chore(deps): bump @hono/node-server and @angular/cli by dependabot[bot] · Pull Request #1854 · ionic-team/ionic-conference-app

dependabot · 2026-08-20T19:09:07Z

Bumps @hono/node-server to 2.1.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @hono/node-server from 1.19.14 to 2.1.1

Release notes

Sourced from @hono/node-server's releases.

v2.1.1

What's Changed

perf: lazily materialize request headers by @BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

feat: add Early Hints (HTTP 103) middleware by @bilal-azam in honojs/node-server#378

fix(listener): avoid uncaught error when force-closing a non-standard socket by @mohamedramadan14 in honojs/node-server#383

New Contributors

@bilal-azam made their first contribution in honojs/node-server#378

@mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

v2.0.12

What's Changed

test: replace supertest by @BlankParticle in honojs/node-server#379

fix(response): copy headers when init is a foreign Response by @yusukebe in honojs/node-server#382

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

test: use a custom helper for path traversal tests by @BlankParticle in honojs/node-server#377

perf(request): fast-path QUERY methods by @usualoma in honojs/node-server#376

perf(request): fast-path PATCH method by @yusukebe in honojs/node-server#380

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

... (truncated)

Commits

73c03ad 2.1.1
5515aa0 perf: lazily materialize request headers (#389)
82ba34e 2.1.0
1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
977a242 feat: add Early Hints (HTTP 103) middleware (#378)
a813b6c 2.0.12
caf48ba fix(response): copy headers when init is a foreign Response (#382)
3b1dd68 test: replace supertest (#379)
834e54f 2.0.11
ba72bcd perf(request): fast-path PATCH method (#380)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hono/node-server since your current version.

Updates @angular/cli from 22.0.4 to 22.1.5

Release notes

Sourced from @angular/cli's releases.

22.1.5

@schematics/angular

Commit Description

transform fail() to expect.fail() in refactor-jasmine-vitest

@angular/cli

Commit Description

enforce MCP roots in get_best_practices tool

handle errors from isAllowedWorkspacePath in best-practices tool

throw on out-of-roots workspace in best-practices tool

@angular/build

Commit Description

correct misleading error message for top-level await

disable code splitting for unit test builds

preserve integrity and crossorigin in autoCsp loader

traverse AST with iterative post-order walker in i18n inliner

22.1.4

@schematics/angular

Commit Description

generate CLAUDE.md for Claude Code instead of AGENTS.md

import UrlSegment instead of subPath in guard generator

@angular/cli

Commit Description

disable searching current directory for bare executable names on Windows

serialize configuration as a single argv token in run_target strategies (#33657)

avoid eager module loading during global bootstrap

@angular/build

Commit Description

count statically imported chunks in the initial total

normalize setupFiles paths to POSIX for vitest runner

prevent syntax corruption for Crockford-style enum IIFE

prevent syntax corruption in oxc transform

return direct file contents for non-Angular TypeScript files

return only lowest version per target engine

set target for Rolldown dependency prebundling in Vite dev server

avoid encoding the inline source map before remapping

batch last_accessed updates in sqlite cache store

hash the i18n inline cache key options once per locale

optimize template string size calculation in server manifest

share i18n translations with the inliner workers by reference

use Map for chunk asset size lookups in budget calculator

@angular/ssr

Commit Description

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.1.5 (2026-08-19)

@angular/cli

Commit Type Description

e672271f8 fix enforce MCP roots in get_best_practices tool

a14916cc4 fix handle errors from isAllowedWorkspacePath in best-practices tool

d6e1cddff fix throw on out-of-roots workspace in best-practices tool

@schematics/angular

Commit Type Description

ba2b0e4c2 fix transform fail() to expect.fail() in refactor-jasmine-vitest

@angular/build

Commit Type Description

cba72902d fix correct misleading error message for top-level await

b4679998c fix disable code splitting for unit test builds

ff1d3565e fix preserve integrity and crossorigin in autoCsp loader

1fc1fb05c perf traverse AST with iterative post-order walker in i18n inliner

22.2.0-next.3 (2026-08-13)

@angular/cli

Commit Type Description

7106676e6 fix disable searching current directory for bare executable names on Windows

ecf8c0822 fix serialize configuration as a single argv token in run_target strategies (#33657)

2e4dd90c3 perf avoid eager module loading during global bootstrap

@schematics/angular

Commit Type Description

1161e6c99 fix generate CLAUDE.md for Claude Code instead of AGENTS.md

c536ae364 fix import UrlSegment instead of subPath in guard generator

@angular/build

Commit Type Description

... (truncated)

Commits

3954730 release: cut the v22.1.5 release
7b7064f build: update dependency listr2 to v11
262562d docs: mention Vitest instead of Karma in README template of schematic library...
712e74e build: lock file maintenance
93d9cff refactor(@angular-devkit/schematics): add missing comma to reordered componen...
528114c refactor(@angular-devkit/schematics): add consistent spacing and ordering
cba7290 fix(@angular/build): correct misleading error message for top-level await
0e36040 build: update pnpm to v11.22.0
d01d2c6 build: update cross-repo angular dependencies
ba2b0e4 fix(@schematics/angular): transform fail() to expect.fail() in refactor-jasmi...
Additional commits viewable in compare view

vercel · 2026-08-20T19:09:10Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ionic-conference-app	Ready	Preview	Aug 20, 2026 7:59pm

Bumps [@hono/node-server](https://github.com/honojs/node-server) to 2.1.1 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `@hono/node-server` from 1.19.14 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v1.19.14...v2.1.1) Updates `@angular/cli` from 22.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.0.4...v22.1.5) --- updated-dependencies: - dependency-name: "@angular/cli" dependency-version: 22.1.5 dependency-type: direct:development - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies javascript Pull requests that update javascript code labels Aug 20, 2026

vercel Bot deployed to Preview August 20, 2026 19:09 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-75db61e237 branch from 786b039 to b225cd1 Compare August 20, 2026 19:38

vercel Bot deployed to Preview August 20, 2026 19:39 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-75db61e237 branch from b225cd1 to 9c535b7 Compare August 20, 2026 19:59

vercel Bot deployed to Preview August 20, 2026 19:59 View deployment

brandyscarney enabled auto-merge (squash) August 20, 2026 20:02

brandyscarney approved these changes Aug 20, 2026

View reviewed changes

brandyscarney merged commit a60be92 into main Aug 20, 2026
4 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/multi-75db61e237 branch August 20, 2026 20:03

Navigation Menu

Uh oh!

chore(deps): bump @hono/node-server and @angular/cli - #1854

chore(deps): bump @hono/node-server and @angular/cli#1854
brandyscarney merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-75db61e237

dependabot Bot commented on behalf of github Aug 20, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Aug 20, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	enforce MCP roots in get_best_practices tool
	handle errors from isAllowedWorkspacePath in best-practices tool
	throw on out-of-roots workspace in best-practices tool

Commit	Description
	correct misleading error message for top-level await
	disable code splitting for unit test builds
	preserve integrity and crossorigin in autoCsp loader
	traverse AST with iterative post-order walker in i18n inliner

Commit	Description
	generate CLAUDE.md for Claude Code instead of AGENTS.md
	import UrlSegment instead of subPath in guard generator

Commit	Description
	disable searching current directory for bare executable names on Windows
	serialize configuration as a single argv token in run_target strategies (#33657)
	avoid eager module loading during global bootstrap

Commit	Description
	count statically imported chunks in the initial total
	normalize setupFiles paths to POSIX for vitest runner
	prevent syntax corruption for Crockford-style enum IIFE
	prevent syntax corruption in oxc transform
	return direct file contents for non-Angular TypeScript files
	return only lowest version per target engine
	set target for Rolldown dependency prebundling in Vite dev server
	avoid encoding the inline source map before remapping
	batch last_accessed updates in sqlite cache store
	hash the i18n inline cache key options once per locale
	optimize template string size calculation in server manifest
	share i18n translations with the inliner workers by reference
	use Map for chunk asset size lookups in budget calculator

Commit	Type	Description
e672271f8	fix	enforce MCP roots in get_best_practices tool
a14916cc4	fix	handle errors from isAllowedWorkspacePath in best-practices tool
d6e1cddff	fix	throw on out-of-roots workspace in best-practices tool

Commit	Type	Description
cba72902d	fix	correct misleading error message for top-level await
b4679998c	fix	disable code splitting for unit test builds
ff1d3565e	fix	preserve integrity and crossorigin in autoCsp loader
1fc1fb05c	perf	traverse AST with iterative post-order walker in i18n inliner

Commit	Type	Description
7106676e6	fix	disable searching current directory for bare executable names on Windows
ecf8c0822	fix	serialize configuration as a single argv token in run_target strategies (#33657)
2e4dd90c3	perf	avoid eager module loading during global bootstrap

Commit	Type	Description
1161e6c99	fix	generate CLAUDE.md for Claude Code instead of AGENTS.md
c536ae364	fix	import UrlSegment instead of subPath in guard generator

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.1.1

What's Changed

v2.1.0

What's Changed

New Contributors

v2.0.12

What's Changed

v2.0.11

What's Changed

v2.0.10

Security fixes

Unauthenticated memory-leak DoS via aborted WebSocket handshake

v2.0.9

What's Changed

22.1.5

@​schematics/angular

@​angular/cli

@​angular/build

22.1.4

@​schematics/angular

@​angular/cli

@​angular/build

@​angular/ssr

22.1.5 (2026-08-19)

@​angular/cli

@​schematics/angular

@​angular/build

22.2.0-next.3 (2026-08-13)

@​angular/cli

@​schematics/angular

@​angular/build

Uh oh!

vercel Bot commented Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 20, 2026 •

edited

Loading

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@schematics/angular`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular/build`

vercel Bot commented Aug 20, 2026 •

edited

Loading