An open index of dependabot pull requests across open source projects.

Bump the npm_and_yarn group across 2 directories with 16 updates

Open
Number: #13
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: February 21, 2026 at 03:10 AM UTC
(18 days ago)
Updated: February 21, 2026 at 03:11 AM UTC
(18 days ago)
Labels:
dependencies javascript
Description:

Bumps the npm_and_yarn group with 11 updates in the / directory:

Package From To
@angular/common 17.3.2 21.1.5
@angular/platform-server 17.3.2 21.1.5
@angular/compiler 17.3.2 21.1.5
@angular/compiler 19.2.10 19.2.18
vite 6.2.7 6.4.1
form-data 4.0.0 4.0.5
jws 4.0.0 4.0.1
jws 3.2.2 3.2.3
lodash 4.17.21 4.17.23
node-forge 1.3.1 1.3.3
on-headers 1.0.2 1.1.0
qs 6.13.0 6.14.2
tar 6.2.1 7.5.9

Bumps the npm_and_yarn group with 8 updates in the /functions directory:

Package From To
js-yaml 3.14.1 3.14.2
form-data 2.5.1 2.5.5
jws 3.2.2 3.2.3
jws 4.0.0 4.0.1
lodash 4.17.21 4.17.23
node-forge 1.3.1 1.3.3
qs 6.13.0 6.14.2
fast-xml-parser 4.5.3 5.3.7
tar-fs 2.1.2 2.1.4

Updates @angular/common from 17.3.2 to 21.1.5

Release notes

Sourced from @​angular/common's releases.

21.1.5

No user facing changes in this release

21.1.4

compiler

Commit Description
fix - caab23dfe6 add geolocation element to schema

core

Commit Description
fix - 2b99eaa019 capture animation dependencies eagerly to avoid destroyed injector
fix - d6aeac504c Fix flakey test due to document injection

forms

Commit Description
feat - 0d1acd0165 support signal-based schemas in validateStandardSchema

http

Commit Description
fix - 3905015ccc correctly parse ArrayBuffer and Blob in transfer cache

21.1.3

core

Commit Description
fix - 2b254bc050 linkedSignal.update should propagate errors
fix - e5110b4fa1 export DirectiveWithBindings
fix - 2cf4da0ea1 hold constructors weakly in DepsTracker cache
fix - 70a5b651be prevent element duplication with dynamic components

forms

Commit Description
fix - 6f75b6e3f6 Resolves debounce promise on abort in debounceForDuration

localize

Commit Description
fix - 4c7126d23b add support for unit-test builder in ng-add schematic

router

Commit Description
fix - d6268c0bbb limit UrlParser recursion depth to prevent stack overflow
perf - 49a36f4cc7 Use .bind to avoid holding other closures in memory

21.1.2

forms

Commit Description
fix - 9f99b14882 only touch visible, interactive fields on submit

language-service

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.1.5 (2026-02-18)

No user facing changes in this release

21.2.0-next.3 (2026-02-11)

common

Commit Type Description
18003a33bb feat add an 'outlet' injector option for ngTemplateOutlet
51cc914807 feat support height in ImageLoaderConfig and built-in loaders

compiler

Commit Type Description
11834a4274 fix add geolocation element to schema

compiler-cli

Commit Type Description
2ea6dfc6c9 fix update diagnostic to flag no-op arrow functions in listeners

core

Commit Type Description
ea2016a6dc feat add support for nested animations
bd2868e915 fix capture animation dependencies eagerly to avoid destroyed injector
a7e8abbb7e fix correctly handle SkipSelf when resolving from embedded view injector
e53c8abaf9 fix Fix flakey test due to document injection

forms

Commit Type Description
f56bb07d83 feat add field param to submit action and onInvalid
ba009b6031 feat add form directive
24c0c5a180 feat support signal-based schemas in validateStandardSchema
adfb83146b fix simplify design of parse errors

http

Commit Type Description
cb1163e5e5 fix correctly parse ArrayBuffer and Blob in transfer cache

21.1.4 (2026-02-11)

compiler

Commit Type Description
caab23dfe6 fix add geolocation element to schema

core

Commit Type Description

... (truncated)

Commits
  • 58eba77 refactor(core): remove outdated TODO comments referencing TypeScript 2.1
  • 55b501a refactor(common): improve image directive typings
  • 6c14e3a build: update Jasmine to 6.0.0
  • 19542a3 test(common): remove zone-based testing utilities
  • 3905015 fix(http): correctly parse ArrayBuffer and Blob in transfer cache
  • 6f5c233 refactor(common): extract argument assertion
  • 7242da2 docs: reword docs on standalone.
  • 6601f06 test(common): enables zoneless change detection in tests
  • 3954dc2 refactor(http): remove redundant providedIn: 'root' in XSRF_HEADER_NAME
  • 03e2b36 refactor(core): update error message links to versioned docs (#66374)
  • Additional commits viewable in compare view

Updates @angular/platform-server from 17.3.2 to 21.1.5

Release notes

Sourced from @​angular/platform-server's releases.

21.1.5

No user facing changes in this release

21.1.4

compiler

Commit Description
fix - caab23dfe6 add geolocation element to schema

core

Commit Description
fix - 2b99eaa019 capture animation dependencies eagerly to avoid destroyed injector
fix - d6aeac504c Fix flakey test due to document injection

forms

Commit Description
feat - 0d1acd0165 support signal-based schemas in validateStandardSchema

http

Commit Description
fix - 3905015ccc correctly parse ArrayBuffer and Blob in transfer cache

21.1.3

core

Commit Description
fix - 2b254bc050 linkedSignal.update should propagate errors
fix - e5110b4fa1 export DirectiveWithBindings
fix - 2cf4da0ea1 hold constructors weakly in DepsTracker cache
fix - 70a5b651be prevent element duplication with dynamic components

forms

Commit Description
fix - 6f75b6e3f6 Resolves debounce promise on abort in debounceForDuration

localize

Commit Description
fix - 4c7126d23b add support for unit-test builder in ng-add schematic

router

Commit Description
fix - d6268c0bbb limit UrlParser recursion depth to prevent stack overflow
perf - 49a36f4cc7 Use .bind to avoid holding other closures in memory

21.1.2

forms

Commit Description
fix - 9f99b14882 only touch visible, interactive fields on submit

language-service

... (truncated)

Changelog

Sourced from @​angular/platform-server's changelog.

21.1.5 (2026-02-18)

No user facing changes in this release

21.2.0-next.3 (2026-02-11)

common

Commit Type Description
18003a33bb feat add an 'outlet' injector option for ngTemplateOutlet
51cc914807 feat support height in ImageLoaderConfig and built-in loaders

compiler

Commit Type Description
11834a4274 fix add geolocation element to schema

compiler-cli

Commit Type Description
2ea6dfc6c9 fix update diagnostic to flag no-op arrow functions in listeners

core

Commit Type Description
ea2016a6dc feat add support for nested animations
bd2868e915 fix capture animation dependencies eagerly to avoid destroyed injector
a7e8abbb7e fix correctly handle SkipSelf when resolving from embedded view injector
e53c8abaf9 fix Fix flakey test due to document injection

forms

Commit Type Description
f56bb07d83 feat add field param to submit action and onInvalid
ba009b6031 feat add form directive
24c0c5a180 feat support signal-based schemas in validateStandardSchema
adfb83146b fix simplify design of parse errors

http

Commit Type Description
cb1163e5e5 fix correctly parse ArrayBuffer and Blob in transfer cache

21.1.4 (2026-02-11)

compiler

Commit Type Description
caab23dfe6 fix add geolocation element to schema

core

Commit Type Description

... (truncated)

Commits
  • 9c3022d refactor(platform-server): split zone/zoneless tests.
  • 6c14e3a build: update Jasmine to 6.0.0
  • 30e9c62 fix(core): fix memory leak with event replay
  • 6270bba ci: reformat files
  • 3491333 build: update repository to use node 22.21.1 in bazel
  • 400fc82 refactor: replace getDocument() with inject(DOCUMENT)
  • ec9dc94 feat(platform-browser): add context to createApplication
  • d3f67f6 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 26fed34 build: format md files
  • 5e4437b refactor(platform-server): remove redundant providedIn: 'root' from injecti...
  • Additional commits viewable in compare view

Updates @angular/compiler from 17.3.2 to 21.1.5

Release notes

Sourced from @​angular/compiler's releases.

21.1.5

No user facing changes in this release

21.1.4

compiler

Commit Description
fix - caab23dfe6 add geolocation element to schema

core

Commit Description
fix - 2b99eaa019 capture animation dependencies eagerly to avoid destroyed injector
fix - d6aeac504c Fix flakey test due to document injection

forms

Commit Description
feat - 0d1acd0165 support signal-based schemas in validateStandardSchema

http

Commit Description
fix - 3905015ccc correctly parse ArrayBuffer and Blob in transfer cache

21.1.3

core

Commit Description
fix - 2b254bc050 linkedSignal.update should propagate errors
fix - e5110b4fa1 export DirectiveWithBindings
fix - 2cf4da0ea1 hold constructors weakly in DepsTracker cache
fix - 70a5b651be prevent element duplication with dynamic components

forms

Commit Description
fix - 6f75b6e3f6 Resolves debounce promise on abort in debounceForDuration

localize

Commit Description
fix - 4c7126d23b add support for unit-test builder in ng-add schematic

router

Commit Description
fix - d6268c0bbb limit UrlParser recursion depth to prevent stack overflow
perf - 49a36f4cc7 Use .bind to avoid holding other closures in memory

21.1.2

forms

Commit Description
fix - 9f99b14882 only touch visible, interactive fields on submit

language-service

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

21.1.5 (2026-02-18)

No user facing changes in this release

21.2.0-next.3 (2026-02-11)

common

Commit Type Description
18003a33bb feat add an 'outlet' injector option for ngTemplateOutlet
51cc914807 feat support height in ImageLoaderConfig and built-in loaders

compiler

Commit Type Description
11834a4274 fix add geolocation element to schema

compiler-cli

Commit Type Description
2ea6dfc6c9 fix update diagnostic to flag no-op arrow functions in listeners

core

Commit Type Description
ea2016a6dc feat add support for nested animations
bd2868e915 fix capture animation dependencies eagerly to avoid destroyed injector
a7e8abbb7e fix correctly handle SkipSelf when resolving from embedded view injector
e53c8abaf9 fix Fix flakey test due to document injection

forms

Commit Type Description
f56bb07d83 feat add field param to submit action and onInvalid
ba009b6031 feat add form directive
24c0c5a180 feat support signal-based schemas in validateStandardSchema
adfb83146b fix simplify design of parse errors

http

Commit Type Description
cb1163e5e5 fix correctly parse ArrayBuffer and Blob in transfer cache

21.1.4 (2026-02-11)

compiler

Commit Type Description
caab23dfe6 fix add geolocation element to schema

core

Commit Type Description

... (truncated)

Commits
  • 6c14e3a build: update Jasmine to 6.0.0
  • caab23d fix(compiler): add geolocation element to schema
  • 3f0fbaa refactor(compiler): remove zone-based testing utilities
  • 0729181 test(compiler): remove zone-based testing utilities
  • ea70b00 refactor(compiler): remove unused symbols
  • ded654d build: initial test of TypeScript 6
  • 5326333 fix(forms): Ensure the control instruction comes after the other bindings
  • 29f074a fix(forms): Rename signal form [field] to [formField]
  • 0875dea refactor(compiler): switch Binary.isAssignmentOperation to type guard function
  • 83bac5a refactor(compiler): tighten Unary.operator type
  • Additional commits viewable in compare view

Updates @angular/compiler from 19.2.10 to 19.2.18

Release notes

Sourced from @​angular/compiler's releases.

21.1.5

No user facing changes in this release

21.1.4

compiler

Commit Description
fix - caab23dfe6 add geolocation element to schema

core

Commit Description
fix - 2b99eaa019 capture animation dependencies eagerly to avoid destroyed injector
fix - d6aeac504c Fix flakey test due to document injection

forms

Commit Description
feat - 0d1acd0165 support signal-based schemas in validateStandardSchema

http

Commit Description
fix - 3905015ccc correctly parse ArrayBuffer and Blob in transfer cache

21.1.3

core

Commit Description
fix - 2b254bc050 linkedSignal.update should propagate errors
fix - e5110b4fa1 export DirectiveWithBindings
fix - 2cf4da0ea1 hold constructors weakly in DepsTracker cache
fix - 70a5b651be prevent element duplication with dynamic components

forms

Commit Description
fix - 6f75b6e3f6 Resolves debounce promise on abort in debounceForDuration

localize

Commit Description
fix - 4c7126d23b add support for unit-test builder in ng-add schematic

router

Commit Description
fix - d6268c0bbb limit UrlParser recursion depth to prevent stack overflow
perf - 49a36f4cc7 Use .bind to avoid holding other closures in memory

21.1.2

forms

Commit Description
fix - 9f99b14882 only touch visible, interactive fields on submit

language-service

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

21.1.5 (2026-02-18)

No user facing changes in this release

21.2.0-next.3 (2026-02-11)

common

Commit Type Description
18003a33bb feat add an 'outlet' injector option for ngTemplateOutlet
51cc914807 feat support height in ImageLoaderConfig and built-in loaders

compiler

Commit Type Description
11834a4274 fix add geolocation element to schema

compiler-cli

Commit Type Description
2ea6dfc6c9 fix update diagnostic to flag no-op arrow functions in listeners

core

Commit Type Description
ea2016a6dc feat add support for nested animations
bd2868e915 fix capture animation dependencies eagerly to avoid destroyed injector
a7e8abbb7e fix correctly handle SkipSelf when resolving from embedded view injector
e53c8abaf9 fix Fix flakey test due to document injection

forms

Commit Type Description
f56bb07d83 feat add field param to submit action and onInvalid
ba009b6031 feat add form directive
24c0c5a180 feat support signal-based schemas in validateStandardSchema
adfb83146b fix simplify design of parse errors

http

Commit Type Description
cb1163e5e5 fix correctly parse ArrayBuffer and Blob in transfer cache

21.1.4 (2026-02-11)

compiler

Commit Type Description
caab23dfe6 fix add geolocation element to schema

core

Commit Type Description

... (truncated)

Commits
  • 6c14e3a build: update Jasmine to 6.0.0
  • caab23d fix(compiler): add geolocation element to schema
  • 3f0fbaa refactor(compiler): remove zone-based testing utilities
  • 0729181 test(compiler): remove zone-based testing utilities
  • ea70b00 refactor(compiler): remove unused symbols
  • ded654d build: initial test of TypeScript 6
  • 5326333 fix(forms): Ensure the control instruction comes after the other bindings
  • 29f074a fix(forms): Rename signal form [field] to [formField]
  • 0875dea refactor(compiler): switch Binary.isAssignmentOperation to type guard function
  • 83bac5a refactor(compiler): tighten Unary.operator type
  • Additional commits viewable in compare view

Updates @angular/platform-server from 17.3.2 to 21.1.5

Release notes

Sourced from @​angular/platform-server's releases.

21.1.5

No user facing changes in this release

21.1.4

compiler

Commit Description
fix - caab23dfe6 add geolocation element to schema

core

Commit Description
fix - 2b99eaa019 capture animation dependencies eagerly to avoid destroyed injector
fix - d6aeac504c Fix flakey test due to document injection

forms

Commit Description
feat - 0d1acd0165 support signal-based schemas in validateStandardSchema

http

Commit Description
fix - 3905015ccc correctly parse ArrayBuffer and Blob in transfer cache

21.1.3

core

Commit Description
fix - 2b254bc050 linkedSignal.update should propagate errors
fix - e5110b4fa1 export DirectiveWithBindings
fix - 2cf4da0ea1 hold constructors weakly in DepsTracker cache
fix - 70a5b651be prevent element duplication with dynamic components

forms

Commit Description
fix - 6f75b6e3f6 Resolves debounce promise on abort in debounceForDuration

localize

Commit Description
fix - 4c7126d23b add support for unit-test builder in ng-add schematic

router

Commit Description
fix - d6268c0bbb limit UrlParser recursion depth to prevent stack overflow
perf - 49a36f4cc7 Use .bind to avoid holding other closures in memory

21.1.2

forms

Commit Description
fix - 9f99b14882 only touch visible, interactive fields on submit

language-service

... (truncated)

Changelog

Sourced from @​angular/platform-server's changelog.

21.1.5 (2026-02-18)

No user facing changes in this release

21.2.0-next.3 (2026-02-11)

common

Commit Type Description
18003a33bb feat add an 'outlet' injector option for ngTemplateOutlet
51cc914807 feat support height in ImageLoaderConfig and built-in loaders

compiler

Commit Type Description
11834a4274 fix add geolocation element to schema

compiler-cli

Commit Type Description
2ea6dfc6c9 fix update diagnostic to flag no-op arrow functions in listeners

core

Commit Type Description
ea2016a6dc feat add support for nested animations
bd2868e915 fix capture animation dependencies eagerly to avoid destroyed injector
a7e8abbb7e fix correctly handle SkipSelf when resolving from embedded view injector
e53c8abaf9 fix Fix flakey test due to document injection

forms

Commit Type Description
f56bb07d83 feat add field param to submit action and onInvalid
ba009b6031 feat add form directive
24c0c5a180 feat support signal-based schemas in validateStandardSchema
adfb83146b fix simplify design of parse errors

http

Commit Type Description
cb1163e5e5 fix correctly parse ArrayBuffer and Blob in transfer cache

21.1.4 (2026-02-11)

compiler

Commit Type Description
caab23dfe6 fix add geolocation element to schema

core

Commit Type Description

... (truncated)

Commits
  • 9c3022d refactor(platform-server): split zone/zoneless tests.
  • 6c14e3a build: update Jasmine to 6.0.0
  • 30e9c62 fix(core): fix memory leak with event replay
  • 6270bba ci: reformat files
  • 3491333 build: update repository to use node 22.21.1 in bazel
  • 400fc82 refactor: replace getDocument() with inject(DOCUMENT)
  • ec9dc94 feat(platform-browser): add context to createApplication
  • d3f67f6 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 26fed34 build: format md files
  • 5e4437b refactor(platform-server): remove redundant providedIn: 'root' from injecti...
  • Additional commits viewable in compare view

Updates vite from 6.2.7 to 6.4.1

Release notes

Sourced from vite's releases.

create-vite@6.4.1

Please refer to CHANGELOG.md for details.

v6.4.1

Please refer to CHANGELOG.md for details.

v6.4.0

Please refer to CHANGELOG.md for details.

v6.3.7

Please refer to CHANGELOG.md for details.

v6.3.6

Please refer to CHANGELOG.md for details.

v6.3.5

Please refer to CHANGELOG.md for details.

v6.3.4

Please refer to CHANGELOG.md for details.

v6.3.3

Please refer to CHANGELOG.md for details.

v6.3.2

Please refer to CHANGELOG.md for details.

v6.3.1

Please refer to CHANGELOG.md for details.

Commits
  • a7349ef release: v6.3.1
  • a152b7c fix: backward compat for internal plugin transform calls (#19878)
  • 35c7f35 fix: avoid using Promise.allSettled in preload function (#19805)
  • 5fdcfe7 release: v6.3.0
  • d4ee5e8 fix(hmr): avoid infinite loop happening with hot.invalidate in circular dep...
  • 5003434 fix(preview): use host url to open browser (#19836)
  • bf9728e release: v6.3.0-beta.2
  • 380c10e fix(hmr): run HMR handler sequentially (#19793)
  • 8bed1de fix: addWatchFile doesn't work if base is specified (fixes #19792) (#19794)
  • 0a0c50a refactor: simplify pluginFilter implementation (#19828)
  • Additional commits viewable in compare view

Updates form-data from 4.0.0 to 4.0.5

Release notes

Sourced from form-data's releases.

v4.0.4

v4.0.4 - 2025-07-16

Commits

  • [meta] add auto-changelog 811f682
  • [Tests] handle predict-v8-randomness failures in node < 17 and node > 23 1d11a76
  • [Fix] Switch to using crypto random for boundary values 3d17230
  • [Tests] fix linting errors 5e34080
  • [meta] actually ensure the readme backup isn’t published
    Package Dependencies
    Ecosystem:
    npm
    Version Change:
    17.3.2 → 21.1.5
    Update Type:
    Major
    Package:
    vite
    Ecosystem:
    npm
    Version Change:
    6.2.7 → 6.4.1
    Update Type:
    Minor
    Ecosystem:
    npm
    Version Change:
    17.3.2 → 21.1.5
    Update Type:
    Major
    Package:
    form-data
    Ecosystem:
    npm
    Version Change:
    4.0.0 → 4.0.5
    Update Type:
    Patch
    Ecosystem:
    npm
    Version Change:
    17.3.2 → 21.1.5
    Update Type:
    Major
    Package:
    lodash
    Ecosystem:
    npm
    Version Change:
    4.17.21 → 4.17.23
    Update Type:
    Patch
    Package:
    qs
    Ecosystem:
    npm
    Version Change:
    6.13.0 → 6.14.2
    Update Type:
    Minor
    Package:
    tar
    Ecosystem:
    npm
    Version Change:
    6.2.1 → 7.5.9
    Update Type:
    Major
    Package:
    node-forge
    Ecosystem:
    npm
    Version Change:
    1.3.1 → 1.3.3
    Update Type:
    Patch
    Package:
    jws
    Ecosystem:
    npm
    Version Change:
    4.0.0 → 4.0.1
    Update Type:
    Patch
    Package:
    on-headers
    Ecosystem:
    npm
    Version Change:
    1.0.2 → 1.1.0
    Update Type:
    Minor
Technical Details
ID: 13994472
UUID: 3971172837
Node ID: PR_kwDONR8rAM7FTK4l
Host: GitHub
Repository: https-gitcom/angular-rock-paper-scissors-sample