Skip to content

Bump picomatch, @angular-devkit/architect, @angular-devkit/core and @angular-devkit/schematics#1426

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-40951185d9
Open

Bump picomatch, @angular-devkit/architect, @angular-devkit/core and @angular-devkit/schematics#1426
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-40951185d9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 25, 2026

Bumps picomatch, @angular-devkit/architect, @angular-devkit/core and @angular-devkit/schematics. These dependencies needed to be updated together.
Updates picomatch from 2.3.1 to 2.3.2

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates picomatch from 4.0.3 to 4.0.4

Release notes

Sourced from picomatch's releases.

2.3.2

This is a security release fixing several security relevant issues.

What's Changed

Full Changelog: micromatch/picomatch@2.3.1...2.3.2

Changelog

Sourced from picomatch's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

  • Changelogs are for humans, not machines.
  • There should be an entry for every single version.
  • The same types of changes should be grouped.
  • Versions and sections should be linkable.
  • The latest version comes first.
  • The release date of each versions is displayed.
  • Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

  • Added for new features.
  • Changed for changes in existing functionality.
  • Deprecated for soon-to-be removed features.
  • Removed for now removed features.
  • Fixed for any bug fixes.
  • Security in case of vulnerabilities.

4.0.0 (2024-02-07)

Fixes

Changed

3.0.1

Fixes

... (truncated)

Commits

Updates @angular-devkit/architect from 0.2003.18 to 0.2003.24

Commits

Updates @angular-devkit/core from 20.3.18 to 20.3.24

Release notes

Sourced from @​angular-devkit/core's releases.

20.3.24

@​angular/build

Commit Description
fix - 10c09c77b update esbuild to 0.28.0

20.3.23

@​angular/build

Commit Description
fix - ccab02ba0 update vite to 7.3.2

20.3.22

@​angular-devkit/build-angular

Commit Description
fix - 5978eeeff update picomatch to 4.0.4

@​angular-devkit/core

Commit Description
fix - 6e9b92612 update picomatch to 4.0.4

@​angular/build

Commit Description
fix - 6f209c26d update picomatch to 4.0.4

20.3.21

@​angular/ssr

Commit Description
fix - 1dc6992a5 disallow x-forwarded-prefix starting with a backslash
fix - 0a2ff0b2b ensure unique values in redirect response Vary header
fix - cdbac82a8 support custom headers in redirect responses

20.3.20

@​angular/build

Commit Description
fix - 0fd6823af pass process environment variables to prerender workers

20.3.19

@​angular-devkit/build-angular

Commit Description
fix - 0299b4d1a update copy-webpack-plugin to v14.0.0
Changelog

Sourced from @​angular-devkit/core's changelog.

20.3.24 (2026-04-15)

@​angular/build

Commit Type Description
10c09c77b fix update esbuild to 0.28.0

22.0.0-next.5 (2026-04-08)

Breaking Changes

@​angular/build

  • istanbul-lib-instrument is now an optional peer dependency. Projects using karma with code coverage enabled will need to ensure that istanbul-lib-instrument is installed. Note: ng update will automatically add this dependency during the update process.

@​schematics/angular

Commit Type Description
be60a63b7 feat add migrate-karma-to-vitest update migration
43505066e feat add migration to add istanbul-lib-instrument
470e1f937 fix add istanbul-lib-instrument to application/library generator dependencies

@​angular/cli

Commit Type Description
422c8183e fix handle missing package manager during analytics initialization

@​angular/build

Commit Type Description
3007f46b7 feat move istanbul-lib-instrument to optional peer dependency
829bdc61d fix preserve coverage ignore comments in development
e2f95fc19 fix show clear error when styleUrl points to a TypeScript file

21.2.7 (2026-04-08)

@​angular/cli

... (truncated)

Commits
  • 5411257 release: cut the v20.3.24 release
  • 10c09c7 fix(@​angular/build): update esbuild to 0.28.0
  • afe50b7 release: cut the v20.3.23 release
  • ccab02b fix(@​angular/build): update vite to 7.3.2
  • e18c125 release: cut the v20.3.22 release
  • 6e9b926 fix(@​angular-devkit/core): update picomatch to 4.0.4
  • 5978eee fix(@​angular-devkit/build-angular): update picomatch to 4.0.4
  • 6f209c2 fix(@​angular/build): update picomatch to 4.0.4
  • 34d5245 release: cut the v20.3.21 release
  • 0a2ff0b fix(@​angular/ssr): ensure unique values in redirect response Vary header
  • Additional commits viewable in compare view

Updates @angular-devkit/schematics from 20.3.18 to 20.3.24

Release notes

Sourced from @​angular-devkit/schematics's releases.

20.3.24

@​angular/build

Commit Description
fix - 10c09c77b update esbuild to 0.28.0

20.3.23

@​angular/build

Commit Description
fix - ccab02ba0 update vite to 7.3.2

20.3.22

@​angular-devkit/build-angular

Commit Description
fix - 5978eeeff update picomatch to 4.0.4

@​angular-devkit/core

Commit Description
fix - 6e9b92612 update picomatch to 4.0.4

@​angular/build

Commit Description
fix - 6f209c26d update picomatch to 4.0.4

20.3.21

@​angular/ssr

Commit Description
fix - 1dc6992a5 disallow x-forwarded-prefix starting with a backslash
fix - 0a2ff0b2b ensure unique values in redirect response Vary header
fix - cdbac82a8 support custom headers in redirect responses

20.3.20

@​angular/build

Commit Description
fix - 0fd6823af pass process environment variables to prerender workers

20.3.19

@​angular-devkit/build-angular

Commit Description
fix - 0299b4d1a update copy-webpack-plugin to v14.0.0
Changelog

Sourced from @​angular-devkit/schematics's changelog.

20.3.24 (2026-04-15)

@​angular/build

Commit Type Description
10c09c77b fix update esbuild to 0.28.0

22.0.0-next.5 (2026-04-08)

Breaking Changes

@​angular/build

  • istanbul-lib-instrument is now an optional peer dependency. Projects using karma with code coverage enabled will need to ensure that istanbul-lib-instrument is installed. Note: ng update will automatically add this dependency during the update process.

@​schematics/angular

Commit Type Description
be60a63b7 feat add migrate-karma-to-vitest update migration
43505066e feat add migration to add istanbul-lib-instrument
470e1f937 fix add istanbul-lib-instrument to application/library generator dependencies

@​angular/cli

Commit Type Description
422c8183e fix handle missing package manager during analytics initialization

@​angular/build

Commit Type Description
3007f46b7 feat move istanbul-lib-instrument to optional peer dependency
829bdc61d fix preserve coverage ignore comments in development
e2f95fc19 fix show clear error when styleUrl points to a TypeScript file

21.2.7 (2026-04-08)

@​angular/cli

... (truncated)

Commits
  • 5411257 release: cut the v20.3.24 release
  • 10c09c7 fix(@​angular/build): update esbuild to 0.28.0
  • afe50b7 release: cut the v20.3.23 release
  • ccab02b fix(@​angular/build): update vite to 7.3.2
  • e18c125 release: cut the v20.3.22 release
  • 6e9b926 fix(@​angular-devkit/core): update picomatch to 4.0.4
  • 5978eee fix(@​angular-devkit/build-angular): update picomatch to 4.0.4
  • 6f209c2 fix(@​angular/build): update picomatch to 4.0.4
  • 34d5245 release: cut the v20.3.21 release
  • 0a2ff0b fix(@​angular/ssr): ensure unique values in redirect response Vary header
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…angular-devkit/schematics

Bumps [picomatch](https://github.com/micromatch/picomatch), [@angular-devkit/architect](https://github.com/angular/angular-cli), [@angular-devkit/core](https://github.com/angular/angular-cli) and [@angular-devkit/schematics](https://github.com/angular/angular-cli). These dependencies needed to be updated together.

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `@angular-devkit/architect` from 0.2003.18 to 0.2003.24
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular-cli/commits)

Updates `@angular-devkit/core` from 20.3.18 to 20.3.24
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v20.3.18...v20.3.24)

Updates `@angular-devkit/schematics` from 20.3.18 to 20.3.24
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v20.3.18...v20.3.24)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
- dependency-name: "@angular-devkit/architect"
  dependency-version: 0.2003.24
  dependency-type: indirect
- dependency-name: "@angular-devkit/core"
  dependency-version: 20.3.24
  dependency-type: indirect
- dependency-name: "@angular-devkit/schematics"
  dependency-version: 20.3.24
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 25, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Apr 25, 2026

Deploying timelinetools with  Cloudflare Pages  Cloudflare Pages

Latest commit: d5db22f
Status: ✅  Deploy successful!
Preview URL: https://7758ab08.timelinetools.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-mult-0i0c.timelinetools.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants