build(deps): bump @sigstore/core and @angular/cli by dependabot[bot] · Pull Request #3242 · db-ui/elements

dependabot · 2026-06-30T13:28:01Z

Bumps @sigstore/core to 3.2.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @sigstore/core from 1.1.0 to 3.2.1

Release notes

Sourced from @sigstore/core's releases.

@sigstore/core@3.2.1

Patch Changes

b5aa4f1: Apply UTF-8 encoding to payload type during PAE calculation

@sigstore/core@3.2.0

Minor Changes

8f736ef: Update the createPublicKey function to support base64-encoded keys

@sigstore/core@3.0.0

Major Changes

383e200: Drop support for node 18

@sigstore/core@2.0.0

Major Changes

b78615b: Remove hash function in core package

2e58489: Drop support for node 16

Commits

c1dc7d4 Version Packages (#1607)
f074710 reject integratedTime w/o inclusionPromise (#1659)
7845532 OID certificate extension verification (#1658)
b5aa4f1 proper utf-8 encoding in DSSE PAE (#1657)
c7a34e0 clarify cert ID matching (#1656)
9858bd7 Upgrade TypeScript to 6.x (#1655)
8cef20d bump qs from 6.15.1 to 6.15.2 (#1654)
aca341b bump @sigstore/mock deps (#1653)
0855aca Pin all @swc/core platform binaries as optionalDependencies (#1652)
44a374d Pin all @swc/core platform binaries as optionalDependencies (#1650)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @sigstore/core since your current version.

Updates @angular/cli from 18.2.20 to 22.0.8

Release notes

Sourced from @angular/cli's releases.

22.0.8

@angular/cli

Commit Description

batch Prettier invocations during migration formatting

update MCP devserver tool names to conform to spec regex

@angular/build

Commit Description

canonicalize drive letter casing for workspace root on Windows

ensure import map integrity keys are valid URL-like specifiers

favor istanbul coverage provider when browser testing is enabled

preserve custom config options in runnerConfig for vitest

remap metafile paths when workspace root is a symlink or junction

skip semantic affected-file walk when type checking is disabled

22.0.7

@angular/cli

Commit Description

copy packageManager field and yarn config for temp installs

support resolving subproject dependencies in pnpm workspaces

22.0.6

@angular/build

Commit Description

fallback to build target preserveSymlinks option in karma runner

prevent externalizing builder-injected i18n locale data

strip all vite id prefixes from minified code with external dependencies

@angular/ssr

Commit Description

replace all route parameters when resolving relative redirects

22.0.5

@schematics/angular

Commit Description

remove unused app tsconfig outDir

@angular/cli

Commit Description

gracefully handle package manager errors in command handler

respect release age policy in update bootstrapping logic

@angular-devkit/build-angular

Commit Description

prevent OS command injection in ssr-dev-server builder

@angular/build

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.0.8 (2026-07-23)

@angular/cli

Commit Type Description

41c356256 fix batch Prettier invocations during migration formatting

bc87c85c3 fix update MCP devserver tool names to conform to spec regex

@angular/build

Commit Type Description

5724bf632 fix canonicalize drive letter casing for workspace root on Windows

b8bdbaa1e fix ensure import map integrity keys are valid URL-like specifiers

212a7bb21 fix favor istanbul coverage provider when browser testing is enabled

bc760b005 fix preserve custom config options in runnerConfig for vitest

19cda7415 fix remap metafile paths when workspace root is a symlink or junction

fdcc98c79 perf skip semantic affected-file walk when type checking is disabled

22.1.0-next.4 (2026-07-15)

@angular/cli

Commit Type Description

3789ceee1 fix copy packageManager field and yarn config for temp installs

b0b3a47ae fix support resolving subproject dependencies in pnpm workspaces

@schematics/angular

Commit Type Description

b345bb54d fix remove unused spec tsconfig outDir

@angular/build

Commit Type Description

0c18dc0f6 feat emit debug ids for stable subresource integrity hashes

291caab61 fix prevent stripping nested sourceMappingURL comments

... (truncated)

Commits

beac493 release: cut the v22.0.8 release
1bb2cc5 build: update devinfra digest to 8819f0b
83eede6 build: update all github actions
15b8616 build: update dependency aspect_rules_ts to v3.9.2
bc87c85 fix(@angular/cli): update MCP devserver tool names to conform to spec regex
212a7bb fix(@angular/build): favor istanbul coverage provider when browser testing is...
0c69328 Revert "perf(@angular/build): skip semantic affected-file walk when type chec...
ecc7aba build: update cross-repo angular dependencies
ce5e5d0 build: lock file maintenance
fdcc98c perf(@angular/build): skip semantic affected-file walk when type checking is ...
Additional commits viewable in compare view

github-actions · 2026-06-30T13:28:15Z

🔭🐙🐈 Test this branch here: https://db-ui.github.io/elements/review/dependabot-npm_and_yarn-multi-f5b06df1e5

Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js) to 3.2.1 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `@sigstore/core` from 1.1.0 to 3.2.1 - [Release notes](https://github.com/sigstore/sigstore-js/releases) - [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/core@1.1.0...@sigstore/core@3.2.1) Updates `@angular/cli` from 18.2.20 to 22.0.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@18.2.20...v22.0.8) --- updated-dependencies: - dependency-name: "@angular/cli" dependency-version: 22.0.4 dependency-type: direct:development - dependency-name: "@sigstore/core" dependency-version: 3.2.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code major labels Jun 30, 2026

dependabot Bot requested review from annsch, bruno-sch, dkolba, mfranzke and nmerget as code owners June 30, 2026 13:28

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code major labels Jun 30, 2026

github-actions Bot added angular-showcase repo angular labels Jun 30, 2026

github-actions Bot previously approved these changes Jun 30, 2026

View reviewed changes

dependabot Bot dismissed github-actions[bot]’s stale review via 0c490b9 July 6, 2026 07:11

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from c2fb9c2 to 0c490b9 Compare July 6, 2026 07:11

github-actions Bot previously approved these changes Jul 6, 2026

View reviewed changes

dependabot Bot dismissed github-actions[bot]’s stale review via 035fc30 July 16, 2026 01:48

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 0c490b9 to 035fc30 Compare July 16, 2026 01:48

github-actions Bot previously approved these changes Jul 16, 2026

View reviewed changes

dependabot Bot dismissed github-actions[bot]’s stale review via 1fd5499 July 19, 2026 05:58

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 035fc30 to 1fd5499 Compare July 19, 2026 05:58

github-actions Bot previously approved these changes Jul 19, 2026

View reviewed changes

dependabot Bot dismissed github-actions[bot]’s stale review via 1eb3ac1 July 20, 2026 06:51

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 1fd5499 to 1eb3ac1 Compare July 20, 2026 06:51

github-actions Bot previously approved these changes Jul 20, 2026

View reviewed changes

dependabot Bot dismissed github-actions[bot]’s stale review via 1e85547 July 24, 2026 03:20

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 1eb3ac1 to 1e85547 Compare July 24, 2026 03:20

github-actions Bot approved these changes Jul 24, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 1e85547 to 570d7f8 Compare July 24, 2026 03:32

github-actions Bot previously approved these changes Jul 24, 2026

View reviewed changes

dependabot Bot dismissed github-actions[bot]’s stale review via 75600ab July 25, 2026 21:24

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 570d7f8 to 75600ab Compare July 25, 2026 21:24

github-actions Bot approved these changes Jul 25, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot-npm_and_yarn-multi-f5b06df1e5 branch from 75600ab to bb37bef Compare July 25, 2026 21:35

github-actions Bot approved these changes Jul 25, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump @sigstore/core and @angular/cli - #3242

build(deps): bump @sigstore/core and @angular/cli#3242
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-multi-f5b06df1e5

dependabot Bot commented on behalf of github Jun 30, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	batch Prettier invocations during migration formatting
	update MCP devserver tool names to conform to spec regex

Commit	Description
	canonicalize drive letter casing for workspace root on Windows
	ensure import map integrity keys are valid URL-like specifiers
	favor istanbul coverage provider when browser testing is enabled
	preserve custom config options in runnerConfig for vitest
	remap metafile paths when workspace root is a symlink or junction
	skip semantic affected-file walk when type checking is disabled

Commit	Description
	copy packageManager field and yarn config for temp installs
	support resolving subproject dependencies in pnpm workspaces

Commit	Description
	fallback to build target preserveSymlinks option in karma runner
	prevent externalizing builder-injected i18n locale data
	strip all vite id prefixes from minified code with external dependencies

Commit	Description
	gracefully handle package manager errors in command handler
	respect release age policy in update bootstrapping logic

Commit	Type	Description
41c356256	fix	batch Prettier invocations during migration formatting
bc87c85c3	fix	update MCP devserver tool names to conform to spec regex

Commit	Type	Description
5724bf632	fix	canonicalize drive letter casing for workspace root on Windows
b8bdbaa1e	fix	ensure import map integrity keys are valid URL-like specifiers
212a7bb21	fix	favor istanbul coverage provider when browser testing is enabled
bc760b005	fix	preserve custom config options in runnerConfig for vitest
19cda7415	fix	remap metafile paths when workspace root is a symlink or junction
fdcc98c79	perf	skip semantic affected-file walk when type checking is disabled

Commit	Type	Description
3789ceee1	fix	copy packageManager field and yarn config for temp installs
b0b3a47ae	fix	support resolving subproject dependencies in pnpm workspaces

Commit	Type	Description
0c18dc0f6	feat	emit debug ids for stable subresource integrity hashes
291caab61	fix	prevent stripping nested sourceMappingURL comments

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​sigstore/core@​3.2.1

Patch Changes

@​sigstore/core@​3.2.0

Minor Changes

@​sigstore/core@​3.0.0

Major Changes

@​sigstore/core@​2.0.0

Major Changes

22.0.8

@​angular/cli

@​angular/build

22.0.7

@​angular/cli

22.0.6

@​angular/build

@​angular/ssr

22.0.5

@​schematics/angular

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

22.0.8 (2026-07-23)

@​angular/cli

@​angular/build

22.1.0-next.4 (2026-07-15)

@​angular/cli

@​schematics/angular

@​angular/build

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 30, 2026 •

edited

Loading

`@sigstore/core@3`.2.1

`@sigstore/core@3`.2.0

`@sigstore/core@3`.0.0

`@sigstore/core@2`.0.0

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@schematics/angular`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular/build`