Skip to content

Bump ajv, request, @angular-devkit/build-angular and @angular/cli#56

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-d7fb2d5689
Open

Bump ajv, request, @angular-devkit/build-angular and @angular/cli#56
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-d7fb2d5689

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2026

Bumps ajv to 8.18.0 and updates ancestor dependencies ajv, request, @angular-devkit/build-angular and @angular/cli. These dependencies need to be updated together.

Updates ajv from 6.10.2 to 8.18.0

Release notes

Sourced from ajv's releases.

v8.18.0

What's Changed

New Contributors

Full Changelog: ajv-validator/ajv@v8.17.1...v8.18.0

v8.17.1

What's Changed

Full Changelog: ajv-validator/ajv@v8.17.0...v8.17.1

Plus everything in 8.17.0 which failed to release

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (ajv-validator/ajv#2444)" by @​gurgunday in ajv-validator/ajv#2448 fix: ignore new eslint error for @​typescript-eslint/no-extraneous-class by @​jasoniangreen in ajv-validator/ajv#2455 docs: clarify behaviour of addVocabulary by @​jasoniangreen in ajv-validator/ajv#2454 docs: refactor to improve legibility by @​blottn in ajv-validator/ajv#2432 Fix grammatical typo in managing-schemas.md by @​wetneb in ajv-validator/ajv#2305 docs: Fix broken strict-mode link by @​alexanderjsx in ajv-validator/ajv#2459 feat: add test for encoded refs and bump fast-uri by @​jasoniangreen in ajv-validator/ajv#2449 fix: changes for @​typescript-eslint/array-type rule by @​jasoniangreen in ajv-validator/ajv#2467 fixes ajv-validator/ajv#2217 - clarify custom keyword naming by @​jasoniangreen in ajv-validator/ajv#2457

v8.17.0

What's Changed

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

... (truncated)

Commits
  • 142ce84 8.18.0
  • 720a23f fix(pattern): use configured RegExp engine with $data keyword to mitigate ReD...
  • 82735a1 fix: typos in schema-language.md (#2507)
  • b17ec32 fix: small grammatical error in managing-schemas.md (#2508)
  • 69568d0 fix: #2482 Infinity and NaN serialise to null (#2487)
  • f06766f feat: allow tree-shaking by adding ``"sideEffects": falsetopackage.json` ...
  • 9050ba1 bump version to 8.17.1 (#2472)
  • f7831b4 fixes #2217 - clarify custom keyword naming (#2457)
  • a523784 fix: changes for @​typescript-eslint/array-type rule (#2467)
  • 595fe58 feat: add test for encoded refs and bump fast-uri (#2449)
  • Additional commits viewable in compare view
Install script changes

This version modifies prepublish script that runs during installation. Review the package contents before updating.


Updates request from 2.87.0 to 2.88.2

Changelog

Sourced from request's changelog.

Change Log

v2.88.0 (2018/08/10)

Commits

Updates @angular-devkit/build-angular from 0.802.1 to 21.2.3

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.3

@​angular/cli

Commit Description
fix - 1505164bb use parsed package name for migrate-only updates

@​angular/build

Commit Description
fix - 75fa94cad alias createRequire banner import to avoid duplicate binding
fix - d009aa1ec only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Description
fix - f3e0e82c2 disallow x-forwarded-prefix starting with a backslash
fix - b8bcd59b4 ensure unique values in redirect response Vary header
fix - 84385411d support custom headers in redirect responses

21.2.2

@​angular/cli

Commit Description
fix - 8447d9132 conditionally quote package names when adding dependencies based on host requirements
fix - d2f209823 preserve exact version in ng add when requested
perf - 28f4d684a avoid redundant package version resolution in ng add

@​angular/build

Commit Description
fix - 06010294f allow any CHROME_BIN for vitest playwright provider
fix - 8dec0c62b normalize line endings for CSP hash generation
fix - 58688ebd7 pass process environment variables to prerender workers
fix - 4ca61647f resolve assets correctly during i18n prerendering

21.2.1

@​schematics/angular

Commit Description
fix - 72d466aa0 prevent adding test dependencies when minimal option is enabled

@​angular/cli

Commit Description
fix - ae4c28d00 correct dev dependency detection logic in ng add
fix - 465073bc1 disable npm update notifier in package manager host
fix - 36270634f ensure group members are updated to targeted version
fix - d87dba6af ignore unknown files when formatting schematic changes

@​angular-devkit/build-angular

Commit Description
fix - 0019d1c8e update copy-webpack-plugin to v14.0.0

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.3 (2026-03-18)

@​angular/cli

Commit Type Description
1505164bb fix use parsed package name for migrate-only updates

@​angular/build

Commit Type Description
75fa94cad fix alias createRequire banner import to avoid duplicate binding
d009aa1ec fix only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Type Description
f3e0e82c2 fix disallow x-forwarded-prefix starting with a backslash
b8bcd59b4 fix ensure unique values in redirect response Vary header
84385411d fix support custom headers in redirect responses

22.0.0-next.1 (2026-03-11)

Breaking Changes

@​angular/build

  • The @angular/build:dev-server (ng serve) now assigns the highest priority to the PORT environment variable. This value will override any port configurations specified in angular.json or via the --port command-line flag. This includes the default port 4200.

@​schematics/angular

Commit Type Description
b3d838dfd fix replace deprecated ChangeDetectionStrategy.Default with Eager

@​angular/cli

Commit Type Description
598a690a0 fix conditionally quote package names when adding dependencies based on host requirements
b5fb457e1 fix preserve exact version in ng add when requested
93c3eb8fb fix update zoneless migration tool to handle ChangeDetectionStrategy.Eager
ad0fd5f41 perf avoid redundant package version resolution in ng add
a39a33128 perf cache root manifest and resolve restricted package exports in ng add

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular-devkit/build-angular since your current version.


Updates @angular/cli from 8.2.1 to 21.2.3

Release notes

Sourced from @​angular/cli's releases.

21.2.3

@​angular/cli

Commit Description
fix - 1505164bb use parsed package name for migrate-only updates

@​angular/build

Commit Description
fix - 75fa94cad alias createRequire banner import to avoid duplicate binding
fix - d009aa1ec only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Description
fix - f3e0e82c2 disallow x-forwarded-prefix starting with a backslash
fix - b8bcd59b4 ensure unique values in redirect response Vary header
fix - 84385411d support custom headers in redirect responses

21.2.2

@​angular/cli

Commit Description
fix - 8447d9132 conditionally quote package names when adding dependencies based on host requirements
fix - d2f209823 preserve exact version in ng add when requested
perf - 28f4d684a avoid redundant package version resolution in ng add

@​angular/build

Commit Description
fix - 06010294f allow any CHROME_BIN for vitest playwright provider
fix - 8dec0c62b normalize line endings for CSP hash generation
fix - 58688ebd7 pass process environment variables to prerender workers
fix - 4ca61647f resolve assets correctly during i18n prerendering

21.2.1

@​schematics/angular

Commit Description
fix - 72d466aa0 prevent adding test dependencies when minimal option is enabled

@​angular/cli

Commit Description
fix - ae4c28d00 correct dev dependency detection logic in ng add
fix - 465073bc1 disable npm update notifier in package manager host
fix - 36270634f ensure group members are updated to targeted version
fix - d87dba6af ignore unknown files when formatting schematic changes

@​angular-devkit/build-angular

Commit Description
fix - 0019d1c8e update copy-webpack-plugin to v14.0.0

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

21.2.3 (2026-03-18)

@​angular/cli

Commit Type Description
1505164bb fix use parsed package name for migrate-only updates

@​angular/build

Commit Type Description
75fa94cad fix alias createRequire banner import to avoid duplicate binding
d009aa1ec fix only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Type Description
f3e0e82c2 fix disallow x-forwarded-prefix starting with a backslash
b8bcd59b4 fix ensure unique values in redirect response Vary header
84385411d fix support custom headers in redirect responses

22.0.0-next.1 (2026-03-11)

Breaking Changes

@​angular/build

  • The @angular/build:dev-server (ng serve) now assigns the highest priority to the PORT environment variable. This value will override any port configurations specified in angular.json or via the --port command-line flag. This includes the default port 4200.

@​schematics/angular

Commit Type Description
b3d838dfd fix replace deprecated ChangeDetectionStrategy.Default with Eager

@​angular/cli

Commit Type Description
598a690a0 fix conditionally quote package names when adding dependencies based on host requirements
b5fb457e1 fix preserve exact version in ng add when requested
93c3eb8fb fix update zoneless migration tool to handle ChangeDetectionStrategy.Eager
ad0fd5f41 perf avoid redundant package version resolution in ng add
a39a33128 perf cache root manifest and resolve restricted package exports in ng add

... (truncated)

Commits
  • ec8a04b release: cut the v21.2.3 release
  • 94959e9 docs: update references from app.component to app to match the style guide
  • d01bcb3 build: update cross-repo angular dependencies
  • b8bcd59 fix(@​angular/ssr): ensure unique values in redirect response Vary header
  • ba511f7 build: lock file maintenance
  • 1505164 fix(@​angular/cli): use parsed package name for migrate-only updates
  • 8438541 fix(@​angular/ssr): support custom headers in redirect responses
  • f3e0e82 fix(@​angular/ssr): disallow x-forwarded-prefix starting with a backslash
  • 411b2db build: update cross-repo angular dependencies
  • e5a9976 docs: update long-description
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular/cli since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump ajv, request, @angular-devkit/build-angular and @angular/cli
235e976 
Bumps [ajv](https://github.com/ajv-validator/ajv) to 8.18.0 and updates ancestor dependencies [ajv](https://github.com/ajv-validator/ajv), [request](https://github.com/request/request), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `ajv` from 6.10.2 to 8.18.0
- [Release notes](https://github.com/ajv-validator/ajv/releases)
- [Commits](ajv-validator/ajv@v6.10.2...v8.18.0)

Updates `request` from 2.87.0 to 2.88.2
- [Changelog](https://github.com/request/request/blob/master/CHANGELOG.md)
- [Commits](https://github.com/request/request/commits)

Updates `@angular-devkit/build-angular` from 0.802.1 to 21.2.3
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular-cli/commits/v21.2.3)

Updates `@angular/cli` from 8.2.1 to 21.2.3
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v8.2.1...v21.2.3)

---
updated-dependencies:
- dependency-name: ajv
  dependency-version: 8.18.0
  dependency-type: indirect
- dependency-name: request
  dependency-version: 2.88.2
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.3
  dependency-type: direct:development
- dependency-name: "@angular/cli"
  dependency-version: 21.2.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants