Skip to content

chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group with 4 updates#134

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-minor-patch-018d66e20e
Open

chore(deps-dev)(deps-dev): bump the dev-tooling-minor-patch group with 4 updates#134
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-tooling-minor-patch-018d66e20e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling-minor-patch group with 4 updates: eslint-plugin-sonarjs, @angular/build, @angular/cli and @angular/compiler-cli.

Updates eslint-plugin-sonarjs from 4.1.0 to 4.2.0

Changelog

Sourced from eslint-plugin-sonarjs's changelog.

Release Guide

SonarJS currently has two distinct release targets:

Target Artifact Main workflow Notes
Standard SonarQube analyzer Maven/JAR release artifacts .github/workflows/automated-release.yml This is the normal SonarJS release flow.
SQAA (previously A3S) Docker image for LanguageAnalyzerService .github/workflows/docker-sqaa.yml Manual SQAA-only entry point and fallback.

Terminology

  • SQAA is the current name for what older docs and repository names still call A3S.
  • Some external identifiers still keep the legacy a3s name for compatibility. The important ones are:
    • the Docker repository path a3s/analysis/javascript
    • packages/grpc/src/proto/language_analyzer.proto with option java_package = "com.sonarsource.a3s.analyzer.grpc";
  • Do not rename those compatibility-sensitive identifiers as part of a routine release.

Standard SonarQube Analyzer Release

This is the regular SonarJS analyzer release. It produces the standard SonarQube analyzer artifacts and can also automate the SQAA handoff using the same build number.

Entry points

  1. Start .github/workflows/automated-release.yml.
  2. That workflow orchestrates the release and then calls .github/workflows/release.yml for the actual artifact publication.
  3. After the release succeeds, .github/workflows/bump-versions.yml opens the next development iteration PR.

What .github/workflows/automated-release.yml does

The SonarJS workflow is a thin wrapper around SonarSource/release-github-actions/.github/workflows/automated-release.yml@v1 with SonarJS-specific inputs:

  • project name SonarJS
  • plugin name javascript
  • Jira project JS
  • optional SQC and SQS integration PRs
  • optional SQAA integration, enabled in the SonarJS wrapper and implemented by a custom local workflow
  • SLVS, SLVSCODE, SLE, and SLI integration tickets enabled
  • the generic release-github-actions SQAA integration explicitly disabled, because SonarJS uses analysis/js_ts_image_tag instead of gradle/sonar-plugins.versions.toml

The reusable workflow performs the following steps:

  1. Freeze the target branch.
  2. Run the releasability checks with SonarSource/gh-action_releasability@v3.
  3. Resolve the release version with get-release-version.
  4. Resolve the Jira version with get-jira-version.
  5. Generate Jira-based release notes with get-jira-release-notes unless explicit notes were provided.
  6. Create the REL Jira ticket with create-jira-release-ticket.
  7. Publish the GitHub release with publish-github-release.
  8. Unfreeze the branch.
  9. Release the Jira version, create the next Jira version, and move the REL ticket to Technical Release Done.

... (truncated)

Commits

Updates @angular/build from 22.0.6 to 22.0.7

Release notes

Sourced from @​angular/build's releases.

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces
Changelog

Sourced from @​angular/build's changelog.

22.0.7 (2026-07-15)

@​angular/cli

Commit Type Description
e85c10ccb fix copy packageManager field and yarn config for temp installs
b87cafec0 fix support resolving subproject dependencies in pnpm workspaces

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

... (truncated)

Commits
  • e744701 release: cut the v22.0.7 release
  • a902c38 build: lock file maintenance
  • 12fb387 build: update pnpm to v10.34.5
  • 22d843e build: update cross-repo angular dependencies to v22.0.6
  • b87cafe fix(@​angular/cli): support resolving subproject dependencies in pnpm workspaces
  • e85c10c fix(@​angular/cli): copy packageManager field and yarn config for temp installs
  • 5584a58 build: update babel monorepo to v7.29.7
  • cc45a54 build: update dependency http-proxy-middleware to v3.0.7
  • 31345b6 build: lock file maintenance
  • See full diff in compare view

Updates @angular/cli from 22.0.6 to 22.0.7

Release notes

Sourced from @​angular/cli's releases.

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces
Changelog

Sourced from @​angular/cli's changelog.

22.0.7 (2026-07-15)

@​angular/cli

Commit Type Description
e85c10ccb fix copy packageManager field and yarn config for temp installs
b87cafec0 fix support resolving subproject dependencies in pnpm workspaces

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

... (truncated)

Commits
  • e744701 release: cut the v22.0.7 release
  • a902c38 build: lock file maintenance
  • 12fb387 build: update pnpm to v10.34.5
  • 22d843e build: update cross-repo angular dependencies to v22.0.6
  • b87cafe fix(@​angular/cli): support resolving subproject dependencies in pnpm workspaces
  • e85c10c fix(@​angular/cli): copy packageManager field and yarn config for temp installs
  • 5584a58 build: update babel monorepo to v7.29.7
  • cc45a54 build: update dependency http-proxy-middleware to v3.0.7
  • 31345b6 build: lock file maintenance
  • See full diff in compare view

Updates @angular/compiler-cli from 22.0.6 to 22.0.7

Release notes

Sourced from @​angular/compiler-cli's releases.

22.0.7

common

Commit Description
fix - 91e33aa1de avoid prototype lookups in date format caches

compiler

Commit Description
fix - 5b516e3a58 parsing of an empty template literal interpolation

compiler-cli

Commit Description
fix - c88ddde1c9 re-tag SourceFiles after TsCreateProgramDriver.updateFiles()

core

Commit Description
fix - 94d9591b51 allow static attributes for explicit input transforms
fix - c89f71a74c ignore processing instruction syntax in templates
fix - 70500e4067 preserve explicit input transform write type

forms

Commit Description
fix - 1b9964675f allow multiple async validators
fix - 64d6d47a0c preserve intermediate number values in signal forms
fix - 6cf7446afa prevent stale CVA writeback during debounce

http

Commit Description
fix - 20b7dc3023 prevent interceptor signal reads from leaking into calling reactive contexts

localize

Commit Description
fix - 22d5a091d1 build runtime translations map with a null prototype
fix - 8ce1fcf7fa use Object.hasOwn for placeholder lookup in translate

platform-browser

Commit Description
fix - b34bf0dce8 prevent ReDoS in SOURCEMAP_URL_REGEXP
Changelog

Sourced from @​angular/compiler-cli's changelog.

22.0.7 (2026-07-15)

common

Commit Type Description
91e33aa1de fix avoid prototype lookups in date format caches

compiler

Commit Type Description
5b516e3a58 fix parsing of an empty template literal interpolation

compiler-cli

Commit Type Description
c88ddde1c9 fix re-tag SourceFiles after TsCreateProgramDriver.updateFiles()

core

Commit Type Description
94d9591b51 fix allow static attributes for explicit input transforms
c89f71a74c fix ignore processing instruction syntax in templates
70500e4067 fix preserve explicit input transform write type

forms

Commit Type Description
1b9964675f fix allow multiple async validators
64d6d47a0c fix preserve intermediate number values in signal forms
6cf7446afa fix prevent stale CVA writeback during debounce

http

Commit Type Description
20b7dc3023 fix prevent interceptor signal reads from leaking into calling reactive contexts

localize

Commit Type Description
22d5a091d1 fix build runtime translations map with a null prototype
8ce1fcf7fa fix use Object.hasOwn for placeholder lookup in translate

platform-browser

Commit Type Description
b34bf0dce8 fix prevent ReDoS in SOURCEMAP_URL_REGEXP

20.3.26 (2026-07-08)

compiler-cli

Commit Type Description
406aaa31e6 fix update babel dependencies to latest v7

core

Commit Type Description

... (truncated)

Commits
  • 70500e4 fix(core): preserve explicit input transform write type
  • c88ddde fix(compiler-cli): re-tag SourceFiles after TsCreateProgramDriver.updateFiles()
  • c82ae67 Revert "fix(core): allow static attributes for explicit input transforms"
  • 94d9591 fix(core): allow static attributes for explicit input transforms
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 4 updates

Bumps the dev-tooling-minor-patch group with 4 updates: [eslint-plugin-sonarjs](https://github.com/SonarSource/SonarJS), [@angular/build](https://github.com/angular/angular-cli), [@angular/cli](https://github.com/angular/angular-cli) and [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli).


Updates `eslint-plugin-sonarjs` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/SonarSource/SonarJS/releases)
- [Changelog](https://github.com/SonarSource/SonarJS/blob/master/docs/RELEASE.md)
- [Commits](https://github.com/SonarSource/SonarJS/commits)

Updates `@angular/build` from 22.0.6 to 22.0.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v22.0.6...v22.0.7)

Updates `@angular/cli` from 22.0.6 to 22.0.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v22.0.6...v22.0.7)

Updates `@angular/compiler-cli` from 22.0.6 to 22.0.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.0.7/packages/compiler-cli)

---
updated-dependencies:
- dependency-name: eslint-plugin-sonarjs
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling-minor-patch
- dependency-name: "@angular/build"
  dependency-version: 22.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling-minor-patch
- dependency-name: "@angular/cli"
  dependency-version: 22.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling-minor-patch
- dependency-name: "@angular/compiler-cli"
  dependency-version: 22.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
@github-actions

Copy link
Copy Markdown

📊 Coverage Coverage Report

Metric PR Base Diff
Statements ████████████████████ 660/660 (100%) 660/660 (100%) ⚪ 0%
Branches ████████████████████ 280/280 (100%) 280/280 (100%) ⚪ 0%
Functions ████████████████████ 122/122 (100%) 122/122 (100%) ⚪ 0%
Lines ████████████████████ 635/635 (100%) 635/635 (100%) ⚪ 0%

Updated for 6c8c8cf | Compared against base branch

@github-actions

Copy link
Copy Markdown

⏱️ Performance Report

✅ Tests 213 passed, 0 failed, 0 skipped
🧪 Suites 42
⏱️ Total step time 10.00s (install + tests) ⚪ ~0
⚙️ Test execution 3.12s ⚪ ~0
🐢 Slowest test suites
# Suite Tests Duration vs Base
1 test/generators/schema-generator.spec.ts 23 2.28s ⚪ ~0
2 test/adapter/trpc-client-adapter-e2e.spec.ts 16 203ms ⚪ ~0
3 test/adapter/trpc-http-adapter.spec.ts 19 64ms ⚪ ~0
4 test/router/trpc-router.spec.ts 29 34ms ⚪ ~0
5 test/context/trpc-context-creator.spec.ts 26 29ms ⚪ ~0
6 test/adapter/trpc-http-adapter-unit.spec.ts 22 16ms ⚪ ~0
7 test/generators/zod-serializer.spec.ts 38 11ms ⚪ ~0
8 test/router/trpc-router-lifecycle.spec.ts 11 8ms ⚪ ~0
9 test/module/trpc-module.spec.ts 9 5ms ⚪ ~0
10 test/decorators/decorators.spec.ts 11 1ms ⚪ ~0
🐌 Slowest individual tests
# Suite Test Duration vs Base
1 schema-generator generateSchemaContent (type-level AppRouter contract) should require a link transformer on typed clients when generated with hasTransformer 1.45s ⚪ ~0
2 schema-generator generateSchemaContent (type-level AppRouter contract) should typecheck generated AppRouter with a typed tRPC client 823ms ⚪ ~0
3 trpc-client-adapter-e2e real @trpc/client adapter E2E express handles typed queries, mutations, and context extraction 66ms ⚪ ~0
4 trpc-client-adapter-e2e real @trpc/client adapter E2E express streams subscriptions through the real client 30ms ⚪ ~0
5 trpc-client-adapter-e2e real @trpc/client adapter E2E express runs class-validator DTO validation through ValidationPipe 26ms ⚪ ~0
6 trpc-client-adapter-e2e real @trpc/client adapter E2E fastify runs class-validator DTO validation through ValidationPipe 12ms ⚪ ~0
7 trpc-client-adapter-e2e real @trpc/client adapter E2E fastify handles typed queries, mutations, and context extraction 11ms ⚪ ~0
8 trpc-client-adapter-e2e real @trpc/client adapter E2E express reports Zod input errors through the real client 9ms ⚪ ~0
9 trpc-client-adapter-e2e real @trpc/client adapter E2E fastify streams subscriptions through the real client 7ms ⚪ ~0
10 trpc-client-adapter-e2e real @trpc/client with superjson transformer E2E express exposes the flattened ZodError shape to the real client 6ms ⚪ ~0
11 trpc-http-adapter TrpcHttpAdapter Express handler should stream subscription responses over GET 6ms ⚪ ~0
12 trpc-http-adapter TrpcHttpAdapter edge cases should handle Fastify GET with createContext 6ms ⚪ ~0
13 trpc-client-adapter-e2e real @trpc/client adapter E2E fastify reports Zod input errors through the real client 5ms ⚪ ~0
14 trpc-client-adapter-e2e real @trpc/client with superjson transformer E2E express round-trips Date instances through queries 5ms ⚪ ~0
15 trpc-client-adapter-e2e real @trpc/client with superjson transformer E2E express round-trips Date instances through mutation inputs and outputs 5ms ⚪ ~0

Updated for 6c8c8cf | Compared against base branch

@github-actions

Copy link
Copy Markdown

🧠 Cognitive Complexity Report

Metric PR Base Diff
Total complexity 159 159 ⚪ 0
Max function complexity 12 12 ⚪ 0
Functions measured 53 53 ⚪ 0
🧩 Most complex functions
Function Location Complexity Status
serializeZodSchema packages/trpc/generators/zod-serializer.ts:9 12 🟢 OK
generateSchemaContent packages/trpc/generators/schema-generator.ts:59 9 🟢 OK
TrpcContextCreator.extractHttpExceptionMessage packages/trpc/context/trpc-context-creator.ts:467 7 🟢 OK
TrpcHttpAdapter.resolveBody packages/trpc/trpc-http-adapter.ts:124 7 🟢 OK
TrpcRouter.validateSubscriptionOutput packages/trpc/trpc-router.ts:551 7 🟢 OK
(anonymous callback) packages/trpc/context/trpc-context-creator.ts:243 6 🟢 OK
TrpcRouter.assertUniqueAliasPath packages/trpc/trpc-router.ts:436 6 🟢 OK
TrpcRouter.resolveContextId packages/trpc/trpc-router.ts:504 6 🟢 OK
TrpcRouter.createRouterProviderContext packages/trpc/trpc-router.ts:148 5 🟢 OK
(anonymous callback) packages/trpc/trpc-router.ts:320 5 🟢 OK

🧭 Cognitive complexity is reported as a review signal, not a merge gate. Prefer small, intention-revealing refactors when complexity rises.


Updated for 6c8c8cf | Compared against base branch

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants