build(deps): bump @hono/node-server and @angular/cli in /ui by dependabot[bot] · Pull Request #354 · Bee-Mar/mmpm

dependabot · 2026-08-16T17:01:27Z

Bumps @hono/node-server to 2.1.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @hono/node-server from 1.19.14 to 2.1.1

Release notes

Sourced from @hono/node-server's releases.

v2.1.1

What's Changed

perf: lazily materialize request headers by @BlankParticle in honojs/node-server#389

Full Changelog: honojs/node-server@v2.1.0...v2.1.1

v2.1.0

What's Changed

feat: add Early Hints (HTTP 103) middleware by @bilal-azam in honojs/node-server#378

fix(listener): avoid uncaught error when force-closing a non-standard socket by @mohamedramadan14 in honojs/node-server#383

New Contributors

@bilal-azam made their first contribution in honojs/node-server#378

@mohamedramadan14 made their first contribution in honojs/node-server#383

Full Changelog: honojs/node-server@v2.0.12...v2.1.0

v2.0.12

What's Changed

test: replace supertest by @BlankParticle in honojs/node-server#379

fix(response): copy headers when init is a foreign Response by @yusukebe in honojs/node-server#382

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

v2.0.11

What's Changed

test: use a custom helper for path traversal tests by @BlankParticle in honojs/node-server#377

perf(request): fast-path QUERY methods by @usualoma in honojs/node-server#376

perf(request): fast-path PATCH method by @yusukebe in honojs/node-server#380

Full Changelog: honojs/node-server@v2.0.10...v2.0.11

v2.0.10

Security fixes

This release includes a fix for the following security issue:

Unauthenticated memory-leak DoS via aborted WebSocket handshake

Affects: upgradeWebSocket. A WebSocket upgrade request with a missing or malformed Sec-WebSocket-Key header leaked the request's IncomingMessage and left a promise pending, even though no connection was established. Since the route is reachable pre-handshake without authentication, an attacker could flood it to gradually exhaust memory. GHSA-9mqv-5hh9-4cgg

Users of upgradeWebSocket are encouraged to upgrade to this version.

v2.0.9

What's Changed

... (truncated)

Commits

73c03ad 2.1.1
5515aa0 perf: lazily materialize request headers (#389)
82ba34e 2.1.0
1f2909a fix(listener): avoid uncaught error when force-closing a non-standard socket ...
977a242 feat: add Early Hints (HTTP 103) middleware (#378)
a813b6c 2.0.12
caf48ba fix(response): copy headers when init is a foreign Response (#382)
3b1dd68 test: replace supertest (#379)
834e54f 2.0.11
ba72bcd perf(request): fast-path PATCH method (#380)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @hono/node-server since your current version.

Updates @angular/cli from 21.2.9 to 22.1.5

Release notes

Sourced from @angular/cli's releases.

22.1.5

@schematics/angular

Commit Description

transform fail() to expect.fail() in refactor-jasmine-vitest

@angular/cli

Commit Description

enforce MCP roots in get_best_practices tool

handle errors from isAllowedWorkspacePath in best-practices tool

throw on out-of-roots workspace in best-practices tool

@angular/build

Commit Description

correct misleading error message for top-level await

disable code splitting for unit test builds

preserve integrity and crossorigin in autoCsp loader

traverse AST with iterative post-order walker in i18n inliner

22.1.4

@schematics/angular

Commit Description

generate CLAUDE.md for Claude Code instead of AGENTS.md

import UrlSegment instead of subPath in guard generator

@angular/cli

Commit Description

disable searching current directory for bare executable names on Windows

serialize configuration as a single argv token in run_target strategies (#33657)

avoid eager module loading during global bootstrap

@angular/build

Commit Description

count statically imported chunks in the initial total

normalize setupFiles paths to POSIX for vitest runner

prevent syntax corruption for Crockford-style enum IIFE

prevent syntax corruption in oxc transform

return direct file contents for non-Angular TypeScript files

return only lowest version per target engine

set target for Rolldown dependency prebundling in Vite dev server

avoid encoding the inline source map before remapping

batch last_accessed updates in sqlite cache store

hash the i18n inline cache key options once per locale

optimize template string size calculation in server manifest

share i18n translations with the inliner workers by reference

use Map for chunk asset size lookups in budget calculator

@angular/ssr

Commit Description

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

22.1.5 (2026-08-19)

@angular/cli

Commit Type Description

e672271f8 fix enforce MCP roots in get_best_practices tool

a14916cc4 fix handle errors from isAllowedWorkspacePath in best-practices tool

d6e1cddff fix throw on out-of-roots workspace in best-practices tool

@schematics/angular

Commit Type Description

ba2b0e4c2 fix transform fail() to expect.fail() in refactor-jasmine-vitest

@angular/build

Commit Type Description

cba72902d fix correct misleading error message for top-level await

b4679998c fix disable code splitting for unit test builds

ff1d3565e fix preserve integrity and crossorigin in autoCsp loader

1fc1fb05c perf traverse AST with iterative post-order walker in i18n inliner

22.2.0-next.3 (2026-08-13)

@angular/cli

Commit Type Description

7106676e6 fix disable searching current directory for bare executable names on Windows

ecf8c0822 fix serialize configuration as a single argv token in run_target strategies (#33657)

2e4dd90c3 perf avoid eager module loading during global bootstrap

@schematics/angular

Commit Type Description

1161e6c99 fix generate CLAUDE.md for Claude Code instead of AGENTS.md

c536ae364 fix import UrlSegment instead of subPath in guard generator

@angular/build

Commit Type Description

... (truncated)

Commits

3954730 release: cut the v22.1.5 release
7b7064f build: update dependency listr2 to v11
262562d docs: mention Vitest instead of Karma in README template of schematic library...
712e74e build: lock file maintenance
93d9cff refactor(@angular-devkit/schematics): add missing comma to reordered componen...
528114c refactor(@angular-devkit/schematics): add consistent spacing and ordering
cba7290 fix(@angular/build): correct misleading error message for top-level await
0e36040 build: update pnpm to v11.22.0
d01d2c6 build: update cross-repo angular dependencies
ba2b0e4 fix(@schematics/angular): transform fail() to expect.fail() in refactor-jasmi...
Additional commits viewable in compare view

Bumps [@hono/node-server](https://github.com/honojs/node-server) to 2.1.1 and updates ancestor dependency [@angular/cli](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `@hono/node-server` from 1.19.14 to 2.1.1 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v1.19.14...v2.1.1) Updates `@angular/cli` from 21.2.9 to 22.1.5 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v22.1.5) --- updated-dependencies: - dependency-name: "@angular/cli" dependency-version: 22.1.4 dependency-type: direct:development - dependency-name: "@hono/node-server" dependency-version: 2.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 16, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/ui/multi-e58e013584 branch from 5d60019 to 87e8810 Compare August 21, 2026 04:42

Navigation Menu

Uh oh!

build(deps): bump @hono/node-server and @angular/cli in /ui - #354

build(deps): bump @hono/node-server and @angular/cli in /ui#354
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/ui/multi-e58e013584

dependabot Bot commented on behalf of github Aug 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	enforce MCP roots in get_best_practices tool
	handle errors from isAllowedWorkspacePath in best-practices tool
	throw on out-of-roots workspace in best-practices tool

Commit	Description
	correct misleading error message for top-level await
	disable code splitting for unit test builds
	preserve integrity and crossorigin in autoCsp loader
	traverse AST with iterative post-order walker in i18n inliner

Commit	Description
	generate CLAUDE.md for Claude Code instead of AGENTS.md
	import UrlSegment instead of subPath in guard generator

Commit	Description
	disable searching current directory for bare executable names on Windows
	serialize configuration as a single argv token in run_target strategies (#33657)
	avoid eager module loading during global bootstrap

Commit	Description
	count statically imported chunks in the initial total
	normalize setupFiles paths to POSIX for vitest runner
	prevent syntax corruption for Crockford-style enum IIFE
	prevent syntax corruption in oxc transform
	return direct file contents for non-Angular TypeScript files
	return only lowest version per target engine
	set target for Rolldown dependency prebundling in Vite dev server
	avoid encoding the inline source map before remapping
	batch last_accessed updates in sqlite cache store
	hash the i18n inline cache key options once per locale
	optimize template string size calculation in server manifest
	share i18n translations with the inliner workers by reference
	use Map for chunk asset size lookups in budget calculator

Commit	Type	Description
e672271f8	fix	enforce MCP roots in get_best_practices tool
a14916cc4	fix	handle errors from isAllowedWorkspacePath in best-practices tool
d6e1cddff	fix	throw on out-of-roots workspace in best-practices tool

Commit	Type	Description
cba72902d	fix	correct misleading error message for top-level await
b4679998c	fix	disable code splitting for unit test builds
ff1d3565e	fix	preserve integrity and crossorigin in autoCsp loader
1fc1fb05c	perf	traverse AST with iterative post-order walker in i18n inliner

Commit	Type	Description
7106676e6	fix	disable searching current directory for bare executable names on Windows
ecf8c0822	fix	serialize configuration as a single argv token in run_target strategies (#33657)
2e4dd90c3	perf	avoid eager module loading during global bootstrap

Commit	Type	Description
1161e6c99	fix	generate CLAUDE.md for Claude Code instead of AGENTS.md
c536ae364	fix	import UrlSegment instead of subPath in guard generator

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.1.1

What's Changed

v2.1.0

What's Changed

New Contributors

v2.0.12

What's Changed

v2.0.11

What's Changed

v2.0.10

Security fixes

Unauthenticated memory-leak DoS via aborted WebSocket handshake

v2.0.9

What's Changed

22.1.5

@​schematics/angular

@​angular/cli

@​angular/build

22.1.4

@​schematics/angular

@​angular/cli

@​angular/build

@​angular/ssr

22.1.5 (2026-08-19)

@​angular/cli

@​schematics/angular

@​angular/build

22.2.0-next.3 (2026-08-13)

@​angular/cli

@​schematics/angular

@​angular/build

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 16, 2026 •

edited

Loading

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@angular/ssr`

`@angular/cli`

`@schematics/angular`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular/build`