chore(deps): bump the npm-dependencies group across 1 directory with 28 updates by dependabot[bot] · Pull Request #5 · NotJustAnna/SeamStack

dependabot · 2026-09-20T19:41:47Z

Bumps the npm-dependencies group with 28 updates in the / directory:

Package	From	To
tsdown	`0.22.14`	`0.23.0`
typescript	`6.0.3`	`7.0.2`
vitest	`4.1.11`	`5.0.1`
@angular-devkit/architect	`0.2201.5`	`0.2201.8`
@angular-devkit/core	`22.1.5`	`22.1.8`
astro	`7.2.4`	`7.3.3`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
execa	`9.6.1`	`10.0.1`
@clack/prompts	`1.7.0`	`1.8.1`
tsx	`4.23.12`	`4.23.13`
elysia	`1.4.29`	`1.4.30`
@fastify/static	`9.3.0`	`10.1.4`
fastify-plugin	`5.1.0`	`6.0.0`
fastify	`5.12.1`	`5.12.5`
hono	`4.13.3`	`4.13.8`
@nestjs/common	`11.2.1`	`12.0.3`
@nestjs/core	`11.2.1`	`12.0.3`
@nestjs/platform-express	`11.2.1`	`12.0.3`
@nestjs/serve-static	`5.0.5`	`12.0.0`
oxc-transform	`0.146.0`	`0.150.0`
rolldown	`1.2.5`	`1.2.9`
@rollup/plugin-node-resolve	`15.3.1`	`16.0.3`
rollup	`4.62.5`	`4.63.3`
@swc/core	`1.16.1`	`1.16.2`
webpack	`5.109.2`	`5.111.0`
verdaccio	`6.10.0`	`6.10.3`
playwright	`1.62.1`	`1.63.0`

Updates tsdown from 0.22.14 to 0.23.0

Release notes

Sourced from tsdown's releases.

v0.23.0

   🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

config:

bundle: false → unbundle: true; bundle: true can be removed

outExtension → outExtensions

publicDir / --public-dir → copy / --copy

removeNodeProtocol: true → nodeProtocol: 'strip'

injectStyle → css.inject

deps:

inlineOnly / deps.onlyAllowBundle → deps.onlyBundle

skipNodeModulesBundle: true → deps.neverBundle: true

resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior

dts:

rolldown-plugin-dts was upgraded from 0.27.13 to 0.28.5

dts.oxc: true → dts.generator: 'oxc'

dts.tsgo: true → dts.generator: 'tsgo'; oxc and tsgo objects now only configure their respective generators

dts.volarPlugins → dts.customLanguages; rename each language's create hook to createVolarPlugins

Custom languages, including vue, now throw when combined with an incompatible generator

dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass

attw:

The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks

programmatic API:

build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()

requirements:

Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0

rolldown-plugin-dts now requires Rolldown 1.2.x

Legacy types and typesVersions fallbacks were removed; use TypeScript's bundler, node16, or nodenext module resolution

   🚨 Breaking Changes

Drop support for Node.js 25 - by @sxzz (26950)

Remove deprecated tsup compatibility options - by @sxzz (50766)

Drop types and typesVersionsfields - by @sxzz (be3ea)

attw:

Change default profile to esm-only - by @sxzz (9b3cf)

deps:

Remove deprecated deps.onlyAllowBundle - by @sxzz (30c55)

Disable resolveDepSubpath by default - by @sxzz (d300f)

Remove deprecated skipNodeModulesBundle - by @sxzz (f2a3d)

dts:

Remove dts.cjsReexport option - by @sxzz (9c70f)

Make dts.generator the only way to select generator - by @sxzz (eb75f)

   🚀 Features

Expose programmatic watch controls - by @sxzz in rolldown/tsdown#1062 (96a40)

css: Support function form for css.modules.localsConvention - by @sxzz and @lazerg (b566f)

... (truncated)

Commits

ced9a2c chore: release v0.23.0
f5f9ea9 docs: add Ember support guide (#1043)
8ac89dc chore: upgrade Vitest to v5
96a4098 feat: expose programmatic watch controls (#1062)
61718d7 chore: upgrade deps
d04119c chore: upgrade deps
55f89c5 chore(deps): update pnpm to v12.1.0 (#1060)
946224d fix: ignore optional dependencies in type definitions
62f01cd chore: release v0.23.0-rc.1
bf53f43 fix(cli): camel-case nested flag keys
Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

1e4744d Merge branch 'main' into ts7-release
a5a219cmicrosoft/typescript-go#4558
ecfe30d Update status localization
5de25b5 Hide executable name in TypeScript status
d7ce74a Show bundled TypeScript version for packaged servers
29be66a Correct TS 7 release version to 7.0.2
ed2bd1b Merge branch 'main' into ts7-release
8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
d4eaca5microsoft/typescript-go#4549
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates vitest from 4.1.11 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection - by @hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking - by @sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution - by @sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache - by @sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments - by @shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends - by @sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used - by @im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define - by @sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments - by @sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot - by @sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

types:

Make public declarations self-contained - by @ZoeySigel in vitest-dev/vitest#11141 (45546)

ui:

Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11260 (0a712)

Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11125 (05982)

utils:

Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11215 (4944c)

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

Replace loupe.inspect with pretty-format - by @hi-ogawa, Claude Opus 5 (1M context) and OpenAI Codex in vitest-dev/vitest#9609 (3f802)

Remove quotes from string values in test.for/each title $ variable (take 2) - by @hi-ogawa in vitest-dev/vitest#10170 (04d37)

Default attachmentsDir from .vitest-attachements/ to .vitest/attachments/ - by @MdSadiqMd in vitest-dev/vitest#10186 (1ba73)

Remove sequential test/suite options in favor of concurrent - by @hi-ogawa and OpenAI Codex in vitest-dev/vitest#10198 (9229f)

Represent locator as an object instead of a string - by @sheremet-va in vitest-dev/vitest#10212 (80f07)

Inline expect package - by @sheremet-va in vitest-dev/vitest#10221 (ad162)

Remove deprecated entry points - by @sheremet-va in vitest-dev/vitest#10222 (994c6)

... (truncated)

Commits

03630a5 chore: release v5.0.1 (#11275)
a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
91ab158 fix(doctor): measure vm pools for custom environments (#11212)
23dda73 fix: share the server on self-referencing extends (#11034)
498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
115c3f6 fix: correct typos in error message and comments (#11187)
7361465 fix: keep metadata file when clearing the cache (#11199)
972e24b fix(browser): avoid double quotes in config.define (#11198)
Additional commits viewable in compare view

Updates @angular-devkit/architect from 0.2201.5 to 0.2201.8

Commits

See full diff in compare view

Updates @angular-devkit/core from 22.1.5 to 22.1.8

Release notes

Sourced from @angular-devkit/core's releases.

22.1.8

@angular/build

Commit Description

disable strictPort when port 0 is used in dev-server

avoid full JSON parsing when updating sourcemap ignore list

read rendered module length once per module in chunk optimizer (#34045)

22.1.7

@angular/cli

Commit Description

isolate temporary package installations from parent Yarn workspace

@angular/build

Commit Description

add splitting option to unit-test builder

enable code splitting for vitest browser tests

fail build and exclude routes when prerendering fails

keep dev-server Vite cache worktree-local

preserve binary values in the SQLite cache store

@angular/ssr

Commit Description

decode pathname when constructing server asset path

ensure public directory containment in CommonEngine

22.1.6

@angular/build

Commit Description

ignore side-effect annotations in unit test builds

batch prerender routes and share in-memory server bundles

@angular/ssr

Commit Description

abort web request signal when node request is aborted

Changelog

Sourced from @angular-devkit/core's changelog.

22.1.8 (2026-09-10)

@angular/build

Commit Type Description

a6e30fa378 fix disable strictPort when port 0 is used in dev-server

35a5d4aa49 perf avoid full JSON parsing when updating sourcemap ignore list

48cc43cbf2 perf read rendered module length once per module in chunk optimizer (#34045)

22.2.0-next.6 (2026-09-02)

@angular/cli

Commit Type Description

b37c93329 fix isolate temporary package installations from parent Yarn workspace

@angular/build

Commit Type Description

4b8c62a8f fix add splitting option to unit-test builder

51565d4bc fix enable code splitting for vitest browser tests

5b850fdfc fix fail build and exclude routes when prerendering fails

dfa7f03a9 fix keep dev-server Vite cache worktree-local

135662d9a fix preserve binary values in the SQLite cache store

701bde481 fix preserve duplicate bundle filenames across output file types

6ee559ca9 perf bypass worker dispatch for files without transform candidates

2b85529e8 perf use iterative post-order AST traversal for OXC transforms

ecbcd87b8 perf use native sass-embedded compiler daemon

ce83ac0e8 perf use size-weighted task heuristics in i18n inliner

@angular/ssr

Commit Type Description

4fa81d403 fix decode pathname when constructing server asset path

bb72145f9 fix ensure public directory containment in CommonEngine

22.1.7 (2026-09-02)

... (truncated)

Commits

f69e446 release: cut the v22.1.8 release
2500e4f build: replace pnpm -s shorthand with --silent for improved readability
fa9fc6e build: set verifyDepsBeforeRun to warn in pnpm workspace configuration
61cfc6d test(@angular/build): prevent flakiness in incremental-watch e2e test
ca322ca build: update cross-repo angular dependencies
1bbcd86 build: update pnpm to v11.26.0
b496e4a refactor: replace -s flag with --silent in husky prepare-commit-msg script
87a1610 test(@angular/build): fix flakiness in dev-server rebuild error detection test
57c9a4a test(@angular-devkit/build-angular): prevent flakiness in live-reload proxies...
a6e30fa fix(@angular/build): disable strictPort when port 0 is used in dev-server
Additional commits viewable in compare view

Updates astro from 7.2.4 to 7.3.3

Release notes

Sourced from astro's releases.

astro@7.3.3

Patch Changes

#17651 504333c Thanks @sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

#17942 0bc5715 Thanks @matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

#17700 b2222fc Thanks @winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

#17941 394ff79 Thanks @matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

#17928 3277927 Thanks @ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

#17928 3277927 Thanks @ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.

#17857 2637ed1 Thanks @Princesseuh! - Improves rendering performance

#17943 2fc7ce9 Thanks @matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers

#18018 1b5a234 Thanks @astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.

#17905 eaf70fa Thanks @SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.

#18011 558b301 Thanks @astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml

#17944 ba08e35 Thanks @matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.

#17531 ae837db Thanks @danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory

#17953 dbbf10e Thanks @astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.

#17955 4e8ad9a Thanks @matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.

#17960 9838049 Thanks @Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.

#17998 0e5478d Thanks @astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP

#17994 80f9f1d Thanks @astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages

#17889 8ae6b46 Thanks @ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.

#17980 cfccafa Thanks @gameroman! - Improves JSDoc for fonts api

#17953 dbbf10e Thanks @astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation

#17970 0b4dc3a Thanks @matthewp! - Improves serialization of transition animation values in generated CSS

#17999 30ef3cb Thanks @astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')

#18002 312ab49 Thanks @shoutoutuoadi325! - Fixes redirect targets being corrupted when a dynamic route parameter value contains $ replacement patterns like $&

... (truncated)

Changelog

Sourced from astro's changelog.

7.3.3

Patch Changes

#17651 504333c Thanks @sxzz! - Refactors internal version handling to use a smaller, ESM-native dependency

#17942 0bc5715 Thanks @matthewp! - Returns appropriate 400 and 404 responses from the image endpoint for invalid and missing local image paths

#17700 b2222fc Thanks @winklemad! - Fixes Astro.preferredLocaleList returning an empty list when a locale is configured with the object form ({ path, codes }) and the browser sends the code with different casing or an underscore, such as en-US matching a configured en-us

#17941 394ff79 Thanks @matthewp! - Fixes astro preview --ignore-lock (and astro dev --ignore-lock) being refused when run from an AI agent environment. The flag now starts the server in the foreground instead of erroring, since agent detection only inferred background mode and was never explicitly requested. An explicit --background combined with --ignore-lock still errors.

#17928 3277927 Thanks @ArmandPhilippot! - Fixes TypeScript autocompletion for getImage() to suggest all available predefined options.

#17928 3277927 Thanks @ArmandPhilippot! - Fixes a type error in getImage() options that allowed passing both widths and densities at the same time.

#17857 2637ed1 Thanks @Princesseuh! - Improves rendering performance

#17943 2fc7ce9 Thanks @matthewp! - Fixes a WebAssembly error when importing astro:actions in tests that run under @cloudflare/vitest-pool-workers

#18018 1b5a234 Thanks @astro-factory! - Fixes trailing-slash redirect response body pointing to the incoming URL instead of the redirect target. The location header was correct, but the HTML body (<meta http-equiv="refresh">, <title>, and <a> tag) contained the original request path without the trailing-slash correction or query string.

#17905 eaf70fa Thanks @SudoDevStudio! - Fixes custom dev toolbar apps losing their UI after client-side navigation with <ClientRouter />.

#18011 558b301 Thanks @astro-factory! - Fixes prerendered Cloudflare pages rendering as [object Object] when nodejs_compat is enabled in wrangler.toml

#17944 ba08e35 Thanks @matthewp! - Fixes a regression in astro dev where writes outside the module graph (for example, @astrojs/cloudflare's .wrangler/state files) invalidated the middleware on every request, causing repeated SSR reloads. Such writes no longer invalidate the middleware.

#17531 ae837db Thanks @danilloestrela! - Updates svgo to 4.0.2 to resolve a security advisory

#17953 dbbf10e Thanks @astro-factory! - Fixes a one-time page reload shortly after the first load on cold dev-server starts when a project has framework components imported from MDX content entries. MDX files are now included in the dev dependency pre-bundling scan, so their framework dependencies are bundled up front instead of being discovered (and reloaded for) at runtime.

#17955 4e8ad9a Thanks @matthewp! - Improves dev server startup time. The content config and dev server app module graphs now begin compiling during server creation without blocking the server from listening. Request handling waits for the shared setup result when needed, cutting astro dev ready time by roughly a third on projects with a content config.

#17960 9838049 Thanks @Chy-Zaber-Bin-Zahid! - Improves the diagnostics of some Astro errors.

#17998 0e5478d Thanks @astro-factory! - Fixes SVG <style> elements nested inside <defs> or other container elements not being hashed for CSP

#17994 80f9f1d Thanks @astro-factory! - Fixes experimental.incrementalBuild restoring pages with stale CSS after a preprocessor partial changes or missing original images referenced by restored pages

#17889 8ae6b46 Thanks @ajfAfg! - Fixes a bug where the dev server stripped the configured base from URLs that only share a prefix with it. With base: '/s', requests to /src/... were rewritten to /rc/... and failed, breaking those pages during development.

#17980 cfccafa Thanks @gameroman! - Improves JSDoc for fonts api

#17953 dbbf10e Thanks @astro-factory! - Fixes CSS HMR for framework components rendered through content entries after ClientRouter navigation

#17970 0b4dc3a Thanks @matthewp! - Improves serialization of transition animation values in generated CSS

#17999 30ef3cb Thanks @astro-factory! - Fixes content collection HMR not updating prerendered pages when an adapter enables a separate prerender environment (e.g. @astrojs/cloudflare with prerenderEnvironment: 'node')

... (truncated)

Commits

8a3106e [ci] release (#17939)
5efea1b Add a version field to the astro-client-only fixture
80f9f1d Hash compiled CSS output in incremental build to detect Sass partial changes ...
bc6572f Revert "Forward user class to Picture's outer element" (#18004) (#18030)
0e5478d Normalize CRLF line endings before computing CSP hashes (#17998)
30ef3cb fix: invalidate prerender environment in invalidateDataStore (#17991) (#17999)
312ab49 Fix redirect targets when a param value contains a $ replacement pattern (#...
1b5a234 Fix ...
Description has been truncated

…28 updates Bumps the npm-dependencies group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [tsdown](https://github.com/rolldown/tsdown) | `0.22.14` | `0.23.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.1` | | [@angular-devkit/architect](https://github.com/angular/angular-cli) | `0.2201.5` | `0.2201.8` | | [@angular-devkit/core](https://github.com/angular/angular-cli) | `22.1.5` | `22.1.8` | | [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.2.4` | `7.3.3` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [execa](https://github.com/sindresorhus/execa) | `9.6.1` | `10.0.1` | | [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.7.0` | `1.8.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.12` | `4.23.13` | | [elysia](https://github.com/elysiajs/elysia) | `1.4.29` | `1.4.30` | | [@fastify/static](https://github.com/fastify/fastify-static) | `9.3.0` | `10.1.4` | | [fastify-plugin](https://github.com/fastify/fastify-plugin) | `5.1.0` | `6.0.0` | | [fastify](https://github.com/fastify/fastify) | `5.12.1` | `5.12.5` | | [hono](https://github.com/honojs/hono) | `4.13.3` | `4.13.8` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `12.0.3` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `12.0.3` | | [@nestjs/platform-express](https://github.com/nestjs/nest/tree/HEAD/packages/platform-express) | `11.2.1` | `12.0.3` | | [@nestjs/serve-static](https://github.com/nestjs/serve-static) | `5.0.5` | `12.0.0` | | [oxc-transform](https://github.com/oxc-project/oxc/tree/HEAD/napi/transform) | `0.146.0` | `0.150.0` | | [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.5` | `1.2.9` | | [@rollup/plugin-node-resolve](https://github.com/rollup/plugins/tree/HEAD/packages/node-resolve) | `15.3.1` | `16.0.3` | | [rollup](https://github.com/rollup/rollup) | `4.62.5` | `4.63.3` | | [@swc/core](https://github.com/swc-project/swc/tree/HEAD/packages/core) | `1.16.1` | `1.16.2` | | [webpack](https://github.com/webpack/webpack) | `5.109.2` | `5.111.0` | | [verdaccio](https://github.com/verdaccio/verdaccio) | `6.10.0` | `6.10.3` | | [playwright](https://github.com/microsoft/playwright) | `1.62.1` | `1.63.0` | Updates `tsdown` from 0.22.14 to 0.23.0 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.22.14...v0.23.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v6.0.3...v7.0.2) Updates `vitest` from 4.1.11 to 5.0.1 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest) Updates `@angular-devkit/architect` from 0.2201.5 to 0.2201.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits) Updates `@angular-devkit/core` from 22.1.5 to 22.1.8 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.1.5...v22.1.8) Updates `astro` from 7.2.4 to 7.3.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `execa` from 9.6.1 to 10.0.1 - [Release notes](https://github.com/sindresorhus/execa/releases) - [Commits](sindresorhus/execa@v9.6.1...v10.0.1) Updates `@clack/prompts` from 1.7.0 to 1.8.1 - [Release notes](https://github.com/bombshell-dev/clack/releases) - [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md) - [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.8.1/packages/prompts) Updates `tsx` from 4.23.12 to 4.23.13 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.12...v4.23.13) Updates `elysia` from 1.4.29 to 1.4.30 - [Release notes](https://github.com/elysiajs/elysia/releases) - [Changelog](https://github.com/elysiajs/elysia/blob/main/CHANGELOG.md) - [Commits](elysiajs/elysia@1.4.29...1.4.30) Updates `@fastify/static` from 9.3.0 to 10.1.4 - [Release notes](https://github.com/fastify/fastify-static/releases) - [Commits](fastify/fastify-static@v9.3.0...v10.1.4) Updates `fastify-plugin` from 5.1.0 to 6.0.0 - [Release notes](https://github.com/fastify/fastify-plugin/releases) - [Commits](fastify/fastify-plugin@v5.1.0...v6.0.0) Updates `fastify` from 5.12.1 to 5.12.5 - [Release notes](https://github.com/fastify/fastify/releases) - [Commits](fastify/fastify@v5.12.1...v5.12.5) Updates `hono` from 4.13.3 to 4.13.8 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.3...v4.13.8) Updates `@nestjs/common` from 11.2.1 to 12.0.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.0.3/packages/common) Updates `@nestjs/core` from 11.2.1 to 12.0.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.0.3/packages/core) Updates `@nestjs/platform-express` from 11.2.1 to 12.0.3 - [Release notes](https://github.com/nestjs/nest/releases) - [Commits](https://github.com/nestjs/nest/commits/v12.0.3/packages/platform-express) Updates `@nestjs/serve-static` from 5.0.5 to 12.0.0 - [Release notes](https://github.com/nestjs/serve-static/releases) - [Commits](nestjs/serve-static@5.0.5...12.0.0) Updates `oxc-transform` from 0.146.0 to 0.150.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/napi/transform/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/crates_v0.150.0/napi/transform) Updates `rolldown` from 1.2.5 to 1.2.9 - [Release notes](https://github.com/rolldown/rolldown/releases) - [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md) - [Commits](https://github.com/rolldown/rolldown/commits/v1.2.9/packages/rolldown) Updates `@rollup/plugin-node-resolve` from 15.3.1 to 16.0.3 - [Changelog](https://github.com/rollup/plugins/blob/master/packages/node-resolve/CHANGELOG.md) - [Commits](https://github.com/rollup/plugins/commits/node-resolve-v16.0.3/packages/node-resolve) Updates `rollup` from 4.62.5 to 4.63.3 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.62.5...v4.63.3) Updates `@swc/core` from 1.16.1 to 1.16.2 - [Release notes](https://github.com/swc-project/swc/releases) - [Changelog](https://github.com/swc-project/swc/blob/main/CHANGELOG.md) - [Commits](https://github.com/swc-project/swc/commits/v1.16.2/packages/core) Updates `webpack` from 5.109.2 to 5.111.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.109.2...v5.111.0) Updates `verdaccio` from 6.10.0 to 6.10.3 - [Release notes](https://github.com/verdaccio/verdaccio/releases) - [Changelog](https://github.com/verdaccio/verdaccio/blob/v6.10.3/CHANGELOG.md) - [Commits](verdaccio/verdaccio@v6.10.0...v6.10.3) Updates `playwright` from 1.62.1 to 1.63.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.62.1...v1.63.0) --- updated-dependencies: - dependency-name: tsdown dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@angular-devkit/architect" dependency-version: 0.2201.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@angular-devkit/core" dependency-version: 22.1.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: astro dependency-version: 7.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: execa dependency-version: 10.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@clack/prompts" dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: tsx dependency-version: 4.23.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: elysia dependency-version: 1.4.30 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@fastify/static" dependency-version: 10.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: fastify-plugin dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: fastify dependency-version: 5.12.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: hono dependency-version: 4.13.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@nestjs/common" dependency-version: 12.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@nestjs/core" dependency-version: 12.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@nestjs/platform-express" dependency-version: 12.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: "@nestjs/serve-static" dependency-version: 12.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: oxc-transform dependency-version: 0.150.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: rolldown dependency-version: 1.2.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@rollup/plugin-node-resolve" dependency-version: 16.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: npm-dependencies - dependency-name: rollup dependency-version: 4.63.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@swc/core" dependency-version: 1.16.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: webpack dependency-version: 5.111.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: verdaccio dependency-version: 6.10.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: playwright dependency-version: 1.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 20, 2026

Navigation Menu

chore(deps): bump the npm-dependencies group across 1 directory with 28 updates - #5

chore(deps): bump the npm-dependencies group across 1 directory with 28 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-86059d3562

dependabot Bot commented on behalf of github Sep 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	disable strictPort when port 0 is used in dev-server
	avoid full JSON parsing when updating sourcemap ignore list
	read rendered module length once per module in chunk optimizer (#34045)

Commit	Description
	add splitting option to unit-test builder
	enable code splitting for vitest browser tests
	fail build and exclude routes when prerendering fails
	keep dev-server Vite cache worktree-local
	preserve binary values in the SQLite cache store

Commit	Description
	decode pathname when constructing server asset path
	ensure public directory containment in CommonEngine

Commit	Description
	ignore side-effect annotations in unit test builds
	batch prerender routes and share in-memory server bundles

Commit	Type	Description
a6e30fa378	fix	disable strictPort when port 0 is used in dev-server
35a5d4aa49	perf	avoid full JSON parsing when updating sourcemap ignore list
48cc43cbf2	perf	read rendered module length once per module in chunk optimizer (#34045)

Commit	Type	Description
4b8c62a8f	fix	add splitting option to unit-test builder
51565d4bc	fix	enable code splitting for vitest browser tests
5b850fdfc	fix	fail build and exclude routes when prerendering fails
dfa7f03a9	fix	keep dev-server Vite cache worktree-local
135662d9a	fix	preserve binary values in the SQLite cache store
701bde481	fix	preserve duplicate bundle filenames across output file types
6ee559ca9	perf	bypass worker dispatch for files without transform candidates
2b85529e8	perf	use iterative post-order AST traversal for OXC transforms
ecbcd87b8	perf	use native sass-embedded compiler daemon
ce83ac0e8	perf	use size-weighted task heuristics in i18n inliner

Commit	Type	Description
4fa81d403	fix	decode pathname when constructing server asset path
bb72145f9	fix	ensure public directory containment in CommonEngine

Conversation

dependabot Bot commented on behalf of github Sep 20, 2026

v0.23.0

🧭 Migration Guide

🚨 Breaking Changes

🚀 Features

TypeScript 7.0.2

v5.0.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v5.0.0

🚨 Breaking Changes

22.1.8

@​angular/build

22.1.7

@​angular/cli

@​angular/build

@​angular/ssr

22.1.6

@​angular/build

@​angular/ssr

22.1.8 (2026-09-10)

@​angular/build

22.2.0-next.6 (2026-09-02)

@​angular/cli

@​angular/build

@​angular/ssr

22.1.7 (2026-09-02)

astro@7.3.3

Patch Changes

7.3.3

Patch Changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/build`

`@angular/ssr`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/ssr`