Skip to content

build(deps): bump tar, @angular-eslint/schematics and @angular/cli#1356

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-bc7fae32b9
Open

build(deps): bump tar, @angular-eslint/schematics and @angular/cli#1356
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-bc7fae32b9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps tar to 7.5.20 and updates ancestor dependencies tar, @angular-eslint/schematics and @angular/cli. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.20

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @angular-eslint/schematics from 16.3.1 to 22.1.0

Release notes

Sourced from @​angular-eslint/schematics's releases.

v22.1.0

22.1.0 (2026-07-12)

🚀 Features

  • support eslint inline directive comments within element opening tags (#3097)
  • eslint-plugin: add prefer-service-decorator rule (#3073)
  • eslint-plugin: [inject-at-top] add rule requiring inject() at the top of the class (#3009)
  • eslint-plugin-template: add require-switch-default rule (#3091)
  • eslint-plugin-template: add no-outerhtml rule (#3092)

🩹 Fixes

  • update eslint monorepo to v10.4.1 (#3065)
  • update typescript-eslint packages to v8.62.1 (#3082)
  • update dependency eslint to v10.6.0 (#3102)
  • eslint-plugin: [no-implicit-take-until-destroyed] avoid false positive for methods called from constructor (#3011)

❤️ Thank You

  • Adi-Marian Mutu
  • Guillaume DROUARD
  • Pierluigi Lenoci

v22.0.0

22.0.0 (2026-06-07)

As always we recommend that you update your existing workspaces by using ng update as we provide some helpful schematics to help migrate your workspaces to the latest and greatest. Running the following will update Angular, the Angular CLI and angular-eslint together:

ng update @angular/core @angular/cli angular-eslint

🚀 Features

  • ⚠️ update to Angular 22 + TS 6, drop node 20 (96592269)
  • ⚠️ drop support for eslint v8 and legacy eslintrc config format (#3056)
  • support the Angular v22 @​Service decorator (#3057)
  • builder: add suppressionsLocation option (#3034)
  • ⚠️ eslint-plugin: [prefer-on-push-component-change-detection] flag only opting out of OnPush, make recommended (#3058)
  • ⚠️ eslint-plugin: remove deprecated no-conflicting-lifecycle rule (#3060)
  • template-parser: traverse v22 arrow function, spread and tagged-template expression nodes (#3059)

🩹 Fixes

  • update dependency @​angular/compiler to v21.2.12 (#3030)

⚠️ Breaking Changes

  • eslint-plugin: remove deprecated no-conflicting-lifecycle rule (#3060)

... (truncated)

Changelog

Sourced from @​angular-eslint/schematics's changelog.

22.1.0 (2026-07-12)

This was a version bump only for schematics to align it with other projects, there were no code changes.

22.0.0 (2026-06-07)

🚀 Features

  • ⚠️ drop support for eslint v8 and legacy eslintrc config format (#3056)

⚠️ Breaking Changes

  • drop support for eslint v8 and legacy eslintrc config format (#3056)

❤️ Thank You

21.4.0 (2026-05-13)

🩹 Fixes

  • schematics: sync application schema with upstream @​schematics/angular (#3027)

❤️ Thank You

21.3.1 (2026-03-17)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.3.0 (2026-03-05)

🚀 Features

  • add support for ESLint v10 (#2903)

❤️ Thank You

  • Jason Weinzierl

21.2.0 (2026-01-29)

This was a version bump only for schematics to align it with other projects, there were no code changes.

21.1.0 (2025-12-08)

🩹 Fixes

... (truncated)

Commits
  • a666e1b chore(release): publish 22.1.0
  • 578bf35 chore(repo): migrate to nx 23 (#3108)
  • 5c12bad chore: fix formatting
  • 7ee4556 chore(release): publish 22.0.0
  • 526640f feat!: drop support for eslint v8 and legacy eslintrc config format (#3056)
  • 0a774c7 chore(release): publish 21.4.0
  • 7a48a63 fix(schematics): sync application schema with upstream @​schematics/angular (#...
  • 8f2afdc chore(release): publish 21.3.1
  • a959e4d chore(release): publish 21.3.0
  • 3ef7fb1 feat: add support for ESLint v10 (#2903)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​angular-eslint/schematics since your current version.


Updates @angular/cli from 16.2.16 to 22.0.7

Release notes

Sourced from @​angular/cli's releases.

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces

22.0.6

@​angular/build

Commit Description
fix - df49966c6 fallback to build target preserveSymlinks option in karma runner
fix - 9906add5b prevent externalizing builder-injected i18n locale data
fix - 070155f6e strip all vite id prefixes from minified code with external dependencies

@​angular/ssr

Commit Description
fix - c9aa354b1 replace all route parameters when resolving relative redirects

22.0.5

@​schematics/angular

Commit Description
fix - 862a38069 remove unused app tsconfig outDir

@​angular/cli

Commit Description
fix - f099e641c gracefully handle package manager errors in command handler
fix - cf033ec48 respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

Commit Description
fix - f75085f4b prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit Description
fix - dfee1e7b1 auto-inject localize/init in library unit tests
fix - aba718403 inherit preserveSymlinks option from build target in unit-test builder
fix - 7c0d9f03c load zone.js dynamically for library unit tests
fix - 4288e4452 scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit Description
fix - 5f774f891 preserve response headers during redirect

22.0.4

@​angular/build

Commit Description
fix - 46185ceac aggregate parallel worker performance timings on the main thread

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.7 (2026-07-15)

@​angular/cli

Commit Type Description
e85c10ccb fix copy packageManager field and yarn config for temp installs
b87cafec0 fix support resolving subproject dependencies in pnpm workspaces

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

... (truncated)

Commits
  • e744701 release: cut the v22.0.7 release
  • a902c38 build: lock file maintenance
  • 12fb387 build: update pnpm to v10.34.5
  • 22d843e build: update cross-repo angular dependencies to v22.0.6
  • b87cafe fix(@​angular/cli): support resolving subproject dependencies in pnpm workspaces
  • e85c10c fix(@​angular/cli): copy packageManager field and yarn config for temp installs
  • 5584a58 build: update babel monorepo to v7.29.7
  • cc45a54 build: update dependency http-proxy-middleware to v3.0.7
  • 31345b6 build: lock file maintenance
  • dbd61b1 release: cut the v22.0.6 release
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.20 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular-eslint/schematics](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/schematics) and [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `tar` from 6.2.1 to 7.5.20
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.5.20)

Updates `@angular-eslint/schematics` from 16.3.1 to 22.1.0
- [Release notes](https://github.com/angular-eslint/angular-eslint/releases)
- [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/schematics/CHANGELOG.md)
- [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.1.0/packages/schematics)

Updates `@angular/cli` from 16.2.16 to 22.0.7
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.2.16...v22.0.7)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.20
  dependency-type: indirect
- dependency-name: "@angular-eslint/schematics"
  dependency-version: 22.1.0
  dependency-type: direct:development
- dependency-name: "@angular/cli"
  dependency-version: 22.0.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants