Skip to content

Bump the npm_and_yarn group across 2 directories with 2 updates#3204

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/openc3/templates/tool_svelte/npm_and_yarn-78007dbd62
Open

Bump the npm_and_yarn group across 2 directories with 2 updates#3204
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/openc3/templates/tool_svelte/npm_and_yarn-78007dbd62

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps the npm_and_yarn group with 1 update in the /openc3/templates/tool_svelte directory: svelte.
Bumps the npm_and_yarn group with 1 update in the /openc3/templates/tool_angular directory: @angular/common.

Updates svelte from 4.2.20 to 5.55.2

Release notes

Sourced from svelte's releases.

svelte@5.55.2

Patch Changes

  • fix: invalidate @const tags based on visible references in legacy mode (#18041)

  • fix: handle parens in template expressions more robustly (#18075)

  • fix: disallow -- in idPrefix (#18038)

  • fix: correct types for ontoggle on <details> elements (#18063)

  • fix: don't override $destroy/set/on instance methods in dev mode (#18034)

  • fix: unskip branches of earlier batches after commit (#18048)

  • fix: never set derived.v inside fork (#18037)

  • fix: skip rebase logic in non-async mode (#18040)

  • fix: don't reset status of uninitialized deriveds (#18054)

svelte@5.55.1

Patch Changes

  • fix: correctly handle bindings on the server (#18009)

  • fix: prevent hydration error on async {@html ...} (#17999)

  • fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (#18015)

  • fix: improve duplicate module import error message (#18016)

  • fix: reschedule new effects in prior batches (#18021)

svelte@5.55.0

Minor Changes

  • feat: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from svelte/motion (#17967)

Patch Changes

  • fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#17985)

svelte@5.54.1

Patch Changes

  • fix: hydration comments during hmr (#17975)

  • fix: null out effect.b in destroy_effect (#17980)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.55.2

Patch Changes

  • fix: invalidate @const tags based on visible references in legacy mode (#18041)

  • fix: handle parens in template expressions more robustly (#18075)

  • fix: disallow -- in idPrefix (#18038)

  • fix: correct types for ontoggle on <details> elements (#18063)

  • fix: don't override $destroy/set/on instance methods in dev mode (#18034)

  • fix: unskip branches of earlier batches after commit (#18048)

  • fix: never set derived.v inside fork (#18037)

  • fix: skip rebase logic in non-async mode (#18040)

  • fix: don't reset status of uninitialized deriveds (#18054)

5.55.1

Patch Changes

  • fix: correctly handle bindings on the server (#18009)

  • fix: prevent hydration error on async {@html ...} (#17999)

  • fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (#18015)

  • fix: improve duplicate module import error message (#18016)

  • fix: reschedule new effects in prior batches (#18021)

5.55.0

Minor Changes

  • feat: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from svelte/motion (#17967)

Patch Changes

  • fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#17985)

5.54.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.


Updates @angular/common from 18.2.14 to 21.2.8

Release notes

Sourced from @​angular/common's releases.

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description
fix - 2c6781071f error for type parameter declarations

core

Commit Description
fix - 82192deda9 handle missing serialized container hydration data
fix - 057cc6d09d remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description
fix - 7797671257 get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets

21.2.6

common

Commit Description
fix - b4ab6ba2e8 avoid redundant image fetch on destroy with auto sizes

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.8 (2026-04-08)

compiler

Commit Type Description
e40d378f3e fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description
2c6781071f fix error for type parameter declarations

core

Commit Type Description
82192deda9 fix handle missing serialized container hydration data
057cc6d09d fix remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Type Description
7797671257 fix get quick info at local var location to align with TS semantics and support type narrowing

22.0.0-next.6 (2026-04-01)

compiler

Commit Type Description
08d36599d7 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
fcd0bb0db8 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
e84e35cdd6 fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fa6617352 fix resolve component import by exact specifier in route lazy-loading schematic
028e1d3ce0 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
7871093822 fix validate locale in getOutputPathFn to prevent path traversal

migrations

Commit Type Description
682aaf943f feat add strictTemplates to tsconfig during ng update

router

Commit Type Description
daa9b2a9d6 fix pass outlet context to split to fix empty path named outlets

... (truncated)

Commits
  • 8102331 test(http): disable XSRF and mock location in HttpClient tests to avoid Domin...
  • 13f050d test: construct local Date objects to fix timezone flakiness
  • d0cf299 test: remove unsupported timezone from formatDate tests
  • b4ab6ba fix(common): avoid redundant image fetch on destroy with auto sizes
  • adda6c5 build: update aspect_rules_js to 3.0.2
  • 93c6dc6 Revert "refactor(http): Improves base64 encoding/decoding with feature detect...
  • 76431ed Revert "fix(http): correctly cache blob responses in transfer cache (#67002)"
  • 277ade9 fix(http): correctly cache blob responses in transfer cache (#67002)
  • aeb9b81 refactor(http): Improves base64 encoding/decoding with feature detection (#67...
  • ecf0bb4 test(http): refactors HTTP client tests to use TestBed and providers
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the npm_and_yarn group across 2 directories with 2 updates
840996e 
Bumps the npm_and_yarn group with 1 update in the /openc3/templates/tool_svelte directory: [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte).
Bumps the npm_and_yarn group with 1 update in the /openc3/templates/tool_angular directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common).


Updates `svelte` from 4.2.20 to 5.55.2
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.2/packages/svelte)

Updates `@angular/common` from 18.2.14 to 21.2.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.8/packages/common)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.55.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@angular/common"
  dependency-version: 21.2.8
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 10, 2026
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 10, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants