Dependency Dashboard

[angular-robot]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Deprecations / Replacements

Warning

The following dependencies are either deprecated or have replacements available.

Datasource	Package	Replacement PR?
npm	@angular/animations
npm	protractor
npm	tslint

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• build: update dependency @types/node to v26

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• build: update all github actions (github/codeql-action, pnpm/action-setup)
• build: update all non-major dependencies (@google/genai, @octokit/auth-app, @octokit/core, @octokit/graphql, @octokit/request-error, @types/semver, conventional-commits-parser, firebase, firebase-tools, get-tsconfig, nock, renovate, tsx)
• build: update dependency bazel_lib to v3.7.1
• build: update dependency node to v24.19.0
• build: update pnpm to v11.19.0
• build: lock file maintenance
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• build: update dependency bazel to v9
• build: update dependency firebase-admin to v14
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

bazel-module (6)

bazel/integration/tests/nested_bazel_workspaces/basic/MODULE.bazel (1)

• rules_shell 0.8.0

bazel/rules/rules_angular/MODULE.bazel (7)

• yq.bzl 0.3.6
• bazel_lib 3.5.0 → [Updates: 3.7.1]
• aspect_rules_js 3.3.1
• aspect_rules_ts 3.9.2
• bazel_skylib 1.9.2
• jq.bzl 0.6.1
• rules_nodejs 6.7.5

bazel/rules/rules_browsers/MODULE.bazel (5)

• platforms 1.1.0
• bazel_skylib 1.9.2
• rules_nodejs 6.7.5
• aspect_rules_js 3.3.1
• aspect_rules_ts 3.9.2

bazel/rules/rules_browsers/test/MODULE.bazel (2)

• aspect_rules_js 3.3.1
• aspect_rules_ts 3.9.2

bazel/rules/rules_sass/MODULE.bazel (3)

• platforms 1.1.0
• bazel_lib 3.5.0 → [Updates: 3.7.1]
• aspect_rules_js 3.3.1

MODULE.bazel (11)

• yq.bzl 0.3.6
• tar.bzl 0.10.7
• bazel_lib 3.5.0 → [Updates: 3.7.1]
• bazel_skylib 1.9.2
• aspect_rules_js 3.3.1
• rules_pkg 1.2.0
• aspect_rules_jasmine 2.0.4
• platforms 1.1.0
• aspect_rules_esbuild 0.26.0
• aspect_rules_ts 3.9.2
• rules_nodejs 6.7.5

bazelisk (5)

.bazelversion (1)

• bazel 8.7.0 → [Updates: 9.2.0]

bazel/rules/rules_angular/.bazelversion (1)

• bazel 8.7.0 → [Updates: 9.2.0]

bazel/rules/rules_browsers/.bazelversion (1)

• bazel 8.7.0 → [Updates: 9.2.0]

bazel/rules/rules_browsers/test/.bazelversion (1)

• bazel 8.7.0 → [Updates: 9.2.0]

bazel/rules/rules_sass/.bazelversion (1)

• bazel 8.7.0 → [Updates: 9.2.0]

dockerfile (1)

bazel/remote-execution/Dockerfile (1)

• ghcr.io/puppeteer/puppeteer 25.4.0@sha256:d93009ac8e1b8f307d59847b82404b51fd1672ddd6bdd5a4016a1cd9b5afd94d

github-actions (19)

.github/workflows/assistant-to-the-branch-manager.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/branch-manager.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/ci.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/codeql.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.5]
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.5]

.github/workflows/dev-infra.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/ng-renovate.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• astral-sh/setup-uv v9.0.0@c771a70e6277c0a99b617c7a806ffedaca235ff9
• dart-lang/setup-dart v1@65eb853c7ba17dde3be364c3d2858773e7144260

.github/workflows/org-wide-actions.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/pr.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/publish-snapshots.yml (1)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1

.github/workflows/reusable-release.yml (6)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c

.github/workflows/rules_browser-update-browsers.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/rules_sass-compiler-updates.yml (6)

• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• dart-lang/setup-dart v1@65eb853c7ba17dde3be364c3d2858773e7144260
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• actions/checkout v7@3d3c42e5aac5ba805825da76410c181273ba90b1
• actions/download-artifact v8.0.1@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

.github/workflows/scorecard.yml (4)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• ossf/scorecard-action v2.4.4@2d1146689b8cda280b9bc96326124645441f03bc
• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
• github/codeql-action v4.37.4@f205ea1c3313d32999d8d6a48b4f6530d4437b38 → [Updates: v4.37.5]

.github/workflows/update-models.yml (2)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1

github-actions/bazel/setup/action.yml (2)

• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
• actions/cache v6.1.0@55cc8345863c7cc4c66a329aec7e433d2d1c52a9

github-actions/linting/licenses/action.yml (1)

• actions/dependency-review-action v5.0.0@a1d282b36b6f3519aa1f3fc636f609c47dddb294

github-actions/npm/checkout-and-setup-node/action.yml (3)

• actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1
• pnpm/action-setup v6.0.9@0ebf47130e4866e96fce0953f49152a61190b271 → [Updates: v6.0.10]
• actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020

github-actions/previews/pack-and-upload-artifact/action.yml (1)

• actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a

github-actions/previews/upload-artifacts-to-firebase/action.yml (2)

• FirebaseExtended/action-hosting-deploy v0@500ac625ca2dd40cbd15f7659af953801858032a
• marocchino/sticky-pull-request-comment v3.0.5@5770ad5eb8f42dd2c4f34da00c94c5381e49af88

npm (43)

.github/local-actions/branch-manager/package.json (5)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• typed-graphqlify 3.1.6

.github/local-actions/labels-sync/package.json (5)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @octokit/types 17.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]

.github/local-actions/lock-closed/package.json (5)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @octokit/types 17.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]

.github/local-actions/package.json (1)

• @types/node 24.13.3 → [Updates: 26.1.2]

.github/local-actions/stale-cleanup/package.json (4)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]

.github/local-actions/update-models/package.json (3)

• @actions/core 3.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• fast-glob 3.3.3

.github/ng-renovate/package.json (2)

• renovate 44.2.3 → [Updates: 44.7.1]
• pnpm 11.18.0 → [Updates: 11.19.0]

.github/ng-renovate/pnpm-workspace.yaml

apps/code-of-conduct/package.json (12)

• @angular/animations 22.2.0-next.0
• @angular/cdk 22.1.0-rc.0
• @angular/common 22.2.0-next.0
• @angular/compiler 22.2.0-next.0
• @angular/core 22.2.0-next.0
• @angular/fire 21.0.0-rc.0
• @angular/forms 22.2.0-next.0
• @angular/material 22.1.0-rc.0
• @angular/platform-browser 22.2.0-next.0
• @angular/router 22.2.0-next.0
• rxjs 7.8.2
• zone.js 0.16.2

apps/functions/package.json (11)

• @apollo/server ^5.2.0
• @as-integrations/express4 ^1.1.2
• @octokit/auth-app 8.2.0 → [Updates: 8.3.0]
• @octokit/request-error 7.1.0 → [Updates: 7.1.1]
• @octokit/rest 22.0.1
• @octokit/webhooks-types 7.6.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• firebase-admin 13.10.0 → [Updates: 14.2.0]
• firebase-functions 7.3.2
• firebase-tools 15.24.0 → [Updates: 15.25.1]
• node 24

bazel/api-golden/test/fixtures/pkg_no_exports_field/package.json

bazel/api-golden/test/fixtures/test_package/package.json

bazel/integration/tests/angular-cli/package.json (23)

• @angular/animations 22.2.0-next.0
• @angular/common 22.2.0-next.0
• @angular/compiler 22.2.0-next.0
• @angular/core 22.2.0-next.0
• @angular/forms 22.2.0-next.0
• @angular/platform-browser 22.2.0-next.0
• @angular/router 22.2.0-next.0
• rxjs ~7.8.2
• tslib ^2.8.1
• @angular/build 22.2.0-next.0
• @angular/cli 22.2.0-next.0
• @angular/compiler-cli 22.2.0-next.0
• @types/jasmine ~6.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]
• chromedriver ^151.0.0
• jasmine-core 6.3.0
• karma ~6.4.4
• karma-chrome-launcher ~3.2.0
• karma-coverage ~2.2.1
• karma-jasmine ~5.1.0
• karma-jasmine-html-reporter ~2.2.0
• typescript ~6.0.2 → [Updates: ~7.0.0]
• pnpm 11.18.0 → [Updates: 11.19.0]

bazel/integration/tests/angular-cli/pnpm-workspace.yaml

bazel/integration/tests/nested_bazel_workspaces/basic/package.json (2)

• @bazel/bazelisk ^1.11.0
• pnpm 11.18.0 → [Updates: 11.19.0]

bazel/integration/tests/nested_bazel_workspaces/basic/pnpm-workspace.yaml

bazel/integration/tests/package_mappings/fake_pkg_srcs/package.json

bazel/integration/tests/package_mappings/package.json (1)

• pnpm 11.18.0 → [Updates: 11.19.0]

bazel/integration/tests/package_mappings/pnpm-workspace.yaml

bazel/integration/tests/playwright_chromium/package.json (3)

• @playwright/test ^1.16.3
• typescript ^6.0.2 → [Updates: ^7.0.0]
• pnpm 11.18.0 → [Updates: 11.19.0]

bazel/integration/tests/playwright_chromium/pnpm-workspace.yaml

bazel/package.json (21)

• @microsoft/api-extractor 7.58.12
• diff ^9.0.0
• @types/babel__core 7.20.5
• @types/browser-sync 2.29.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• @types/selenium-webdriver ^4.1.28
• @types/send 1.2.1
• @types/wait-on ^5.3.4
• @types/source-map-support 0.5.10
• browser-sync 3.0.4
• get-tsconfig 4.14.0 → [Updates: 4.14.1]
• piscina ^5.0.0
• send 1.2.1
• true-case-path 2.2.1
• typescript 6.0.3 → [Updates: 7.0.2]
• wait-on ^9.0.0
• protractor 7.0.0
• semver 7.8.5
• selenium-webdriver 4.46.0
• source-map-support 0.5.21
• tinyglobby 0.2.17

bazel/rules/rules_angular/package.json (27)

• @angular/compiler-cli 22.2.0-next.0
• typescript 6.0.3 → [Updates: 7.0.2]
• @angular/build 22.2.0-next.0
• @angular/cli 22.2.0-next.0
• @angular/common 22.2.0-next.0
• @angular/compiler 22.2.0-next.0
• @angular/core 22.2.0-next.0
• @angular/platform-browser 22.2.0-next.0
• @babel/core ^8.0.0
• @bazel/bazelisk 1.28.1
• @rollup/plugin-commonjs ^29.0.0
• @rollup/plugin-node-resolve ^16.0.0
• @types/node ^22.10.1 → [Updates: ^26.0.0]
• json-stable-stringify ^1.2.1
• lru-cache ^11.1.0
• magic-string 1.1.0
• memfs ^4.14.0
• rollup ^4.59.0
• rollup-plugin-dts 6.4.1
• rollup-plugin-sourcemaps2 ^0.5.0
• rxjs ^7.8.2
• tinyglobby 0.2.17
• tslib ^2.8.1
• zod ^4.1.13
• zone.js ^0.16.0
• pnpm 11.18.0 → [Updates: 11.19.0]
• pnpm 11.18.0 → [Updates: 11.19.0]

bazel/rules/rules_angular/pnpm-workspace.yaml

bazel/rules/rules_browsers/package.json (16)

• @puppeteer/browsers 3.0.6
• @rollup/plugin-virtual ^3.0.2
• @types/jasmine ^6.0.0
• @types/node ^22.14.0 → [Updates: ^26.0.0]
• @web/dev-server-rollup ^1.0.0
• @web/test-runner ^1.0.0
• @web/test-runner-core ^1.0.0
• @web/test-runner-puppeteer ^1.0.0
• get-port ^7.1.0
• jasmine ^6.0.0
• protractor ^7.0.0
• tinyglobby ^0.2.12
• typescript 6.0.3 → [Updates: 7.0.2]
• web-test-runner-jasmine 0.2.0
• pnpm 11.18.0 → [Updates: 11.19.0]
• pnpm 11.18.0 → [Updates: 11.19.0]

bazel/rules/rules_browsers/pnpm-workspace.yaml

bazel/spec-bundling/test/package.json (11)

• @angular/compiler 22.2.0-next.0
• @angular/core 22.2.0-next.0
• @angular/platform-browser 22.2.0-next.0
• @types/jasmine 6.0.0
• @types/jsdom 28.0.3
• @types/node 24.13.3 → [Updates: 26.1.2]
• jasmine-reporters 2.5.2
• jasmine 6.3.0
• jsdom 30.0.1
• tinyglobby 0.2.17
• zone.js 0.16.2

github-actions/bazel/configure-remote/package.json (2)

• @actions/core 3.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]

github-actions/branch-manager/package.json (6)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @octokit/webhooks-types 7.6.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• typed-graphqlify 3.1.6

github-actions/browserstack/package.json (2)

• @actions/core 3.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]

github-actions/google-internal-tests/package.json (5)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• typed-graphqlify 3.1.6

github-actions/labeling/package.json (11)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @google/genai ^2.0.0
• @types/jasmine 6.0.0
• @types/micromatch ^4.0.10
• @types/node 24.13.3 → [Updates: 26.1.2]
• micromatch ^4.0.8
• typed-graphqlify 3.1.6
• @octokit/openapi-types 28.0.0
• jasmine 6.3.0

github-actions/org-file-sync/package.json (6)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @octokit/types 17.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]
• typed-graphqlify 3.1.6

github-actions/package.json (7)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/auth-app 8.2.0 → [Updates: 8.3.0]
• @octokit/rest 22.0.1
• @types/jasmine 6.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]
• @google/genai ^2.0.0

github-actions/post-approval-changes/package.json (6)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/rest 22.0.1
• @octokit/webhooks-types 7.6.1
• @types/node 24.13.3 → [Updates: 26.1.2]
• typed-graphqlify 3.1.6

github-actions/previews/pack-and-upload-artifact/package.json (3)

• @actions/core 3.0.1
• @octokit/rest 22.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]

github-actions/previews/upload-artifacts-to-firebase/package.json (3)

• @actions/core 3.0.1
• @octokit/rest 22.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]

github-actions/release/publish/package.json (5)

• @actions/core 3.0.1
• @types/jasmine 6.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]
• @types/semver 7.7.1 → [Updates: 7.8.0]
• semver 7.8.5

github-actions/saucelabs/package.json (2)

• @actions/core 3.0.1
• @types/node 24.13.3 → [Updates: 26.1.2]

github-actions/unified-status-check/package.json (7)

• @actions/core 3.0.1
• @actions/github 9.1.1
• @octokit/graphql-schema 15.26.1
• @octokit/rest 22.0.1
• @octokit/types 17.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]
• typed-graphqlify 3.1.6

ng-dev/package.json (53)

• @actions/core 3.0.1
• @google/genai 2.13.0 → [Updates: 2.15.0]
• @inquirer/prompts 8.5.2
• @inquirer/type 4.0.7
• @octokit/auth-app 8.2.0 → [Updates: 8.3.0]
• @octokit/core 7.0.6 → [Updates: 7.0.7]
• @octokit/graphql-schema 15.26.1
• @octokit/graphql 9.0.3 → [Updates: 9.0.4]
• @octokit/openapi-types 28.0.0
• @octokit/plugin-paginate-rest 15.0.0
• @octokit/plugin-rest-endpoint-methods 18.0.0
• @octokit/request-error 7.1.0 → [Updates: 7.1.1]
• @octokit/rest 22.0.1
• @octokit/types 17.0.0
• @pnpm/dependency-path 1001.1.10
• @types/cli-progress 3.11.6
• @types/ejs 3.1.5
• @types/events 3.0.3
• @types/folder-hash 4.0.4
• @types/jasmine 6.0.0
• @types/node 24.13.3 → [Updates: 26.1.2]
• @types/semver 7.7.1 → [Updates: 7.8.0]
• @types/which 3.0.4
• @types/yargs 17.0.35
• @types/yarnpkg__lockfile 1.1.9
• @conventional-changelog/git-client 3.1.0
• @yarnpkg/lockfile 1.1.0
• bufferutil 4.1.0
• cli-progress 3.12.0
• conventional-commits-filter 6.0.1
• conventional-commits-parser 7.1.1 → [Updates: 7.1.2]
• ejs 6.0.1
• encoding 0.1.13
• fast-glob 3.3.3
• firebase 12.16.0 → [Updates: 12.17.0]
• folder-hash 4.1.3
• jasmine-core 6.3.0
• jasmine-reporters 2.5.2
• jasmine 6.3.0
• jsonc-parser 3.3.1
• minimatch 10.2.6
• multimatch 8.0.0
• nock 14.0.16 → [Updates: 14.0.17]
• semver 7.8.5
• supports-color 11.0.0
• typed-graphqlify 3.1.6
• tsx 4.23.1 → [Updates: 4.23.4]
• typescript 6.0.3 → [Updates: 7.0.2]
• utf-8-validate 6.0.6
• which 7.0.0
• yaml 2.9.0
• yargs 18.1.0
• zod ^4.3.6

package.json (15)

• @angular/compiler-cli 22.2.0-next.0
• typescript 6.0.3 → [Updates: 7.0.2]
• @bazel/bazelisk 1.28.1
• @bazel/buildifier 8.2.1
• firebase-tools 15.24.0 → [Updates: 15.25.1]
• husky 9.1.7
• jasmine-core 6.3.0
• jasmine-reporters 2.5.2
• jasmine 6.3.0
• prettier 3.9.6
• tslib ^2.5.2
• tslint 6.1.3
• tsx ^4.15.7
• pnpm 11.18.0 → [Updates: 11.19.0]
• pnpm 11.18.0 → [Updates: 11.19.0]

pnpm-workspace.yaml

nvm (1)

.nvmrc (1)

• node 24.18.1 → [Updates: 24.19.0]

pub (1)

bazel/rules/rules_sass/pubspec.yaml (3)

• sass_api 17.8.0
• sprintf ^7.0.0
• dart ^3.7.2

renovate-config (1)

renovate.json