of it rendered for this request. Then the pageload stays connected to this request, as before. If the request that rendered the cached page was sampled, the pageload also links to it. So in Sentry, a cached page no longer looks like missing server instrumentation.

Other Changes
  • feat(astro): Add @sentry/astro/integration entry for the Astro integration (#​25726)
  • feat(bundler-plugins): Add sourcemaps.deleteSourcemapsAfterUpload and staged uploads (#​25637)
  • feat(nestjs): Derive SentryCron monitor config from @​Cron (#​25013)
  • feat(nextjs): Add applicationKeyExcludeDependencies option (#​25818)
  • feat(node): Add awsLambdaWebIntegration for Lambda Web Functions (#​25355)
  • feat(node): Add BullMQ integration (#​21777)
  • feat(node): Add nodeCronIntegration to monitor node-cron tasks (#​25473)
  • feat(node): Add nodeScheduleIntegration to monitor node-schedule jobs (#​25474)
  • feat(node): Support postgres v4 through its native tracing channels (#​26076)
  • feat(server-utils): Extract getSqlSpanName for SQL span names (#​25929)
  • feat(server-utils): Move to new getSqlQueryAttributes helper for consistency (#​25927)
  • feat(server-utils): Record AI SDK v7 runtime and tool context on Vercel AI spans (#​25774)
  • feat(server-utils): Set db.operation.name on SQL spans (#​25850)
  • feat(server-utils): Support @​mistralai/mistralai v3 (#​25827)
  • feat(solidstart): Export withSentry from @sentry/solidstart/vite (#​25725)
  • fix(astro): Initialize the server SDK on the first endpoint request (#​25731)
  • fix(browser): Attribute long animation frame spans to the longest script (#​25990)
  • fix(bundler-plugins): Inject debug IDs into every esbuild rebuild (#​26099)
  • fix(bundler-plugins): upload literal artifact paths (#​25356)
  • fix(cloudflare): Run build-time instrumentation in vite dev (#​25777)
  • fix(core): Call native toString without page-replaceable lookups in FunctionToString (#​25921)
  • fix(core): Enforce linked error limits for aggregate and suppressed errors (#​25873)
  • fix(core): Only create Supabase db spans when there is a parent span (#​25807)
  • fix(core): preserve span links through beforeSendSpan (#​25566)
  • fix(core): Respect header collection for session user agents (#​25871)
  • fix(deps): Bump glob to 14 and drop the direct dependency from react-router (#​26014)
  • fix(nextjs): Don't abort Cache Components renders on Cloudflare Workers when requests overlap (#​25315)
  • fix(nextjs): Drop tunnel requests under the Next.request proxy root span (#​26096)
  • fix(nextjs): Fork isolation scope for Next.request proxy root spans (#​26084)
  • fix(nextjs): Strip source map comments before trailing debug IDs (#​25881)
  • fix(nitro): Capture errors thrown in tasks ([#&build scripts #8

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • Only on Sunday (* * * * 0)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the Final Review Triggers CodeRabbit AI review and Argos visual review label Nov 8, 2026
@renovate
renovate Bot requested review from Abhinegi2 and sleidig November 8, 2026 00:50
@coderabbitai

coderabbitai Bot commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@github-actions

github-actions Bot commented Nov 8, 2026

Copy link
Copy Markdown
Contributor

Deployed to https://pr-4670.aam-digital.net/

@socket-security

socket-security Bot commented Nov 8, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updated@​angular/​platform-browser-dynamic@​22.2.4 ⏵ 22.2.51001006998 +2100
Updated@​angular/​material-moment-adapter@​22.2.5 ⏵ 22.2.6100 +11007198 +2100
Updated@​angular/​platform-browser@​22.2.4 ⏵ 22.2.51001007498 +2100
Updated@​angular/​service-worker@​22.2.4 ⏵ 22.2.5100 +11007598 +2100
Updated@​storybook/​angular@​10.6.5 ⏵ 10.6.69310075100100
Updated@​angular/​localize@​22.2.4 ⏵ 22.2.51001007598 +2100
Updated@​angular/​animations@​22.2.4 ⏵ 22.2.5100 +11007698 +2100
Updated@​angular/​compiler-cli@​22.2.4 ⏵ 22.2.5100 +11007698 +2100
Updated@​angular/​router@​22.2.4 ⏵ 22.2.5100 +110077 +198 +2100
Updated@​angular/​forms@​22.2.4 ⏵ 22.2.5100 +110077 +198 +2100
Updated@​angular/​cli@​22.2.5 ⏵ 22.2.69010077 +198 +2100
Updated@​angular/​build@​22.2.5 ⏵ 22.2.68410078 +198100
Updated@​angular/​compiler@​22.2.4 ⏵ 22.2.51001007898 +1100
Updated@​angular/​cdk@​22.2.5 ⏵ 22.2.610010078 +198 +2100
Updated@​babel/​core@​8.0.10 ⏵ 8.1.099 +11007998 +2100
Updated@​angular/​core@​22.2.4 ⏵ 22.2.5100 +110079 +198 +280
Updated@​angular/​common@​22.2.4 ⏵ 22.2.51001007998 +1100
Updated@​angular/​material@​22.2.5 ⏵ 22.2.6100 +11007998 +2100
Updated@​vitest/​coverage-v8@​5.0.5 ⏵ 5.1.09910079 +198100
Updatedvitest@​5.0.5 ⏵ 5.1.098 +110079 +199100
Updated@​sentry/​angular@​11.10.0 ⏵ 11.11.01001008096100
Updated@​schematics/​angular@​22.2.5 ⏵ 22.2.6100 +110083 +198 +2100
Updatedcommander@​15.0.0 ⏵ 15.1.099100100 +184100
Updatedserve@​14.2.6 ⏵ 14.2.79910099 +186100
Updatedstorybook@​10.6.5 ⏵ 10.6.69810088 +1100100
Updatedfirebase@​13.1.0 ⏵ 13.2.099100100 +1100 +1100
Updatedeslint-plugin-storybook@​10.6.5 ⏵ 10.6.610010010099100
Updated@​storybook/​addon-docs@​10.6.5 ⏵ 10.6.699100100100100
Updated@​playwright/​test@​1.64.1 ⏵ 1.65.010010010099100

View full report

@argos-ci

argos-ci Bot commented Nov 8, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Argos notifications ↗︎

Build Status Details Updated (UTC)
default (Inspect) 👍 Approved by Sebastian 2 changed, 3 ignored Nov 8, 2026, 1:00 AM

@github-actions github-actions Bot removed the Final Review Triggers CodeRabbit AI review and Argos visual review label Nov 8, 2026
@sleidig
sleidig merged commit 07791a2 into master Nov 9, 2026
24 of 25 checks passed
@sleidig
sleidig deleted the renovate/weekly-non-major-updates branch November 9, 2026 07:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sleidig sleidig sleidig approved these changes
@Abhinegi2 Abhinegi2 Awaiting requested review from Abhinegi2

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sleidig