Skip to content

Bump tmp, @angular/cli, firebase-tools, inquirer, karma and protractor#92

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-afd7880544
Open

Bump tmp, @angular/cli, firebase-tools, inquirer, karma and protractor#92
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-afd7880544

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 27, 2026

Copy link
Copy Markdown

Bumps tmp to 0.2.6 and updates ancestor dependencies tmp, @angular/cli, firebase-tools, inquirer, karma and protractor. These dependencies need to be updated together.

Updates tmp from 0.0.30 to 0.2.6

Changelog

Sourced from tmp's changelog.

v0.2.2 (2024-02-28)

🐛 Bug Fix

📝 Documentation

Committers: 5

v0.2.1 (2020-04-28)

🚀 Enhancement

🏠 Internal

Committers: 1

v0.2.0 (2020-04-25)

🚀 Enhancement

🐛 Bug Fix

📝 Documentation

🏠 Internal

... (truncated)

Commits

Updates @angular/cli from 9.1.6 to 21.2.12

Release notes

Sourced from @​angular/cli's releases.

21.2.12

@​angular/build

Commit Description
fix - cbad57579 ignore virtual esbuild paths with (disabled):

21.2.11

@​angular/cli

Commit Description
fix - bbd63b7a5 robustly parse npm manifest from array

@​angular/ssr

Commit Description
fix - eafe1a719 allow all hosts in common engine rendering options to prevent validation errors
fix - 7a116a80d remove stateful flag from URL_PARAMETER_REGEXP

21.2.10

@​angular/cli

Commit Description
fix - bb8611913 restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit Description
fix - e7abeb5c7 add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

Commit Description
fix - 233deef01 fix broken img ref in ai-tutor
fix - 7cea9885c introduce initial package manager workspace awareness
fix - 5b1a5b743 remove standalone true ref in ai tutor

@​angular/ssr

Commit Description
fix - 94023f62c introduce trustProxyHeaders option to safely validate and sanitize proxy headers
fix - 5ffe5c309 add support for configuring trusted proxy headers via environment variable
fix - 930ada9b7 decode route segments when building and matching route tree
fix - 0dc8a440c use router to normalize URLs for comparison

21.2.8

@​angular/cli

Commit Description
fix - e91280c05 dynamically resolve project Angular CLI executable inside MCP tools
fix - 01af6741b ignore EBADF file system errors during MCP project scan
fix - f7a3e6ed8 use headless option in MCP test tool

@​angular-devkit/build-angular

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

21.2.12 (2026-05-20)

@​angular/build

Commit Type Description
cbad57579 fix ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

Deprecations

@​angular-devkit/build-angular

  • Webpack builders in build-angular are deprecated. Use @​angular/build builders instead.

@​angular-devkit/build-webpack

  • Webpack builders in build-webpack are deprecated. Use @​angular/build builders instead.

@​angular/ssr

  • CommonEngine APIs are deprecated in favor of AngularNodeAppEngine or AngularAppEngine.

@​ngtools/webpack

  • @​ngtools/webpack loader and plugin are deprecated. Use @​angular/build instead.

@​schematics/angular

Commit Type Description
b2f7a038b feat conditionally install istanbul coverage provider for Vitest migration
d227e6985 feat migrate fake async to Vitest fake timers
d2aa9ede5 feat migrate fakeAsync's flush behavior when used in beforeEach
c9f408153 feat set up fake timers in beforeEach instead of beforeAll
8d0805dd1 feat update TSConfig globals during karma to vitest migration
aed407db8 fix defer karma config deletion in Karma to Vitest migration
7fb59eaa6 fix use service decorator in ng generate

@​angular/cli

Commit Type Description
58c0978f6 feat add support for Node.js 26.0.0
ff88f491d fix restrict MCP workspace access to allowed client roots during resolution

... (truncated)

Commits
  • 9dcef4d release: cut the v21.2.12 release
  • feec5bf refactor(@​angular/build): add missing OutputFile import
  • 48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
  • cbad575 fix(@​angular/build): ignore virtual esbuild paths with (disabled):
  • 6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
  • 00e3663 release: cut the v21.2.11 release
  • eafe1a7 fix(@​angular/ssr): allow all hosts in common engine rendering options to prev...
  • 7a116a8 fix(@​angular/ssr): remove stateful flag from URL_PARAMETER_REGEXP
  • a7705fb build: update cross-repo angular dependencies
  • 453ed5b build: update github/codeql-action action to v4.35.4
  • Additional commits viewable in compare view

Updates firebase-tools from 8.2.0 to 15.18.0

Release notes

Sourced from firebase-tools's releases.

v15.18.0

  • Updated Pub/Sub emulator to version 0.8.31
  • Resolves undefined regions earlier, during the build to backend resolution phase (#10471)
  • Updated the Firebase Data Connect local toolkit to v3.4.8, which includes the following changes:
    • Fixed an issue in Dart code generation where nullable BigInt was not handled correctly.
    • Added support for nested 1:Many relational batch inserts.
    • Updated the Golang dependency version to 1.25.10.
  • Default timeout for Dart functions is now 60 seconds when not explicitly set (#10501)
  • Support secret environment variables for Cloud Run functions (#10489)
  • Set requiredProjectBindings in AI Logic services (#10503)

v15.17.0

  • Added support for creating search indexes for Firestore. (#10431)
  • Fixed an issue where some MCP tools would error with "Invalid input: expected record, received array". (#10437)
  • Fixed an issue causing errors when multiple Firestore databases were configured in firebase.json (#8114)
  • Updated the Firebase Data Connect local toolkit to v3.4.7, which includes the following changes: (#10461)
    • Fix emulator crash when using uuidv4() on operations.
    • Support for _Data input types as variables with @allow(fields, maxCount) to constraint the input JSON, enabling batch mutations in admin SDK. Client SDK support will come soon.
  • Increase supported range for Next.js to version 16.0 (#9463)
  • Updated Cloud Function default resource locations. This does not affect existing functions. (#10414)
  • Added warning for cross-region event triggers (#10408)

v15.16.0

  • Updated Firestore Emulator to v1.21.0, which adds support for subqueries and new stages like let(...), as well as allowing setting database-edition per-database.
  • Suppressed the 'punycode' deprecation warning during firebase deploy on Node 22. (#10385)
  • Fixed an issue where hosting deploy allowed publishing to a site in a different project. (#10376)
  • Added SSE mode support to firebase mcp. To use it, run firebase mcp --mode=sse --port=3000, and connect your client on http://localhost:3000.
  • Update the valid Python runtimes for functions. Default Python runtime is now Python 3.14.
  • Fix CLI non-interactive mode for dataconnect init (#10401)
  • Fixed issue where rules for non-default Firestore databases were not being deployed correctly.
  • Suppress SSR warning for non-SSR Angular projects on init hosting (#10364)
  • Updated the SQL Connect emulator to v3.4.6, including internal bug fixes (#10434)
  • Fix an issue where deploying multi-codebase functions failed due to a shared source token scraper (#10428)

v15.15.0

  • Add foundation for being smarter about where to place functions when the region is not specified (#10293)
  • Updated Pub/Sub emulator to version 0.8.30
  • Renamed Data Connect displayed text to SQL Connect (#10270)
  • Added support for the experimental Cloud Functions for Firebase Dart SDK behind the dartfunctions flag
  • Updated the SQL Connect emulator to v3.4.5, including internal bug fixes (#10336)

v15.14.0

  • Added Enterprise Edition support to the Firestore emulator. Configure it by setting firebase.json#firestore.edition or firebase.json#emulators.firestore.edition.
  • Fixed an issue where functions deployments would silently fail (#6989)
  • Fixed issue where the CLI isn't able to correctly parse command arguments on PowerShell (#7506)
  • Add support for Next.js 16 middleware (proxy.ts/proxy.js) (#9631)
  • Updates the default region for new App Hosting backends to us-east4 (#10271)
  • Fix Next.js image optimization detection in client components (#10228)
  • Updates Firebase Data Connect emulator to v3.4.1 (#10290)
    • Upgraded Go runtime to 1.25.9.

