chore(deps): bump @modelcontextprotocol/sdk and @angular/cli in /src by dependabot[bot] · Pull Request #787 · ikemtz/AngularMonoRepo

dependabot · 2026-10-12T11:12:19Z

Removes @modelcontextprotocol/sdk. It's no longer used after updating ancestor dependency @angular/cli. These dependencies need to be updated together.

Removes @modelcontextprotocol/sdk

Updates @angular/cli from 22.1.9 to 22.2.3

Release notes

Sourced from @angular/cli's releases.

22.2.3

@schematics/angular

Commit Description

keep the workspace build version in the use-application-builder migration

@angular/cli

Commit Description

accept multi-digit array indices in ng config

keep ng version working when the package manager is not installed

resolve package name in npm workspace members

@angular-devkit/schematics

Commit Description

avoid stack overflow when chaining many rules

@angular/build

Commit Description

add CSP nonce to stylesheet and modulepreload link elements

always use AOT when extracting i18n messages

coalesce external watcher directories to avoid macOS FSEvents limit

disable Vitest fsModuleCache in unit-test builder

ensure Sass importers return global Promise instances

keep Vite server file watcher disabled in Vitest watch mode

sort discovered unit-test files for deterministic builds

use module.registerHooks() for in-memory ESM loader

avoid invalidating Angular diagnostic cache on stylesheet change

resolve asset patterns concurrently with bounded concurrency

@angular/ssr

Commit Description

preserve preload metadata for nested empty-path routes

preserve query parameters on relative route redirects

resolve relative redirects against the parent route

22.2.2

@angular-devkit/build-angular

Commit Description

preserve Host header when proxying in ssr-dev-server

@angular/build

Commit Description

keep the order of glob entries in the proxy configuration

support a string context in array-form proxy configurations

22.2.1

@angular-devkit/schematics-cli

Commit Description

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.2.3 (2026-10-15)

@angular/cli

Commit Type Description

3158e865f fix accept multi-digit array indices in ng config

bcff0e76a fix keep ng version working when the package manager is not installed

5570c91d2 fix resolve package name in npm workspace members

@schematics/angular

Commit Type Description

881865f36 fix keep the workspace build version in the use-application-builder migration

@angular-devkit/schematics

Commit Type Description

cf1f3b9d4 fix avoid stack overflow when chaining many rules

@angular/build

Commit Type Description

1d477d6bc fix add CSP nonce to stylesheet and modulepreload link elements

fbe208f83 fix always use AOT when extracting i18n messages

c1c4216a6 fix coalesce external watcher directories to avoid macOS FSEvents limit

792990bc2 fix disable Vitest fsModuleCache in unit-test builder

82439399c fix ensure Sass importers return global Promise instances

a818de415 fix keep Vite server file watcher disabled in Vitest watch mode

91bad469e fix sort discovered unit-test files for deterministic builds

e84db4af7 fix use module.registerHooks() for in-memory ESM loader

a428021b7 perf avoid invalidating Angular diagnostic cache on stylesheet change

b0ac394a0 perf resolve asset patterns concurrently with bounded concurrency

@angular/ssr

Commit Type Description

bd09b98fc fix preserve preload metadata for nested empty-path routes

a92546892 fix preserve query parameters on relative route redirects

a2b86cc94 fix resolve relative redirects against the parent route

21.2.27 (2026-10-14)

... (truncated)

Commits

afa3814 release: cut the v22.2.3 release
cc05ecf build: update pnpm to v12.11.2
c1c4216 fix(@angular/build): coalesce external watcher directories to avoid macOS FSE...
116cb93 build: update cross-repo angular dependencies
e84db4a fix(@angular/build): use module.registerHooks() for in-memory ESM loader
cf1f3b9 fix(@angular-devkit/schematics): avoid stack overflow when chaining many rules
91bad46 fix(@angular/build): sort discovered unit-test files for deterministic builds
bd09b98 fix(@angular/ssr): preserve preload metadata for nested empty-path routes
9313776 build: lock file maintenance
c0b6659 build: update dependency zod to v4.6.6
Additional commits viewable in compare view

socket-security · 2026-10-12T11:13:23Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@angular/cli@22.1.9 ⏵ 22.2.3			⁺¹	⁺¹

