Skip to content

build: update all non-major dependencies#3509

Merged
alan-agius4 merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies
Mar 12, 2026
Merged

build: update all non-major dependencies#3509
alan-agius4 merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies

Conversation

@angular-robot
Copy link
Contributor

@angular-robot angular-robot commented Mar 12, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@bazel/bazelisk 1.26.01.28.1 age adoption passing confidence
@google/genai 1.43.01.44.0 age adoption passing confidence
@microsoft/api-extractor (source) 7.57.67.57.7 age adoption passing confidence
@types/node (source) 24.11.024.12.0 age adoption passing confidence
firebase-functions 7.0.67.1.1 age adoption passing confidence
firebase-tools 15.8.015.9.1 age adoption passing confidence
folder-hash 4.1.14.1.2 age adoption passing confidence
magic-string 0.30.170.30.21 age adoption passing confidence
puppeteer (source) 24.38.024.39.0 age adoption passing confidence
puppeteer-core (source) 24.38.024.39.0 age adoption passing confidence
renovate (source) 43.52.143.62.0 age adoption passing confidence
rollup-plugin-dts 6.1.16.3.0 age adoption passing confidence
tinyglobby (source) 0.2.120.2.15 age adoption passing confidence
typescript-local (source) 5.9.25.9.3 age adoption passing confidence
zone.js (source, changelog) ^0.15.0^0.16.0 age adoption passing confidence

Release Notes

bazelbuild/bazelisk (@​bazel/bazelisk)

v1.28.1

Compare Source

Bazelisk v1.28.1 comes with a bug fix:

Bug Fixes & Improvements (Go)

  • Fix selection of wrapper scripts on Windows (#​762).

We’d like to thank our amazing contributor @​valco1994!

v1.28.0

Compare Source

Bazelisk v1.28.0 comes with a new feature and several improvements:

New Features (Go)

  • Bazelisk now supports OS/architecture-specific Bazel wrappers (#​696).

Bug Fixes & Improvements (Go)

  • Properly handle $PATH values containing a = (#​720).
  • $BAZELISK_BASE_URL: append rc suffix for release candidates (#​722).
  • Fixed handling of powershell and batch wrappers (#​732).
  • Updated completion script filename for fish shell (#​733).
  • $BAZELISK_BASE_URL: added a regression test (#​734).
  • Docs now mention installation via mise (#​739).
  • Properly detect rolling release version in a rare edge case. (#​745).
  • Improved error when completion command is not supported (#​747).
  • Report a proper exit code when Bazel is terminated by a signal and use exec for bazelisk run on Unix (#​757).

Bug Fixes & Improvements (JavaScript)

  • Wait for graceful exit of child process during shutdown (#​730).

We’d like to thank our amazing contributors @​cerisier, @​chrisirhc, @​hagl, @​jmmv, @​jwnimmer-tri, @​jylenhof, @​oxidase and @​valco1994!

googleapis/js-genai (@​google/genai)

v1.44.0

Compare Source

Features
  • Add gemini-3.1-flash-image-preview model (175603b)
  • Support signature for all Interaction tool types (b79108f)
  • Update data types from discovery doc. (249b15a)
microsoft/rushstack (@​microsoft/api-extractor)

v7.57.7

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches
  • Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.
firebase/firebase-functions (firebase-functions)

v7.1.1

Compare Source

-Internal Docgen improvements

v7.1.0

Compare Source

firebase/firebase-tools (firebase-tools)

v15.9.1

Compare Source

  • Added support for next.config.ts and next.config.mts in Next.js deployments (#​9871)
  • Enabled free trials without a billing instrument for Firebase Data Connect (#​10042)

v15.9.0

Compare Source

  • Added *_EMULATOR_VERSION env variables to allow overriding specific versions of downloadable emulators
  • Updated the functions.config deprecation notice from March 2026 to March 2027 (#​9941)
  • Detects when App Hosting fails to deploy, returning an error. (#​8866)
  • Add firestore_query_collection tool back to MCP as it is not available in the OneMCP server yet.
  • Add support for custom resolvers in Firebase Data Connect (#​9967)
  • Updated the Firebase Data Connect local toolkit to v3.2.1, which includes the following changes: (#​10022)
marc136/node-folder-hash (folder-hash)

v4.1.2

Compare Source

Full Changelog: marc136/node-folder-hash@v4.1.1...v4.1.2

Updated minimatch to fix #​314

Rich-Harris/magic-string (magic-string)

v0.30.21

Compare Source

v0.30.19

Compare Source

Bug Fixes
Features
  • replace(All) support replacement for functions when the first parameter is a string (#​304) (fd1d887)

v0.30.18

Compare Source

Bug Fixes
puppeteer/puppeteer (puppeteer)

v24.39.0

Compare Source

♻️ Chores
  • puppeteer: Synchronize puppeteer versions
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 24.38.0 to 24.39.0
🎉 Features
🛠️ Fixes
renovatebot/renovate (renovate)

v43.62.0

Compare Source

Features
Documentation
Miscellaneous Chores

v43.61.7

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.6 (main) (#​41803) (5d55817)
Miscellaneous Chores
  • deps: update dependency tar to v7.5.11 [security] (main) (#​41804) (169f89e)
Build System

v43.61.6

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.5 (main) (#​41800) (1500008)

v43.61.5

Compare Source

Build System

v43.61.4

Compare Source

Build System

v43.61.3

Compare Source

Miscellaneous Chores
Build System

v43.61.2

Compare Source

Miscellaneous Chores
Build System

v43.61.1

Compare Source

Bug Fixes
  • deps: update dependency mkdocs-material to v9.7.5 (main) (#​41790) (d7e9e2f)
Documentation
Miscellaneous Chores
Build System

v43.61.0

Compare Source

Features
Code Refactoring
Tests

v43.60.6

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.4 (main) (#​41783) (2eb25c1)
Code Refactoring

v43.60.5

Compare Source

Build System
  • deps: update dependency node-html-parser to v7.1.0 (main) (#​41776) (de75944)

v43.60.4

Compare Source

Bug Fixes

v43.60.3

Compare Source

Bug Fixes
Documentation
  • mend-hosted: add information about IPs the Developer Platform uses (#​39760) (2af9308)
Miscellaneous Chores
  • deps: update sigstore/cosign-installer action to v4.1.0 (main) (#​41773) (f65bdcc)

v43.60.2

Compare Source

Code Refactoring
Build System

v43.60.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.3 (main) (#​41769) (1e6b8a7)
Miscellaneous Chores
Code Refactoring
  • tools: use a distinct replacement start/end the lockFileMaintenance table (#​41251) (ed6f713)

v43.60.0

Compare Source

Features
Bug Fixes
  • cargo: skip --precise for range-bumped crates to avoid stale Cargo.lock errors (#​41537) (1273806)
  • copier: allow git+ and ssh+ for copier (#​41725) (3b9fbc1)
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.2 (main) (#​41764) (321d121)
Documentation
Code Refactoring

v43.59.7

Compare Source

Bug Fixes
Miscellaneous Chores

v43.59.6

Compare Source

Bug Fixes
  • gradle: skip exclusiveContent registries if all filters are invalid or unsupported (#​41742) (544fcfb)
Code Refactoring
Tests
Continuous Integration
  • add auto label for "please follow our Discussion template" (#​41754) (d99781e)

v43.59.5

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.1 (main) (#​41751) (c3e081e)
Documentation
  • update references to jaegertracing/jaeger to v2.16.0 (main) (#​41743) (a0a793c)
  • update references to otel/opentelemetry-collector-contrib to v0.147.0 (main) (#​41744) (861f73e)
  • update references to renovate/renovate (main) (#​41747) (168825c)
  • update references to renovatebot/github-action to v46.1.4 (main) (#​41748) (63b1af2)
Miscellaneous Chores
Code Refactoring

v43.59.4

Compare Source

Miscellaneous Chores
Build System

v43.59.3

Compare Source

Bug Fixes
Miscellaneous Chores
  • deps: update aquasecurity/trivy-action action to v0.35.0 (main) (#​41728) (a1a1d64)
Build System

v43.59.2

Compare Source

Build System

v43.59.1

Compare Source

Bug Fixes

v43.59.0

Compare Source

Features
  • replacements: add com.edb:edb-jdbc to com.enterprisedb:edb-jdbc (#​40053) (e016d13)
Bug Fixes
Documentation
Miscellaneous Chores

v43.58.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.0 (main) (#​41710) (db159a5)
Build System
  • deps: update dependency ae-cvss-calculator to v1.0.11 (main) (#​41713) (520d7e2)

v43.57.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.19.0 (main) (#​41706) (a30bb59)
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.20.1 (main) (#​41709) (460f359)

v43.56.1

Compare Source

Bug Fixes
  • config: warn if registryUrls is set at top-level in config (#​41682) (bfc3391)
Miscellaneous Chores

v43.56.0

Compare Source

Features
Documentation

v43.55.9

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.6 (main) (#​41695) (ac8d6e3)
Documentation

v43.55.8

Compare Source

Bug Fixes
  • gomod: add -modfile flag for non-default go.mod filenames (#​41640) (ab409e9)

v43.55.7

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.5 (main) (#​41694) (2b2179e)
Miscellaneous Chores

v43.55.6

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.4 (main) (#​41687) (f9e4548)
Build System

v43.55.5

Compare Source

Build System

v43.55.4

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.2 (main) (#​41684) (4ea825c)

v43.55.3

Compare Source

Build System

v43.55.2

Compare Source

Miscellaneous Chores
Build System

v43.55.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.1 (main) (#​41677) (375be90)

v43.55.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.0 (main) (#​41675) (7cdd94c)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.5.0 (main) (#​41670) (1bb780c)

v43.54.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.17.0 (main) (#​41674) (81bbaba)

v43.53.0

Compare Source

Features
Bug Fixes
Documentation
Miscellaneous Chores
Swatinem/rollup-plugin-dts (rollup-plugin-dts)

v6.3.0

Compare Source

Features:

  • Support default export of object/array literals
  • Add support for child imports and nesting in namespaces

Fixes:

  • Rewrite names of module declarations with relative paths
  • Remove unused reference tracking

Thank you:

Features, fixes and improvements in this release have been contributed by:

v6.2.3

Compare Source

Fixes:

  • Preserve imports for types used in typeof generic

Thank you:

Features, fixes and improvements in this release have been contributed by:

v6.2.1

Compare Source

Fixes:

  • Disable problematic type-only import/export changes

Thank you:

Features, fixes and improvements in this release have been contributed by:

v6.2.0

[Compare Source](https://redirect.github.com/Swatinem/rollup-plu

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Mar 12, 2026
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This PR updates numerous non-major dependencies across the repository. While most changes are straightforward patch and minor version bumps, I've identified two issues. First, an update to Renovate's dependencies causes a major version downgrade of protobufjs, which is a potential risk. Second, the @google/genai dependency in one of the packages was not updated as stated in the PR description. Please review these points.

Comment on lines +3889 to +3898
'@opentelemetry/otlp-transformer@0.213.0(@opentelemetry/api@1.9.0)':
dependencies:
'@opentelemetry/api': 1.9.0
'@opentelemetry/api-logs': 0.213.0
'@opentelemetry/core': 2.6.0(@opentelemetry/api@1.9.0)
'@opentelemetry/resources': 2.6.0(@opentelemetry/api@1.9.0)
'@opentelemetry/sdk-logs': 0.213.0(@opentelemetry/api@1.9.0)
'@opentelemetry/sdk-metrics': 2.6.0(@opentelemetry/api@1.9.0)
'@opentelemetry/sdk-trace-base': 2.6.0(@opentelemetry/api@1.9.0)
protobufjs: 7.5.4

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The update to @opentelemetry/otlp-transformer@0.213.0 has resulted in a major version downgrade for the transitive dependency protobufjs from v8.0.0 to v7.5.4. This could introduce breaking changes and should be investigated to ensure it's safe and intentional.

'@google/genai':
specifier: ^1.43.0
version: 1.43.0(@modelcontextprotocol/sdk@1.27.1(supports-color@10.2.2))(bufferutil@4.1.0)(supports-color@10.2.2)(utf-8-validate@6.0.6)
version: 1.43.0(@modelcontextprotocol/sdk@1.27.1)(bufferutil@4.1.0)(utf-8-validate@6.0.6)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The PR description indicates that @google/genai should be updated to 1.44.0, but github-actions/labeling/package.json was not updated. As a result, it still resolves to 1.43.0 here. Please update the dependency in github-actions/labeling/package.json to ^1.44.0.

@angular-robot angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from facf5ae to 231d205 Compare March 12, 2026 11:16
See associated pull request for more information.
@angular-robot angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from 231d205 to 100eb94 Compare March 12, 2026 12:13
@alan-agius4 alan-agius4 merged commit fc63c7d into angular:main Mar 12, 2026
12 of 13 checks passed
@alan-agius4
Copy link
Contributor

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants