Bump @hono/node-server and @angular/cli by dependabot[bot] · Pull Request #473 · 2sic/eav-ui

dependabot · 2026-09-01T20:11:15Z

Bumps @hono/node-server to 2.1.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @hono/node-server from 1.19.14 to 2.1.1

Release notes

Sourced from @hono/node-server's releases.

v2.1.1

What's Changed

perf: lazily materialize request headers by @BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

feat: add Early Hints (HTTP 103) middleware by @bilal-azam in honojs/node-server#378

fix(listener): avoid uncaught error when force-closing a non-standard socket by @mohamedramadan14 in honojs/node-server#383

New Contributors

@bilal-azam made their first contribution in honojs/node-server#378

@mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

v2.0.12

What's Changed

test: replace supertest by @BlankParticle in honojs/node-server#379

fix(response): copy headers when init is a foreign Response by @yusukebe in honojs/node-server#382

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

test: use a custom helper for path traversal tests by @BlankParticle in honojs/node-server#377

perf(request): fast-path QUERY methods by @usualoma in honojs/node-server#376

perf(request): fast-path PATCH method by @yusukebe in honojs/node-server#380

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

... (truncated)

Commits

73c03ad 2.1.1
5515aa0 perf: lazily materialize request headers (#389)
82ba34e 2.1.0
1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
977a242 feat: add Early Hints (HTTP 103) middleware (#378)
a813b6c 2.0.12
caf48ba fix(response): copy headers when init is a foreign Response (#382)
3b1dd68 test: replace supertest (#379)
834e54f 2.0.11
ba72bcd perf(request): fast-path PATCH method (#380)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hono/node-server since your current version.

Updates @angular/cli from 22.0.4 to 22.1.6

Release notes

Sourced from @angular/cli's releases.

22.1.6

@angular/build

Commit Description

ignore side-effect annotations in unit test builds

batch prerender routes and share in-memory server bundles

@angular/ssr

Commit Description

abort web request signal when node request is aborted

22.1.5

@schematics/angular

Commit Description

transform fail() to expect.fail() in refactor-jasmine-vitest

@angular/cli

Commit Description

enforce MCP roots in get_best_practices tool

handle errors from isAllowedWorkspacePath in best-practices tool

throw on out-of-roots workspace in best-practices tool

@angular/build

Commit Description

correct misleading error message for top-level await

disable code splitting for unit test builds

preserve integrity and crossorigin in autoCsp loader

traverse AST with iterative post-order walker in i18n inliner

22.1.4

@schematics/angular

Commit Description

generate CLAUDE.md for Claude Code instead of AGENTS.md

import UrlSegment instead of subPath in guard generator

@angular/cli

Commit Description

disable searching current directory for bare executable names on Windows

serialize configuration as a single argv token in run_target strategies (#33657)

avoid eager module loading during global bootstrap

@angular/build

Commit Description

count statically imported chunks in the initial total

normalize setupFiles paths to POSIX for vitest runner

prevent syntax corruption for Crockford-style enum IIFE

prevent syntax corruption in oxc transform

return direct file contents for non-Angular TypeScript files

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.1.6 (2026-08-26)

@angular/build

Commit Type Description

3f132eaa97 fix ignore side-effect annotations in unit test builds

5b1028936f perf batch prerender routes and share in-memory server bundles

@angular/ssr

Commit Type Description

76818cb811 fix abort web request signal when node request is aborted

21.2.22 (2026-08-26)

@angular-devkit/build-angular

Commit Type Description

b0047b04f5 fix update webpack-dev-server to 5.2.6

20.3.35 (2026-08-26)

@angular-devkit/build-angular

Commit Type Description

94b620acd7 fix update webpack-dev-server to 5.2.6

22.2.0-next.4 (2026-08-19)

@angular/cli

Commit Type Description

34e1e0bb5 fix enforce MCP roots in get_best_practices tool

... (truncated)

Commits

16ad630 release: cut the v22.1.6 release
745c973 build: update pnpm to v11.24.0
3f132ea fix(@angular/build): ignore side-effect annotations in unit test builds
2dc7cd7 build: lock file maintenance
5b10289 perf(@angular/build): batch prerender routes and share in-memory server bundles
a4c10f3 build: remove scorecard workflow
087d313 build: update github/codeql-action action to v4.37.7
3f5304a build: update cross-repo angular dependencies
76818cb fix(@angular/ssr): abort web request signal when node request is aborted
3954730 release: cut the v22.1.5 release
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

retarget Dependabot security PRs to develop

v22

Bumps [@hono/node-server](https://github.com/honojs/node-server) to 2.1.1 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `@hono/node-server` from 1.19.14 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v1.19.14...v2.1.1) Updates `@angular/cli` from 22.0.4 to 22.1.6 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.0.4...v22.1.6) --- updated-dependencies: - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: indirect - dependency-name: "@angular/cli" dependency-version: 22.1.6 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

iJungleboy and others added 3 commits June 24, 2026 15:12

Merge pull request #436 from 2sic/develop

c0e5fd4

retarget Dependabot security PRs to develop

Merge pull request #470 from 2sic/develop

2c2e9b1

v22

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026

github-actions Bot changed the base branch from master to develop September 1, 2026 20:11

Navigation Menu

Bump @hono/node-server and @angular/cli - #473

Bump @hono/node-server and @angular/cli#473
dependabot[bot] wants to merge 3 commits into
developfrom
dependabot/npm_and_yarn/multi-b46ba35a08

dependabot Bot commented on behalf of github Sep 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	ignore side-effect annotations in unit test builds
	batch prerender routes and share in-memory server bundles

Commit	Description
	enforce MCP roots in get_best_practices tool
	handle errors from isAllowedWorkspacePath in best-practices tool
	throw on out-of-roots workspace in best-practices tool

Commit	Description
	correct misleading error message for top-level await
	disable code splitting for unit test builds
	preserve integrity and crossorigin in autoCsp loader
	traverse AST with iterative post-order walker in i18n inliner

Commit	Description
	generate CLAUDE.md for Claude Code instead of AGENTS.md
	import UrlSegment instead of subPath in guard generator

Commit	Description
	disable searching current directory for bare executable names on Windows
	serialize configuration as a single argv token in run_target strategies (#33657)
	avoid eager module loading during global bootstrap

Commit	Description
	count statically imported chunks in the initial total
	normalize setupFiles paths to POSIX for vitest runner
	prevent syntax corruption for Crockford-style enum IIFE
	prevent syntax corruption in oxc transform
	return direct file contents for non-Angular TypeScript files

Commit	Type	Description
3f132eaa97	fix	ignore side-effect annotations in unit test builds
5b1028936f	perf	batch prerender routes and share in-memory server bundles

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v2.1.1

What's Changed

v2.1.0

What's Changed

New Contributors

v2.0.12

What's Changed

v2.0.11

What's Changed

v2.0.10

Security fixes

Unauthenticated memory-leak DoS via aborted WebSocket handshake

v2.0.9

What's Changed

22.1.6

@​angular/build

@​angular/ssr

22.1.5

@​schematics/angular

@​angular/cli

@​angular/build

22.1.4

@​schematics/angular

@​angular/cli

@​angular/build

22.1.6 (2026-08-26)

@​angular/build

@​angular/ssr

21.2.22 (2026-08-26)

@​angular-devkit/build-angular

20.3.35 (2026-08-26)

@​angular-devkit/build-angular

22.2.0-next.4 (2026-08-19)

@​angular/cli

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@angular/build`

`@angular/ssr`

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/ssr`

`@angular-devkit/build-angular`

`@angular-devkit/build-angular`

`@angular/cli`