Skip to content

chore(deps): bump @hono/node-server and @angular/cli - #101

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-cbb1d4f0ae
Open

chore(deps): bump @hono/node-server and @angular/cli#101
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-cbb1d4f0ae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown

Bumps @hono/node-server to 2.1.0 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @hono/node-server from 1.19.14 to 2.1.0

Release notes

Sourced from @​hono/node-server's releases.

v2.1.0

What's Changed

New Contributors

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

v2.0.12

What's Changed

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg


Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

New Contributors

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​hono/node-server since your current version.


Updates @angular/cli from 20.3.31 to 20.3.34

Release notes

Sourced from @​angular/cli's releases.

20.3.34

@​angular/cli

Commit Description
fix - 3962517b9 update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular-devkit/build-angular

Commit Description
fix - f348efe8b bump undici to 7.29.0

20.3.33

@​angular-devkit/build-angular

Commit Description
fix - 0b4008f17d upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - fc861affcd upgrade postcss to 8.5.23

20.3.32

@​angular-devkit/build-angular

Commit Description
fix - d4e07cb3e update http-proxy-middleware to 3.0.7
Changelog

Sourced from @​angular/cli's changelog.

20.3.34 (2026-08-12)

@​angular/cli

Commit Type Description
3962517b9 fix update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular-devkit/build-angular

Commit Type Description
f348efe8b fix bump undici to 7.29.0

22.2.0-next.2 (2026-08-05)

@​angular/build

Commit Type Description
7e5510e464 fix disable linker internal source mapping in OXC linker
bad31421cb fix prevent syntax corruption in linker and oxc transform

22.2.0-next.1 (2026-08-05)

@​angular/cli

Commit Type Description
41555dfb3b feat add --root command line option to mcp command
035b9d5c9b fix add packages with built-in schematics to devDependencies only
0ae5690c35 fix always install package during ng add to inspect manifest on disk for schematics (#33718)
44ff584b33 fix correctly report available package updates during bare ng update
1d4f9ebbe9 fix discover migrations from installed packages when omitted by registry metadata (#33718)
25034f97ad fix normalize Windows drive-letter casing for process.cwd

@​angular/build

Commit Type Description
ad8271320f feat migrate Angular Linker to oxc-parser and magic-string
4fb12292c2 fix prevent build process hang on unhandled error (#33715)

... (truncated)

Commits
  • 40c30ba release: cut the v20.3.34 release
  • f348efe fix(@​angular-devkit/build-angular): bump undici to 7.29.0
  • 3962517 fix(@​angular/cli): update dependency @​modelcontextprotocol/sdk to v1.30.0
  • 1bd120b release: cut the v20.3.33 release
  • 0b4008f fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
  • fc861af fix(@​angular/build): upgrade postcss to 8.5.23
  • ed8f6ff release: cut the v20.3.32 release
  • d4e07cb fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@hono/node-server](https://github.com/honojs/node-server) to 2.1.0 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `@hono/node-server` from 1.19.14 to 2.1.0
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v1.19.14...v2.1.0)

Updates `@angular/cli` from 20.3.31 to 20.3.34
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v20.3.31...v20.3.34)

---
updated-dependencies:
- dependency-name: "@hono/node-server"
  dependency-version: 2.1.0
  dependency-type: indirect
- dependency-name: "@angular/cli"
  dependency-version: 20.3.34
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants