build: update all non-major dependencies by angular-robot · Pull Request #3509 · angular/dev-infra

angular-robot · 2026-03-12T06:26:06Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@bazel/bazelisk	`1.26.0` → `1.28.1`
@google/genai	`1.43.0` → `1.44.0`
@microsoft/api-extractor (source)	`7.57.6` → `7.57.7`
@types/node (source)	`24.11.0` → `24.12.0`
firebase-functions	`7.0.6` → `7.1.1`
firebase-tools	`15.8.0` → `15.9.1`
folder-hash	`4.1.1` → `4.1.2`
magic-string	`0.30.17` → `0.30.21`
puppeteer (source)	`24.38.0` → `24.39.0`
puppeteer-core (source)	`24.38.0` → `24.39.0`
renovate (source)	`43.52.1` → `43.62.0`
rollup-plugin-dts	`6.1.1` → `6.3.0`
tinyglobby (source)	`0.2.12` → `0.2.15`
typescript-local (source)	`5.9.2` → `5.9.3`
zone.js (source, changelog)	`^0.15.0` → `^0.16.0`

Release Notes

bazelbuild/bazelisk (@bazel/bazelisk)

`v1.28.1`

Compare Source

Bazelisk v1.28.1 comes with a bug fix:

Bug Fixes & Improvements (Go)

Fix selection of wrapper scripts on Windows (#762).

We’d like to thank our amazing contributor @valco1994!

`v1.28.0`

Compare Source

Bazelisk v1.28.0 comes with a new feature and several improvements:

New Features (Go)

Bazelisk now supports OS/architecture-specific Bazel wrappers (#696).

Bug Fixes & Improvements (Go)

Properly handle $PATH values containing a = (#720).
$BAZELISK_BASE_URL: append rc suffix for release candidates (#722).
Fixed handling of powershell and batch wrappers (#732).
Updated completion script filename for fish shell (#733).
$BAZELISK_BASE_URL: added a regression test (#734).
Docs now mention installation via mise (#739).
Properly detect rolling release version in a rare edge case. (#745).
Improved error when completion command is not supported (#747).
Report a proper exit code when Bazel is terminated by a signal and use exec for bazelisk run on Unix (#757).

Bug Fixes & Improvements (JavaScript)

Wait for graceful exit of child process during shutdown (#730).

We’d like to thank our amazing contributors @cerisier, @chrisirhc, @hagl, @jmmv, @jwnimmer-tri, @jylenhof, @oxidase and @valco1994!

googleapis/js-genai (@google/genai)

`v1.44.0`

Compare Source

Features

Add gemini-3.1-flash-image-preview model (175603b)
Support signature for all Interaction tool types (b79108f)
Update data types from discovery doc. (249b15a)

microsoft/rushstack (@microsoft/api-extractor)

`v7.57.7`

Compare Source

Mon, 09 Mar 2026 15:14:07 GMT

Patches

Bump minimatch version from 10.2.1 to 10.2.3 to address CVE-2026-27903.

firebase/firebase-functions (firebase-functions)

`v7.1.1`

Compare Source

-Internal Docgen improvements

`v7.1.0`

Compare Source

Add an onGraphRequest method. (#1784, #1818)

firebase/firebase-tools (firebase-tools)

`v15.9.1`

Compare Source

Added support for next.config.ts and next.config.mts in Next.js deployments (#9871)
Enabled free trials without a billing instrument for Firebase Data Connect (#10042)

`v15.9.0`

Compare Source

Added *_EMULATOR_VERSION env variables to allow overriding specific versions of downloadable emulators
Updated the functions.config deprecation notice from March 2026 to March 2027 (#9941)
Detects when App Hosting fails to deploy, returning an error. (#8866)
Add firestore_query_collection tool back to MCP as it is not available in the OneMCP server yet.
Add support for custom resolvers in Firebase Data Connect (#9967)
Updated the Firebase Data Connect local toolkit to v3.2.1, which includes the following changes: (#10022)
- Resolved metadata pathing issue for @redact and @check directives

marc136/node-folder-hash (folder-hash)

`v4.1.2`

Compare Source

Full Changelog: marc136/node-folder-hash@v4.1.1...v4.1.2

Updated minimatch to fix #314

Rich-Harris/magic-string (magic-string)

`v0.30.21`

Compare Source

`v0.30.19`

Compare Source

Bug Fixes

this.outro need to be mapped (#300) (8852c8d)

Features

replace(All) support replacement for functions when the first parameter is a string (#304) (fd1d887)

`v0.30.18`

Compare Source

Bug Fixes

prevent infinite loop on empty input (#302) (0fd6253)

puppeteer/puppeteer (puppeteer)

`v24.39.0`

Compare Source

♻️ Chores

puppeteer: Synchronize puppeteer versions

Dependencies

The following workspace dependencies were updated
- dependencies
  - puppeteer-core bumped from 24.38.0 to 24.39.0

🎉 Features

expose Page.hasDevTools (#14758) (5ed7e77)

🛠️ Fixes

roll to Chrome 146.0.7680.66 (#14752) (60ace04)

renovatebot/renovate (renovate)

`v43.62.0`

Compare Source

Features

package-rules: add detectPlatform helper function (#41798) (ee2b775)

Documentation

mention XML namespaces in maven docs (#40205) (643b052)

Miscellaneous Chores

deps: update dependency graphql to v16.13.1 (main) (#41811) (d9369d1)

`v43.61.7`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.6 (main) (#41803) (5d55817)

Miscellaneous Chores

deps: update dependency tar to v7.5.11 [security] (main) (#41804) (169f89e)

Build System

deps: update dependency @renovatebot/pgp to v1.3.3 (main) (#41802) (d3a5062)

`v43.61.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.5 (main) (#41800) (1500008)

`v43.61.5`

Compare Source

Build System

deps: update opentelemetry-js monorepo (main) (#41799) (6cd0301)

`v43.61.4`

Compare Source

Build System

deps: update dependency @renovatebot/osv-offline to v2.2.1 (main) (#41795) (26a688c)

`v43.61.3`

Compare Source

Miscellaneous Chores

deps: update dependency lint-staged to v16.3.2 (main) (#41794) (da483c7)

Build System

deps: update dependency @renovatebot/detect-tools to v1.2.9 (main) (#41793) (35310cb)

`v43.61.2`

Compare Source

Miscellaneous Chores

deps: update dependency @smithy/util-stream to v4.5.16 (main) (#41792) (ed3f556)

Build System

deps: update dependency fs-extra to v11.3.4 (main) (#41791) (108458e)

`v43.61.1`

Compare Source

Bug Fixes

deps: update dependency mkdocs-material to v9.7.5 (main) (#41790) (d7e9e2f)

Documentation

versioning: auto-generate pin documentation (#41423) (82a649d), closes #36261

Miscellaneous Chores

tools: use async execa (#41712) (b35d7c9)

Build System

lazy load and initialize logger (#41425) (e438887)

`v43.61.0`

Compare Source

Features

manager/mise: add support for gh (#41336) (f2dcc1a)

Code Refactoring

manager/npm: remove duplicate ArtifactError type (#41779) (6061757)

Tests

workers/repository: cover ignored coverage (#41781) (8b3dc2c)

`v43.60.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.4 (main) (#41783) (2eb25c1)

Code Refactoring

types: rename lockFile to fileName in ArtifactError (#41631) (2d1e575)

`v43.60.5`

Compare Source

Build System

deps: update dependency node-html-parser to v7.1.0 (main) (#41776) (de75944)

`v43.60.4`

Compare Source

Bug Fixes

config/validation: correct error topic (#39208) (25fce38)

`v43.60.3`

Compare Source

Bug Fixes

json-schema: use anyOf for allowedValues (#41772) (fdbbf03), closes #41697

Documentation

mend-hosted: add information about IPs the Developer Platform uses (#39760) (2af9308)

Miscellaneous Chores

deps: update sigstore/cosign-installer action to v4.1.0 (main) (#41773) (f65bdcc)

`v43.60.2`

Compare Source

Code Refactoring

Drop more eslint plugins (#41740) (ee2c737)

Build System

deps: update dependency @renovatebot/osv-offline to v2.2.0 (main) (#41770) (4d3c190)

`v43.60.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.3 (main) (#41769) (1e6b8a7)

Miscellaneous Chores

deps: update dependency @biomejs/biome to v2.4.5 (main) (#41767) (c7470ad)

Code Refactoring

tools: use a distinct replacement start/end the lockFileMaintenance table (#41251) (ed6f713)

`v43.60.0`

Compare Source

Features

bazel-module: add Crate dependency extraction (#40393) (eb25574)
swift: add support for Package.swift traits argument (#41563) (e9297ed)

Bug Fixes

cargo: skip --precise for range-bumped crates to avoid stale Cargo.lock errors (#41537) (1273806)
copier: allow git+ and ssh+ for copier (#41725) (3b9fbc1)
deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.2 (main) (#41764) (321d121)

Documentation

auto-generate config filenames (#41254) (2026b4f), closes #40608

Code Refactoring

lint: use oxlint for type-aware rules (#41739) (41bfb86)
move onboardingCommitMessage to InheritConfig (#41380) (2dc7d9c)

`v43.59.7`

Compare Source

Bug Fixes

json-schema: allow free-string text if option has allowString (#41755) (e5e5f91), closes #40804

Miscellaneous Chores

deps: update dependency @containerbase/eslint-plugin to v1.1.35 (main) (#41758) (a18685e)
deps: update linters to v1.51.0 (main) (#41761) (7bfbcc7)

`v43.59.6`

Compare Source

Bug Fixes

gradle: skip exclusiveContent registries if all filters are invalid or unsupported (#41742) (544fcfb)

Code Refactoring

replacements: combine ojdbc and ojdbc11 into one entry (#41555) (239e796)

Tests

assert data JSON files have alphabetically sorted keys (#41722) (69640fe)

Continuous Integration

add auto label for "please follow our Discussion template" (#41754) (d99781e)

`v43.59.5`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.1 (main) (#41751) (c3e081e)

Documentation

update references to jaegertracing/jaeger to v2.16.0 (main) (#41743) (a0a793c)
update references to otel/opentelemetry-collector-contrib to v0.147.0 (main) (#41744) (861f73e)
update references to renovate/renovate (main) (#41747) (168825c)
update references to renovatebot/github-action to v46.1.4 (main) (#41748) (63b1af2)

Miscellaneous Chores

deps: update containerbase/internal-tools action to v4.1.22 (main) (#41745) (4f4e937)
deps: update dependency @containerbase/istanbul-reports-html to v1.1.34 (main) (#41749) (81f7fe7)
deps: update dependency @containerbase/semantic-release-pnpm to v1.3.24 (main) (#41746) (db9df03)

Code Refactoring

consolidate previous groups into kubernetes monorepo (#41454) (bb6d793)

`v43.59.4`

Compare Source

Miscellaneous Chores

deps: update dependency @types/node to v24.11.0 (main) (#41729) (78733d4)
deps: update dependency conventional-changelog-conventionalcommits to v9.2.0 (main) (#41738) (d4fd762)
deps: update dependency globals to v17.4.0 (main) (#41732) (f8ff14d)
deps: update dependency lint-staged to v16.3.0 (main) (#41730) (cf89c98)
deps: update dependency lint-staged to v16.3.1 (main) (#41733) (e811abd)

Build System

deps: update dependency sax to v1.5.0 (main) (#41741) (9893e80)

`v43.59.3`

Compare Source

Bug Fixes

crate: dont log warning if metadata fetch fails (#41601) (753fc46)

Miscellaneous Chores

deps: update aquasecurity/trivy-action action to v0.35.0 (main) (#41728) (a1a1d64)

Build System

deps: update dependency editorconfig to v3.0.2 (main) (#41727) (68b27a2)

`v43.59.2`

Compare Source

Build System

deps: update dependency moo to v0.5.3 (main) (#41724) (191f085)

`v43.59.1`

Compare Source

Bug Fixes

abandonments: Add eslint-plugin-no-only-tests exception (#41717) (97b9ca3)

`v43.59.0`

Compare Source

Features

replacements: add com.edb:edb-jdbc to com.enterprisedb:edb-jdbc (#40053) (e016d13)

Bug Fixes

workers/repository: handle no depName but packageName (#41720) (4f0d819), closes #41716

Documentation

use tools exec to fetch github issues (#41711) (68f623b)

Miscellaneous Chores

tools: fix github issue collector command (#41721) (e75097e)

`v43.58.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.21.0 (main) (#41710) (db159a5)

Build System

deps: update dependency ae-cvss-calculator to v1.0.11 (main) (#41713) (520d7e2)

`v43.57.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.19.0 (main) (#41706) (a30bb59)
deps: update ghcr.io/renovatebot/base-image docker tag to v13.20.1 (main) (#41709) (460f359)

`v43.56.1`

Compare Source

Bug Fixes

config: warn if registryUrls is set at top-level in config (#41682) (bfc3391)

Miscellaneous Chores

deps: update dependency @types/node to v24.10.15 (main) (#41702) (ca07497)

`v43.56.0`

Compare Source

Features

managers/npm: allow specifying toolSettings.nodeMaxMemory (#40957) (bc82cff), closes #40942

Documentation

json-schema: add suggested extends values (#41697) (3ebe3f0), closes #40439

`v43.55.9`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.6 (main) (#41695) (ac8d6e3)

Documentation

reword . in parents to (the root document) (#41689) (0152b90)

`v43.55.8`

Compare Source

Bug Fixes

gomod: add -modfile flag for non-default go.mod filenames (#41640) (ab409e9)

`v43.55.7`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.5 (main) (#41694) (2b2179e)

Miscellaneous Chores

deps: update dependency pnpm to v10.30.3 (main) (#41691) (22945ee)

`v43.55.6`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.4 (main) (#41687) (f9e4548)

Build System

deps: update dependency @opentelemetry/semantic-conventions to v1.40.0 (main) (#41688) (a3744ec)

`v43.55.5`

Compare Source

Build System

deps: update dependency simple-git to v3.32.3 (main) (#41686) (6b503a2)

`v43.55.4`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.2 (main) (#41684) (4ea825c)

`v43.55.3`

Compare Source

Build System

deps: update dependency minimatch to v10.2.4 (main) (#41671) (8510638)

`v43.55.2`

Compare Source

Miscellaneous Chores

deps: lock file maintenance (main) (#41668) (276d131)
deps: update dependency @types/node to v24.10.14 (main) (#41678) (883e419)
deps: update dependency tar to v7.5.10 [security] (main) (#41679) (53b92fc)

Build System

deps: update dependency cronstrue to v3.13.0 (main) (#41680) (785cf44)

`v43.55.1`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.1 (main) (#41677) (375be90)

`v43.55.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.18.0 (main) (#41675) (7cdd94c)

Miscellaneous Chores

deps: update ghcr.io/containerbase/devcontainer docker tag to v14.5.0 (main) (#41670) (1bb780c)

`v43.54.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v13.17.0 (main) (#41674) (81bbaba)

`v43.53.0`

Compare Source

Features

workers/repository: raise artifact error if pending version used in an update (#41629) (32b550c), closes #41624

Bug Fixes

renovate-config-validator: don't error on --version (#41669) (98523e2), closes #41667

Documentation

minimumReleaseAge: clarify package manager support (#41656) (ea8ba93)

Miscellaneous Chores

deps: update dependency nyc to v18 (main) (#41665) (2a4d07b)
deps: update dependency vite to v8.0.0-beta.15 (main) (#41664) (39b3a8f)
deps: update github artifact actions (main) (major) (#41666) (552f8ad)

Swatinem/rollup-plugin-dts (rollup-plugin-dts)

`v6.3.0`

Compare Source

Features:

Support default export of object/array literals
Add support for child imports and nesting in namespaces

Fixes:

Rewrite names of module declarations with relative paths
Remove unused reference tracking

Thank you:

Features, fixes and improvements in this release have been contributed by:

`v6.2.3`

Compare Source

Fixes:

Preserve imports for types used in typeof generic

Thank you:

Features, fixes and improvements in this release have been contributed by:

@dayongkr

`v6.2.1`

Compare Source

Fixes:

Disable problematic type-only import/export changes

Thank you:

Features, fixes and improvements in this release have been contributed by:

@kricsleo

`v6.2.0`

[Compare Source](https://redirect.github.com/Swatinem/rollup-plu

gemini-code-assist

Code Review

This PR updates numerous non-major dependencies across the repository. While most changes are straightforward patch and minor version bumps, I've identified two issues. First, an update to Renovate's dependencies causes a major version downgrade of protobufjs, which is a potential risk. Second, the @google/genai dependency in one of the packages was not updated as stated in the PR description. Please review these points.

gemini-code-assist · 2026-03-12T06:28:36Z

+  '@opentelemetry/otlp-transformer@0.213.0(@opentelemetry/api@1.9.0)':
+    dependencies:
+      '@opentelemetry/api': 1.9.0
+      '@opentelemetry/api-logs': 0.213.0
+      '@opentelemetry/core': 2.6.0(@opentelemetry/api@1.9.0)
+      '@opentelemetry/resources': 2.6.0(@opentelemetry/api@1.9.0)
+      '@opentelemetry/sdk-logs': 0.213.0(@opentelemetry/api@1.9.0)
+      '@opentelemetry/sdk-metrics': 2.6.0(@opentelemetry/api@1.9.0)
+      '@opentelemetry/sdk-trace-base': 2.6.0(@opentelemetry/api@1.9.0)
+      protobufjs: 7.5.4


The update to @opentelemetry/otlp-transformer@0.213.0 has resulted in a major version downgrade for the transitive dependency protobufjs from v8.0.0 to v7.5.4. This could introduce breaking changes and should be investigated to ensure it's safe and intentional.

gemini-code-assist · 2026-03-12T06:28:36Z

      '@google/genai':
        specifier: ^1.43.0
-        version: 1.43.0(@modelcontextprotocol/sdk@1.27.1(supports-color@10.2.2))(bufferutil@4.1.0)(supports-color@10.2.2)(utf-8-validate@6.0.6)
+        version: 1.43.0(@modelcontextprotocol/sdk@1.27.1)(bufferutil@4.1.0)(utf-8-validate@6.0.6)


The PR description indicates that @google/genai should be updated to 1.44.0, but github-actions/labeling/package.json was not updated. As a result, it still resolves to 1.43.0 here. Please update the dependency in github-actions/labeling/package.json to ^1.44.0.

See associated pull request for more information.

alan-agius4 · 2026-03-12T13:18:16Z

This PR was merged into the repository. The changes were merged into the following branches:

main: fc63c7d

angular-automatic-lock-bot · 2026-04-12T00:24:14Z

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}

angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Mar 12, 2026

gemini-code-assist Bot reviewed Mar 12, 2026

View reviewed changes

alan-agius4 approved these changes Mar 12, 2026

View reviewed changes

angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from facf5ae to 231d205 Compare March 12, 2026 11:16

build: update all non-major dependencies

100eb94

See associated pull request for more information.

angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from 231d205 to 100eb94 Compare March 12, 2026 12:13

alan-agius4 merged commit fc63c7d into angular:main Mar 12, 2026
12 of 13 checks passed

angular-automatic-lock-bot Bot locked and limited conversation to collaborators Apr 12, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build: update all non-major dependencies#3509

build: update all non-major dependencies#3509
alan-agius4 merged 1 commit intoangular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies

angular-robot commented Mar 12, 2026 •

edited

Loading

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

gemini-code-assist Bot Mar 12, 2026

Uh oh!

gemini-code-assist Bot Mar 12, 2026

Uh oh!

Uh oh!

alan-agius4 commented Mar 12, 2026

Uh oh!

angular-automatic-lock-bot Bot commented Apr 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

angular-robot commented Mar 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes & Improvements (Go)

New Features (Go)

Bug Fixes & Improvements (Go)

Bug Fixes & Improvements (JavaScript)

Features

Patches

Bug Fixes

Features

Bug Fixes

♻️ Chores

Dependencies

🎉 Features

🛠️ Fixes

Features

Documentation

Miscellaneous Chores

Bug Fixes

Miscellaneous Chores

Build System

Bug Fixes

Build System

Build System

Miscellaneous Chores

Build System

Miscellaneous Chores

Build System

Bug Fixes

Documentation

Miscellaneous Chores

Build System

Features

Code Refactoring

Tests

Bug Fixes

Code Refactoring

Build System

Bug Fixes

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Build System

Bug Fixes

Miscellaneous Chores

Code Refactoring

Features

Bug Fixes

Documentation

Code Refactoring

Bug Fixes

Miscellaneous Chores

Bug Fixes

Code Refactoring

Tests

Continuous Integration

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Miscellaneous Chores

Build System

Bug Fixes

Miscellaneous Chores

Build System

Build System

Bug Fixes

Features

Bug Fixes

Documentation

Miscellaneous Chores

Features

Build System

Features

Bug Fixes

Miscellaneous Chores

Features

angular-robot commented Mar 12, 2026 •

edited

Loading