Skip to content

chore(deps): bump tar, @angular-devkit/build-angular, @angular/cli and ng-packagr#387

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c5f64716e9
Open

chore(deps): bump tar, @angular-devkit/build-angular, @angular/cli and ng-packagr#387
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-c5f64716e9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps tar to 7.5.21 and updates ancestor dependencies tar, @angular-devkit/build-angular, @angular/cli and ng-packagr. These dependencies need to be updated together.

Updates tar from 6.1.15 to 7.5.21

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @angular-devkit/build-angular from 12.2.18 to 21.2.19

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit Description
fix - 61a810ab6 respect release age policy in update bootstrapping logic

@​angular/build

Commit Description
fix - a2b6116ed bump undici to 7.28.0
fix - 2510ee3c9 bump vite to 7.3.6

21.2.17

@​angular/build

Commit Description
fix - 9c366e8be bump @​babel/core to 7.29.7
fix - 6a06ce9e9 bump esbuild to 0.28.1
fix - 637b84877 bump piscina to 5.2.0
fix - e86d58a12 bump vite to 7.3.5

21.2.16

@​angular/cli

Commit Description
fix - 77c9047ac update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - d052e97da prioritize options over environment variables in AngularNodeAppEngine

21.2.15

@​angular/cli

Commit Description
fix - 42ac0ed0f remove forceAuth and unscoped credential parsing
fix - c7a7f1955 support registry metadata fetching under bun package manager

21.2.14

@​angular/cli

Commit Description
fix - aed448748 expand package groups for newly added peer dependencies in update schematic

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

@​angular/ssr

Commit Type Description
0bd22dae0 fix replace all route parameters when resolving relative redirects

22.0.6 (2026-07-08)

... (truncated)

Commits
  • 1a72825 release: cut the v21.2.19 release
  • df54298 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • fe3a606 release: cut the v21.2.18 release
  • 2510ee3 fix(@​angular/build): bump vite to 7.3.6
  • 61a810a fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • a2b6116 fix(@​angular/build): bump undici to 7.28.0
  • 9c1edbc release: cut the v21.2.17 release
  • 637b848 fix(@​angular/build): bump piscina to 5.2.0
  • 9c366e8 fix(@​angular/build): bump @​babel/core to 7.29.7
  • 6a06ce9 fix(@​angular/build): bump esbuild to 0.28.1
  • Additional commits viewable in compare view

Updates @angular/cli from 12.2.18 to 22.0.7

Release notes

Sourced from @​angular/cli's releases.

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces

22.0.6

@​angular/build

Commit Description
fix - df49966c6 fallback to build target preserveSymlinks option in karma runner
fix - 9906add5b prevent externalizing builder-injected i18n locale data
fix - 070155f6e strip all vite id prefixes from minified code with external dependencies

@​angular/ssr

Commit Description
fix - c9aa354b1 replace all route parameters when resolving relative redirects

22.0.5

@​schematics/angular

Commit Description
fix - 862a38069 remove unused app tsconfig outDir

@​angular/cli

Commit Description
fix - f099e641c gracefully handle package manager errors in command handler
fix - cf033ec48 respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

Commit Description
fix - f75085f4b prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit Description
fix - dfee1e7b1 auto-inject localize/init in library unit tests
fix - aba718403 inherit preserveSymlinks option from build target in unit-test builder
fix - 7c0d9f03c load zone.js dynamically for library unit tests
fix - 4288e4452 scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit Description
fix - 5f774f891 preserve response headers during redirect

22.0.4

@​angular/build

Commit Description
fix - 46185ceac aggregate parallel worker performance timings on the main thread

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.7 (2026-07-15)

@​angular/cli

Commit Type Description
e85c10ccb fix copy packageManager field and yarn config for temp installs
b87cafec0 fix support resolving subproject dependencies in pnpm workspaces

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

... (truncated)

Commits
  • e744701 release: cut the v22.0.7 release
  • a902c38 build: lock file maintenance
  • 12fb387 build: update pnpm to v10.34.5
  • 22d843e build: update cross-repo angular dependencies to v22.0.6
  • b87cafe fix(@​angular/cli): support resolving subproject dependencies in pnpm workspaces
  • e85c10c fix(@​angular/cli): copy packageManager field and yarn config for temp installs
  • 5584a58 build: update babel monorepo to v7.29.7
  • cc45a54 build: update dependency http-proxy-middleware to v3.0.7
  • 31345b6 build: lock file maintenance
  • dbd61b1 release: cut the v22.0.6 release
  • Additional commits viewable in compare view

Updates ng-packagr from 12.2.7 to 22.0.1

Release notes

Sourced from ng-packagr's releases.

22.0.1

Bug Fixes

  • ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (44bc3a7), closes #3343
  • ng-packagr: prevent concurrent compilation and stale cache results (c4fd75f)

Performance

  • ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (1b6ac8e)

22.0.0

⚠ BREAKING CHANGES

  • ng-packagr: TypeScript versions older than 6.0 are no longer supported.
  • Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

Features

  • update @​angular/compiler-cli peer dependency to support Angular v22 (1fd8eb1)
  • support Node.js 26 (4360fea)
  • ng-packagr: drop support for TypeScript 5.9 (b59e280)

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (e7d8e38)
  • ng-packagr: handle package.json files with export subpaths (89e195d)
  • ensure dts sourcemaps point to original ts files (28424e2)
  • allow TypeScript 6 peer dependency (fdb49da)
  • update minimum supported Node.js versions (f7e5ef5)

22.0.0-next.5

Bug Fixes

  • ng-packagr: handle package.json files with export subpaths (89e195d)

22.0.0-next.4

Features

22.0.0-next.3

⚠ BREAKING CHANGES

  • ng-packagr: TypeScript versions older than 6.0 are no longer supported.

Features

... (truncated)

Changelog

Sourced from ng-packagr's changelog.

22.0.1 (2026-07-01)

Bug Fixes

  • ng-packagr: generate specific .npmignore entries for secondary entry-point package.json files (44bc3a7), closes #3343
  • ng-packagr: prevent concurrent compilation and stale cache results (c4fd75f)

Performance

  • ng-packagr: implement semaphore backpressure throttling in SassWorkerImplementation (1b6ac8e)

22.1.0-next.2 (2026-06-11)

Bug Fixes

  • ng-packagr: prevent concurrent compilation and stale cache results (e5d77a7)

22.1.0-next.1 (2026-06-03)

22.1.0-next.0 (2026-06-03)

22.0.0 (2026-06-03)

⚠ BREAKING CHANGES

  • ng-packagr: TypeScript versions older than 6.0 are no longer supported.
  • Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.

Features

  • update @​angular/compiler-cli peer dependency to support Angular v22 (1fd8eb1)
  • support Node.js 26 (4360fea)
  • ng-packagr: drop support for TypeScript 5.9 (b59e280)

Bug Fixes

  • ng-packagr: invalidate angularDiagnosticCache for html changes (e7d8e38)
  • ng-packagr: handle package.json files with export subpaths (89e195d)
  • ensure dts sourcemaps point to original ts files (28424e2)
  • allow TypeScript 6 peer dependency (fdb49da)
  • update minimum supported Node.js versions (f7e5ef5)

22.0.0-rc.0 (2026-05-18)

22.0.0-next.5 (2026-05-18)

... (truncated)

Commits
  • bb2a3af release: cut 22.0.1
  • 44bc3a7 fix(ng-packagr): generate specific .npmignore entries for secondary entry-poi...
  • 1b6ac8e perf(ng-packagr): implement semaphore backpressure throttling in SassWorkerIm...
  • c4fd75f fix(ng-packagr): prevent concurrent compilation and stale cache results
  • c2e12fb Update CHANGELOG.md
  • dd927c6 docs: update changelog for version 22.0.0 release
  • e918dc3 release: cut 22.0.0
  • 7f8a814 build: update @​angular/compiler-cli peer dependency range to support version ...
  • e7d8e38 fix(ng-packagr): invalidate angularDiagnosticCache for html changes
  • 7204d85 build: update pnpm workspace configuration and remove redundant pnpm settings
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for ng-packagr since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…d ng-packagr

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.21 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [@angular/cli](https://github.com/angular/angular-cli) and [ng-packagr](https://github.com/ng-packagr/ng-packagr). These dependencies need to be updated together.


Updates `tar` from 6.1.15 to 7.5.21
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.1.15...v7.5.21)

Updates `@angular-devkit/build-angular` from 12.2.18 to 21.2.19
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@12.2.18...v21.2.19)

Updates `@angular/cli` from 12.2.18 to 22.0.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@12.2.18...v22.0.7)

Updates `ng-packagr` from 12.2.7 to 22.0.1
- [Release notes](https://github.com/ng-packagr/ng-packagr/releases)
- [Changelog](https://github.com/ng-packagr/ng-packagr/blob/main/CHANGELOG.md)
- [Commits](ng-packagr/ng-packagr@v12.2.7...22.0.1)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.21
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.19
  dependency-type: direct:development
- dependency-name: "@angular/cli"
  dependency-version: 22.0.7
  dependency-type: direct:development
- dependency-name: ng-packagr
  dependency-version: 22.0.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants