chore(deps): bump tar and @angular/cli in /examples/angular-universal #4239
Conversation
Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.3 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `tar` from 6.1.11 to 7.5.3 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.1.11...v7.5.3) Updates `@angular/cli` from 13.2.4 to 21.1.0 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@13.2.4...v21.1.0) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.3 dependency-type: indirect - dependency-name: "@angular/cli" dependency-version: 21.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.
| "devDependencies": { | ||
| "@angular-devkit/build-angular": "^17.3.3", | ||
| "@angular/cli": "^13.2.0", | ||
| "@angular/cli": "^21.1.0", |
There was a problem hiding this comment.
Major Angular version mismatch breaks the build
High Severity
Upgrading @angular/cli to ^21.1.0 while keeping all other Angular packages (@angular/core, @angular/common, @angular/compiler, @angular/platform-browser, etc.) at ^13.2.0 creates a severe version incompatibility. Angular packages must be kept at the same major version. This mismatch will cause build failures and break the Angular Universal example project entirely.
Additional Locations (1)
|
View your CI Pipeline Execution ↗ for commit 7ecd1db
☁️ Nx Cloud last updated this comment at |
Bumps tar to 7.5.3 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.
Updates
tarfrom 6.1.11 to 7.5.3Release notes
Sourced from tar's releases.
Changelog
Sourced from tar's changelog.
... (truncated)
Commits
03138447.5.3340eb28fix: sanitize absolute linkpaths properly8bb83f7update deps1c4aeddFix typo in onWriteEntry documentationd9ea73a7.5.25e1a8e6Fix sync tar.list when file size reduces while reading0fbeaedformatting2dbacfeadd types for make-tar utilc5865d3remove unused taprc filebdb3809header: only read from ustar block if not specified in PaxUpdates
@angular/clifrom 13.2.4 to 21.1.0Release notes
Sourced from
@angular/cli's releases.... (truncated)
Changelog
Sourced from
@angular/cli's changelog.... (truncated)
Commits
9c5a2e3release: cut the v21.1.0 release94e7f49build: update Angular versions to 21.1.0 stable versions84a228cbuild: update dependency bazel to v8.5.19ae6844build: update dependency node to v22.22.009c5c9fbuild: lock file maintenance977d461refactor: update license URL from angular.io to angular.dev and angular mater...f13c845refactor: update copyright from Google Inc to Google LLC8d99cfefix(@angular/ssr): handle platform destruction during rendering8195bf8build: update cross-repo angular dependenciesd45693arefactor(@angular/cli): support copying config files to temp package directoryDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Dependency updates in the Angular Universal example
tarto7.5.3@angular/clito^21.1.0and aligns related tooling inpackage.jsonWritten by Cursor Bugbot for commit 7ecd1db. This will update automatically on new commits. Configure here.