build: update all non-major dependencies (main) by angular-robot · Pull Request #33736 · angular/angular-cli

angular-robot · 2026-08-03T10:59:07Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@rollup/wasm-node (source)	`4.62.3` → `4.62.4`
globals	`17.8.0` → `17.9.0`
postcss (source)	`8.5.24` → `8.5.25`
rolldown (source)	`1.2.0` → `1.2.1`
rollup (source)	`4.62.3` → `4.62.4`
verdaccio (source)	`6.9.0` → `6.9.1`
vite (source)	`8.1.5` → `8.2.0`
webpack-dev-middleware	`8.1.0` → `8.1.1`

If you want to rebase/retry this PR, check this box

Release Notes

rollup/rollup (@rollup/wasm-node)

`v4.62.4`

Compare Source

2026-08-01

Bug Fixes

Resolve a regression when using Rollup on older Linux distributions (#6467)

Pull Requests

#6463: docs: add llms.txt documentation index for LLMs and agents (@abyworkings-coder, @lukastaegert)
#6464: fix(deps): update minor/patch updates (@renovate[bot])
#6465: chore(deps): lock file maintenance (@renovate[bot])
#6466: chore(deps): lock file maintenance (@renovate[bot])
#6467: ci: fix linux-gnu glibc regression and enforce glibc ≤ 2.28 compatibility (@lukastaegert)

sindresorhus/globals (globals)

`v17.9.0`

Compare Source

Update globals (2026-08-01) (#348) 5a958ed

postcss/postcss (postcss)

`v8.5.25`

Compare Source

Fixed 8.5.17 visitor regression.
Fixed list.split() for non-string values (by @amir-rezaei).

rolldown/rolldown (rolldown)

`v1.2.1`

Compare Source

🚀 Features

dev: support hotUpdate hook (#10305) by @h-a-n-a
dev: expose disableWatcher through the dev engine bindings (#10474) by @shulaoda
plugin: surface output-option callbacks in [PLUGIN_TIMINGS] (#10411) by @IWANABETHATGUY
import.meta.ROLLDOWN_FILE_URL_<referenceId>_<urlId> support to pass context to resolveFileUrl hook (#10297) by @sapphi-red
dev: skip the HMR update when a module's rebuilt output is unchanged (#10333) by @h-a-n-a
code-splitting: wrap strict execution order modules on demand (#10104) by @hyfdev
support import.meta.ROLLDOWN_FILE_URL_* (#10296) by @sapphi-red
implement resolveFileUrl plugin hook (#10291) by @sapphi-red
magic-string: support storeName on overwrite/update (#10312) by @IWANABETHATGUY

🐛 Bug Fixes

external: keep __toESM when the importing module is tree-shaken (#10516) by @IWANABETHATGUY
dev: resolve re-exports from externals through a real import (#10489) by @tbvjaos510
code-splitting: route CJS barrel initialization per consumer (#10488) by @hyfdev
error: align filename-pattern diagnostics with Rollup's wording (#10501) by @IWANABETHATGUY
plugin: validate emitted prebuilt-chunk file names (#10399) by @IWANABETHATGUY
code-splitting: point a two-argument dynamic import at the chunk that holds the module (#10479) by @hyfdev
common: align is_path_fragment with Rollup's isPathFragment (#10398) by @IWANABETHATGUY
code-splitting: never name an internal chunk export then (#10480) by @hyfdev
code-splitting: avoid creating call-site-triggered entry facades (#10485) by @hyfdev
code-splitting: collect top-level eager order reasons in every strict build (#10463) by @hyfdev
code-splitting: let a cross-chunk dynamic importer carry the order trigger (#10456) by @hyfdev
code-splitting: avoid the dynamic-entry facade when the same-chunk collapse carries the trigger (#10433) by @hyfdev
binding: forward resolveId options.kind to callable builtin plugins (#10440) by @martijnwalraven
dev: keep the export name of export * as ns from (#10476) by @tbvjaos510
code-splitting: only split an entry facade when something else can load its chunk (#10441) by @hyfdev
code-splitting: fold the runtime chunk back after order lowering (#10414) by @hyfdev
runtime: don't leave default undefined for cjs that fakes __esModule (#10453) by @IWANABETHATGUY
import-glob: escape generated string literals (#10438) by @shantanuraj
preserve-modules: don't assume every chunk mirrors a module (#10442) by @hyfdev
filter: treat missing hook inputs as non-matches, not panics (#10443) by @IWANABETHATGUY
code-splitting: keep CommonJS modules wrapped under strict execution order (#10405) by @hyfdev
code-splitting: align dynamicImports metadata with the rewritten import() specifier (#10430) by @hyfdev
dev: skip user plugin hooks for ?rolldown-lazy proxy modules (#10426) by @unknownjedi
treeshake: preserve side-effect-free spread arguments in manual-pure chains (#10432) by @IWANABETHATGUY
treeshake: preserve eagerly evaluated child effects of manual pure chains (#10427) by @Nic-Polumeyv
code-splitting: initialize pure definers behind star re-export barrels under strict execution order (#10409) by @hyfdev
resolveId: reject string id filters (must be a RegExp) (#10412) by @IWANABETHATGUY
code-splitting: collect eager order reasons for on-demand wrapping (#10387) by @hyfdev
rolldown: apply output.paths to CJS export-star of external modules (#10406) by @IWANABETHATGUY
dev: sourcemaps of lazily compiled chunks (#10386) by @tbvjaos510
plugin: validate emitted file names at emitFile time (#10377) by @Nic-Polumeyv
guarantee tokio runtime release when close rejects (#10381) by @shulaoda
code-splitting: make strict transitive init registration deterministic and constant-time (#10320) by @hyfdev
pair tokio runtime acquire and release on wasm to prevent premature shutdown (#10363) by @shulaoda
don't body-demand modules from simulated facade chunk includes (#10351) by @IWANABETHATGUY
tracing: invalid RD_LOG filter and RD_LOG_OUTPUT=json no longer panic (#10343) by @Brooooooklyn
code-splitting: treat class definition-time global reads as order-sensitive (#10322) by @hyfdev
code-splitting: deconflict force-included runtime helper statements (#10336) by @hyfdev
binding: forward all missing parallel JS plugin hooks (#10345) by @Brooooooklyn
code-splitting: re-derive chunk exec order after the runtime sweep (#10334) by @hyfdev
types: add undefined to ExistingRawSourceMap optional properties (#10355) by @ocavue
magic-string: validate relocate ranges before rewiring (#10327) by @IWANABETHATGUY
add EMPTY_IMPORT_META warning for non-node CJS output (#10222) by @sapphi-red
call resolveFileUrl in a deterministic order (#10330) by @sapphi-red
magic-string: refuse repeated sendMagicString on a consumed instance (#10331) by @IWANABETHATGUY
magic-string: refuse to use a MagicString after sendMagicString consumed it (#10326) by @IWANABETHATGUY
magic-string: reject non-contiguous moves before rewiring the chunk list (#10311) by @IWANABETHATGUY
handle ./foo/bar glob pattern the same as foo/bar (#10313) by @sapphi-red
magic-string: throw instead of panicking when append/prepend splits an edited chunk (#10301) by @IWANABETHATGUY
output: skip separator for empty hoisted functions (#10310) by @hyfdev
magic-string: don't report a change when edits cancel out (#10299) by @IWANABETHATGUY
sourcemap: map wrapped imported callees (#10288) by @hyfdev
magic-string: count positional inserts at index 0 on an empty source (#10306) by @IWANABETHATGUY
magic-string: return UTF-16 code units from length() (#10295) by @IWANABETHATGUY
output: skip separator for empty import prelude (#10289) by @hyfdev

🚜 Refactor

dev: make it easier to customize the runtime (#10338) by @sapphi-red
code-splitting: declare CJS carrier namespaces initializer-free (#10513) by @hyfdev
rollup-tests: avoid relying on NODE_PATH env var resolution (#10496) by @sapphi-red
code-splitting: derive symbol chunk ownership as pass-local link data (#10449) by @hyfdev
plugin: share asset emission helpers between copy_module and asset_module (#10450) by @Nic-Polumeyv
plugin: dedupe hook binding boilerplate (#10428) by @Nic-Polumeyv
plugin: share the oxc parse preamble between import-glob and dynamic-import-vars (#10452) by @Nic-Polumeyv
implement GetAstBuilder on visitor/pass types (#10424) by @overlookmotel
pass arrays to AST builder methods (#10419) by @overlookmotel
shorten AST builder code (#10418) by @overlookmotel
centralize final ESM init metadata (#10376) by @hyfdev
descriptor-based parallel-plugin detection (getParallelPluginInfo) (#10349) by @Brooooooklyn
remove AstFactory in favor of new_* construction traits (#10353) by @Boshen
enable oxc_ast's disable_old_builder feature (#10316) by @Boshen

📚 Documentation

development-guide: update config.json link line reference (#10523) by @dogledogle
clarify slash normalization for id hook filter (#10511) by @sapphi-red
code-splitting: record the thenable-namespace rule (#10502) by @hyfdev
clarify that esmExternalRequirePlugin must own its externals (#10439) by @TheAlexLichter
add troubleshooting entry for the @rolldown/binding-... resolution error (#10390) by @Nic-Polumeyv
add Code Splitting API reference category (#10382) by @vittorioexp

⚡ Performance

use VisitJsMut in JavaScript-only AST passes (#10507) by @Boshen
cache the resolved glob matcher for Id/ImporterId filters (#10410) by @IWANABETHATGUY
scope_hoisting: remove alloc field from ScopeHoistingFinalizer (#10425) by @overlookmotel
reduce string allocations (#10423) by @overlookmotel
hmr: remove unnecessary string allocations (#10422) by @overlookmotel
avoid allocating static strings via custom builder methods (#10421) by @overlookmotel
pass string literals to AST builder methods (#10420) by @overlookmotel
use VisitJs in JavaScript-only AST passes (#10396) by @Boshen
plugin: shrink erased plugin debug vtables (#10370) by @Boshen
reuse normalized path buffers (#10315) by @hyfdev

🧪 Testing

code-splitting: pin CJS barrel fallback triggers and flag-off equivalence (#10514) by @hyfdev
plugin: cover chunk fileName, absolute chunk name, and Windows drive names (#10400) by @IWANABETHATGUY
code-splitting: cover a single-chunk dynamic import of a wrapped module (#10505) by @hyfdev
file: remove the unused .dynamic_import fixture (#10481) by @hyfdev
treeshake: reduce manual-pure fixture to a minimal smoke test, move matrix to unit tests (#10436) by @IWANABETHATGUY
dev: run vite playgrounds under bundled dev (test-serve-bundled) (#10434) by @h-a-n-a
stop snapshots from silently hiding user code inside the runtime region (#10431) by @hyfdev
wasi: add tokio runtime lifecycle regression test (#10379) by @shulaoda
dev: expect preserved hot.data in hmr-whole-chain-dispose (#10380) by @h-a-n-a
code-splitting: pin flag-off wrapped-esm init emission (#10324) by @hyfdev
sourcemap: fix Windows-only failures in composition fixtures (#10368) by @shulaoda
generated-code: mark assert external in symbols_ns2 for deterministic output (#10339) by @hyfdev
code-splitting: cover entries-aware strict init cycle (#10307) by @hyfdev
make just setup-vite the only entry point that touches vite/ (#10332) by @shulaoda
vite-tests: reuse the shared root vite checkout (#10325) by @shulaoda
test-dev-server: drop the vite submodule, track rolldown-canary (#10319) by @shulaoda
vite-tests: track the latest rolldown-canary rebased onto vite main (#10318) by @shulaoda
unify Vite in vite-test and test-dev-server (#10293) by @h-a-n-a

⚙️ Miscellaneous Tasks

scope the binding artifact download to bindings-* (#10525) by @shulaoda
deps: update napi (#10506) by @renovate[bot]
deps: update rollup submodule for tests to v4.62.3 (#10494) by @rolldown-guard[bot]
deps: upgrade oxc to 0.142.0 (#10497) by @shulaoda
deps: update test262 submodule for tests (#10495) by @rolldown-guard[bot]
deps: update github actions (#10460) by @renovate[bot]
deps: update rust crates (#10462) by @renovate[bot]
deps: update npm packages (#10461) by @renovate[bot]
metric: alert Discord when the metric workflow fails (#10447) by @IWANABETHATGUY
metric: mint a short-lived GitHub App token instead of a PAT (#10446) by @IWANABETHATGUY
repo: repair dangling CLAUDE.md symlink (#10451) by @hanayashiki
publint/package-metadata fixes and small correctness fixes (#10344) by @Brooooooklyn
deps: update dependency vite-plus to v0.2.6 (#10404) by @renovate[bot]
add Semgrep scan workflow (#10395) by @Boshen
enable Windows CI with a PR label (#10375) by @hyfdev
deps: upgrade oxc to 0.141.0 (#10373) by @camc314
deps: update napi (#10369) by @renovate[bot]
deps: update test262 submodule for tests (#10367) by @rolldown-guard[bot]
deps: update taiki-e/install-action action to v2.83.3 (#10358) by @renovate[bot]
deps: update rust crates (#10357) by @renovate[bot]
deps: update npm packages (#10359) by @renovate[bot]
deps: update rust crate syn to v3 (#10362) by @renovate[bot]
deps: update rust crate oxc_sourcemap to v8.1.2 (#10356) by @renovate[bot]
deps: update dependency vite-plus to v0.2.5 (#10329) by @renovate[bot]
docs: migrate Netlify redirects to Void config (#10282) by @tux-tn
deps: update dependency rust to v1.97.1 (#10317) by @renovate[bot]
runtime: remove unused runtime/index.js (#10302) by @IWANABETHATGUY

❤️ New Contributors

@dogledogle made their first contribution in #10523
@tbvjaos510 made their first contribution in #10489
@martijnwalraven made their first contribution in #10440
@shantanuraj made their first contribution in #10438
@Nic-Polumeyv made their first contribution in #10450
@hanayashiki made their first contribution in #10451
@unknownjedi made their first contribution in #10426
@vittorioexp made their first contribution in #10382
@tux-tn made their first contribution in #10282

verdaccio/verdaccio (verdaccio)

`v6.9.1`

Compare Source

Patch Changes

dfe3938: Update verdaccio dependencies to the latest npm dist-tag (@verdaccio/ui-theme tracks next-9):
- @verdaccio/auth: 8.1.0 → 8.1.1
- @verdaccio/config: 8.2.0 → 8.2.1
- @verdaccio/core: 8.2.0 → 8.2.1
- @verdaccio/hooks: 8.1.1 → 8.1.2
- @verdaccio/loaders: 8.1.0 → 8.1.1
- @verdaccio/local-storage-legacy: 11.4.0 → 11.4.1
- @verdaccio/logger: 8.1.0 → 8.1.1
- @verdaccio/middleware: 8.1.0 → 8.1.1
- @verdaccio/package-filter: 13.1.0 → 13.1.1
- @verdaccio/signature: 8.1.0 → 8.1.1
- @verdaccio/tarball: 13.1.0 → 13.1.1
- @verdaccio/ui-theme: 9.0.0-next-9.21 → 9.0.0-next-9.22
- @verdaccio/url: 13.1.0 → 13.1.1
- @verdaccio/utils: 8.2.0 → 8.2.1
- verdaccio-audit: 13.1.0 → 13.1.1
- verdaccio-htpasswd: 13.1.0 → 13.1.1

vitejs/vite (vite)

`v8.2.0`

Compare Source

Features

add input to server.fs.allow (#23035) (95a3cda)
bundled-dev: reload once after rebuild instead of via the fallback page (#23106) (b24381d)
bundled-dev: support worker file update accepted by HMR (#23068) (0d04351)
config: include column in config incompatibility location (#23064) (8a24572)
dev: resolve interface name for explicit host in network URLs (#22965) (3ac77d9)

Bug Fixes

bundledDev: print build errors to the terminal when an HMR update fails (#23024) (41c4658)
deps: update all non-major dependencies (#23069) (4c07b74)
hmr: preserve environment snapshot during server restart (#22992) (b1186c3)
importAnalysis: interop imports injected into optimized dep files by plugins (#23029) (8c2a87d)
module-runner: keep stack trace interception working when Object.prototype is frozen (#23073) (599c5b0)
server: strip base in indexHtml module graph lookup (#22932) (fa005d1)
support resolving top-level input option with plugins (#23101) (41df81a)

Documentation

config: correct cacheDir default fallback description (#23060) (aafa103)

Tests

config CJS module vars in ESM case (#23010) (d8cd388)

webpack/webpack-dev-middleware (webpack-dev-middleware)

`v8.1.1`

Compare Source

Patch Changes

Fixed a crash when calling close() in plugin mode (isPlugin = true). Since the host (webpack-cli, webpack-dev-server, etc.) owns compiler.watch(), the middleware has no watching of its own to close, so close() now just calls the callback instead of throwing. (by @bjohansebas in #2347)

gemini-code-assist

Code Review

This pull request updates several dependency versions across multiple package.json files, including rollup, @rollup/wasm-node, verdaccio, rolldown, vite, postcss, and webpack-dev-middleware. No review comments were provided, and I have no feedback to offer.

See associated pull request for more information.

angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Aug 3, 2026

gemini-code-assist Bot reviewed Aug 3, 2026

View reviewed changes

angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch from 87a9934 to b894596 Compare August 3, 2026 13:45

build: update all non-major dependencies

1dd15c2

See associated pull request for more information.

angular-robot force-pushed the ng-renovate/main-all-non-major-dependencies branch from b894596 to 1dd15c2 Compare August 3, 2026 15:49

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build: update all non-major dependencies (main) - #33736

build: update all non-major dependencies (main)#33736
angular-robot wants to merge 1 commit into
angular:mainfrom
angular-robot:ng-renovate/main-all-non-major-dependencies

angular-robot commented Aug 3, 2026 •

edited

Loading

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

angular-robot commented Aug 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.62.4

Bug Fixes

Pull Requests

v17.9.0

v8.5.25

v1.2.1

🚀 Features

🐛 Bug Fixes

🚜 Refactor

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

❤️ New Contributors

v6.9.1

Patch Changes

v8.2.0

Features

Bug Fixes

Documentation

Tests

v8.1.1

Patch Changes

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

angular-robot commented Aug 3, 2026 •

edited

Loading

`v4.62.4`

`v17.9.0`

`v8.5.25`

`v1.2.1`

`v6.9.1`

`v8.2.0`

`v8.1.1`