chore(deps): update npm packages by renovate[bot] · Pull Request #278 · voidzero-dev/oxc-angular-compiler

renovate · 2026-05-17T17:42:42Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@angular/animations (source)	`21.2.12` → `21.2.13`
@angular/build	`21.2.10` → `21.2.11`
@angular/cdk	`21.2.10` → `21.2.11`
@angular/common (source)	`21.2.12` → `21.2.13`
@angular/compiler (source)	`21.2.12` → `21.2.13`
@angular/compiler-cli (source)	`21.2.12` → `21.2.13`
@angular/core (source)	`21.2.12` → `21.2.13`
@angular/forms (source)	`21.2.12` → `21.2.13`
@angular/material	`21.2.10` → `21.2.11`
@angular/platform-browser (source)	`21.2.12` → `21.2.13`
@angular/platform-browser-dynamic (source)	`21.2.12` → `21.2.13`
@angular/router (source)	`21.2.12` → `21.2.13`
@playwright/test (source)	`1.59.1` → `1.60.0`
@sanity/types (source)	`5.24.0` → `5.25.1`
@tailwindcss/vite (source)	`4.2.4` → `4.3.0`
posthog-js (source)	`1.372.10` → `1.373.4`
tailwindcss (source)	`4.2.4` → `4.3.0`
tsx (source)	`4.21.0` → `4.22.0`
vite (source)	`8.0.11` → `8.0.13`
vitest (source)	`4.1.5` → `4.1.6`

Release Notes

angular/angular (@angular/animations)

`v21.2.13`

Compare Source

core

Commit	Type	Description
1c6553e97d	fix	disallow event attribute bindings in host bindings unconditionally

platform-server

Commit	Type	Description
629905d537	fix	add `allowedHosts` option to `renderModule` and `renderApplication`
0b7192f441	fix	forward BEFORE_APP_SERIALIZED errors to ErrorHandler

angular/angular-cli (@angular/build)

`v21.2.11`

Compare Source

@angular/cli

Commit	Type	Description
bbd63b7a5	fix	robustly parse npm manifest from array

@angular/ssr

Commit	Type	Description
eafe1a719	fix	allow all hosts in common engine rendering options to prevent validation errors
7a116a80d	fix	remove stateful flag from URL_PARAMETER_REGEXP

angular/components (@angular/cdk)

`v21.2.11`

Compare Source

No user facing changes in this release

microsoft/playwright (@playwright/test)

`v1.60.0`

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

expect(page).toMatchAriaSnapshot() now works on a Page, in addition to a Locator — equivalent to asserting against page.locator('body').
New boxes option on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as [box=x,y,width,height], useful for AI consumption.

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page

Event browser.on('context') — fired when a new context is created on the browser.
BrowserContext now mirrors lifecycle events from its pages: browserContext.on('download'), browserContext.on('frameattached'), browserContext.on('framedetached'), browserContext.on('framenavigated'), browserContext.on('pageclose'), browserContext.on('pageload').

Locators and Assertions

New option description in page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.
New option pseudo in expect(locator).toHaveCSS() reads computed styles from ::before or ::after.
New option style in locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.

Network

webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.

Errors and Reporting

New webError.location() mirrors consoleMessage.location().
consoleMessage.location() now exposes line / column properties (lineNumber / columnNumber are deprecated).
New testInfoError.errorContext surfaces additional diagnostic context, such as the aria snapshot of the receiver at the time of an expect(...) matcher failure.
reporter.onError() now receives a workerInfo argument with details about the worker for fixture teardown errors.

Test runner

New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

HTML reporter:
- npx playwright show-report accepts .zip files directly — no need to unzip first.
- Steps that contain attachments inside nested children show an indicator on the parent step.
- The repeatEachIndex is shown in the test header when non-zero.
Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

Removed long-deprecated APIs:
- Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
- handle option on BrowserContext.exposeBinding and Page.exposeBinding.
- logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
- Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

Chromium 148.0.7778.96
Mozilla Firefox 150.0.2
WebKit 26.4

This version was also tested against the following stable channels:

Google Chrome 147
Microsoft Edge 147

sanity-io/sanity (@sanity/types)

`v5.25.1`

Compare Source

Sanity Studio v5.25.1

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4yNS4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author	Message	Commit
@bjoerge	fix: show login screen instead of error when session expires (#12827)	`69cce1a`
@pedrobonamin	fix(core): remove static css import from `sanity` and `vision` (#12825)	`c147d00`
@bjoerge	fix(structure): truncate long document titles in pane header (#12823)	`e916a32`

`v5.25.0`

Compare Source

Sanity Studio v5.25.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-NS4yNC4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author	Message	Commit
@jordanl17	fix(form): keep dialog open when focusing reference link in grid item (#12821)	`b3f4604`
@jordanl17	fix(structure): guard against null formState in DivergencesProvider (#12807)	`9ee4495`
@sgulseth	fix(core): await empty response handling (#12819)	`2455e6c`
@jordanl17	fix(releases): use selected timezone in perspective menu dates (#12808)	`2fc09fd`
@jordanl17	fix: adding names to currently nameless telemetry events (#12816)	`d694f57`
@pedrobonamin	fix(vision): do not fetch if query is empty (#12814)	`a10c347`
@annez	feat(telemetry): enrich studio event context (#12813)	`9f3591c`
@RitaDias	perf(core): dedupe equal editStateFor values + add tests for hook (#12789)	`03217c9`
@jordanl17	fix: hide register studio option from local dev mode studios (#12803)	`3591ab7`
@jordanl17	chore: instrument divergences flows (#12747)	`b31eb1c`
@bjoerge	chore: upgrade jsdom to latest and remove override (#12802)	`2300e47`
squiggler-app[bot]	chore(lint): fix linter issues 🤖 ✨ (#12792)	`39004b8`
@jordanl17	fix: resolving z indexes issue with popovers inside document form (#12798)	`2e11e50`
@bjoerge	fix(ci): restore provenance after pnpm 11 upgrade (#12797)	`212d696`
squiggler-app[bot]	chore(deps): update pnpm to v11.0.8 (#12799)	`2674f9a`
@bjoerge	perf(core): render workspace menu immediately and preload on hover (#12793)	`93dd049`
@pedrobonamin	chore(core): remove server actions enabled wiring (#12769)	`97b56f1`
@bjoerge	perf: defer per-workspace auth checks via /auth/id probe (#12777)	`4b3b564`
@juice49	feat(sanity): ensure all ordering expression are addressable (#12761)	`0ba3fb8`
@EoinFalconer	fix(presentation): sync perspective cookie for content agent documents (#12671)	`08c0d79`
@pedrobonamin	feat(core): variants plugin setup - default disabled (#12762)	`71c40e1`
@bjoerge	fix(auth): guard access to browser-only globals in SSR environments (#12790)	`902b99b`
@pedrobonamin	fix(core): include versions in consistency status validation (#12771)	`ce57ece`
squiggler-app[bot]	chore(deps): dedupe pnpm-lock.yaml (#12764)	`1880a07`
squiggler-app[bot]	fix(deps): Update portabletext (#12770)	`bc47f51`
squiggler-app[bot]	chore(deps): update dependency knip to v6 (#12782)	`e5da2ef`
squiggler-app[bot]	chore(tests): generate dts tests 🤖 ✨ (#12784)	`2d6b017`

tailwindlabs/tailwindcss (@tailwindcss/vite)

`v4.3.0`

Compare Source

Added

Add @container-size utility (#18901)
Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
Add scrollbar-gutter-* utilities (#20018)
Add zoom-* utilities (#20020)
Add tab-* utilities (#20022)
Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#19918)
Allow multiple @utility definitions with the same name but different value types (#19777)
Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
Ensure start and end legacy utilities without values do not generate CSS (#20003)
Ensure --value(…) is required in functional @utility definitions (#20005)
Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

#3547 4c0c7d9 Thanks @williamchong! - capture() now accepts an optional uuid on CaptureOptions.
(2026-05-11)

Patch Changes

#3561 3511848 Thanks @marandaneto! - Handle invalid persisted session replay config JSON gracefully
(2026-05-11)
#3559 0a835fa Thanks @marandaneto! - Skip remote config background refreshes when no document is available.
(2026-05-11)
Updated dependencies [4c0c7d9, 0a835fa]:
- @posthog/types@1.373.0
- @posthog/core@1.28.5

privatenumber/tsx (tsx)

`v4.22.0`

Compare Source

`v4.21.1`

Compare Source

Bug Fixes

support Node 20.11/21.2 import.meta paths (acf3d8f)
support Node.js 24.15.0 (c1d2d45)
support Node.js 26.1.0 and 25.9.0 (1d7e528)

This release is also available on:

npm package (@latest dist-tag)

vitejs/vite (vite)

`v8.0.13`

Compare Source

Features

bundled-dev: add lazy bundling support (#21406) (4f0949f)
optimizer: improve the esbuild plugin converter to pass some properties of build result to onEnd (#22357) (47071ce)
update rolldown to 1.0.1 (#22444) (8c766a6)

Bug Fixes

build: copy public directory after building same environment with write=false (#22328) (158e8ae)
css: await sass/less/styl worker disposal on teardown (fix #22274) (#22275) (b7edcb7)
css: keep deprecated name/originalFileName in synthetic assetFileNames call (#22439) (8e59c97)
make isBundled per environment (#22257) (a576326)
ssr: avoid rewriting labels that collide with imports (#22451) (d9b18e0)

Miscellaneous Chores

remove irrelevant commits from changelog (#22430) (6ea3838)
update changelog (#22413) (fcdc87c)

`v8.0.12`

Compare Source

Features

update rolldown to 1.0.0 (#22401) (cf0ff41)

Bug Fixes

create-vite: pass react framework to TanStack CLI (#22397) (18f0f90)
deps: update all non-major dependencies (#22420) (2be6000)
module-runner: prevent partial-exports race on concurrent imports of in-flight invalidated re-export chains (#22369) (f5a22e6)
refer to rolldownOptions instead of deprecated rollupOptions in messages (#22400) (b675c7b)
worker: apply build.target to worker bundle (#22404) (3c93fde)
worker: forward define to worker bundle transform (#22408) (d4838a0)

Miscellaneous Chores

deps: update dependency eslint-plugin-n to v18 (#22423) (2fe7bd2)
deps: update rolldown-related dependencies (#22421) (66b9eb3)

vitest-dev/vitest (vitest)

`v4.1.6`

Compare Source

🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in #10138 (31882)
Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in #10196 (2847d)
browser: Simplify orchestrator otel carrier - by @hi-ogawa in #10285 (18af9)

🏎 Performance

Stringify diff objects only once - by @sheremet-va in #10276 (9f7b1)

View changes on GitHub

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-05-17T17:43:20Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/@angular/platform-browser-dynamic@21.2.13
	npm/@sanity/types@5.25.1
	npm/posthog-js@1.373.4
	npm/@angular/core@21.2.13
	npm/@angular/compiler@21.2.13
	npm/@angular/platform-browser@21.2.13
	npm/@angular/animations@21.2.13
	npm/@angular/compiler-cli@21.2.13
	npm/@angular/forms@21.2.13
	npm/@angular/router@21.2.13
	npm/@angular/build@21.2.11
	npm/@angular/cdk@21.2.11
	npm/@angular/common@21.2.13
	npm/@angular/material@21.2.11
	npm/tsx@4.22.0
	npm/vite@8.0.13
	npm/tailwindcss@4.3.0
	npm/@tailwindcss/vite@4.3.0
	npm/@playwright/test@1.60.0

View full report

chore(deps): update npm packages

8af9d08

renovate Bot enabled auto-merge (squash) May 17, 2026 17:42

Brooooooklyn approved these changes May 18, 2026

View reviewed changes

renovate Bot merged commit ac2338a into main May 18, 2026
10 checks passed

renovate Bot deleted the renovate/npm-packages branch May 18, 2026 03:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update npm packages#278

chore(deps): update npm packages#278
renovate[bot] merged 1 commit into
mainfrom
renovate/npm-packages

renovate Bot commented May 17, 2026

Uh oh!

socket-security Bot commented May 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented May 17, 2026

Release Notes

core

platform-server

🌐 HAR recording on Tracing

🪝 Drop API

🎯 Aria snapshots

🛑 test.abort()

New APIs

Browser, Context and Page

Locators and Assertions

Network

Errors and Reporting

Test runner

🛠️ Other improvements

Breaking Changes ⚠️

Browser Versions

Sanity Studio v5.25.1

Install or upgrade Sanity Studio

📓 Full changelog

Sanity Studio v5.25.0

Install or upgrade Sanity Studio

📓 Full changelog

Added

Fixed

1.373.4

Patch Changes

1.373.3

Patch Changes

1.373.2

Patch Changes

1.373.1

Patch Changes

1.373.0

Minor Changes

Patch Changes

Bug Fixes

Features

Bug Fixes

Miscellaneous Chores

Features

Bug Fixes

Miscellaneous Chores

🐞 Bug Fixes

🏎 Performance

Configuration

Uh oh!

socket-security Bot commented May 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant