Skip to content

build(deps): bump the npm_and_yarn group across 6 directories with 6 updates - #1

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-b805605ce2
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm_and_yarn-b805605ce2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 18, 2026

Copy link
Copy Markdown

Bumps the npm_and_yarn group with 2 updates in the / directory: vite and js-yaml.
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/sveltekit-tracing-test-app directory: @sveltejs/kit.
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/nextjs-15-test-app directory: next.
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/nextjs-14-test-app directory: next.
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/cloudflare-wrangler-sourcemaps-test-app directory: vite.
Bumps the npm_and_yarn group with 2 updates in the /e2e-tests/test-applications/angular-17-test-app directory: @angular/common and @angular/compiler.

Updates vite from 6.3.6 to 6.4.1

Release notes

Sourced from vite's releases.

[email protected]

Please refer to CHANGELOG.md for details.

v6.4.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.4.0

Please refer to CHANGELOG.md for details.

v6.3.7

Please refer to CHANGELOG.md for details.

Commits
  • 5003434 fix(preview): use host url to open browser (#19836)
  • bf9728e release: v6.3.0-beta.2
  • 380c10e fix(hmr): run HMR handler sequentially (#19793)
  • 8bed1de fix: addWatchFile doesn't work if base is specified (fixes #19792) (#19794)
  • 0a0c50a refactor: simplify pluginFilter implementation (#19828)
  • 59d0b35 perf(css): avoid constructing renderedModules (#19775)
  • 175a839 fix: reject requests with # in request-target (#19830)
  • e2e11b1 fix(module-runner): allow already resolved id as entry (#19768)
  • 7200dee fix: correct the behavior when multiple transform filter options are specifie...
  • b125172 fix(css): remove empty chunk imports correctly when chunk file name contained...
  • Additional commits viewable in compare view

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates @sveltejs/kit from 2.31.0 to 2.49.5

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.49.5

Patch Changes

  • fix: avoid overriding Vite default base when running Vitest 4 (#14866)

  • fix: ensure url decoded pathnames are not mistaken as rerouted requests (d9ae9b0)

  • fix: add length checks to remote forms (8ed8155)

@​sveltejs/kit@​2.49.4

Patch Changes

  • fix: support instrumentation for vite preview (#15105)

  • fix: support for URLSearchParams.has(name, value) overload (#15076)

  • fix: put forking behind experimental.forkPreloads (#15135)

@​sveltejs/kit@​2.49.3

Patch Changes

  • fix: avoid false-positive Vite config overridden warning when using Vitest 4 (#15121)

  • fix: add typescript as an optional peer dependency (#15074)

  • fix: use hasOwn check when deep-setting object properties (#15127)

@​sveltejs/kit@​2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

@​sveltejs/kit@​2.49.1

Patch Changes

  • fix: suppress state_referenced_locally warnings in .svelte-kit/generated/root.svelte (#15013)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.49.5

Patch Changes

  • fix: avoid overriding Vite default base when running Vitest 4 (#14866)

  • fix: ensure url decoded pathnames are not mistaken as rerouted requests (d9ae9b0)

  • fix: add length checks to remote forms (8ed8155)

2.49.4

Patch Changes

  • fix: support instrumentation for vite preview (#15105)

  • fix: support for URLSearchParams.has(name, value) overload (#15076)

  • fix: put forking behind experimental.forkPreloads (#15135)

2.49.3

Patch Changes

  • fix: avoid false-positive Vite config overridden warning when using Vitest 4 (#15121)

  • fix: add typescript as an optional peer dependency (#15074)

  • fix: use hasOwn check when deep-setting object properties (#15127)

2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

2.49.1

Patch Changes

... (truncated)

Commits
  • 80ffb53 Version Packages (#15162)
  • 8ed8155 Merge commit from fork
  • d9ae9b0 Merge commit from fork
  • ec4596a chore: Upgrade devalue (#15172)
  • 81cd545 fix: avoid overriding Vite default base when running Vitest 4 (#14866)
  • 6cf9491 chore: remove unused is_http_method helper and method set to (#15152)
  • 3305022 Revert "breaking: remove buttonProps from experimental remote form function...
  • 4f9870d breaking: remove buttonProps from experimental remote form functions (#14622)
  • c8e4017 Version Packages (#15129)
  • 50bf727 chore: fix prettier ignoring source code in with build in the name (#15133)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​sveltejs/kit since your current version.


Updates next from 15.4.7 to 15.4.10

Release notes

Sourced from next's releases.

v15.4.10

Please see the Next.js Security Update for information about this security patch.

v15.4.8

Please see CVE-2025-66478 for additional details about this release.

Commits

Updates next from 14.2.32 to 14.2.35

Release notes

Sourced from next's releases.

v15.4.10

Please see the Next.js Security Update for information about this security patch.

v15.4.8

Please see CVE-2025-66478 for additional details about this release.

Commits

Updates vite from 6.3.6 to 6.4.1

Release notes

Sourced from vite's releases.

[email protected]

Please refer to CHANGELOG.md for details.

v6.4.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v6.4.0

Please refer to CHANGELOG.md for details.

v6.3.7

Please refer to CHANGELOG.md for details.

Commits
  • 5003434 fix(preview): use host url to open browser (#19836)
  • bf9728e release: v6.3.0-beta.2
  • 380c10e fix(hmr): run HMR handler sequentially (#19793)
  • 8bed1de fix: addWatchFile doesn't work if base is specified (fixes #19792) (#19794)
  • 0a0c50a refactor: simplify pluginFilter implementation (#19828)
  • 59d0b35 perf(css): avoid constructing renderedModules (#19775)
  • 175a839 fix: reject requests with # in request-target (#19830)
  • e2e11b1 fix(module-runner): allow already resolved id as entry (#19768)
  • 7200dee fix: correct the behavior when multiple transform filter options are specifie...
  • b125172 fix(css): remove empty chunk imports correctly when chunk file name contained...
  • Additional commits viewable in compare view

Updates @angular/common from 17.3.12 to 21.1.0

Release notes

Sourced from @​angular/common's releases.

VSCode Extension: 21.1.0

21.1.0 (2026-01-12)

  • fix(vscode-extension): convert enum member kind in completions correctly (50674f8c28)

21.1.0

common

Commit Description
feat - d8790972be Add custom transformations for Cloudflare and Cloudinary image loaders
feat - a6b8cb68af support custom transformations in ImageKit and Imgix loaders

compiler

Commit Description
feat - 640693da8e Add support for multiple swich cases matching
fix - 0ad3adc7c6 Support empty cases

core

Commit Description
feat - 99ad18a4ee Add stability debugging utility
feat - a0dfa5fa86 support rest arguments in function calls
feat - 6e18fa8bc9 support spread elements in array literals
feat - e407280ab5 support spread expressions in object literals
fix - 06be8034bb Microtask scheduling should be used after any application synchronization
fix - b4f584cf42 return StaticProvider for providePlatformInitializer

forms

Commit Description
feat - 1ea5c97703 allow focusing bound control from field state

platform-browser

Commit Description
feat - ec9dc94cee add context to createApplication
feat - ab67988d2e resolve JIT resources in createApplication

router

Commit Description
feat - 5edceffd04 add controls for route cleanup
feat - a03c82564d Add scroll behavior controls on router navigation
feat - e44839b016 Add standalone function to create a comptued for isActive
feat - c25d749d85 Execute RunGuardsAndResolvers function in injection context
feat - 1c00ab42f8 extend paramters of RedirectFunction to include paramMap and queryParamMap
feat - 7003e8d241 Publish Router's integration with platform Navigation API as experimental
feat - c84d372778 Support wildcard params with segments trailing (#64737)

upgrade

Commit Description
refactor - 75fe8f8af9 deprecate VERSION export

Deprecations

upgrade

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.1.0 (2026-01-14)

Deprecations

upgrade

  • VERSION from @angular/upgrade is deprecated. Please use the entry from @angular/upgrade/static instead.

common

Commit Type Description
d8790972be feat Add custom transformations for Cloudflare and Cloudinary image loaders
a6b8cb68af feat support custom transformations in ImageKit and Imgix loaders

compiler

Commit Type Description
640693da8e feat Add support for multiple swich cases matching
0ad3adc7c6 fix Support empty cases

core

Commit Type Description
99ad18a4ee feat Add stability debugging utility
a0dfa5fa86 feat support rest arguments in function calls
6e18fa8bc9 feat support spread elements in array literals
e407280ab5 feat support spread expressions in object literals
06be8034bb fix Microtask scheduling should be used after any application synchronization
b4f584cf42 fix return StaticProvider for providePlatformInitializer

forms

Commit Type Description
1ea5c97703 feat allow focusing bound control from field state

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
5edceffd04 feat add controls for route cleanup
a03c82564d feat Add scroll behavior controls on router navigation
e44839b016 feat Add standalone function to create a comptued for isActive
c25d749d85 feat Execute RunGuardsAndResolvers function in injection context
1c00ab42f8 feat extend paramters of RedirectFunction to include paramMap and queryParamMap
7003e8d241 feat Publish Router's integration with platform Navigation API as experimental
c84d372778 feat Support wildcard params with segments trailing (#64737)

upgrade

Commit Type Description
75fe8f8af9 refactor deprecate VERSION export

... (truncated)

Commits
  • 3954dc2 refactor(http): remove redundant providedIn: 'root' in XSRF_HEADER_NAME
  • 03e2b36 refactor(core): update error message links to versioned docs (#66374)
  • 74af7d8 refactor(core): Use the provided Document value rather than global in FakeNav...
  • a2b9429 Revert "feat(router): add trailingSlash config option"
  • 12fccc5 feat(router): add trailingSlash config option
  • 3dfdb71 docs: add docs for transform property in built-in loaders
  • dd58c4b refactor(common): Add token to indicate whether precommit handler is supported
  • a6b8cb6 feat(common): support custom transformations in ImageKit and Imgix loaders
  • d879097 feat(common): Add custom transformations for Cloudflare and Cloudinary image ...
  • 6270bba ci: reformat files
  • Additional commits viewable in compare view

Updates @angular/compiler from 17.3.12 to 21.1.0

Release notes

Sourced from @​angular/compiler's releases.

VSCode Extension: 21.1.0

21.1.0 (2026-01-12)

  • fix(vscode-extension): convert enum member kind in completions correctly (50674f8c28)

21.1.0

common

Commit Description
feat - d8790972be Add custom transformations for Cloudflare and Cloudinary image loaders
feat - a6b8cb68af support custom transformations in ImageKit and Imgix loaders

compiler

Commit Description
feat - 640693da8e Add support for multiple swich cases matching
fix - 0ad3adc7c6 Support empty cases

core

Commit Description
feat - 99ad18a4ee Add stability debugging utility
feat - a0dfa5fa86 support rest arguments in function calls
feat - 6e18fa8bc9 support spread elements in array literals
feat - e407280ab5 support spread expressions in object literals
fix - 06be8034bb Microtask scheduling should be used after any application synchronization
fix - b4f584cf42 return StaticProvider for providePlatformInitializer

forms

Commit Description
feat - 1ea5c97703 allow focusing bound control from field state

platform-browser

Commit Description
feat - ec9dc94cee add context to createApplication
feat - ab67988d2e resolve JIT resources in createApplication

router

Commit Description
feat - 5edceffd04 add controls for route cleanup
feat - a03c82564d Add scroll behavior controls on router navigation
feat - e44839b016 Add standalone function to create a comptued for isActive
feat - c25d749d85 Execute RunGuardsAndResolvers function in injection context
feat - 1c00ab42f8 extend paramters of RedirectFunction to include paramMap and queryParamMap
feat - 7003e8d241 Publish Router's integration with platform Navigation API as experimental
feat - c84d372778 Support wildcard params with segments trailing (#64737)

upgrade

Commit Description
refactor - 75fe8f8af9 deprecate VERSION export

Deprecations

upgrade

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

21.1.0 (2026-01-14)

Deprecations

upgrade

  • VERSION from @angular/upgrade is deprecated. Please use the entry from @angular/upgrade/static instead.

common

Commit Type Description
d8790972be feat Add custom transformations for Cloudflare and Cloudinary image loaders
a6b8cb68af feat support custom transformations in ImageKit and Imgix loaders

compiler

Commit Type Description
640693da8e feat Add support for multiple swich cases matching
0ad3adc7c6 fix Support empty cases

core

Commit Type Description
99ad18a4ee feat Add stability debugging utility
a0dfa5fa86 feat support rest arguments in function calls
6e18fa8bc9 feat support spread elements in array literals
e407280ab5 feat support spread expressions in object literals
06be8034bb fix Microtask scheduling should be used after any application synchronization
b4f584cf42 fix return StaticProvider for providePlatformInitializer

forms

Commit Type Description
1ea5c97703 feat allow focusing bound control from field state

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
5edceffd04 feat add controls for route cleanup
a03c82564d feat Add scroll behavior controls on router navigation
e44839b016 feat Add standalone function to create a comptued for isActive
c25d749d85 feat Execute RunGuardsAndResolvers function in injection context
1c00ab42f8 feat extend paramters of RedirectFunction to include paramMap and queryParamMap
7003e8d241 feat Publish Router's integration with platform Navigation API as experimental
c84d372778 feat Support wildcard params with segments trailing (#64737)

upgrade

Commit Type Description
75fe8f8af9 refactor deprecate VERSION export

... (truncated)

Commits
  • 5326333 fix(forms): Ensure the control instruction comes after the other bindings
  • 29f074a fix(forms): Rename signal form [field] to [formField]
  • 0875dea refactor(compiler): switch Binary.isAssignmentOperation to type guard function
  • 83bac5a refactor(compiler): tighten Unary.operator type
  • e01dcae refactor: _ParseAST.isAssignmentOperator to type guard
  • 4cdf4d5 refactor(compiler): tighten Binary.operation type
  • 0ad3adc fix(compiler): Support empty cases
  • 4dc5ae5 refactor(core): remove unused instruction parameter
  • 3a56c13 fix(compiler): produce accurate span for typeof and void expressions
  • a0dfa5f feat(core): support rest arguments in function calls
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…updates

Bumps the npm_and_yarn group with 2 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [js-yaml](https://github.com/nodeca/js-yaml).
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/sveltekit-tracing-test-app directory: [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit).
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/nextjs-15-test-app directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/nextjs-14-test-app directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /e2e-tests/test-applications/cloudflare-wrangler-sourcemaps-test-app directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the npm_and_yarn group with 2 updates in the /e2e-tests/test-applications/angular-17-test-app directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) and [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler).


Updates `vite` from 6.3.6 to 6.4.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/[email protected]/packages/vite)

Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `@sveltejs/kit` from 2.31.0 to 2.49.5
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit)

Updates `next` from 15.4.7 to 15.4.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.4.7...v15.4.10)

Updates `next` from 14.2.32 to 14.2.35
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.4.7...v15.4.10)

Updates `vite` from 6.3.6 to 6.4.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/[email protected]/packages/vite)

Updates `@angular/common` from 17.3.12 to 21.1.0
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.1.0/packages/common)

Updates `@angular/compiler` from 17.3.12 to 21.1.0
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.1.0/packages/compiler)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.49.5
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 14.2.35
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 6.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@angular/common"
  dependency-version: 21.1.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: "@angular/compiler"
  dependency-version: 21.1.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 18, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 7, 2026

Copy link
Copy Markdown
Author

Superseded by #3.

@dependabot dependabot Bot closed this Apr 7, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm_and_yarn-b805605ce2 branch April 7, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants