Repository navigation
ci(deps): bump @angular/common from 18.1.3 to 20.3.34 in /examples/angular-gen1 - #4902
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) from 18.1.3 to 20.3.34. - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/v20.3.34/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.34/packages/common) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 20.3.34 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ca25c0f. Configure here.
| "private": true, | ||
| "dependencies": { | ||
| "@angular/common": "18.1.3", | ||
| "@angular/common": "20.3.34", |
There was a problem hiding this comment.
Incompatible Angular package versions
High Severity
Only @angular/common is bumped to 20.3.34 while @angular/core and the rest of the Angular stack stay on 18.1.3. Angular 20 common requires matching @angular/core@20.3.34, and the remaining v18 packages require @angular/common@18.1.3, so the example cannot resolve, compile, or run.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit ca25c0f. Configure here.
|
View your CI Pipeline Execution ↗ for commit ca25c0f
💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗ ☁️ Nx Cloud last updated this comment at |
Bumps @angular/common from 18.1.3 to 20.3.34.
Release notes
Sourced from @angular/common's releases.
... (truncated)
Changelog
Sourced from @angular/common's changelog.
... (truncated)
Commits
8b791fatest(http): add XSRF specs for backslash and whitespace URLs933ce81fix(http): enable XSRF protection for same-origin absolute URLs2bb4a13test(http): give the XSRF provider specs a page URLe4c416cfix(http): run root interceptors in the terminal request chain969133dfix(http): match header values exactly when deleting29dd26bfix(http): preserve immutability of materialized clonesa64e288fix(http): distinguish repeated transfer cache paramsb963f61fix(http): prevent caching of responses with Set-Cookie headers06be298fix(http): preserve empty referrer option in HttpRequest9f443bcfix(common): Limits date format string lengthDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
High Risk
Only @angular/common was upgraded across two major versions while @angular/core and other Angular packages remain on 18.x, which can break installs, builds, or runtime peer dependency validation.
Overview
Bumps
@angular/commonfrom 18.1.3 to 20.3.34 in theexamples/angular-gen1example (package.jsonand regeneratedpackage-lock.json).This is a Dependabot major/minor jump on a single Angular package while the rest of the app stack stays on 18.1.3 (
@angular/core, compiler, router, CLI, etc.). The lockfile also reflects npm’s updated tree (e.g. nested@angular/buildunder@angular-devkit/build-angular, rollup deduplication, and minor transitive bumps likemsgpackr/detect-libc).@builder.io/angularnow resolves its own nested@angular/common/@angular/coreat 18.2.14 for its peer dependency graph.Reviewers should treat this as a partial Angular upgrade: v20
commondeclares a peer on@angular/core20.3.34, which is not what the example declares at the top level.Reviewed by Cursor Bugbot for commit ca25c0f. Bugbot is set up for automated code reviews on this repo. Configure here.