Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jul 7, 2025

Removes vite. It's no longer used after updating ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Removes vite

Updates @angular-devkit/build-angular from 16.2.16 to 20.0.5

Release notes

Sourced from @​angular-devkit/build-angular's releases.

20.0.5

@​angular-devkit/build-angular

Commit Description
fix - 1ebd53df7 remove unused @vitejs/plugin-basic-ssl dependency

@​angular/build

Commit Description
fix - 05cebdbcd proxy karma request from / to /base

20.0.4

@​schematics/angular

Commit Description
fix - 2316fe29d add missing prettier config

@​angular/ssr

Commit Description
fix - 309742289 avoid preloading unnecessary dynamic bundles
fix - 82691b98f ensure correct referer header handling in web request conversion

20.0.3

@​schematics/angular

Commit Description
fix - e90a808c0 include main.server.ts in tsconfig.files when present
fix - 5c48b8e0a reset module typeSeparator when generating applications

@​angular/build

Commit Description
fix - 56f426e25 include custom bundle name scripts with karma
fix - dfe3a8b73 increase worker idle timeout
fix - e6d27bd5e set scripts option output as classic script for karma

20.0.2

@​schematics/angular

Commit Description
fix - bf64a0f2d add less as a devDependency when selected as the style preprocessor
fix - cb258a3e1 correctly detect modules using new file extension format

@​angular/build

Commit Description
fix - 424f1cbbf do not consider internal Angular files as external imports

20.0.1

@​schematics/angular

Commit Description
fix - 525ddcbd2 only overwrite JSON file if actually changed

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

20.0.5 (2025-07-01)

@​angular-devkit/build-angular

Commit Type Description
1ebd53df7 fix remove unused @vitejs/plugin-basic-ssl dependency

@​angular/build

Commit Type Description
05cebdbcd fix proxy karma request from / to /base

20.1.0-next.3 (2025-06-25)

@​angular/cli

Commit Type Description
dc45c186e feat add initial MCP server implementation

@​schematics/angular

Commit Type Description
4221a33cc fix add missing prettier config

@​angular-devkit/build-angular

Commit Type Description
49a09737d feat provide partial custom postcss configuration support

@​angular/build

Commit Type Description
adfeee0a4 fix adjust coverage includes/excludes for unit-test vitest runner
e0de8680d fix inject zone.js/testing before karma builder execution

@​angular/ssr

Commit Type Description
861a61a3b fix avoid preloading unnecessary dynamic bundles

... (truncated)

Commits
  • f5c2d67 release: cut the v20.0.5 release
  • 05cebdb fix(@​angular/build): proxy karma request from / to /base
  • 434ebb1 build: use more shards for application builder tests
  • 1ebd53d fix(@​angular-devkit/build-angular): remove unused @vitejs/plugin-basic-ssl ...
  • 68fb062 release: cut the v20.0.4 release
  • 7e73abb build: update dependency node to v22.17.0
  • 2316fe2 fix(@​schematics/angular): add missing prettier config
  • 82691b9 fix(@​angular/ssr): ensure correct referer header handling in web request conv...
  • 3097422 fix(@​angular/ssr): avoid preloading unnecessary dynamic bundles
  • 03aff1e docs: update component schematic option descriptions
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

wy65701436 and others added 30 commits April 3, 2025 16:04
Signed-off-by: wang yan <wangyan@vmware.com>
* deps: update src/portal/app-swagger-ui

Signed-off-by: bupd <bupdprasanth@gmail.com>

* deps: update swagger-ui

Signed-off-by: bupd <bupdprasanth@gmail.com>

* deps: update src/portal

Signed-off-by: bupd <bupdprasanth@gmail.com>

---------

Signed-off-by: bupd <bupdprasanth@gmail.com>
…ult (goharbor#21846)

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Signed-off-by: chlins <chlins.zhang@gmail.com>
Signed-off-by: chlins <chlins.zhang@gmail.com>
Per actions/runner-images#11101, the ubuntu 20.04 is out of support. Up it to the 22.04

Signed-off-by: wang yan <wangyan@vmware.com>
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
…oharbor#21883)

`copyBlobByChunk()` should like `copyBlob()`, first try to mount an
exists layer, if not mounted or exist, then copy the layer monolithic
or by chunks.

Signed-off-by: Bin Liu <liubin0329@gmail.com>
Signed-off-by: Bin Liu <lb203159@antfin.com>
Decouple the lint from the api generation step in the makefile.

Signed-off-by: wang yan <wangyan@vmware.com>
add missing step in e2e

Signed-off-by: bupd <bupdprasanth@gmail.com>
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
the query parameter cannot contains orm.ExerSep which is key characters that used by orm.
the pull request enhances the validation for query parameters.

Signed-off-by: wang yan <wangyan@vmware.com>
fix: handle multi-arch images with SBOMs in HarborUI

* Updated the `hasChild` method to check for the presence of
`child_digest` in the `references` array.
* This ensures that SBOMs are correctly displayed for multi-arch images,
where child artifacts may contain their own SBOMs.
* Previously, No SBOM label was displayed for multi-arch images.

Signed-off-by: bupd <bupdprasanth@gmail.com>
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Make the golang version as a unified parameter to build all harbor components

Signed-off-by: wang yan <wangyan@vmware.com>
This commit update the flow to generate URL of token service, which will
first try to use the Host in request.  This will help the situation when
Harbor is configured to serve via a hostname but some client needs to
pull artifacts from Harbor via IP due to limitations in the environment.

Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
…or#21141)

Signed-off-by: Raphael Zöllner <raphael.zoellner@regiocom.com>
fix goharbor#21411

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
Signed-off-by: chlins <chlins.zhang@gmail.com>
* fix: helm chart copy btn in UI

Signed-off-by: bupd <bupdprasanth@gmail.com>

* add: tests for pull command component in UI

Signed-off-by: bupd <bupdprasanth@gmail.com>

---------

Signed-off-by: bupd <bupdprasanth@gmail.com>
As the harbor exporter is not a core component for installation, so like the trivy, add a flag to controller whether package it into the offline installer.

Signed-off-by: wang yan <wangyan@vmware.com>
fixes goharbor#21947

Signed-off-by: wang yan <wangyan@vmware.com>
* bump up golang version to v1.24.3

Signed-off-by: wang yan <wangyan@vmware.com>

* bump mockery version to support golang v2.14

Signed-off-by: wang yan <wangyan@vmware.com>

---------

Signed-off-by: wang yan <wangyan@vmware.com>
* increase docker client timeout for robot case

Signed-off-by: my036811 <miner.yang@broadcom.com>
Signed-off-by: miner <miner.yang@broadcom.com>
test list update

Signed-off-by: miledxz <zedsprogramms@gmail.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
move the build storage from google storage to the CNCF S3 storage

Currently, we use the internal GCR to store all dev builds for nightly testing, development, and as candidates for RC and GA releases. However, this internal Google storage will no longer be available, this pull request it to move to the CNCF-hosted S3 storage.

Signed-off-by: wang yan <wangyan@vmware.com>
… 4.2.1 (goharbor#22003)

chore(deps): bump aws-actions/configure-aws-credentials

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 4.1.0 to 4.2.1.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v4.1.0...v4.2.1)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… to 1.63.107 in /src (goharbor#21943)

chore(deps): bump github.com/aliyun/alibaba-cloud-sdk-go in /src

Bumps [github.com/aliyun/alibaba-cloud-sdk-go](https://github.com/aliyun/alibaba-cloud-sdk-go) from 1.63.84 to 1.63.107.
- [Release notes](https://github.com/aliyun/alibaba-cloud-sdk-go/releases)
- [Changelog](https://github.com/aliyun/alibaba-cloud-sdk-go/blob/master/ChangeLog.txt)
- [Commits](aliyun/alibaba-cloud-sdk-go@v1.63.84...v1.63.107)

