Skip to content

chore(deps): October dependency sweep #6039

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
norman-abramovitz merged 10 commits into from
Oct 21, 2026
Merged

chore(deps): October dependency sweep #6039

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
58d0e07
chore(deps): bump the angular group to 22.2.3
nabramovitz Oct 21, 2026
54fc918
chore(deps): bump marked from 18.0.14 to 18.1.0
nabramovitz Oct 21, 2026
02e1442
chore(deps-dev): bump js-yaml from 5.4.2 to 5.4.3
nabramovitz Oct 21, 2026
61bfa08
chore(deps-dev): bump jsdom from 30.1.1 to 30.1.3
nabramovitz Oct 21, 2026
e4b3f7a
chore(deps-dev): bump @types/node from 26.6.4 to 26.6.5
nabramovitz Oct 21, 2026
2877375
chore(deps): bump the devkit angular-devkit group to 22.2.3
nabramovitz Oct 21, 2026
c7f5dd3
fix(devkit): override vite to ^8.3.3
nabramovitz Oct 21, 2026
002dbbc
chore(deps): bump the go group and klauspost/compress
nabramovitz Oct 21, 2026
fa5a538
build: point the asdf Go pin at 1.27.3
nabramovitz Oct 21, 2026
e8de0e5
docs(changelog): October dependency sweep
nabramovitz Oct 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .tool-versions
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,4 @@
# Use latest stable versions
nodejs 26.2.0
bun 1.3.14
golang 1.27.1
golang 1.27.3
200 changes: 97 additions & 103 deletions bun.lock
View file
Open in desktop

Large diffs are not rendered by default.

53 changes: 53 additions & 0 deletions changelog.d/0018-dependency-updates.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
[Security Updates]
- `launch-editor` moved from 2.14.1 to 2.14.2 in the devkit, and its
`vite` from 8.3.0 to 8.3.5, whose bundled copy carried the same code:

| Advisory | What it fixes |
|-----------------------|--------------------------------------------------------------|
| [GHSA-587h-7wmj-h5pm] | `fs.existsSync()` existence check can be bypassed on Windows |
| [GHSA-r825-w8mm-5pxw] | Editor CLI flag misinterpretation causing command execution |
| [GHSA-698v-4r3x-3vcv] | `escapeCmdArgs()` omits `%` escaping on Windows |

- `github.com/klauspost/compress` moved from 1.18.0 to 1.20.1 in the
cfapppush plugin's module. The backend binary already built with
1.19.1, which is not affected:

| Advisory | What it fixes |
|-----------------------|------------------------------------------------------------|
| [GHSA-259r-337f-4rfw] | Integer overflow and out-of-bounds write in the s2 decoder |

[GHSA-587h-7wmj-h5pm]: https://github.com/advisories/GHSA-587h-7wmj-h5pm
[GHSA-r825-w8mm-5pxw]: https://github.com/advisories/GHSA-r825-w8mm-5pxw
[GHSA-698v-4r3x-3vcv]: https://github.com/advisories/GHSA-698v-4r3x-3vcv
[GHSA-259r-337f-4rfw]: https://github.com/advisories/GHSA-259r-337f-4rfw

[Chores]
- Dependency updates:

| Package | From | To |
|--------------------------------------|-----------------|--------------|
| Angular (framework, CDK, CLI, build) | 22.2.1 | 22.2.3 |
| angular-eslint | 22.5.0 | 22.6.0 |
| marked | 18.0.14 | 18.1.0 |
| js-yaml | 5.4.2 | 5.4.3 |
| jsdom | 30.1.1 | 30.1.3 |
| @types/node | 26.6.4 | 26.6.5 |
| code.cloudfoundry.org/cli/v8 | 8.19.1 snapshot | 8.19.1 |
| code.cloudfoundry.org/clock | 1.90.0 | 1.91.0 |
| github.com/aws/aws-sdk-go-v2 | 1.47.1 | 1.47.3 |
| github.com/prometheus/client_golang | 1.24.1 | 1.25.0 |
| golang.org/x/crypto | 0.57.0 | 0.58.0 |
| golang.org/x/sync | 0.23.0 | 0.24.0 |
| helm.sh/helm/v3 | 3.22.0 | 3.22.1 |
| sigs.k8s.io/aws-iam-authenticator | 0.7.20 | 0.7.22 |
| @radix-ui/react-avatar (docs site) | 1.2.6 | 1.3.1 |
| @radix-ui/react-slot (docs site) | 1.3.3 | 1.5.0 |
| lucide-react (docs site) | 1.52.0 | 1.59.0 |
| react, react-dom (docs site) | 19.3.0 | 19.3.1 |
| postcss (docs site) | 8.5.29 | 8.5.30 |
| prettier (docs site) | 3.9.9 | 3.9.10 |
| baseline-browser-mapping (docs site) | 2.11.27 | 2.11.29 |
| caniuse-lite (docs site) | 1.0.30001814 | 1.0.30001816 |

- aws-iam-authenticator 0.7.22 needs Go 1.27.2: four backend modules
now declare it, and the `.tool-versions` Go pin moves to 1.27.3.
54 changes: 27 additions & 27 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,15 +120,15 @@
"source-map-js": "^1.2.2"
},
"dependencies": {
"@angular/animations": "22.2.1",
"@angular/cdk": "^22.2.1",
"@angular/common": "22.2.1",
"@angular/core": "22.2.1",
"@angular/forms": "22.2.1",
"@angular/platform-browser": "22.2.1",
"@angular/platform-browser-dynamic": "22.2.1",
"@angular/platform-server": "22.2.1",
"@angular/router": "22.2.1",
"@angular/animations": "22.2.3",
"@angular/cdk": "^22.2.3",
"@angular/common": "22.2.3",
"@angular/core": "22.2.3",
"@angular/forms": "22.2.3",
"@angular/platform-browser": "22.2.3",
"@angular/platform-browser-dynamic": "22.2.3",
"@angular/platform-server": "22.2.3",
"@angular/router": "22.2.3",
"@swimlane/ngx-graph": "13.0.0",
"ajv": "^8.20.0",
"chart.js": "^4.5.1",
Expand All @@ -139,7 +139,7 @@
"lodash": "4.18.1",
"lodash-es": "4.18.1",
"madge": "^8.0.0",
"marked": "18.0.14",
"marked": "18.1.0",
"monaco-editor": "^0.57.0",
"monaco-yaml": "^5.5.1",
"ng2-charts": "^11.0.0",
Expand All @@ -161,24 +161,24 @@
"devDependencies": {
"@analogjs/vite-plugin-angular": "^2.8.0",
"@analogjs/vitest-angular": "^2.8.0",
"@angular-devkit/architect": "0.2202.1",
"@angular-devkit/build-angular": "22.2.1",
"@angular-devkit/core": "22.2.1",
"@angular-devkit/schematics": "22.2.1",
"@angular-eslint/eslint-plugin": "22.5.0",
"@angular-eslint/eslint-plugin-template": "22.5.0",
"@angular-eslint/schematics": "22.5.0",
"@angular-eslint/template-parser": "22.5.0",
"@angular/build": "22.2.1",
"@angular/cli": "22.2.1",
"@angular/compiler": "22.2.1",
"@angular/compiler-cli": "22.2.1",
"@angular/language-service": "22.2.1",
"@angular-devkit/architect": "0.2202.3",
"@angular-devkit/build-angular": "22.2.3",
"@angular-devkit/core": "22.2.3",
"@angular-devkit/schematics": "22.2.3",
"@angular-eslint/eslint-plugin": "22.6.0",
"@angular-eslint/eslint-plugin-template": "22.6.0",
"@angular-eslint/schematics": "22.6.0",
"@angular-eslint/template-parser": "22.6.0",
"@angular/build": "22.2.3",
"@angular/cli": "22.2.3",
"@angular/compiler": "22.2.3",
"@angular/compiler-cli": "22.2.3",
"@angular/language-service": "22.2.3",
"@cypress/request": "4.0.1",
"@eslint/js": "^10.0.1",
"@oxc-project/runtime": "0.152.0",
"@playwright/test": "^1.63.0",
"@schematics/angular": "22.2.1",
"@schematics/angular": "22.2.3",
"@tailwindcss/forms": "^0.5.11",
"@tailwindcss/postcss": "^4.3.3",
"@tailwindcss/typography": "^0.5.20",
Expand All @@ -189,7 +189,7 @@
"@types/hammerjs": "^2.0.46",
"@types/intersect": "^1.0.3",
"@types/js-yaml": "4.0.9",
"@types/node": "26.6.4",
"@types/node": "26.6.5",
"@types/pngjs": "^6.0.5",
"@types/webpack": "^5.28.5",
"@vitest/coverage-v8": "^5.0.3",
Expand All @@ -202,8 +202,8 @@
"eslint": "^10.12.0",
"fs-extra": "11.4.1",
"happy-dom": "^20.14.5",
"js-yaml": "5.4.2",
"jsdom": "^30.1.1",
"js-yaml": "5.4.3",
"jsdom": "^30.1.3",
"json-schema-to-typescript": "16.0.0",
"mktemp": "2.0.4",
"ng-packagr": "22.2.4",
Expand Down
4 changes: 2 additions & 2 deletions src/frontend/packages/cf-autoscaler/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
"name": "@stratosui/cf-autoscaler",
"version": "0.0.1",
"peerDependencies": {
"@angular/common": "22.2.1",
"@angular/core": "22.2.1",
"@angular/common": "22.2.3",
"@angular/core": "22.2.3",
"@stratosui/cloud-foundry": "^0.0.1"
},
"stratos": {
Expand Down
4 changes: 2 additions & 2 deletions src/frontend/packages/cloud-foundry/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
"name": "@stratosui/cloud-foundry",
"version": "0.0.1",
"peerDependencies": {
"@angular/common": "22.2.1",
"@angular/core": "22.2.1",
"@angular/common": "22.2.3",
"@angular/core": "22.2.3",
"@stratosui/git": "^0.0.1"
},
"stratos": {
Expand Down
22 changes: 11 additions & 11 deletions src/frontend/packages/core/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,23 +4,23 @@
"license": "Apache-2.0",
"repository": "https://github.com/cloudfoundry/stratos",
"dependencies": {
"@angular/animations": "22.2.1",
"@angular/cdk": "^22.2.1",
"@angular/common": "22.2.1",
"@angular/compiler": "22.2.1",
"@angular/core": "22.2.1",
"@angular/animations": "22.2.3",
"@angular/cdk": "^22.2.3",
"@angular/common": "22.2.3",
"@angular/compiler": "22.2.3",
"@angular/core": "22.2.3",

"@angular/forms": "22.2.1",
"@angular/platform-browser": "22.2.1",
"@angular/platform-browser-dynamic": "22.2.1",
"@angular/platform-server": "22.2.1",
"@angular/router": "22.2.1",
"@angular/forms": "22.2.3",
"@angular/platform-browser": "22.2.3",
"@angular/platform-browser-dynamic": "22.2.3",
"@angular/platform-server": "22.2.3",
"@angular/router": "22.2.3",
"@swimlane/ngx-charts": "23.0.0",
"@types/marked": "5.0.2",
"core-js": "3.50.0",
"lodash-es": "4.18.1",
"mappy-breakpoints": "0.2.4",
"marked": "18.0.14",
"marked": "18.1.0",
"intersect": "1.0.1",
"normalizr": "3.6.2",
"rxjs": "7.8.2",
Expand Down
Loading
Loading