Skip to content

Bump Angular to 21.2.25 and patch transitive dependencies - #657

Merged
uldisrudzitis merged 1 commit into
masterfrom
deps/dependabot-bumps-2026-10
Oct 8, 2026
Merged

uldisrudzitis merged 1 commit into
masterfrom
deps/dependabot-bumps-2026-10

Conversation

@uldisrudzitis

Copy link
Copy Markdown
Collaborator

Combines the open Dependabot PRs into one set of bumps that installs cleanly. #647 and #648 fail CI on their own with ERESOLVE.

Changes

  • Angular 21.2.22 → 21.2.25 (build/cli 21.2.23 → 21.2.26). All framework packages move together because they peer-pin each other to the exact version, which is why bumping @angular/router alone (Bump @angular/router from 21.2.22 to 21.2.24 in /editor #647) can't install.
  • piscina 5.2.0 → 5.3.2 through @angular/build@21.2.26. Bump piscina and @angular/build in /editor #648 bumped @angular/build to 22, which requires Angular 22; the 21.x line already ships the fixed piscina.
  • brace-expansion 5.0.9 → 5.0.12 and 1.1.18 → 1.1.21 in editor/, 1.1.18 → 1.1.21 in the root lockfile.
  • ip-address 10.7.0 → 10.7.3.

The only other lockfile changes are @angular-devkit/*, @schematics/angular, @modelcontextprotocol/sdk 1.31.0 and undici 7.29.1, all pinned by the new CLI/build version.

Testing

  • editor/: npm ci, npm test -- --watch=false --browsers=ChromeHeadless (138/138 pass), npm run build
  • root: npm ci, npm run build

Supersedes #645, #646, #647, #648, #651.

🤖 Generated with Claude Code

Moves every @angular/* framework package together to 21.2.25 and
@angular/build/cli to 21.2.26, since the framework packages peer-pin
each other to the exact version. @angular/build 21.2.26 ships
piscina 5.3.2, so the piscina fix lands without moving to Angular 22.

Also updates brace-expansion (editor and root) and ip-address in the
lockfiles.

Supersedes #645, #646, #647, #648, #651.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Oct 8, 2026

Copy link
Copy Markdown
Contributor

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 17 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 804b2429-04c3-4b1a-bb7f-86f62c189070
📥 Commits

Reviewing files that changed from the base of the PR and between 71c2e8b and 28cb4cc.

⛔ Files ignored due to path filters (2)
  • editor/package-lock.json is excluded by !**/package-lock.json
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • editor/package.json
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@uldisrudzitis
uldisrudzitis merged commit 9892d31 into master Oct 8, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant