Skip to content

build: lock file maintenance (21.2.x)#33026

Merged
alan-agius4 merged 1 commit intoangular:21.2.xfrom
angular-robot:ng-renovate/21.2.x-lock-file-maintenance
Apr 21, 2026
Merged

build: lock file maintenance (21.2.x)#33026
alan-agius4 merged 1 commit intoangular:21.2.xfrom
angular-robot:ng-renovate/21.2.x-lock-file-maintenance

Conversation

@angular-robot
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Update Change
lockFileMaintenance All locks refreshed

🔧 This Pull Request updates lock files to use the latest dependency versions.


  • If you want to rebase/retry this PR, check this box

See associated pull request for more information.
@angular-robot angular-robot added action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only] labels Apr 21, 2026
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request performs a routine maintenance update of the pnpm-lock.yaml file, bumping numerous dependencies to their latest versions. Feedback was provided regarding an inconsistent downgrade of the debug package for the extract-zip dependency, which introduces version duplication and should be investigated to maintain consistency across the project.

Comment thread pnpm-lock.yaml
extract-zip@2.0.1:
dependencies:
debug: 4.4.3(supports-color@10.2.2)
debug: 4.3.4
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The dependency debug for extract-zip@2.0.1 has been downgraded from 4.4.3(supports-color@10.2.2) to 4.3.4. This appears inconsistent with the goal of a lock file maintenance PR which typically aims to use the latest versions. Since 4.4.3 is still used elsewhere in the project (e.g., by get-uri and @babel/plugin-transform-classes), this change also introduces a duplicate version of the debug package. Consider investigating why the package manager chose this version and potentially forcing the resolution to 4.4.3 to maintain consistency and reduce duplication.

@alan-agius4 alan-agius4 merged commit 2974563 into angular:21.2.x Apr 21, 2026
79 checks passed
@alan-agius4
Copy link
Copy Markdown
Collaborator

This PR was merged into the repository. The changes were merged into the following branches:

@alan-agius4 alan-agius4 deleted the ng-renovate/21.2.x-lock-file-maintenance branch April 21, 2026 09:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: build & ci Related the build and CI infrastructure of the project target: automation This PR is targeted to only merge into the branch defined in Github [bot use only]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants