Skip to content

build(deps): bump sigstore, @angular-eslint/schematics and @angular/cli - #76

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-097ede7dc6
Open

build(deps): bump sigstore, @angular-eslint/schematics and @angular/cli#76
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-097ede7dc6

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps sigstore to 4.1.1 and updates ancestor dependencies sigstore, @angular-eslint/schematics and @angular/cli. These dependencies need to be updated together.

Updates sigstore from 1.4.0 to 4.1.1

Release notes

Sourced from sigstore's releases.

sigstore@4.1.1

Patch Changes

  • 7845532: Verification of OID certificate extensions
  • f074710: Require inclusion promise in Rekor entry when used as timestamp source
  • Updated dependencies [b5aa4f1]
  • Updated dependencies [7845532]
  • Updated dependencies [f074710]
    • @​sigstore/core@​3.2.1
    • @​sigstore/verify@​3.1.1

sigstore@4.1.0

Minor Changes

  • eba6a52: verify(bundle[, payload][, options]) now returns a Signer object containing the public key and identity information from the verification.

Patch Changes

  • Updated dependencies [cee51c0]
  • Updated dependencies [2042aad]
  • Updated dependencies [018974e]
  • Updated dependencies [dea916f]
  • Updated dependencies [61a4f9e]
  • Updated dependencies [5ffadc0]
  • Updated dependencies [5ffadc0]
  • Updated dependencies [1663b3e]
    • @​sigstore/tuf@​4.0.1
    • @​sigstore/verify@​3.1.0
    • @​sigstore/sign@​4.1.0
    • @​sigstore/core@​3.1.0

sigstore@4.0.0

Major Changes

  • 383e200: Drop support for node 18

Patch Changes

  • Updated dependencies [40395f5]
  • Updated dependencies [383e200]
  • Updated dependencies [383e200]
  • Updated dependencies [383e200]
    • @​sigstore/tuf@​4.0.0
    • @​sigstore/sign@​4.0.0
    • @​sigstore/bundle@​4.0.0
    • @​sigstore/verify@​3.0.0
    • @​sigstore/core@​3.0.0

sigstore@3.1.0

Minor Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sigstore since your current version.


Updates @angular-eslint/schematics from 16.0.1 to 22.0.0

Release notes

Sourced from @​angular-eslint/schematics's releases.

v22.0.0

22.0.0 (2026-06-07)

As always we recommend that you update your existing workspaces by using ng update as we provide some helpful schematics to help migrate your workspaces to the latest and greatest. Running the following will update Angular, the Angular CLI and angular-eslint together:

ng update @angular/core @angular/cli angular-eslint

🚀 Features

  • ⚠️ update to Angular 22 + TS 6, drop node 20 (96592269)
  • ⚠️ drop support for eslint v8 and legacy eslintrc config format (#3056)
  • support the Angular v22 @​Service decorator (#3057)
  • builder: add suppressionsLocation option (#3034)
  • ⚠️eslint-plugin: [prefer-on-push-component-change-detection] flag only opting out of OnPush, make recommended (#3058)
  • ⚠️eslint-plugin: remove deprecated no-conflicting-lifecycle rule (#3060)
  • template-parser: traverse v22 arrow function, spread and tagged-template expression nodes (#3059)

🩹 Fixes

  • update dependency @​angular/compiler to v21.2.12 (#3030)

⚠️ Breaking Changes

  • eslint-plugin: remove deprecated no-conflicting-lifecycle rule (#3060)
  • eslint-plugin: [prefer-on-push-component-change-detection] flag only opting out of OnPush, make recommended (#3058) prefer-on-push-component-change-detection no longer reports components that omit changeDetection (omission now means OnPush in v22); it now only reports components that opt out of OnPush via ChangeDetectionStrategy.Eager or the deprecated ChangeDetectionStrategy.Default. The rule is also now part of the recommended config, so projects extending it may see new reports — notably on components the Angular v22 migration set to Eager. The suggestion message id suggestAddChangeDetectionOnPush has been renamed to suggestChangeToOnPush.
  • drop support for eslint v8 and legacy eslintrc config format (#3056)
  • update to Angular 22 + TS 6, drop node 20 (96592269)

❤️ Thank You

v21.4.0

21.4.0 (2026-05-13)

🚀 Features

  • builder: add apply-suppressions option (#2974)
  • eslint-plugin-template: [cyclomatic-complexity] add variant option (#2976)

🩹 Fixes

  • update typescript-eslint packages to v8.57.0 (#2955)
  • update dependency @​angular/compiler to v21.2.6 (#2961)
  • update dependency eslint to v10.1.0 (#2983)
  • update dependency @​angular/compiler to v21.2.8 (#2996)

... (truncated)

Changelog

Sourced from @​angular-eslint/schematics's changelog.

22.0.0 (2026-06-07)

🚀 Features

  • ⚠️ drop support for eslint v8 and legacy eslintrc config format (#3056)

⚠️ Breaking Changes

  • drop support for eslint v8 and legacy eslintrc config format (#3056)

❤️ Thank You

21.4.0 (2026-05-13)

🩹 Fixes

  • schematics: sync application schema with upstream @​schematics/angular (#3027)

❤️ Thank You

21.3.1 (2026-03-17)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.3.0 (2026-03-05)

🚀 Features

  • add support for ESLint v10 (#2903)

❤️ Thank You

  • Jason Weinzierl

21.2.0 (2026-01-29)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.1.0 (2025-12-08)

🩹 Fixes

  • reference @​angular/cli peer in addition to direct dependencies (#2820)

❤️ Thank You

... (truncated)

Commits
  • 7ee4556 chore(release): publish 22.0.0
  • 526640f feat!: drop support for eslint v8 and legacy eslintrc config format (#3056)
  • 0a774c7 chore(release): publish 21.4.0
  • 7a48a63 fix(schematics): sync application schema with upstream @​schematics/angular (#...
  • 8f2afdc chore(release): publish 21.3.1
  • a959e4d chore(release): publish 21.3.0
  • 3ef7fb1 feat: add support for ESLint v10 (#2903)
  • 6fa321d chore(release): publish 21.2.0
  • 4fa7889 chore(release): publish 21.1.0
  • e7bb47b fix: reference @​angular/cli peer in addition to direct dependencies (#2820)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​angular-eslint/schematics since your current version.


Updates @angular/cli from 16.0.0 to 22.0.5

Release notes

Sourced from @​angular/cli's releases.

22.0.5

@​schematics/angular

CommitDescription
fix - 862a38069remove unused app tsconfig outDir

@​angular/cli

CommitDescription
fix - f099e641cgracefully handle package manager errors in command handler
fix - cf033ec48respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

CommitDescription
fix - f75085f4bprevent OS command injection in ssr-dev-server builder

@​angular/build

CommitDescription
fix - dfee1e7b1auto-inject localize/init in library unit tests
fix - aba718403inherit preserveSymlinks option from build target in unit-test builder
fix - 7c0d9f03cload zone.js dynamically for library unit tests
fix - 4288e4452scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

CommitDescription
fix - 5f774f891preserve response headers during redirect

22.0.4

@​angular/build

CommitDescription
fix - 46185ceacaggregate parallel worker performance timings on the main thread
perf - 5d7e29c41dispose builder result context early in non-watch mode

22.0.3

@​schematics/angular

CommitDescription
fix - 0eddea898remove default workspace vscode mcp.json configuration

22.0.2

@​angular/cli

CommitDescription
fix - 136fc2714support registry metadata fetching under bun package manager
perf - 2653dd5c7implement semaphore backpressure throttling in PackageManager

@​angular/build

CommitDescription
perf - 0b4a48addimplement semaphore backpressure throttling in JavaScriptTransformer

@​angular/ssr

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.5 (2026-07-01)

@​angular/cli

CommitTypeDescription
f099e641cfixgracefully handle package manager errors in command handler
cf033ec48fixrespect release age policy in update bootstrapping logic

@​schematics/angular

CommitTypeDescription
862a38069fixremove unused app tsconfig outDir

@​angular-devkit/build-angular

CommitTypeDescription
f75085f4bfixprevent OS command injection in ssr-dev-server builder

@​angular/build

CommitTypeDescription
dfee1e7b1fixauto-inject localize/init in library unit tests
aba718403fixinherit preserveSymlinks option from build target in unit-test builder
7c0d9f03cfixload zone.js dynamically for library unit tests
4288e4452fixscope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

CommitTypeDescription
5f774f891fixpreserve response headers during redirect

21.2.18 (2026-07-01)

@​angular/cli

CommitTypeDescription
61a810ab6fixrespect release age policy in update bootstrapping logic

@​angular/build

... (truncated)

Commits
  • 85a2698 release: cut the v22.0.5 release
  • 5c892ee build: update cross-repo angular dependencies
  • 7848e8d build: lock file maintenance
  • 862a380 fix(@​schematics/angular): remove unused app tsconfig outDir
  • 4288e44 fix(@​angular/build): scope createRequire module resolution using paths to pre...
  • 5f774f8 fix(@​angular/ssr): preserve response headers during redirect
  • 7c0d9f0 fix(@​angular/build): load zone.js dynamically for library unit tests
  • f75085f fix(@​angular-devkit/build-angular): prevent OS command injection in ssr-dev-s...
  • f099e64 fix(@​angular/cli): gracefully handle package manager errors in command handler
  • cf033ec fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [sigstore](https://github.com/sigstore/sigstore-js) to 4.1.1 and updates ancestor dependencies [sigstore](https://github.com/sigstore/sigstore-js), [@angular-eslint/schematics](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/schematics) and [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together.
Updates `sigstore` from 1.4.0 to 4.1.1
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/v1.4.0...sigstore@4.1.1)
Updates `@angular-eslint/schematics` from 16.0.1 to 22.0.0
- [Release notes](https://github.com/angular-eslint/angular-eslint/releases)
- [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/schematics/CHANGELOG.md)
- [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.0.0/packages/schematics)
Updates `@angular/cli` from 16.0.0 to 22.0.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.0.0...v22.0.5)
---
updated-dependencies:
- dependency-name: sigstore
dependency-version: 4.1.1
dependency-type: indirect
- dependency-name: "@angular-eslint/schematics"
dependency-version: 22.0.0
dependency-type: direct:development
- dependency-name: "@angular/cli"
dependency-version: 22.0.5
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants