Bump tar, @angular-devkit/build-angular and @angular/cli by dependabot[bot] · Pull Request #54 · Edirom/CollAna

dependabot · 2026-04-16T15:39:15Z

Bumps tar to 7.5.13 and updates ancestor dependencies tar, @angular-devkit/build-angular and @angular/cli. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.13

Changelog

Sourced from tar's changelog.

Changelog

7.5

Added zstd compression support.

Consistent TOCTOU behavior in sync t.list

Only read from ustar block if not specified in Pax

Fix sync tar.list when file size reduces while reading

Sanitize absolute linkpaths properly

Prevent writing hardlink entries to the archive ahead of their file target

7.4

Deprecate onentry in favor of onReadEntry for clarity.

7.3

Add onWriteEntry option

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Drop support for node <18

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

d6611ae 7.5.13
119c401 fix(extract): prevent raced symlink writes outside cwd
2a294d3 7.5.12
01082a4 fix: reject top promise on floating addFilesAsync rejections
dd1c36a linting
35a1ffe doc: more clarity in security warning
bf776f6 7.5.11
f48b5fa prevent escaping symlinks with drive-relative paths
97cff15 docs: more security info
2b72abc 7.5.10
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @angular-devkit/build-angular from 14.2.13 to 21.2.7

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.7

@angular/cli

Commit Description

handle missing package manager during analytics initialization

@angular/build

Commit Description

preserve coverage ignore comments in development

show clear error when styleUrl points to a TypeScript file

21.2.6

@angular/cli

Commit Description

fix sourceRoot resolution for MCP projects tool

@angular/build

Commit Description

ensure transitive SCSS partial errors are tracked in watch mode

ensure Vitest mock patching is executed only once

preserve error stack traces during prerendering

scope CHROME_BIN executable path to individual playwright instances

21.2.5

@angular/cli

Commit Description

support custom port in MCP devserver start tool

@angular/ssr

Commit Description

allow underscores in host validation

patch Headers.forEach in cloneRequestAndPatchHeaders

21.2.4

@angular/cli

Commit Description

restore console methods after logger completes

@angular/build

Commit Description

deduplicate and merge coverage excludes with vitest

prevent reporter duplicates by explicitly overriding Vitest configuration

remove default for unit-test coverage option

warn about performance of test.exclude in vitest configuration

warn when vitest watch config conflicts with builder

@angular/ssr

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.7 (2026-04-08)

@angular/cli

Commit Type Description

971041aa1 fix handle missing package manager during analytics initialization

@angular/build

Commit Type Description

365cce81d fix preserve coverage ignore comments in development

9f74660c3 fix show clear error when styleUrl points to a TypeScript file

20.3.23 (2026-04-08)

@angular/build

Commit Type Description

ccab02ba0 fix update vite to 7.3.2

19.2.24 (2026-04-08)

@angular/build

Commit Type Description

f4595d599 fix update vite to 6.4.2

22.0.0-next.4 (2026-04-01)

@angular/cli

Commit Type Description

87d99e98b feat support custom port in MCP devserver start tool

... (truncated)

Commits

22a108e release: cut the v21.2.7 release
9f74660 fix(@angular/build): show clear error when styleUrl points to a TypeScript file
625c5cb build: update cross-repo angular dependencies
44783cc build: lock file maintenance
e15b22d docs: add spam policy and saved reply
dcb36fd build: update dependency vite to v7.3.2
d1605c6 test(@angular/build): verify coverage ignore comments are preserved during co...
365cce8 fix(@angular/build): preserve coverage ignore comments in development
7a27774 build: update github/codeql-action action to v4.35.1
971041a fix(@angular/cli): handle missing package manager during analytics initializa...
Additional commits viewable in compare view

Updates @angular/cli from 14.2.13 to 21.2.7

Release notes

Sourced from @angular/cli's releases.

21.2.7

@angular/cli

Commit Description

handle missing package manager during analytics initialization

@angular/build

Commit Description

preserve coverage ignore comments in development

show clear error when styleUrl points to a TypeScript file

21.2.6

@angular/cli

Commit Description

fix sourceRoot resolution for MCP projects tool

@angular/build

Commit Description

ensure transitive SCSS partial errors are tracked in watch mode

ensure Vitest mock patching is executed only once

preserve error stack traces during prerendering

scope CHROME_BIN executable path to individual playwright instances

21.2.5

@angular/cli

Commit Description

support custom port in MCP devserver start tool

@angular/ssr

Commit Description

allow underscores in host validation

patch Headers.forEach in cloneRequestAndPatchHeaders

21.2.4

@angular/cli

Commit Description

restore console methods after logger completes

@angular/build

Commit Description

deduplicate and merge coverage excludes with vitest

prevent reporter duplicates by explicitly overriding Vitest configuration

remove default for unit-test coverage option

warn about performance of test.exclude in vitest configuration

warn when vitest watch config conflicts with builder

@angular/ssr

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

21.2.7 (2026-04-08)

@angular/cli

Commit Type Description

971041aa1 fix handle missing package manager during analytics initialization

@angular/build

Commit Type Description

365cce81d fix preserve coverage ignore comments in development

9f74660c3 fix show clear error when styleUrl points to a TypeScript file

20.3.23 (2026-04-08)

@angular/build

Commit Type Description

ccab02ba0 fix update vite to 7.3.2

19.2.24 (2026-04-08)

@angular/build

Commit Type Description

f4595d599 fix update vite to 6.4.2

22.0.0-next.4 (2026-04-01)

@angular/cli

Commit Type Description

87d99e98b feat support custom port in MCP devserver start tool

... (truncated)

Commits

22a108e release: cut the v21.2.7 release
9f74660 fix(@angular/build): show clear error when styleUrl points to a TypeScript file
625c5cb build: update cross-repo angular dependencies
44783cc build: lock file maintenance
e15b22d docs: add spam policy and saved reply
dcb36fd build: update dependency vite to v7.3.2
d1605c6 test(@angular/build): verify coverage ignore comments are preserved during co...
365cce8 fix(@angular/build): preserve coverage ignore comments in development
7a27774 build: update github/codeql-action action to v4.35.1
971041a fix(@angular/cli): handle missing package manager during analytics initializa...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.13 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `tar` from 6.2.1 to 7.5.13 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.13) Updates `@angular-devkit/build-angular` from 14.2.13 to 21.2.7 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@14.2.13...v21.2.7) Updates `@angular/cli` from 14.2.13 to 21.2.7 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@14.2.13...v21.2.7) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.13 dependency-type: indirect - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.7 dependency-type: direct:production - dependency-name: "@angular/cli" dependency-version: 21.2.7 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 16, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump tar, @angular-devkit/build-angular and @angular/cli#54

Bump tar, @angular-devkit/build-angular and @angular/cli#54
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/multi-a11b40778f

dependabot Bot commented on behalf of github Apr 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	preserve coverage ignore comments in development
	show clear error when styleUrl points to a TypeScript file

Commit	Description
	ensure transitive SCSS partial errors are tracked in watch mode
	ensure Vitest mock patching is executed only once
	preserve error stack traces during prerendering
	scope CHROME_BIN executable path to individual playwright instances

Commit	Description
	allow underscores in host validation
	patch Headers.forEach in cloneRequestAndPatchHeaders

Commit	Description
	deduplicate and merge coverage excludes with vitest
	prevent reporter duplicates by explicitly overriding Vitest configuration
	remove default for unit-test coverage option
	warn about performance of test.exclude in vitest configuration
	warn when vitest watch config conflicts with builder

Commit	Type	Description
365cce81d	fix	preserve coverage ignore comments in development
9f74660c3	fix	show clear error when styleUrl points to a TypeScript file

Conversation

dependabot Bot commented on behalf of github Apr 16, 2026

Changelog

7.5

7.4

7.3

7.2

7.1

7.0

21.2.7

@​angular/cli

@​angular/build

21.2.6

@​angular/cli

@​angular/build

21.2.5

@​angular/cli

@​angular/ssr

21.2.4

@​angular/cli

@​angular/build

@​angular/ssr

21.2.7 (2026-04-08)

@​angular/cli

@​angular/build

20.3.23 (2026-04-08)

@​angular/build

19.2.24 (2026-04-08)

@​angular/build

22.0.0-next.4 (2026-04-01)

@​angular/cli

21.2.7

@​angular/cli

@​angular/build

21.2.6

@​angular/cli

@​angular/build

21.2.5

@​angular/cli

@​angular/ssr

21.2.4

@​angular/cli

@​angular/build

@​angular/ssr

21.2.7 (2026-04-08)

@​angular/cli

@​angular/build

20.3.23 (2026-04-08)

@​angular/build

19.2.24 (2026-04-08)

@​angular/build

22.0.0-next.4 (2026-04-01)

@​angular/cli

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/ssr`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/build`

`@angular/cli`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/ssr`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/build`

`@angular/cli`