View full report

Removes [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk). It's no longer used after updating ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Removes `@modelcontextprotocol/sdk` Updates `@angular/cli` from 22.1.9 to 22.2.3 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.1.9...v22.2.3) --- updated-dependencies: - dependency-name: "@angular/cli" dependency-version: 22.2.2 dependency-type: direct:development - dependency-name: "@modelcontextprotocol/sdk" dependency-version: dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-24T00:09:22Z

Superseded by #799.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 12, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/src/multi-6a8874f207 branch from 38cebbf to c8b0ad9 Compare October 19, 2026 18:59

dependabot Bot closed this Oct 24, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/src/multi-6a8874f207 branch October 24, 2026 00:09

Navigation Menu

Repository navigation

chore(deps): bump @modelcontextprotocol/sdk and @angular/cli in /src - #787

chore(deps): bump @modelcontextprotocol/sdk and @angular/cli in /src#787
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/multi-6a8874f207

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	accept multi-digit array indices in ng config
	keep ng version working when the package manager is not installed
	resolve package name in npm workspace members

Commit	Description
	add CSP nonce to stylesheet and modulepreload link elements
	always use AOT when extracting i18n messages
	coalesce external watcher directories to avoid macOS FSEvents limit
	disable Vitest fsModuleCache in unit-test builder
	ensure Sass importers return global Promise instances
	keep Vite server file watcher disabled in Vitest watch mode
	sort discovered unit-test files for deterministic builds
	use module.registerHooks() for in-memory ESM loader
	avoid invalidating Angular diagnostic cache on stylesheet change
	resolve asset patterns concurrently with bounded concurrency

Commit	Description
	preserve preload metadata for nested empty-path routes
	preserve query parameters on relative route redirects
	resolve relative redirects against the parent route

Commit	Description
	keep the order of glob entries in the proxy configuration
	support a string `context` in array-form proxy configurations

Commit	Type	Description
3158e865f	fix	accept multi-digit array indices in ng config
bcff0e76a	fix	keep ng version working when the package manager is not installed
5570c91d2	fix	resolve package name in npm workspace members

Commit	Type	Description
1d477d6bc	fix	add CSP nonce to stylesheet and modulepreload link elements
fbe208f83	fix	always use AOT when extracting i18n messages
c1c4216a6	fix	coalesce external watcher directories to avoid macOS FSEvents limit
792990bc2	fix	disable Vitest fsModuleCache in unit-test builder
82439399c	fix	ensure Sass importers return global Promise instances
a818de415	fix	keep Vite server file watcher disabled in Vitest watch mode
91bad469e	fix	sort discovered unit-test files for deterministic builds
e84db4af7	fix	use module.registerHooks() for in-memory ESM loader
a428021b7	perf	avoid invalidating Angular diagnostic cache on stylesheet change
b0ac394a0	perf	resolve asset patterns concurrently with bounded concurrency

Commit	Type	Description
bd09b98fc	fix	preserve preload metadata for nested empty-path routes
a92546892	fix	preserve query parameters on relative route redirects
a2b86cc94	fix	resolve relative redirects against the parent route

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

22.2.3

@​schematics/angular

@​angular/cli

@​angular-devkit/schematics

@​angular/build

@​angular/ssr

22.2.2

@​angular-devkit/build-angular

@​angular/build

22.2.1

@​angular-devkit/schematics-cli

22.2.3 (2026-10-15)

@​angular/cli

@​schematics/angular

@​angular-devkit/schematics

@​angular/build

@​angular/ssr

21.2.27 (2026-10-14)

Uh oh!

socket-security Bot commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Oct 24, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

`@schematics/angular`

`@angular/cli`

`@angular-devkit/schematics`

`@angular/build`

`@angular/ssr`

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/schematics-cli`

`@angular/cli`

`@schematics/angular`

`@angular-devkit/schematics`

`@angular/build`

`@angular/ssr`

socket-security Bot commented Oct 12, 2026 •

edited

Loading