Skip to content
This repository was archived by the owner on Apr 29, 2026. It is now read-only.

Bump serialize-javascript and @angular-devkit/build-angular#42

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-1bfacb8e99
Open

Bump serialize-javascript and @angular-devkit/build-angular#42
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-1bfacb8e99

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 29, 2026

Bumps serialize-javascript to 7.0.5 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates serialize-javascript from 1.7.0 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @angular-devkit/build-angular from 0.801.2 to 21.2.8

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.8

@​angular/cli

Commit Description
fix - e91280c05 dynamically resolve project Angular CLI executable inside MCP tools
fix - 01af6741b ignore EBADF file system errors during MCP project scan
fix - f7a3e6ed8 use headless option in MCP test tool

@​angular-devkit/build-angular

Commit Description
fix - 00336c037 ensure route has leading slash in prerender builder
fix - e87d302d6 fix app-shell route format and

@​angular/build

Commit Description
fix - c93140a54 use rootDir for HMR component updates path resolution
fix - 6df2b1488 validate V8 coverage support for browsers in Vitest

21.2.7

@​angular/cli

Commit Description
fix - 971041aa1 handle missing package manager during analytics initialization

@​angular/build

Commit Description
fix - 365cce81d preserve coverage ignore comments in development
fix - 9f74660c3 show clear error when styleUrl points to a TypeScript file

21.2.6

@​angular/cli

Commit Description
fix - ea14f28cc fix sourceRoot resolution for MCP projects tool

@​angular/build

Commit Description
fix - 9136eb376 ensure transitive SCSS partial errors are tracked in watch mode
fix - 8186faa11 ensure Vitest mock patching is executed only once
fix - 107d1a9e2 preserve error stack traces during prerendering
fix - b7f457253 scope CHROME_BIN executable path to individual playwright instances

21.2.5

@​angular/cli

Commit Description
feat - cadf9b201 support custom port in MCP devserver start tool

@​angular/ssr

Commit Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.8 (2026-04-22)

@​angular/cli

Commit Type Description
e91280c05 fix dynamically resolve project Angular CLI executable inside MCP tools
01af6741b fix ignore EBADF file system errors during MCP project scan
f7a3e6ed8 fix use headless option in MCP test tool

@​angular-devkit/build-angular

Commit Type Description
00336c037 fix ensure route has leading slash in prerender builder
e87d302d6 fix fix app-shell route format and

@​angular/build

Commit Type Description
c93140a54 fix use rootDir for HMR component updates path resolution
6df2b1488 fix validate V8 coverage support for browsers in Vitest

21.2.7 (2026-04-08)

@​angular/cli

Commit Type Description
971041aa1 fix handle missing package manager during analytics initialization

@​angular/build

Commit Type Description
365cce81d fix preserve coverage ignore comments in development
9f74660c3 fix show clear error when styleUrl points to a TypeScript file

21.2.6 (2026-04-01)

@​angular/cli

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular-devkit/build-angular since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `serialize-javascript` from 1.7.0 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v1.7.0...v7.0.5)

Updates `@angular-devkit/build-angular` from 0.801.2 to 21.2.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/v21.2.8/CHANGELOG.md)
- [Commits](https://github.com/angular/angular-cli/commits/v21.2.8)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.8
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 29, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants