Bump piscina and @angular/build by dependabot[bot] · Pull Request #355 · plotly/angular-plotly.js

dependabot · 2026-10-08T23:38:34Z

Bumps piscina to 5.3.2 and updates ancestor dependency @angular/build. These dependencies need to be updated together.

Updates piscina from 5.2.0 to 5.3.2

Release notes

v5.3.2

Full Changelog: piscinajs/piscina@v5.3.1...v5.3.2

v5.3.1

What's Changed

docs: renew TestMu AI sponsor by @github-actions[bot] in piscinajs/piscina#1137

Full Changelog: piscinajs/piscina@v5.3.0...v5.3.1

v5.3.0

What's Changed

chore(deps): Bump shell-quote from 1.8.3 to 1.8.4 in /docs in the npm_and_yarn group across 1 directory by @github-actions[bot] in piscinajs/piscina#1075

chore(deps): Bump the npm_and_yarn group across 1 directory with 2 updates by @github-actions[bot] in piscinajs/piscina#1081

chore: update sponsors by @github-actions[bot] in piscinajs/piscina#1084

[Backport v5] chore: Enhance SECURITY.md with detailed security policy by @github-actions[bot] in piscinajs/piscina#1092

chore(deps): Bump websocket-driver from 0.7.4 to 0.7.5 in /docs in the npm_and_yarn group across 1 directory by @github-actions[bot] in piscinajs/piscina#1110

feat: add stricterFIFO option for queue fairness (#1100) by @metcoder95 in piscinajs/piscina#1113

Full Changelog: piscinajs/piscina@v5.2.0...v5.3.0

Changelog

Sourced from piscina's changelog.

5.3.2 (2026-08-28)

⚠ BREAKING CHANGES

for consumers that call Object.prototype methods directly on pool.options (e.g. pool.options.hasOwnProperty(...)).

fix: use sanitized options for resourceLimits validation

fix: sanitize run/close options with withNullPrototype

Use the existing withNullPrototype helper instead of getOwn; address feedback from @metcoder95

fix: avoid re-linking Object.prototype in Piscina constructor

(cherry picked from commit bebbda255c2981cecddd36b171b94be2fd41c9a6)

Merge commit from fork (2f69f67)

5.3.1 (2026-08-21)

5.3.0 (2026-07-19)

Features

add stricterFIFO option for queue fairness (#1100) (#1113) (8b79055)

Commits

6c7e546 chore(release): 5.3.2
2f69f67 Merge commit from fork
6a23286 chore(release): 5.3.1
741a44e docs: renew TestMu AI sponsor (#1137)
dc9692f chore(release): 5.3.0
d415280 chore(release): 5.3.0
8b79055 feat: add stricterFIFO option for queue fairness (#1100) (#1113)
f8fbb5f chore(deps): Bump websocket-driver from 0.7.4 to 0.7.5 in /docs in the npm_an...
36a6a91 [Backport v5] chore: Enhance SECURITY.md with detailed security policy (#1092)
79ac0c8 chore: update sponsors (#1084)
Additional commits viewable in compare view

Updates @angular/build from 22.1.5 to 22.2.2

Release notes

Sourced from @angular/build's releases.

22.2.2

@angular-devkit/build-angular

Commit Description

preserve Host header when proxying in ssr-dev-server

@angular/build

Commit Description

keep the order of glob entries in the proxy configuration

support a string context in array-form proxy configurations

22.2.1

@angular-devkit/schematics-cli

Commit Description

correctly parse inline boolean values in CLI options (#34201)

@schematics/angular

Commit Description

add browsers option to angular.json during vitest browser provider ng-add

@angular/cli

Commit Description

skip components with a change detection strategy in the zoneless migration tool

@angular-devkit/architect

Commit Description

correctly parse inline boolean values in CLI options (#34201)

@angular-devkit/build-angular

Commit Description

do not mark standalone expression statements as pure

@angular/build

Commit Description

deduplicate spurious chokidar polling change events (#34188)

encode script type in auto-CSP loader

ensure @angular/compiler is loaded for Vitest TestBed initialization

preserve nested workspace path for git worktree cache

prevent chokidar from scanning unimported node_modules in watch mode

reset component updates on dev-server SSR page request

serve emitted HTML assets in dev-server

watchers outside the workspace via parcel didn't work

avoid loading compiler-cli and typescript in js transform worker

avoid sharding intermediate files under worker surplus in i18n inliner

bound aggregate worker allocation across dominant files in i18n inliner

bound concurrent worker allocation for dominant files in i18n inliner

process batch locales sequentially in i18n inliner worker

22.2.0

... (truncated)

Changelog

Sourced from @angular/build's changelog.

22.2.2 (2026-10-07)

@angular-devkit/build-angular

Commit Type Description

cfe970c8bc fix preserve Host header when proxying in ssr-dev-server

@angular/build

Commit Type Description

405bfa370a fix keep the order of glob entries in the proxy configuration

996e47f809 fix support a string context in array-form proxy configurations

21.2.26 (2026-10-07)

@angular/cli

Commit Type Description

9d2987f354 fix bump @modelcontextprotocol/sdk to 1.31.0

20.3.39 (2026-10-07)

@angular/cli

Commit Type Description

373a7cedce fix bump @modelcontextprotocol/sdk to 1.31.0

21.2.25 (2026-10-05)

@angular/build

Commit Type Description

7e6d2da084 fix bump piscina to 5.3.2

... (truncated)

Commits

8c8a483 release: cut the v22.2.2 release
77f0575 build: update dependency @modelcontextprotocol/server to v2.3.1
b8b6906 docs: document builder integration test targets in AGENTS.md
cfe970c fix(@angular-devkit/build-angular): preserve Host header when proxying in ssr...
405bfa3 fix(@angular/build): keep the order of glob entries in the proxy configuration
996e47f fix(@angular/build): support a string context in array-form proxy configura...
5197b33 build: update cross-repo angular dependencies
14722f2 build: lock file maintenance
11dbe29 release: cut the v22.2.1 release
4179605 build: update bazel dependencies
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [piscina](https://github.com/piscinajs/piscina) to 5.3.2 and updates ancestor dependency [@angular/build](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `piscina` from 5.2.0 to 5.3.2 - [Release notes](https://github.com/piscinajs/piscina/releases) - [Changelog](https://github.com/piscinajs/piscina/blob/v5.3.2/CHANGELOG.md) - [Commits](piscinajs/piscina@v5.2.0...v5.3.2) Updates `@angular/build` from 22.1.5 to 22.2.2 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v22.1.5...v22.2.2) --- updated-dependencies: - dependency-name: piscina dependency-version: 5.3.2 dependency-type: indirect - dependency-name: "@angular/build" dependency-version: 22.2.2 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026

Navigation Menu

Repository navigation

Bump piscina and @angular/build - #355

Bump piscina and @angular/build#355
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-8ba3c5d918

dependabot Bot commented on behalf of github Oct 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	keep the order of glob entries in the proxy configuration
	support a string `context` in array-form proxy configurations

Commit	Description
	deduplicate spurious chokidar polling change events (#34188)
	encode script type in auto-CSP loader
	ensure `@angular/compiler` is loaded for Vitest TestBed initialization
	preserve nested workspace path for git worktree cache
	prevent chokidar from scanning unimported node_modules in watch mode
	reset component updates on dev-server SSR page request
	serve emitted HTML assets in dev-server
	watchers outside the workspace via parcel didn't work
	avoid loading compiler-cli and typescript in js transform worker
	avoid sharding intermediate files under worker surplus in i18n inliner
	bound aggregate worker allocation across dominant files in i18n inliner
	bound concurrent worker allocation for dominant files in i18n inliner
	process batch locales sequentially in i18n inliner worker

Commit	Type	Description
405bfa370a	fix	keep the order of glob entries in the proxy configuration
996e47f809	fix	support a string `context` in array-form proxy configurations

Conversation

dependabot Bot commented on behalf of github Oct 8, 2026

v5.3.2

v5.3.1

What's Changed

v5.3.0

What's Changed

5.3.2 (2026-08-28)

⚠ BREAKING CHANGES

5.3.1 (2026-08-21)

5.3.0 (2026-07-19)

Features

22.2.2

@​angular-devkit/build-angular

@​angular/build

22.2.1

@​angular-devkit/schematics-cli

@​schematics/angular

@​angular/cli

@​angular-devkit/architect

@​angular-devkit/build-angular

@​angular/build

22.2.0

22.2.2 (2026-10-07)

@​angular-devkit/build-angular

@​angular/build

21.2.26 (2026-10-07)

@​angular/cli

20.3.39 (2026-10-07)

@​angular/cli

21.2.25 (2026-10-05)

@​angular/build

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/schematics-cli`

`@schematics/angular`

`@angular/cli`

`@angular-devkit/architect`

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/cli`

`@angular/build`