---
updated-dependencies:
- dependency-name: github.com/aliyun/alibaba-cloud-sdk-go
  dependency-version: 1.63.107
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
stonezdj and others added 19 commits June 12, 2025 15:35
fixes goharbor#22001

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
…rbor#22060)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.17.2 to 3.18.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.17.2...v3.18.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Fix minor errors in CONTRIBUTING.md

Signed-off-by: chethanm99 <chethanm1399@gmail.com>
fix: empty cve allowlist validation

- fixes empty and cves with only spaces



fix: cve allowlist validation



add: tests for cve allowlist validation



fix: types for projectCVEAllowlist

Signed-off-by: bupd <bupdprasanth@gmail.com>
Enhance readability of swagger Readme.md file by fixing minor errors

Signed-off-by: chethanm99 <chethanm1399@gmail.com>
Use test_network_type to adapt to various network conditions in the test environment.

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
… to 1.1.17 in /src (goharbor#22089)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

Bumps [github.com/volcengine/volcengine-go-sdk](https://github.com/volcengine/volcengine-go-sdk) from 1.1.11 to 1.1.17.
- [Release notes](https://github.com/volcengine/volcengine-go-sdk/releases)
- [Commits](volcengine/volcengine-go-sdk@v1.1.11...v1.1.17)

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
Signed-off-by: chethanm99 <chethanm1399@gmail.com>
…der (goharbor#22121)

Change the pass-CI rules to exclude the resources and robot-cases folder
   Pass HARBOR_ADMIN env to robot testcases

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
* update pipenv and lock

Signed-off-by: my036811 <miner.yang@broadcom.com>

* update pipenv

Signed-off-by: my036811 <miner.yang@broadcom.com>

---------

Signed-off-by: my036811 <miner.yang@broadcom.com>
… to 1.1.19 in /src (goharbor#22133)

chore(deps): bump github.com/volcengine/volcengine-go-sdk in /src

---
updated-dependencies:
- dependency-name: github.com/volcengine/volcengine-go-sdk
  dependency-version: 1.1.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
* Add Russian language support

Signed-off-by: Sergey Akhmineev <ssakhmineev@rt-dc.ru>

* Update ru-ru-lang.json

Made edits to the translation based on comments

Signed-off-by: Sergey <81344204+sergey-akhmineev@users.noreply.github.com>

* Update ru-ru-lang.json

Signed-off-by: Sergey <81344204+sergey-akhmineev@users.noreply.github.com>

* Update ru-ru-lang.json

Signed-off-by: Sergey <81344204+sergey-akhmineev@users.noreply.github.com>

* Update ru-ru-lang.json

Signed-off-by: Sergey <81344204+sergey-akhmineev@users.noreply.github.com>

---------

Signed-off-by: Sergey Akhmineev <ssakhmineev@rt-dc.ru>
Signed-off-by: Sergey <81344204+sergey-akhmineev@users.noreply.github.com>
Co-authored-by: Sergey Akhmineev <ssakhmineev@rt-dc.ru>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
add dockernetwork parameter for makefile

Signed-off-by: my036811 <miner.yang@broadcom.com>
…ntainer (goharbor#22148)

add BUILD_INSTALLER parameter to optionally build prepare and log container only when we need to build offline_installer

Signed-off-by: my036811 <miner.yang@broadcom.com>
Removes [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). It's no longer used after updating ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Removes `vite`

Updates `@angular-devkit/build-angular` from 16.2.16 to 20.0.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.2.16...20.0.5)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 20.0.5
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2025
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​angular-devkit/​build-angular@​16.2.16 ⏵ 20.0.596 +210081 +197100 +20
Updatednpm/​tslib@​2.6.1 ⏵ 2.8.110010010085100
Addednpm/​express@​4.21.29710010086100

View full report

@Strainy Strainy force-pushed the groq_release branch 3 times, most recently from 04170ed to 96b9f96 Compare July 7, 2025 05:55
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Sep 11, 2025

Superseded by #35.

@dependabot dependabot bot closed this Sep 11, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/src/portal/multi-df31cc3696 branch September 11, 2025 02:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.