build: update all non-major dependencies (main)#33454
Conversation
See associated pull request for more information.
angular-robot
added
action: merge
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates various dependencies across multiple package.json files, including rollup, vite, semver, and algoliasearch. The review feedback highlights a potential issue with the algoliasearch v5.55.1 upgrade, which introduces a breaking change where getObjects returns nullable objects, potentially causing TypeScript compilation errors or runtime issues if not handled properly.
| "@modelcontextprotocol/sdk": "1.29.0", | ||
| "@schematics/angular": "workspace:0.0.0-PLACEHOLDER", | ||
| "algoliasearch": "5.55.0", | ||
| "algoliasearch": "5.55.1", |
There was a problem hiding this comment.
The update to algoliasearch v5.55.1 introduces a breaking change where the getObjects operation now returns a list of nullable objects (allowing null records). If the CLI codebase uses getObjects, this type change may cause TypeScript compilation errors or runtime issues unless null-checks are implemented for the returned records.
|
This PR was merged into the repository. The changes were merged into the following branches:
|
2 participants
This PR contains the following updates:
8.0.1→8.0.24.62.0→4.62.28.61.1→8.62.08.61.1→8.62.05.55.0→5.55.110.5.0→10.5.117.6.0→17.7.04.6.6→4.6.73.5.5→3.5.69.4.0→9.4.125.1.0→25.2.01.1.1→1.1.24.62.0→4.62.27.8.4→7.8.56.7.2→6.7.48.0.16→8.1.0Release Notes
babel/babel (@babel/preset-env)
v8.0.2Compare Source
🐛 Bug Fix
@babel/coreversion when asserting version in@babel/standalone(@nicolo-ribaudo)babel-helper-validator-identifier🏠 Internal
babel-plugin-proposal-decorators,babel-plugin-transform-regenerator,babel-preset-env@babel/preset-modulesand polyfill packages (@nicolo-ribaudo)rollup/rollup (@rollup/wasm-node)
v4.62.2Compare Source
2026-06-19
Bug Fixes
Pull Requests
v4.62.1Compare Source
2026-06-19
Bug Fixes
Pull Requests
66cd2cc(@renovate[bot])typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.62.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.62.0Compare Source
🚀 Features
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
algolia/algoliasearch-client-javascript (algoliasearch)
v5.55.1Compare Source
getObjectsoperation now returns a list of nullable objects, as the API can send backnullrecords. The clients previously only allowed a list of objects, so the response type has been updated to allownullvalues.postcss/autoprefixer (autoprefixer)
v10.5.1Compare Source
grid-areaspan reset for overriding areas (by @puneetdixit200).sindresorhus/globals (globals)
v17.7.0Compare Source
33b75f9less/less.js (less)
v4.6.7Compare Source
Changes
kriszyp/lmdb-js (lmdb)
v3.5.6Compare Source
sindresorhus/ora (ora)
v9.4.1Compare Source
431ebc4puppeteer/puppeteer (puppeteer)
v25.2.0Compare Source
♻️ Chores
Dependencies
🛠️ Fixes
rolldown/rolldown (rolldown)
v1.1.2Compare Source
🚀 Features
chrome-tracingfeature (#9773) by @hyf0🐛 Bug Fixes
manualCodeSplittinggrouptestregex as an error (#9792) by @shulaodaoutput.filewithout a file name (#9789) by @shulaoda🚜 Refactor
Arcaround sourcemap sender (#9777) by @camc314napi(ts_type)(#9737) by @sapphi-red📚 Documentation
⚡ Performance
inferdefault features to reduce binary size (#9765) by @Boshen🧪 Testing
AGENTS.mdtest guidance for agents (#9763) by @h-a-n-aassert.deepStrictEqualinstead ofassert.deepEqualby usingassert/strictinstead ofassert(#9724) by @sapphi-red⚙️ Miscellaneous Tasks
rolldown_plugin_vite_*is compatible for the same minor (#9774) by @sapphi-redvp fmton Windows (#9727) by @sapphi-redassertand recommendassert/strict(#9726) by @sapphi-red❤️ New Contributors
npm/node-semver (semver)
v7.8.5Compare Source
Bug Fixes
9c8692a#878 include prereleases in tilde range lower bound with includePrerelease (#878) (@chatman-media)verdaccio/verdaccio (verdaccio)
v6.7.4Compare Source
Patch Changes
0205c78: fix: run jwt middleware before middleware pluginsRegister the JWT middleware before middleware plugins are loaded so that
req.remote_user(anonymous by default) is available inside a plugin'sregister_middlewares. The API router keeps its own JWT middleware behind aguard so it is not executed twice.
Backport of #5697
Closes #5167
v6.7.3Compare Source
Patch Changes
f8fdfc2: fix: enforce generated npm token metadataGenerated npm tokens (
POST /-/npm/v1/tokens) stored theirreadonlyandcidr_whitelistrestrictions but never enforced them, and deleting a token didnot revoke it for the package APIs. A token marked read-only or pinned to a CIDR
range could still publish packages and change dist-tags, and a deleted token
remained usable.
Generated tokens now embed a server-issued key (in the JWT claim, or in the
encrypted legacy AES payload) and a new
enforceGeneratedTokenMetadatamiddleware looks that key up on each request, rejecting the token when it is
missing/revoked, used outside its CIDR whitelist, or used for a write while
read-only. Enforcement applies to both AES and JWT API-token modes.
Note: tokens issued before upgrading carry no key and are not retroactively
constrained — regenerate them to apply the restrictions.
be80623: fix: allow npm token create without readonly/cidr_whitelistnpm token createin npm >= 11 (and the npm 12 prereleases) rewrote therequest body: it no longer sends
readonlyand only sendscidr_whitelistwhen
--cidris passed. ThePOST /-/npm/v1/tokensendpoint required both,so modern npm clients failed with
422 the parameters are not valid.The endpoint now defaults
readonlytofalseandcidr_whitelistto[]when they are absent, while still rejecting values of the wrong type.
75c85d5: Update verdaccio dependencies to thelatestnpm dist-tag (@verdaccio/ui-themetracksnext-9):@verdaccio/ui-theme:9.0.0-next-9.19→9.0.0-next-9.20d5e5332: chore: update dependenciesUpdates runtime dependencies
@verdaccio/ui-theme(9.0.0-next-9.19) andsemver(7.8.2), along with development dependencies: Babel7.29.7,@changesets/cli2.31.0, ESLint10.4.1, Vitest4.1.8, Cypress15.16.0,Prettier
3.8.3,@verdaccio/test-helper4.0.4,@verdaccio/eslint-config13.1.2, and assorted type definitions.vitejs/vite (vite)
v8.1.0Compare Source
Features
server.fs.denylist with common files (#22707) (61ba8fd)~for Rolldown (#22693) (9928722)Bug Fixes
Code Refactoring
rolldownOptionsproperty for chunkImportMap (#22692) (8e8816c)