Skip to content

deps: bump Angular toolchain, vite, and tsx (patch) - #846

Merged
ericfitz merged 2 commits into
mainfrom
chore/bump-deps-20260807-001643
Aug 7, 2026
Merged

deps: bump Angular toolchain, vite, and tsx (patch)#846
ericfitz merged 2 commits into
mainfrom
chore/bump-deps-20260807-001643

Conversation

@ericfitz

@ericfitz ericfitz commented Aug 7, 2026

Copy link
Copy Markdown
Owner

Summary

Full dependency sweep across all detected ecosystems. Six patch-level updates applied, one major deferred.

Package Current → Target Type
@angular/build 22.1.2 → 22.1.3 patch
@angular/cli 22.1.2 → 22.1.3 patch
@angular/cdk 22.1.0 → 22.1.1 patch
@angular/material 22.1.0 → 22.1.1 patch
tsx 4.23.6 → 4.23.9 patch
vite 8.2.0 → 8.2.1 patch

Deferred (not auto-applied): typescript ~6.0.37.0.2 — major, needs its own compatibility pass (openapi-typescript peer constraint). Tracked by #845.

Other ecosystems: Python is present (pyproject.toml, uv) but its three dependencies are unpinned dev-script requirements with no lockfile — nothing to bump. No Go ecosystem.

Security: clean. pnpm audit reports 0 vulnerabilities and there are no open Dependabot alerts (the last one, js-yaml #156, was fixed in #844).

Verification

  • pnpm run build clean
  • pnpm run test — 6053/6053, 308 files
  • pnpm run lint:all clean (eslint, e2e, scss, i18n)
  • ng serve cold boot.angular/cache cleared, dev server bundles and serves 200 with the app shell at localhost:4200. Checked explicitly because @angular/build and vite both moved and the cold-boot path is not covered by build/test/lint.
  • @angular/build>vite override (^8.2.0) still resolves to a single vite@8.2.1 — no version skew

🤖 Generated with Claude Code

https://claude.ai/code/session_01VTvWBA9tzZf9poAz4246Do

Node/pnpm:
- @angular/build 22.1.2 -> 22.1.3
- @angular/cli 22.1.2 -> 22.1.3
- @angular/cdk 22.1.0 -> 22.1.1
- @angular/material 22.1.0 -> 22.1.1
- tsx 4.23.6 -> 4.23.9
- vite 8.2.0 -> 8.2.1

All patch-level; no advisories outstanding (pnpm audit and Dependabot
both clean after the js-yaml fix). Python deps are unpinned dev-script
requirements with no lockfile — nothing to bump; no Go ecosystem.

Deferred: typescript ~6.0.3 -> 7.0.2 (major) — tracked by #845.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VTvWBA9tzZf9poAz4246Do
@github-project-automation github-project-automation Bot moved this to Backlog in TMI Aug 7, 2026
@ericfitz
ericfitz merged commit 4e50eee into main Aug 7, 2026
5 checks passed
@ericfitz
ericfitz deleted the chore/bump-deps-20260807-001643 branch August 7, 2026 04:29
@github-project-automation github-project-automation Bot moved this from Backlog to Done in TMI Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

1 participant