Skip to content

build: update all non-major dependencies - #3970

Open
angular-robot wants to merge 1 commit into
angular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies
Open

build: update all non-major dependencies#3970
angular-robot wants to merge 1 commit into
angular:mainfrom
angular-robot:ng-renovate/all-non-major-dependencies

Conversation

@angular-robot

@angular-robot angular-robot commented Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@google/genai 2.20.0 → 2.22.0 age adoption passing confidence
@inquirer/prompts (source) 8.7.0 → 8.7.2 age adoption passing confidence
@inquirer/type 4.1.0 → 4.1.1 age adoption passing confidence
@microsoft/api-extractor (source) 7.59.0 → 7.59.1 age adoption passing confidence
@puppeteer/browsers (source) 3.2.1 → 3.2.2 age adoption passing confidence
@types/node (source) 24.13.3 → 24.13.4 age adoption passing confidence
firebase (source, changelog) 12.18.0 → 12.19.0 age adoption passing confidence
firebase-admin (source) 14.3.0 → 14.4.0 age adoption passing confidence
firebase-tools 15.28.2 → 15.30.0 age adoption passing confidence
magic-string 1.2.3 → 1.3.1 age adoption passing confidence
pnpm (source) 11.25.0 → 11.26.0 age adoption passing confidence
renovate (source) 44.57.1 → 44.79.6 age adoption passing confidence
selenium-webdriver (source) 4.48.0 → 4.49.0 age adoption passing confidence
zone.js (source, changelog) 0.16.2 → 0.16.3 age adoption passing confidence
  • If you want to rebase/retry this PR, check this box

Release Notes

googleapis/js-genai (@​google/genai)

v2.22.0

Compare Source

Features
  • Add from_environment support for environment copying (01ed17e)
Bug Fixes
  • Add @​ts-ignore before optional MCP imports in declaration files (7b5ef39)
  • Remove unused field from FunctionResultDelta (aeb7453)
  • Repair node fallback manifest and complete web entries (0f59bf8)

v2.21.0

Compare Source

Features
  • Add Gemini 3.8 Flash model to SDKs and update Flash model descriptions (4a969fe)
SBoudrias/Inquirer.js (@​inquirer/prompts)

v8.7.2

Compare Source

@​inquirer/prompts@8.7.2

What's new
  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #​2255, closes #​1816).
  • confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #​2254).
Included
  • @inquirer/checkbox@^5.2.5
  • @inquirer/confirm@^6.3.2
  • @inquirer/editor@^5.3.3
  • @inquirer/expand@^5.1.5
  • @inquirer/input@^5.1.6
  • @inquirer/number@^4.2.3
  • @inquirer/password@^5.2.2
  • @inquirer/rawlist@^5.3.5
  • @inquirer/search@^4.3.3
  • @inquirer/select@^5.2.5

v8.7.1

Compare Source

@​inquirer/prompts@8.7.1

What's new
  • All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#​2247, fixes #​2244).
Included
  • @inquirer/checkbox@^5.2.4
  • @inquirer/confirm@^6.3.1
  • @inquirer/editor@^5.3.2
  • @inquirer/expand@^5.1.4
  • @inquirer/input@^5.1.5
  • @inquirer/number@^4.2.2
  • @inquirer/password@^5.2.1
  • @inquirer/rawlist@^5.3.4
  • @inquirer/search@^4.3.2
  • @inquirer/select@^5.2.4
microsoft/rushstack (@​microsoft/api-extractor)

v7.59.1

Sat, 05 Sep 2026 00:15:08 GMT

Version update only

puppeteer/puppeteer (@​puppeteer/browsers)

v3.2.2

Compare Source

Miscellaneous Chores
  • puppeteer: Synchronize puppeteer versions
Dependencies
  • The following workspace dependencies were updated
    • dependencies
      • puppeteer-core bumped from 23.2.1 to 23.2.2
Bug Fixes
firebase/firebase-js-sdk (firebase)

v12.19.0

Compare Source

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@2.16.0

Minor Changes
  • 6b17ef5 #​10319 - Fixed the issue where the SDK hardcodes invalid 'function' role, causing 400 errors during function calling on gemini-3.6-flash
Patch Changes
  • 6f86596 #​10320 - Fixed a client-side validation guardrail that incorrectly blocked text/x.enum when responseSchema or responseJsonSchema was provided. The SDK now correctly accepts both application/json and text/x.enum for structured outputs.

firebase@​12.19.0

Minor Changes
  • 6b17ef5 #​10319 - Fixed the issue where the SDK hardcodes invalid 'function' role, causing 400 errors during function calling on gemini-3.6-flash
Patch Changes

@​firebase/analytics@0.10.25

Patch Changes
  • 50213a1 #​10233 - Update api-extractor and documentation pipeline. Includes some fixes to documentation comments and links.

@​firebase/analytics-compat@0.2.31

Patch Changes

@​firebase/app@0.16.2

Patch Changes
  • Update SDK_VERSION.

@​firebase/app-compat@0.5.18

Patch Changes

@​firebase/auth@1.13.6

Patch Changes

  • 8676365 #​10325 (fixes #​10318) - Allow IndexedDB persistence reconnection on demand after pagehide events, fixing Database is closing errors during signInWithPopup authentication on iPadOS and iOS Safari.

  • 8316986 #​10326 (fixes #​10311) - Gracefully fall back to in-memory persistence when persistence initialization fails or storage is inaccessible, preventing initialization deadlocks and ensuring authStateReady() resolves.

  • b74b53c #​10335 - Wrap storage and persistence errors in FirebaseError (auth/internal-error) during current user updates, ensuring error.code is always defined and attaching the underlying exception under error.customData.originalError.

  • 50213a1 #​10233 - Update api-extractor and documentation pipeline. Includes some fixes to documentation comments and links.

@​firebase/auth-compat@0.6.11

Patch Changes

@​firebase/firestore@4.17.2

Patch Changes

  • 0e8554b #​10301 - feat(firestore): support conversion and serialization for Temporal.Instant to Firestore's Timestamp

  • 50213a1 #​10233 - Update api-extractor and documentation pipeline. Includes some fixes to documentation comments and links.

  • 392bce0 #​10340 - Fixes fetch connection error messages that were undefined.

@​firebase/firestore-compat@0.4.14

Patch Changes

@​firebase/messaging@0.13.3

Patch Changes
  • 50213a1 #​10233 - Update api-extractor and documentation pipeline. Includes some fixes to documentation comments and links.

@​firebase/messaging-compat@0.2.30

Patch Changes
firebase/firebase-admin-node (firebase-admin)

v14.4.0: Firebase Admin Node.js SDK v14.4.0

Compare Source

New Features
  • feat(ml): deprecate Machine Learning APIs (#​3245)
Miscellaneous
firebase/firebase-tools (firebase-tools)

v15.30.0

Compare Source

  • Updated the Firebase SQL Connect local toolkit to v3.4.19, which includes the following changes:
    • [fixed] Bug fixes and performance improvements for the PostgreSQL emulator.
  • [fixed] Clean up managed service accounts when all functions in a codebase are deleted.
  • Corrected Cloud Tasks emulator Queue ID validation error message to match Cloud Tasks naming rules.
  • Repurposed the local dataconnect_execute tool as dataconnect_execute_in_emulator to run GraphQL queries and mutations on the local SQL Connect emulator.
  • Configured the SQL Connect (Data Connect) OneMCP proxy server in ONEMCP_SERVERS with a selection of remote tools.
  • Configured the Mcp-Param-Region HTTP header workaround in OneMcpServer for MCP routing support.
  • [fixed] Retry IAM policy updates on replication lag and concurrency conflicts.
  • [fixed] Prevent deadlock and stale source tokens during Cloud Functions deployment retries.
  • [fixed] Retry Cloud Functions creation on HTTP 400 service account propagation errors.

v15.29.0

Compare Source

  • Added support for the FIREBASE_DEBUG_PATH environment variable to customize the debug log output location.
  • Add humanReadableDescription field to MCP tools and use it in --generate-tool-list output.
  • Fixed an issue where the Functions emulator replaced an IPC failure with an unrelated TypeError about stream chunk types, hiding why the runtime became unreachable (#​10876).
  • [Added] Add -f, --force option to firebase ext:migrate.
  • [Fixed] Fix parameter type preservation and optional system parameter handling during extension updates in firebase ext:migrate
Rich-Harris/magic-string (magic-string)

v1.3.1

Compare Source

pnpm/pnpm (pnpm)

v11.26.0: pnpm 11.26

Compare Source

Minor Changes

  • Catalogs can now resolve workspace dependencies through the workspace: protocol.

  • pnpm remove and pnpm update now accept --trust-lockfile, --no-trust-lockfile, --trust-policy, --trust-policy-exclude, and --trust-policy-ignore-after. pnpm remove checks the whole lockfile against the active policies unless --trust-lockfile is set.

  • Added pnpm change check for CI validation of package versions against the versioning.epics bands and versioning.fixed groups in pnpm-workspace.yaml.

Patch Changes

  • Fetch and tarball errors and retry logs now hide URL credentials, query strings, and fragments that could expose secrets.

  • Fixed a race during config dependency updates that could redirect a lockfile write through a symlink #​14322.

  • pnpm add --allow-build=!<pkg> now correctly denies builds, including in global installs. pnpm approve-builds <pkg> and pnpm approve-builds !<pkg> now save decisions even when the package is not awaiting approval, with a warning #​14067.

  • Fixed pnpm audit --fix failing without a value or when followed by another flag. pnpm audit --fix=override now respects saveExact and savePrefix when writing overrides #​13261, #​11523.

  • pnpm audit now excludes ignored advisories from vulnerability totals and severity counts, and reports them separately #​14535.

  • pnpm deploy no longer requires injectWorkspacePackages. If a workspace dependency's peer has multiple possible versions, deployment reports ERR_PNPM_DEPLOY_AMBIGUOUS_PEER with the conflicting versions. Pin the peer with overrides to deploy without injection #​9386.

  • Fixed concurrent installs sharing a store occasionally failing with an ENOENT error while importing a package file #​14353.

  • Fixed installation failures when a linked local dependency provides a peer dependency also provided by an ancestor, including with pnpm deploy --legacy.

  • pnpm install --node-linker=hoisted no longer downloads skipped optional dependencies when node_modules already exists #​14139.

  • Fixed pnpm install rejecting a symlinked lockfile when config dependencies are unchanged. Updates to config dependencies also preserve lockfiles with a byte order mark. Writes through symlinked lockfiles remain blocked #​14372.

  • pnpm install now relinks workspace packages when publishConfig.linkDirectory changes. Frozen installs require the lockfile to be regenerated #​14488.

  • Auto-installed optional peers now satisfy their declared range even when the workspace root uses a version outside that range #​13867.

  • Fixed global virtual store paths for dependency cycles to consistently account for the runtime engine when dependencies have allowed builds #​14341.

  • Standalone installations now preserve the bundled node-gyp files needed to build native dependencies.

  • Downloaded runtimes are now available to dependency lifecycle scripts during installation.

  • Node.js downloads from nodeDownloadMirrors now use URL-scoped npm credentials, including bearer tokens, basic auth, and tokenHelper #​14334.

  • Fixed globalDir and globalBinDir handling in global configuration and environment variables, including ~/ expansion. This fixes pnpm add -g failing after pnpm config set -g global-bin-dir #​14336.

  • The JavaScript pnpm can again switch to the project's pinned pnpm version on hosts without a matching native binary. If the requested version requires an unavailable native binary, the error now identifies the unsupported host #​13622.

  • Global pnpm config commands now skip project package manager version switching, allowing authentication to be configured before downloading the pinned version #​14463.

  • pnpm self-update, pnpm with, and automatic version switching no longer wait through registry retries when a configured registry has no signatures and registry.npmjs.org is unavailable #​14483.

  • Fixed argument forwarding on Windows with shellEmulator enabled. Trailing backslashes, line breaks, and literal shell expressions are preserved #​14548.

  • Relative scriptShell paths now resolve from the workspace root. Bare command names such as bash still use PATH #​14422.

  • pnpm import now preserves the project-local lockfile when lockfileDir points elsewhere and restores the destination lockfile on failure. Branch lockfile imports leave the shared lockfile unchanged #​14563.

  • catalogMode and --save-catalog no longer move local paths, tarballs, or workspace:<path> specifiers into catalogs #​14437.

  • --side-effects-cache, --no-side-effects-cache, and PNPM_CONFIG_SIDE_EFFECTS_CACHE now toggle only the local cache, preserving any remote cache configured in sideEffectsCache.

  • pnpm unpublish now handles registry two-factor authentication challenges through web authentication or a one-time password prompt #​14464.

  • pnpm outdated and pnpm update now follow GitHub Actions references using self-repository syntax, such as uses: $/.github/actions/setup.

  • pnpm remove now accepts --unsafe-perm.

Platinum Sponsors
Bit OpenAI Notion
CodeRabbit
Gold Sponsors
Sanity Discord Vite
SerpApi Stackblitz Workleap
Nx Latitude
renovatebot/renovate (renovate)

v44.79.6

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.97.6 (main) (#​45866) (0e552f9)

v44.79.5

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.97.5 (main) (#​45865) (0b88a0e)

v44.79.4

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.97.4 (main) (#​45864) (cd6d5a8)
Miscellaneous Chores
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.7 (main) (#​45863) (5d7da8f)

v44.79.3

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.97.3 (main) (#​45862) (7facc6e)
Miscellaneous Chores
  • deps: update astral-sh/setup-uv action to v10.1.0 (main) (#​45858) (a13d962)
  • deps: update dependency astral-sh/uv to v0.12.13 (main) (#​45859) (692322e)
  • deps: update dependency uv to v0.12.13 (main) (#​45860) (15a137c)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.5 (main) (#​45857) (26510c5)
  • deps: update ghcr.io/containerbase/devcontainer docker tag to v14.14.6 (main) (#​45861) (0fd32ad)

v44.79.2

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.97.1 (main) (#​45854) (f4ceee4)
Miscellaneous Chores
  • lint: add oxlint rule to block dev-dependency imports in production code (#​45851) (134dc6c)

v44.79.1

Compare Source

Bug Fixes

v44.79.0

Compare Source

Features
  • config: add inheritConfigTrusted to trust inherited-config hostRules (238e15a)
  • host-rules: add allowInternal (09d2da2)
Bug Fixes
  • config: surface blocked hosts more clearly when resolving config (acb46bc)
  • util/host-rules: resolve enabled per trust tier (7d3fe44)
  • util/http: allow blocking requests to internal hosts (29a7b9c)
  • workers/repository/init: surface inherited-config validation errors (270a3b7)
Code Refactoring
  • host-rules: add an inherited trust tier (7386ea4)
  • util/http: add host guard address classifier (0db7cdd)
  • util/http: share options preparation between request and stream (2361d04)
Tests
  • config/presets/github: cover that preset strings don't include a host (d4614ac)
  • docs: support self-hosted-only sub-options in documentation checks (e58e46d)

v44.78.0

Compare Source

Features
  • manager/github-actions: extract expo GitHub actions' eas-version (#​45846) (6d67f70)
Bug Fixes
  • changelog: log external host errors below the error level (#​45798) (5ec380f)
  • manager/npm: keep workspace entries when massaging lockstep siblings (#​45786) (76d55bf)
Code Refactoring

v44.77.0

Compare Source

Features

v44.76.0

Compare Source

Features
Miscellaneous Chores
Tests
Continuous Integration

v44.75.2

Compare Source

Build System
Continuous Integration

v44.75.1

Compare Source

Build System
  • deps: update dependency node-html-parser to v9.0.3 (main) (#​45829) (e11b40f)

v44.75.0

Compare Source

Features
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.97.0 (main) (#​45828) (47de98f)

v44.74.1

Compare Source

Bug Fixes
  • deps: update ghcr.io/renovatebot/base-image docker tag to v13.96.2 (main) (#​45827) (1e3547b)
Miscellaneous Chores

v44.74.0

Compare Source

Features
Miscellaneous Chores

v44.73.0

Compare Source

Features
  • automerge: attempt branch automerge before falling back to a PR on merge queue rejection (#​45724) (4573aa6)
  • github: add support for using merge queues without auto merge (#​45721) (7b25e97), closes #​45252
  • gitlab: merge MRs through merge trains via the platform merge queue API (#​45722) (5f91549)
Miscellaneous Chores

✂ Note

PR body was truncated to here.

@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Sep 10, 2026
gemini-code-assist[bot]
gemini-code-assist Bot reviewed Sep 10, 2026
View reviewed changes

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates various dependencies across the repository, including core packages such as renovate, firebase-tools, zod, and several @opentelemetry and @InQuirer packages to their latest versions. No review comments were provided for this pull request.

@angular-robot
angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch 26 times, most recently from 0555f3e to 06d86aa Compare September 11, 2026 17:31
@angular-robot
angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch 4 times, most recently from f32f8da to 68c899b Compare September 11, 2026 23:56
@angular-robot
build: update all non-major dependencies
2cf33ff 
See associated pull request for more information.
@angular-robot
angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from 68c899b to 2cf33ff Compare September 12, 2026 01:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@gemini-code-assist gemini-code-assist[bot] gemini-code-assist[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@angular-robot