Skip to content

build(deps): bump @sigstore/core and @angular/cli in /frontend#196

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/multi-1fcdcb87f7
Open

build(deps): bump @sigstore/core and @angular/cli in /frontend#196
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/multi-1fcdcb87f7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bumps @sigstore/core to 3.2.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @sigstore/core from 1.1.0 to 3.2.1

Release notes

Sourced from @​sigstore/core's releases.

@​sigstore/core@​3.2.1

Patch Changes

  • b5aa4f1: Apply UTF-8 encoding to payload type during PAE calculation

@​sigstore/core@​3.2.0

Minor Changes

  • 8f736ef: Update the createPublicKey function to support base64-encoded keys

@​sigstore/core@​3.0.0

Major Changes

  • 383e200: Drop support for node 18

@​sigstore/core@​2.0.0

Major Changes

  • b78615b: Remove hash function in core package
  • 2e58489: Drop support for node 16
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sigstore/core since your current version.


Updates @angular/cli from 18.2.21 to 22.0.5

Release notes

Sourced from @​angular/cli's releases.

22.0.5

@​schematics/angular

Commit Description
fix - 862a38069 remove unused app tsconfig outDir

@​angular/cli

Commit Description
fix - f099e641c gracefully handle package manager errors in command handler
fix - cf033ec48 respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

Commit Description
fix - f75085f4b prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit Description
fix - dfee1e7b1 auto-inject localize/init in library unit tests
fix - aba718403 inherit preserveSymlinks option from build target in unit-test builder
fix - 7c0d9f03c load zone.js dynamically for library unit tests
fix - 4288e4452 scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit Description
fix - 5f774f891 preserve response headers during redirect

22.0.4

@​angular/build

Commit Description
fix - 46185ceac aggregate parallel worker performance timings on the main thread
perf - 5d7e29c41 dispose builder result context early in non-watch mode

22.0.3

@​schematics/angular

Commit Description
fix - 0eddea898 remove default workspace vscode mcp.json configuration

22.0.2

@​angular/cli

Commit Description
fix - 136fc2714 support registry metadata fetching under bun package manager
perf - 2653dd5c7 implement semaphore backpressure throttling in PackageManager

@​angular/build

Commit Description
perf - 0b4a48add implement semaphore backpressure throttling in JavaScriptTransformer

@​angular/ssr

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.5 (2026-07-01)

@​angular/cli

Commit Type Description
f099e641c fix gracefully handle package manager errors in command handler
cf033ec48 fix respect release age policy in update bootstrapping logic

@​schematics/angular

Commit Type Description
862a38069 fix remove unused app tsconfig outDir

@​angular-devkit/build-angular

Commit Type Description
f75085f4b fix prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit Type Description
dfee1e7b1 fix auto-inject localize/init in library unit tests
aba718403 fix inherit preserveSymlinks option from build target in unit-test builder
7c0d9f03c fix load zone.js dynamically for library unit tests
4288e4452 fix scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit Type Description
5f774f891 fix preserve response headers during redirect

21.2.18 (2026-07-01)

@​angular/cli

Commit Type Description
61a810ab6 fix respect release age policy in update bootstrapping logic

@​angular/build

... (truncated)

Commits
  • 85a2698 release: cut the v22.0.5 release
  • 5c892ee build: update cross-repo angular dependencies
  • 7848e8d build: lock file maintenance
  • 862a380 fix(@​schematics/angular): remove unused app tsconfig outDir
  • 4288e44 fix(@​angular/build): scope createRequire module resolution using paths to pre...
  • 5f774f8 fix(@​angular/ssr): preserve response headers during redirect
  • 7c0d9f0 fix(@​angular/build): load zone.js dynamically for library unit tests
  • f75085f fix(@​angular-devkit/build-angular): prevent OS command injection in ssr-dev-s...
  • f099e64 fix(@​angular/cli): gracefully handle package manager errors in command handler
  • cf033ec fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 5, 2026
@vercel

vercel Bot commented Jul 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
monstar Ready Ready Preview, Comment Jul 6, 2026 12:53am

Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) to 3.2.1 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `@sigstore/core` from 1.1.0 to 3.2.1
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/core@1.1.0...@sigstore/core@3.2.1)

Updates `@angular/cli` from 18.2.21 to 22.0.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.21...v22.0.5)

---
updated-dependencies:
- dependency-name: "@angular/cli"
  dependency-version: 22.0.5
  dependency-type: direct:development
- dependency-name: "@sigstore/core"
  dependency-version: 3.2.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-1fcdcb87f7 branch from a21b76e to 4fc6259 Compare July 6, 2026 00:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants