build: update all non-major dependencies #3353

angular-robot · 2026-01-08T06:10:34Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
renovate (source)	`42.71.0` → `42.73.0`
undici (source)	`7.16.0` → `7.18.2`

Release Notes

renovatebot/renovate (renovate)

`v42.73.0`

Compare Source

Features

make config filename lookup platform-specific (#40065) (d447c1a)

Documentation

Use matchPackageNames in dependencyDashboardApproval example (#40301) (d300868)

`v42.72.0`

Compare Source

Features

deps: update ghcr.io/renovatebot/base-image docker tag to v12.21.0 (main) (#40300) (eeea6f2)

Miscellaneous Chores

deps: update dependency pnpm to v10.27.0 (main) (#40299) (6a9c714)
deps: update otel/opentelemetry-collector-contrib docker tag to v0.143.0 (main) (#40295) (80f0335)
deps: update otel/opentelemetry-collector-contrib docker tag to v0.143.1 (main) (#40297) (0355125)
deps: update prom/prometheus docker tag to v3.9.0 (main) (#40296) (88aa5eb)

`v42.71.4`

Compare Source

Bug Fixes

auto-replace: prevent digest corruption when using replacementNameTemplate (#40170) (2d88578), closes #40169

Documentation

fix grammar (#40286) (d6c4b46)

Tests

util/exec: clarify how errors are thrown (#40287) (2ac386d)

`v42.71.3`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.12 (main) (#40283) (920ebb4)
util/exec: always pass shell when preparing rawExec arguments (#40235) (021532c), closes #40242

Miscellaneous Chores

gradle: clarify log message on errors (#40196) (0dfe0f9)

`v42.71.2`

Compare Source

Bug Fixes

deps: update ghcr.io/renovatebot/base-image docker tag to v12.20.11 (main) (#40281) (7aad009)

`v42.71.1`

Compare Source

Bug Fixes

deps: update ghcr.io/containerbase/sidecar docker tag to v13.25.21 (main) (#40280) (4679fcf)

Documentation

update references to renovate/renovate (main) (#40266) (807bc9a)

Miscellaneous Chores

deps: lock file maintenance (main) (#40267) (f2b8edd)
deps: update containerbase/internal-tools action to v3.14.46 (main) (#40268) (e23e484)
deps: update dependency @containerbase/eslint-plugin to v1.1.25 (main) (#40269) (5a7dd73)
deps: update dependency @containerbase/istanbul-reports-html to v1.1.22 (main) (#40270) (32b0601)
deps: update dependency @containerbase/semantic-release-pnpm to v1.3.13 (main) (#40271) (79f4488)
deps: update dependency renovatebot/github-action to v44.2.3 (main) (#40272) (8aae225)
deps: update ghcr.io/containerbase/devcontainer docker tag to v13.25.21 (main) (#40279) (47be9ba)

nodejs/undici (undici)

`v7.18.2`

Compare Source

What's Changed

fix(decompress): limit Content-Encoding chain to 5 to prevent resourc… by @mcollina in #4729

Full Changelog: nodejs/undici@v7.18.1...v7.18.2

`v7.18.1`

Compare Source

What's Changed

Test and Fix running without SSL by @mcollina in #4727
docs: add security warning for strictContentLength option by @mcollina in #4726
build(deps): bump step-security/harden-runner from 2.13.1 to 2.14.0 by @dependabot[bot] in #4718
build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #4719

Full Changelog: nodejs/undici@v7.18.0...v7.18.1

What's Changed

chore: extract infra and encoding methods by @Uzlopak in #4523
ci: remove h2 by @Uzlopak in #4534
ci: make nodejs-shared wf reusable, install binaryen for wasm-opt, test on node-nightly by @Uzlopak in #4535
ci: fix nightly shared library case by @Uzlopak in #4543
test: consume bodies of fetch responses to fix failing macos 20 ci by @Uzlopak in #4528
docs: add Cache Interceptor example to README by @tawseefnabi in #4393
test: remove node20 version check by @Uzlopak in #4544
types: use MessagePort instance type in MessageEvent by @Renegade334 in #4546
ci: set write permissions on job level by @Uzlopak in #4537
lint: activate n/no-process-exit by @Uzlopak in #4548
ci: run benchmarks on pull_requests and by pushing on specific branches only by @Uzlopak in #4536
chore: activate n/prefer-node-protocol to enforce 'node:' prefix for requiring node built-ins by @Uzlopak in #4547
feat(H2): correct CONNECT behaviour by @metcoder95 in #4541
test: fix plans by @Uzlopak in #4550
feat: add runtime feature "detection" by @Uzlopak in #4545
perf: use less promises in extractBody by @Uzlopak in #4458
fix(proxy-agent): add missing return after callback-call by @Uzlopak in #4553
fix: remove redundant line in retry-handler by @Uzlopak in #4554
ci: add no-wasm-simd option by @Uzlopak in #4533
fix: use lazyloaders for runtime feature detection by @Uzlopak in #4557
fix: minor changes in dispatcher-base.js and types for Dispatcher by @Uzlopak in #4556
http2: refactor and split tests of http2.js into multiple files by @Uzlopak in #4561
fix: dns-interceptor test should await plan to complete by @Uzlopak in #4560
chore: remove istanbul instructions by @Uzlopak in #4559
fix: keep promise chains intact by @Uzlopak in #4558
build(deps): bump wait-on from 8.0.5 to 9.0.1 in /benchmarks by @dependabot[bot] in #4567
chore: remove tspl from eventsource by @Uzlopak in #4569
chore: remove tspl from fetch by @Uzlopak in #4570
feat: add getUpstream() method to BalancedPool by @mcollina in #4586
fetch: handle invalid priority values properly by @Uzlopak in #4522
ci: fix test coverage for codecov by @Uzlopak in #4520
types: optional status in Response.redirect by @gineika in #4591
docs: unix socket add-on by @FelixVaughan in #4587
build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 by @dependabot[bot] in #4601
build(deps): bump hendrikmuhs/ccache-action from 1.2.18 to 1.2.19 by @dependabot[bot] in #4600
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 by @dependabot[bot] in #4603
build(deps): bump actions/setup-node from 4.0.2 to 5.0.0 by @dependabot[bot] in #4604
build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #4602
build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 by @dependabot[bot] in #4598
build(deps): bump github/codeql-action from 3.30.0 to 3.30.5 by @dependabot[bot] in #4599
build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 by @dependabot[bot] in #4597
fix: cacheStores types and usage in README by @lucalooz in #4605
Feat dns interceptor storage by @SuperOleg39 in #4589
docs: add crawling best practices by @Uzlopak in #4590
fix: 304 not modified reply upon revalidation did not update cache. by @daan944 in #4617
chore: use testcontext for test:infra by @Uzlopak in #4579
fetch: improve regexes in data-uri.js by @Uzlopak in #4483
perf: optimize validate http token by @PandaWorker in #4608
test: improve long-lived-abort-controller test by @Uzlopak in #4621
ci: add node.js 25 to test matrix by @shivarm in #4626
chore: use testcontext for test/utils tests by @Uzlopak in #4577
chore: remove tspl from websocket by @Uzlopak in #4568
fix(ws) onSocketClose being called multiple times by @KhafraDev in #4632
fix: prevent duplicate debug logs when multiple undici instances exist by @mcollina in #4630
chore: use testcontext for busboy tests by @Uzlopak in #4572
test: fix flaky http2-dispatcher test by @mcollina in #4633
build(deps): bump uWebSockets.js from v20.52.0 to v20.54.0 in /benchmarks by @dependabot[bot] in #4635
Run the gc() in long-lived-abort-controller test by @mcollina in #4638
Do not destroy the HTTP2 stream twice in tests by @mcollina in #4637
Fix http2-dispatcher test by @mcollina in #4640
fix: fetch blob with range off-by-one error by @platypii in #4643
fix: ensure HTTP/2 sends Content-Length for empty POST requests by @mcollina in #4613
build(deps): bump uWebSockets.js from v20.54.0 to v20.55.0 in /benchmarks by @dependabot[bot] in #4645
feat(#2458): WebSocket through HTTP/2 by @metcoder95 in #4540
docs(README): correct the example code for the consumption of respons… by @tenkirin in #4658
build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 by @dependabot[bot] in #4653
build(deps): bump fastify/github-action-merge-dependabot from 3.11.1 to 3.11.2 by @dependabot[bot] in #4655
build(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by @dependabot[bot] in #4652
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #4651
build(deps): bump actions/dependency-review-action from 4.8.0 to 4.8.1 by @dependabot[bot] in #4654
don't freeze urlList for opaque filtered responses by @KhafraDev in #4656
fix fd parsing unquoted attribute values by @KhafraDev in #4662
build(deps): bump uWebSockets.js from v20.55.0 to v20.56.0 in /benchmarks by @dependabot[bot] in #4665
feat(dispatcher/proxy-agent): new diagnostics event 'undici:proxy:connected' by @SuperOleg39 in #4659
Feat/round robin pool by @FelixVaughan in #4650
Formdata ignore epilogue preamble by @KhafraDev in #4672
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #4682
fix: snapshot url exclusion by @FelixVaughan in #4670
feat: support h2c over unix domain sockets by @chrros95 in #4690
fix(docs): remove unused TypeScript example code block by @kerolloz in #4701
feat: add deduplicate interceptor for request deduplication by @mcollina in #4679
chore: use testcontext for mock tests by @Uzlopak in #4582
fix(test): remove hardcoded folder name in client-error-stack-trace test by @mcollina in #4707

New Contributors

@gineika made their first contribution in #4591
@lucalooz made their first contribution in #4605
@SuperOleg39 made their first contribution in #4589
@daan944 made their first contribution in #4617
@PandaWorker made their first contribution in #4608
@platypii made their first contribution in #4643
@tenkirin made their first contribution in #4658
@kerolloz made their first contribution in #4701

Full Changelog: nodejs/undici@v7.16.0...v7.17.0

If you want to rebase/retry this PR, check this box

See associated pull request for more information.

josephperrott

LGTM

josephperrott · 2026-01-08T16:02:46Z

This PR was merged into the repository. The changes were merged into the following branches:

main: 6084f3b

angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Jan 8, 2026

build: update all non-major dependencies

2031d3c

See associated pull request for more information.

angular-robot force-pushed the ng-renovate/all-non-major-dependencies branch from 52d48ed to 2031d3c Compare January 8, 2026 15:42

josephperrott approved these changes Jan 8, 2026

View reviewed changes

josephperrott merged commit 6084f3b into angular:main Jan 8, 2026
8 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build: update all non-major dependencies #3353

build: update all non-major dependencies #3353

Uh oh!

angular-robot commented Jan 8, 2026 •

edited

Loading

Uh oh!

josephperrott left a comment

Uh oh!

Uh oh!

josephperrott commented Jan 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

build: update all non-major dependencies #3353

build: update all non-major dependencies #3353

Uh oh!

Conversation

angular-robot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Documentation

Features

Miscellaneous Chores

Bug Fixes

Documentation

Tests

Bug Fixes

Miscellaneous Chores

Bug Fixes

Bug Fixes

Documentation

Miscellaneous Chores

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

Uh oh!

josephperrott left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

josephperrott commented Jan 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

angular-robot commented Jan 8, 2026 •

edited

Loading