Bump the npm_and_yarn group across 1 directory with 15 updates by dependabot[bot] · Pull Request #50 · posthello-code/slacker-news-frontend

dependabot · 2026-08-10T05:24:05Z

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package	From	To
@angular/common	`19.2.25`	`20.3.27`
@angular/compiler	`19.2.25`	`20.3.27`
@angular/core	`19.2.25`	`20.3.25`
@angular/platform-server	`19.2.25`	`20.3.27`
@babel/plugin-transform-modules-systemjs	`7.27.1`	`7.29.8`
brace-expansion	`1.1.12`	`1.1.18`
fast-uri	`3.1.0`	`3.1.5`
http-proxy-middleware	`2.0.9`	`2.0.10`
ip-address	`10.0.1`	`10.4.0`
js-yaml	`4.1.0`	`4.3.1`
node-forge	`1.3.1`	`1.4.0`
picomatch	`2.3.1`	`2.3.2`
postcss	`8.5.6`	`8.5.12`
shell-quote	`1.8.3`	`1.10.0`
websocket-driver	`0.7.4`	`0.7.5`

Updates @angular/common from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/common's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/common's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

a64e288 fix(http): distinguish repeated transfer cache params
b963f61 fix(http): prevent caching of responses with Set-Cookie headers
06be298 fix(http): preserve empty referrer option in HttpRequest
9f443bc fix(common): Limits date format string length
fa940e1 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
e2ef1ce fix(http): skip transfer cache for fetch credentialed requests
3d135ce fix(common): add upper bounds for digitsInfo
39a4b4c fix(common): sanitize placeholder
Additional commits viewable in compare view

Updates @angular/compiler from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/compiler's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
5dbcd0e fix(compiler): disallow i18n event attributes
a68ec70 fix(compiler): sanitize two-way properties
d40acc6 fix(compiler): prevent namespaced SVG <style> elements from being stripped
7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
823b37f test(compiler): remove obsolete schema_extractor import (#68926)
e345a58 fix(core): normalize tag names in runtime i18n attribute security context loo...
8f35b18 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
64a89e9 fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
Additional commits viewable in compare view

Updates @angular/core from 19.2.25 to 20.3.25

Release notes

Sourced from @angular/core's releases.

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

validate lowercase SVG animation attribute names (#69270)

http

Commit Description

preserve empty referrer option in HttpRequest

Rejects non-HTTP(S) URLs in JSONP requests

skip transfer cache for fetch credentialed requests

platform-server

Commit Description

harden platform location origin validation during SSR

deprecate ServerXhr (#69256)

service-worker

Commit Description

Strips sensitive headers on cross-origin redirects

Deprecations

platform-server

XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

20.3.24

platform-server

Commit Description

throw on suspicious URLs and restrict protocol-relative URLs

update domino to latest version

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

... (truncated)

Changelog

Sourced from @angular/core's changelog.

20.3.25 (2026-06-10)

Deprecations

platform-server

XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

common

Commit Type Description

9f443bc24c fix Limits date format string length

566ad05f20 fix skip transfer cache for uncacheable HTTP traffic

1a62130a6b fix use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Type Description

a68ec702a0 fix sanitize two-way properties

core

Commit Type Description

768a349e6e fix harden TransferState restoration against DOM clobbering

ca48b4728d fix validate lowercase SVG animation attribute names (#69270)

http

Commit Type Description

06be298267 fix preserve empty referrer option in HttpRequest

fa940e1f4d fix Rejects non-HTTP(S) URLs in JSONP requests

e2ef1ce72a fix skip transfer cache for fetch credentialed requests

platform-server

Commit Type Description

49368c1859 fix harden platform location origin validation during SSR

d55c94ad81 refactor deprecate ServerXhr (#69256)

service-worker

Commit Type Description

d65a5f457b fix Strips sensitive headers on cross-origin redirects

22.0.0 (2026-06-03)

Blog post "Announcing Angular v22".

Breaking Changes

compiler

This change will trigger the nullishCoalescingNotNullable and optionalChainNotNullable diagnostics on exisiting projects. You might want to disable those 2 diagnotiscs in your tsconfig temporarily.

data prefixed attribute no-longer bind inputs nor outputs.

The compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.

in variables will throw in template expressions.

compiler-cli

... (truncated)

Commits

ca48b47 fix(core): validate lowercase SVG animation attribute names (#69270)
1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
49368c1 fix(platform-server): harden platform location origin validation during SSR
566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
768a349 fix(core): harden TransferState restoration against DOM clobbering
7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
6595409 test(core): update golden symbols and host bindings sanitization spec (#68926)
d86e4e7 fix(core): reject script element as a dynamic component host (#68926)
b8f1f72 test(core): remove obsolete blockquote cite host binding tests (#68926)
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
Additional commits viewable in compare view

Updates @angular/platform-server from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/platform-server's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/platform-server's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

d55c94a refactor(platform-server): deprecate ServerXhr (#69256)
49368c1 fix(platform-server): harden platform location origin validation during SSR
fc7ea0b refactor(platform-server): replace standard Error with RuntimeError
6ca433e fix(platform-server): throw on suspicious URLs and restrict protocol-relative...
c99d9f0 refactor(platform-server): extract parseUrl regex and add comments for URL pa...
49a60f6 fix(platform-server): secure location and document initialization against SSR...
f584840 fix(platform-server): add allowedHosts option to renderModule and `render...
25e4e07 fix(platform-server): ensure origin has a trailing slash when parsing url (#6...
303d4cd fix(platform-server): prevent SSRF bypasses via protocol-relative and backsla...
4c66fe4 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
Additional commits viewable in compare view

Updates @babel/plugin-transform-modules-systemjs from 7.27.1 to 7.29.8

Release notes

Sourced from @babel/plugin-transform-modules-systemjs's releases.

v7.29.8 (2026-07-31)

👓 Spec Compliance

babel-generator, babel-parser, babel-plugin-transform-spread, babel-traverse, babel-types

#17871 Disallow super call after new (@JLHwung)

🐛 Bug Fix

babel-generator

#18046 fix(generator): improve new callee parens check (@JLHwung)

babel-node, babel-plugin-transform-modules-systemjs

#18044 fix(systemjs): support __proto__ as an export name (@JLHwung)

Committers: 2

Huáng Jùnliàng (@JLHwung)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

babel-generator

#18014 Catchup source map position in preserveFormat (@nicolo-ribaudo)

babel-core

#18001 [7.x packport]Improve input source map handling (@JLHwung)

babel-core, babel-generator

#17998 Preserve original identifier names from input sourcemaps (#17992) (@Andarist)

Committers: 3

Huáng Jùnliàng (@JLHwung)

Mateusz Burzyński (@Andarist)

Nicolò Ribaudo (@nicolo-ribaudo)

v7.29.5 (2026-05-05)

🏠 Internal

babel-preset-env

Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

babel-plugin-transform-modules-systemjs

#17974 [7.x backport]fix(systemjs): improve module string name support (@JLHwung)

Committers: 1

Huáng Jùnliàng (@JLHwung)

... (truncated)

Commits

5de11ca v7.29.8
f08d434 fix(systemjs): support proto as an export name (#18044)
4fba754 v7.29.7
a458f66 v7.29.4
32ebd5a [7.x backport]fix(systemjs): improve module string name support (#17974)
aa8394e v7.29.0
0053db6 Update polyfill packages (#17727)
61647ae v7.28.5
a177d55 [Babel 8] Use t.traverseFast to replace some path.traverse (#17518)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @babel/plugin-transform-modules-systemjs since your current version.

Updates brace-expansion from 1.1.12 to 1.1.18

Release notes

Sourced from brace-expansion's releases.

v1.1.15

Backport v5.0.6 change to v1 (#111) 0b09384

juliangruber/brace-expansion@v1.1.14...v1.1.15

Commits

758fcd6 1.1.18
27fbeed Merge commit from fork
5c57cc2 1.1.17
d757f1d npm ignore .claude
cb4b9e4 fix: backport GHSA-mh99-v99m-4gvg (#129)
447763a 1.1.16
d74e630 fix: v1 backport for CVE-2026-13149 (#122)
2203f4f 1.1.15
0b09384 Backport v5.0.6 change to v1 (#111)
10c05fc 1.1.14
Additional commits viewable in compare view

Updates fast-uri from 3.1.0 to 3.1.5

Release notes

Sourced from fast-uri's releases.

v3.1.5

⚠️ Security Warning

Fix for GHSA-7p8r-x3mc-p8w7

Full Changelog: fastify/fast-uri@v3.1.4...v3.1.5

v3.1.4

⚠️ Security Release

Fix for GHSA-v2hh-gcrm-f6hx

Full Changelog: fastify/fast-uri@v3.1.3...v3.1.4

v3.1.3

⚠️ Security Release

Fixes: GHSA-4c8g-83qw-93j6

Full Changelog: fastify/fast-uri@v3.1.2...v3.1.3

v3.1.2

⚠️ Security Release

Fix for GHSA-v39h-62p7-jpjc

What's Changed

Handle malformed fragment decoding as a parse error by @mcollina in fastify/fast-uri#171

Full Changelog: fastify/fast-uri@v3.1.1...v3.1.2

v3.1.1

⚠️ Security Release

Fix for GHSA-q3j6-qgpj-74h6

What's Changed

build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @dependabot[bot] in fastify/fast-uri#148

build(deps): bump actions/checkout from 4 to 5 by @dependabot[bot] in fastify/fast-uri#149

chore(.npmrc): ignore scripts by @Fdawgs in fastify/fast-uri#150

build(deps-dev): remove @fastify/pre-commit by @Fdawgs in fastify/fast-uri#151

build(deps): bump actions/setup-node from 4 to 5 by @dependabot[bot] in fastify/fast-uri#152

ci(ci): add concurrency config by @Fdawgs in fastify/fast-uri#153

build(deps): bump actions/setup-node from 5 to 6 by @dependabot[bot] in fastify/fast-uri#154

build(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in fastify/fast-uri#156

chore(license): standardise license notice by @Fdawgs in fastify/fast-uri#159

style: remove trailing whitespace by @Fdawgs in fastify/fast-uri#161

ci: remove unused github files by @Tony133 in fastify/fast-uri#162

chore: update readme by @Tony133 in fastify/fast-uri#164

... (truncated)

Commits

5e179cb Bumped v3.1.5
2cad02d Merge commit from fork
6aeece6 Bumped v3.1.4
2d50fba fix: reject literal backslash in URI authority
0549fe3 Bumped v3.1.3
2a6d357 Merge commit from fork
919dd8e Bumped v3.1.2
c65ba57 fixup: linting
6c86c17 Merge commit from fork
a95158a Handle malformed fragment decoding without throwing (#171)
Additional commits viewable in compare view

Updates http-proxy-middleware from 2.0.9 to 2.0.10

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.10-beta.0

What's Changed

fix: harden proxy-table matching to prevent routing bypass by @G-Rath in chimurai/http-proxy-middleware#1268

ci(github-actions): update publish.yml by @chimurai in chimurai/http-proxy-middleware#1270

New Contributors

@G-Rath made their first contribution in

Bumps the npm_and_yarn group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `19.2.25` | `20.3.27` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `19.2.25` | `20.3.27` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `19.2.25` | `20.3.25` | | [@angular/platform-server](https://github.com/angular/angular/tree/HEAD/packages/platform-server) | `19.2.25` | `20.3.27` | | [@babel/plugin-transform-modules-systemjs](https://github.com/babel/babel/tree/HEAD/packages/babel-plugin-transform-modules-systemjs) | `7.27.1` | `7.29.8` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.12` | `1.1.18` | | [fast-uri](https://github.com/fastify/fast-uri) | `3.1.0` | `3.1.5` | | [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) | `2.0.9` | `2.0.10` | | [ip-address](https://github.com/beaugunderson/ip-address) | `10.0.1` | `10.4.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.3.1` | | [node-forge](https://github.com/digitalbazaar/forge) | `1.3.1` | `1.4.0` | | [picomatch](https://github.com/micromatch/picomatch) | `2.3.1` | `2.3.2` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.12` | | [shell-quote](https://github.com/ljharb/shell-quote) | `1.8.3` | `1.10.0` | | [websocket-driver](https://github.com/faye/websocket-driver-node) | `0.7.4` | `0.7.5` | Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.25 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/platform-server` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/platform-server) Updates `@babel/plugin-transform-modules-systemjs` from 7.27.1 to 7.29.8 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.29.8/packages/babel-plugin-transform-modules-systemjs) Updates `brace-expansion` from 1.1.12 to 1.1.18 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@v1.1.12...v1.1.18) Updates `fast-uri` from 3.1.0 to 3.1.5 - [Release notes](https://github.com/fastify/fast-uri/releases) - [Commits](fastify/fast-uri@v3.1.0...v3.1.5) Updates `http-proxy-middleware` from 2.0.9 to 2.0.10 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v2.0.10/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.9...v2.0.10) Updates `ip-address` from 10.0.1 to 10.4.0 - [Release notes](https://github.com/beaugunderson/ip-address/releases) - [Commits](beaugunderson/ip-address@v10.0.1...v10.4.0) Updates `js-yaml` from 4.1.0 to 4.3.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/4.3.1/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.3.1) Updates `node-forge` from 1.3.1 to 1.4.0 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@v1.3.1...v1.4.0) Updates `picomatch` from 2.3.1 to 2.3.2 - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](micromatch/picomatch@2.3.1...2.3.2) Updates `postcss` from 8.5.6 to 8.5.12 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.12) Updates `shell-quote` from 1.8.3 to 1.10.0 - [Changelog](https://github.com/ljharb/shell-quote/blob/main/CHANGELOG.md) - [Commits](ljharb/shell-quote@v1.8.3...v1.10.0) Updates `websocket-driver` from 0.7.4 to 0.7.5 - [Changelog](https://github.com/faye/websocket-driver-node/blob/main/CHANGELOG.md) - [Commits](faye/websocket-driver-node@0.7.4...0.7.5) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/platform-server" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@babel/plugin-transform-modules-systemjs" dependency-version: 7.29.8 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: brace-expansion dependency-version: 1.1.18 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-uri dependency-version: 3.1.5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: http-proxy-middleware dependency-version: 2.0.10 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ip-address dependency-version: 10.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 4.3.1 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-version: 1.4.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: picomatch dependency-version: 2.3.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-version: 8.5.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: shell-quote dependency-version: 1.10.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: websocket-driver dependency-version: 0.7.5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 10, 2026

posthello-code had a problem deploying to dependabot/npm_and_yarn/npm_and_yarn-8294642f54 - slacker-news-frontend PR #50 August 10, 2026 05:24 — with Render Failure

Navigation Menu

Bump the npm_and_yarn group across 1 directory with 15 updates - #50

Bump the npm_and_yarn group across 1 directory with 15 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm_and_yarn-8294642f54

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

Commit	Type	Description
5dbcd0ee16	fix	disallow i18n event attributes
db0d4a1a39	fix	restrict possible event handler check to property names longer than 2 characters

Commit	Type	Description
388daea2fc	fix	correctly migrate ngClass with mixed space-separated keys
bb39cda648	fix	preserve NgClass import on partial migration

Commit	Description
	harden TransferState restoration against DOM clobbering
	validate lowercase SVG animation attribute names (#69270)

Commit	Description
	preserve empty referrer option in HttpRequest
	Rejects non-HTTP(S) URLs in JSONP requests
	skip transfer cache for fetch credentialed requests

Commit	Description
	harden platform location origin validation during SSR
	deprecate ServerXhr (#69256)

Commit	Description
	throw on suspicious URLs and restrict protocol-relative URLs
	update domino to latest version

Commit	Type	Description
9f443bc24c	fix	Limits date format string length
566ad05f20	fix	skip transfer cache for uncacheable HTTP traffic
1a62130a6b	fix	use cryptographically secure SHA-256 for transfer cache key generation

Commit	Type	Description
768a349e6e	fix	harden TransferState restoration against DOM clobbering
ca48b4728d	fix	validate lowercase SVG animation attribute names (#69270)

Commit	Type	Description
06be298267	fix	preserve empty referrer option in HttpRequest
fa940e1f4d	fix	Rejects non-HTTP(S) URLs in JSONP requests
e2ef1ce72a	fix	skip transfer cache for fetch credentialed requests

Commit	Type	Description
49368c1859	fix	harden platform location origin validation during SSR
d55c94ad81	refactor	deprecate ServerXhr (#69256)

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

20.3.27

compiler

http

platform-server

20.3.26

compiler-cli

core

http

service-worker

20.3.25

common

compiler

core

20.3.27 (2026-07-29)

compiler

http

platform-server

22.0.8 (2026-07-22)

common

core

forms

http

migrations

22.0.7 (2026-07-15)

common

compiler

20.3.27

compiler

http

platform-server

20.3.26

compiler-cli

core

http

service-worker

20.3.25

common

compiler

core

20.3.27 (2026-07-29)

compiler

http

platform-server

22.0.8 (2026-07-22)

common

core

forms

http

migrations

22.0.7 (2026-07-15)

common

compiler

20.3.25

common

compiler

core

http

platform-server

service-worker

Deprecations

platform-server

20.3.24

platform-server

20.3.23

compiler

20.3.22

common

20.3.25 (2026-06-10)

Deprecations

platform-server

common

compiler

core

http

platform-server

service-worker

22.0.0 (2026-06-03)

Breaking Changes