... (truncated)

Commits
  • 8af261a 15.18.0
  • 0e759e4 Add missing changelog entries (#10514)
  • 70e2771 fix: support secret environment variables for Cloud Run functions (#10489)
  • dae4e46 update FDC local toolkit to v3.4.8 (#10506)
  • 1a32765 Set requiredProjectBindings in AI Logic services (#10503)
  • 26ccd63 remove legacy localbuild path and remove @​apphosting/build dependency (#10512)
  • 6203955 Adding default timeout for dart functions (#10501)
  • 0b59f18 support nested .gitignore files in source deploys (#10498)
  • a605414 refactor: resolve function regions during build phase to fix VPC connectors (...
  • 205b5f8 feat: update Pub/Sub emulator to 0.8.31 (#10485)
  • Additional commits viewable in compare view

Updates inquirer from 6.5.2 to 14.0.0

Release notes

Sourced from inquirer's releases.

inquirer@14.0.0

  • Fix (breaking): Inquirer will now throw when encountering non-registered prompt. Prior to this fix, Inquirer would default to type: 'input' in such cases - this behaviour was misleading and made it harder to detect broken code when not using Typescript.
  • Feat: Read env variable INQUIRER_KEYBINDINGS to enable vim or emacs keybindings; making this a user preference instead of a library author preference. One caveat is doing so disable the search feature in the select prompt. Syntax: INQUIRER_KEYBINDINGS=vim,emacs.
  • Fix: Line wraps would sometime cause the cursor to be mispositioned relative to the input.
  • Chore: Dropped the rxjs dependency in favor of a lightweight internal Observable implementation. The package is much smaller for most users now.
  • Chore: Bump dependencies.

inquirer@13.4.3

  • Fix: Windows rendering bug
  • Fix: Preserve exact literal types in choices array (Typescript only)
  • Fix: Allow input default value to be of type undefined (Typescript only)
  • Bump dependencies

inquirer@13.4.2

  • Fix: some Windows terminals would freeze and not react to keypresses.

inquirer@13.4.1

  • Improve expand prompt type inferrence.

inquirer@13.4.0

  • Feat: Added a loading message while validating editor prompt input.
  • Type improvement: Better type inference with checkbox, search and expand prompts.
  • Fix: editor prompt not always properly handling editor path on windows.

inquirer@13.3.2

  • Fix broken 1.3.1 release process.

inquirer@13.2.5

What's Changed

... (truncated)

Commits
  • 5ca6d11 chore: Publish new release
  • 2520349 feat(@​inquirer/core): support keybindings env defaults
  • 777266b refactor(inquirer): remove rxjs runtime dependency
  • b3588be fix(inquirer)!: throw on unknown prompt types
  • ab5ec9d chore(deps): Bump mute-stream from 3.0.0 to 4.0.0
  • ecec47a fix(@​inquirer/core): hard wrap rendered lines
  • c3b20a6 chore: Bump yarn + min age gate (#2133)
  • 9f3e810 chore: relax test function scoping lint
  • e4c5c99 chore(deps-dev): Bump the linting group across 1 directory with 5 updates (#2...
  • b7aed8f chore(deps): Bump minimatch from 3.1.5 to 10.2.5
  • Additional commits viewable in compare view

Updates karma from 5.0.5 to 6.4.4

Release notes

Sourced from karma's releases.

v6.4.4

6.4.4 (2024-07-29)

v6.4.3

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

v6.4.2

6.4.2 (2023-04-21)

Bug Fixes

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

v6.4.0

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.4 (2024-07-29)

6.4.3 (2024-02-24)

Bug Fixes

  • add build commits for patch release (d7f2d69)

6.4.2 (2023-04-21)

Bug Fixes

6.4.1 (2022-09-19)

Bug Fixes

6.4.0 (2022-06-14)

Features

  • support SRI verification of link tags (dc51a2e)
  • support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

  • prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

  • client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

... (truncated)

Commits
  • 84f85e7 chore(release): 6.4.4 [skip ci]
  • a4d1284 build(deps-dev): bump ws from 6.2.1 to 6.2.3
  • d8cf806 chore(release): 6.4.3 [skip ci]
  • d7f2d69 fix: add build commits for patch release
  • 85a2eeb build(deps-dev): bump decode-uri-component from 0.2.0 to 0.2.2
  • 0bffce2 build(deps): updated socket.io version to fix security issues with socket.io-...
  • 86667ab build(deps): bump follow-redirects from 1.11.0 to 1.15.4
  • 450fdfd docs: Add deprecation notice to Karma README
  • 9de3c00 chore(release): 6.4.2 [skip ci]
  • c6a4271 fix: few typos
  • Additional commits viewable in compare view

Updates protractor from 5.4.4 to 6.0.0

Changelog

Sourced from protractor's changelog.

6.0.0

Selenium 4 removes the control flow and most of these changes are based on those changes. To see the full list of changes, please refer to selenium-webdriver's CHANGELOG

Breaking changes

  • Control flow is removed and you should use async await to run your tests.
  • Other control flow related items:
    • debugger, explore and element explorer have been removed
    • jasminewd is no longer a dependency
  • ignoreSynchronization has been deprecated and you should use waitForAngularEnabled
  • Types for selenium-webdriver are currently in the types/ directory and are not complete. We are still missing some type definitions for selenium 4.
  • Actions API in selenium-webdriver have changed and they will break your test. Also we have not exported it yet since the type definitions are not complete.

Features

  • (cf43651) chore(debugprint): convert debugprint to TypeScript (#5074)

  • (4672265) chore(browser): remove timing issues with restart and fork (#5085)

    • remove .ready since forking should automatically return a browser
    • getNewDriver should return a promised WebDriver that can be awaited
    • fix interaction tests and local driver tests
    • update unit tests for async await due to getNewDriver fix closes #5031
  • (b4dbcc2) chore(elementexplorer): remove explorer bin file (#5094)

    closes #5092

  • (3b8f263) chore(ignoreSynchornization): clean up to use waitForAngularEnabled (#5071)

  • (ffa3519) chore(debugger): remove debugger and explore methods (#5070)

  • (c9db3f3) chore(promises): remove q promises and webdriver promises (#5052)

    • remove q promises and webdriver promises from the runner, launcher, plugins, and taskRunner
    • add deprecated message to element explorer.
    • add unhandledRejection
    • update browser versions used in travis tests
  • (e22065c) chore(promises): clean up driver providers and browser control flow (#5034)

... (truncated)

Commits
  • 5d8da04 chore(release): version bump to 6.0.0 and update the changelog
  • d777738 chore(tests): circleci - chrome 69 requires chromdriver to 2.44 (#5182)
  • 3d50b68 chore(deps): update based on npm audit
  • e478ba8 chore(release): bump version to 6.0.1-beta
  • 7054827 chore(types): fix types to use not @​types/selenium-webdriver (#5127)
  • 2e5c2e6 chore(jasmine): prevent random execution order in jasmine 3 (#5126)
  • 8afc4e2 chore(release): release 6.0.0-beta and update the changelog
  • 5fd711c chore(webdriver-manager): use webdriver-manager@13.0.0-beta
  • 96ae17c deps(jasmine): upgrade jasmine 3.3 (#5102)
  • 68491dd chore(expectedConditions): update generic Function typings (#5101)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tmp](https://github.com/raszi/node-tmp) to 0.2.6 and updates ancestor dependencies [tmp](https://github.com/raszi/node-tmp), [@angular/cli](https://github.com/angular/angular-cli), [firebase-tools](https://github.com/firebase/firebase-tools), [inquirer](https://github.com/SBoudrias/Inquirer.js), [karma](https://github.com/karma-runner/karma) and [protractor](https://github.com/angular/protractor). These dependencies need to be updated together.


Updates `tmp` from 0.0.30 to 0.2.6
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.0.30...v0.2.6)

Updates `@angular/cli` from 9.1.6 to 21.2.12
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v9.1.6...v21.2.12)

Updates `firebase-tools` from 8.2.0 to 15.18.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v8.2.0...v15.18.0)

Updates `inquirer` from 6.5.2 to 14.0.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/inquirer@6.5.2...inquirer@14.0.0)

Updates `karma` from 5.0.5 to 6.4.4
- [Release notes](https://github.com/karma-runner/karma/releases)
- [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md)
- [Commits](karma-runner/karma@v5.0.5...v6.4.4)

Updates `protractor` from 5.4.4 to 6.0.0
- [Release notes](https://github.com/angular/protractor/releases)
- [Changelog](https://github.com/angular/protractor/blob/master/CHANGELOG.md)
- [Commits](angular/protractor@5.4.4...6.0.0)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.6
  dependency-type: indirect
- dependency-name: "@angular/cli"
  dependency-version: 21.2.12
  dependency-type: direct:development
- dependency-name: firebase-tools
  dependency-version: 15.18.0
  dependency-type: direct:development
- dependency-name: inquirer
  dependency-version: 14.0.0
  dependency-type: direct:development
- dependency-name: karma
  dependency-version: 6.4.4
  dependency-type: direct:development
- dependency-name: protractor
  dependency-version: 6.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants