chore(deps): update npm packages by renovate[bot] · Pull Request #250 · voidzero-dev/oxc-angular-compiler

renovate · 2026-04-26T17:23:47Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@angular/animations (source)	`21.2.9` → `21.2.10`
@angular/build	`21.2.7` → `21.2.8`
@angular/cdk	`21.2.7` → `21.2.8`
@angular/common (source)	`21.2.9` → `21.2.10`
@angular/compiler (source)	`21.2.9` → `21.2.10`
@angular/compiler-cli (source)	`21.2.9` → `21.2.10`
@angular/core (source)	`21.2.9` → `21.2.10`
@angular/forms (source)	`21.2.9` → `21.2.10`
@angular/material	`21.2.7` → `21.2.8`
@angular/platform-browser (source)	`21.2.9` → `21.2.10`
@angular/platform-browser-dynamic (source)	`21.2.9` → `21.2.10`
@angular/router (source)	`21.2.9` → `21.2.10`
@sanity/types (source)	`5.21.0` → `5.22.0`
@tailwindcss/vite (source)	`4.2.2` → `4.2.4`
posthog-js (source)	`1.369.2` → `1.371.2`
tailwindcss (source)	`4.2.2` → `4.2.4`
vite (source)	`8.0.8` → `8.0.10`
vitest (source)	`4.1.4` → `4.1.5`

Release Notes

angular/angular (@angular/animations)

`v21.2.10`

Compare Source

docs

Commit	Type	Description
0d5ee9ae1b	fix	link formatting in "Animating your Application with CSS"

migrations

Commit	Type	Description
5533ab4f56	fix	fix NgClass leaving trailing comma after removal

router

Commit	Type	Description
580212c995	fix	restore internal URL on popstate when `browserUrl` is used

angular/angular-cli (@angular/build)

`v21.2.8`: 21.2.8

Compare Source

@angular/cli

Commit	Description
	dynamically resolve project Angular CLI executable inside MCP tools
	ignore EBADF file system errors during MCP project scan
	use headless option in MCP test tool

@angular-devkit/build-angular

Commit	Description
	ensure route has leading slash in prerender builder
	fix app-shell route format and

@angular/build

Commit	Description
	use rootDir for HMR component updates path resolution
	validate V8 coverage support for browsers in Vitest

angular/components (@angular/cdk)

`v21.2.8`

Compare Source

No user facing changes in this release

sanity-io/sanity (@sanity/types)

`v5.22.0`

Compare Source

Features

asset-sources: add persistence key for Media Library plugin (#12670) (311ac2d)

Bug Fixes

types: correct BlockRule value type from any[] to PortableTextBlock (#12509) (3ca5e31)

tailwindlabs/tailwindcss (@tailwindcss/vite)

`v4.2.4`

Compare Source

Fixed

Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

`v4.2.3`

Compare Source

Fixed

Canonicalization: improve canonicalizations for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)
Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)
Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)
Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)
Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)
Upgrade: never migrate files that are ignored by git (#19846)
Add .env and .env.* to default ignored content files (#19846)
Canonicalization: migrate overflow-ellipsis into text-ellipsis (#19849)
Canonicalization: migrate start-full → inset-s-full, start-auto → inset-s-auto, start-px → inset-s-px, and start-<number> → inset-s-<number> as well as negative versions (#19849)
Canonicalization: migrate end-full → inset-e-full, end-auto → inset-e-auto, end-px → inset-e-px, and end-<number> → inset-e-<number> as well as negative versions (#19849)
Canonicalization: move the - sign inside the arbitrary value -left-[9rem] → left-[-9rem] (#19858)
Canonicalization: move the - sign outside the arbitrary value ml-[calc(-1*var(--width))] → -ml-(--width) (#19858)
Improve performance when scanning JSONL / NDJSON files (#19862)
Support NODE_PATH environment variable in standalone CLI (#19617)

PostHog/posthog-js (posthog-js)

`v1.371.2`

Compare Source

1.371.2

Patch Changes

#3453 96f19b7 Thanks @turnipdabeets! - Lift OTLP log serialization helpers from posthog-js into @posthog/core so the
upcoming React Native logs feature consumes the same builders. Browser gains
two fixes as a side effect: NaN and ±Infinity attribute values no longer get
silently dropped during JSON encoding, and the scope.version OTLP field is
now populated with the SDK version (changes the server's instrumentation_scope
column from "posthog-js@" to "posthog-js@"). (2026-04-23)
Updated dependencies [96f19b7]:
- @posthog/types@1.371.2
- @posthog/core@1.27.1

`v1.371.1`

Compare Source

1.371.1

Patch Changes

#3425 2da17e8 Thanks @marandaneto! - Classify SDK-owned persistence keys with an explicit event exposure policy so new internal persistence state must be intentionally marked as event-visible, hidden, or derived.
(2026-04-23)
Updated dependencies []:
- @posthog/types@1.371.1

`v1.371.0`

Compare Source

1.371.0

Patch Changes

#3432 1a8b727 Thanks @richardsolomou! - refactor: rename __add_tracing_headers to addTracingHeaders. The __ prefix signalled an internal/experimental option, but the config is a public API (documented for linking LLM traces to session replays). __add_tracing_headers continues to work as a deprecated alias on the browser SDK.

Also exposes patchFetchForTracingHeaders from @posthog/core so non-browser SDKs can reuse the implementation. (2026-04-23)
Updated dependencies [1a8b727]:
- @posthog/core@1.27.0
- @posthog/types@1.371.0

`v1.370.1`

Compare Source

1.370.1

Patch Changes

#3442 6f19ce8 Thanks @marandaneto! - fix(surveys): guard survey seen localStorage access
(2026-04-22)
Updated dependencies []:
- @posthog/types@1.370.1

`v1.370.0`

Compare Source

1.370.0

Minor Changes

#3389 922a1c1 Thanks @hpouillot! - Add exception steps to error tracking (aka breadcrumbs)
(2026-04-22)

Patch Changes

Updated dependencies [922a1c1]:
- @posthog/types@1.370.0
- @posthog/core@1.26.0

`v1.369.5`

Compare Source

1.369.5

Patch Changes

Updated dependencies [1a0b58d]:
- @posthog/core@1.25.3
- @posthog/types@1.369.5

`v1.369.4`

Compare Source

1.369.4

Patch Changes

#3362 d61bce1 Thanks @sampennington! - fix(cookieless): start in cookieless mode when opt_out_capturing_by_default is set
(2026-04-21)
Updated dependencies []:
- @posthog/types@1.369.4

`v1.369.3`

Compare Source

1.369.3

Patch Changes

#3419 ea08727 Thanks @haacked! - Reinstate $feature_flag_payloads and $surveys_activated in captured event properties.
(2026-04-18)
#3416 3d8b2e2 Thanks @feliperalmeida! - Updated dependencies: - protobufjs@7.5.5
(2026-04-18)
Updated dependencies []:
- @posthog/types@1.369.3

vitejs/vite (vite)

`v8.0.10`

Compare Source

Features

update rolldown to 1.0.0-rc.17 (#22299) (a4d06d9)

Bug Fixes

hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

enable some typecheck rules (#22278) (9437518)
typecheck client directory (#22284) (40a0847)

`v8.0.9`

Compare Source

Features

update rolldown to 1.0.0-rc.16 (#22248) (2947edd)

Bug Fixes

allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
deps: update all non-major dependencies (#22219) (4cd0d67)
deps: update all non-major dependencies (#22268) (c28e9c1)
detect Deno workspace root (fix #22237) (#22238) (1b793c0)
dev: handle errors in watchChange hook (#22188) (fc08bda)
optimizer: handle more chars that will be sanitized (#22208) (3f24533)
skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

align the descriptions in READMEs (#22231) (44c42b9)
fix reuses wording in dev environment comment (#22173) (9163412)
fix wording in sass error comment (#22214) (bc5c6a7)
update build CLI defaults (#22261) (605bb97)

Miscellaneous Chores

deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

vitest-dev/vitest (vitest)

`v4.1.5`

Compare Source

🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in #10119 (0e0ff)

🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in #10131 (9423d)
Project color label on html reporter - by @hi-ogawa in #10142 (596f7)
Fix vi.defineHelper called as object method - by @hi-ogawa in #10163 (122c2)
Alias agent reporter to minimal - by @sheremet-va in #10157 (663b9)
Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in #8696 (9787d)
Respect diff config options in soft assertions " - by @sheremet-va in #8696 (7dc6d)
ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in #10129 (32546)
coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in #10117 (14133)
snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in #10150 (21e66)
ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in #10152 (f1b1f)
web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in #9927 and #10124 (7ad7d)
api: Make test-specification options writable - by @sheremet-va in #10154 (6abd5)

View changes on GitHub

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-04-26T17:24:36Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@angular/platform-browser-dynamic@21.2.9 ⏵ 21.2.10
npm/@sanity/types@5.21.0 ⏵ 5.22.0	⁺¹	⁺¹
npm/@angular/compiler@21.2.9 ⏵ 21.2.10
npm/@angular/core@21.2.9 ⏵ 21.2.10	⁺²	⁺¹
npm/@angular/platform-browser@21.2.9 ⏵ 21.2.10
npm/@angular/animations@21.2.9 ⏵ 21.2.10
npm/@angular/compiler-cli@21.2.9 ⏵ 21.2.10	⁺¹
npm/@angular/forms@21.2.9 ⏵ 21.2.10
npm/@angular/router@21.2.9 ⏵ 21.2.10	⁺¹	⁺¹
npm/@angular/build@21.2.7 ⏵ 21.2.8	⁺¹	⁺¹	⁺¹
npm/@angular/cdk@21.2.7 ⏵ 21.2.8
npm/@angular/common@21.2.9 ⏵ 21.2.10
npm/@angular/material@21.2.7 ⏵ 21.2.8
npm/postcss@8.5.10 ⏵ 8.5.12		⁺¹	⁺³
npm/vite@8.0.8 ⏵ 8.0.10	⁺¹	⁺¹
npm/tailwindcss@4.2.2 ⏵ 4.2.4	⁺¹	⁺¹
npm/posthog-js@1.369.2 ⏵ 1.371.2	⁺⁵	^-14
npm/@tailwindcss/vite@4.2.2 ⏵ 4.2.4	⁺¹	⁺¹

View full report

chore(deps): update npm packages

575337b

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update npm packages#250

chore(deps): update npm packages#250
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-packages

renovate Bot commented Apr 26, 2026

Uh oh!

socket-security Bot commented Apr 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 26, 2026

Release Notes

docs

migrations

router

v21.2.8: 21.2.8

Features

Bug Fixes

Fixed

Fixed

1.371.2

Patch Changes

1.371.1

Patch Changes

1.371.0

Patch Changes

1.370.1

Patch Changes

1.370.0

Minor Changes

Patch Changes

1.369.5

Patch Changes

1.369.4

Patch Changes

1.369.3

Patch Changes

Features

Bug Fixes

Code Refactoring

Features

Bug Fixes

Documentation

Miscellaneous Chores

🚀 Experimental Features

🐞 Bug Fixes

Configuration

Uh oh!

socket-security Bot commented Apr 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v21.2.8`: 21.2.8