Bumps esbuild to 0.25.5 and updates ancestor dependencies esbuild, @angular-devkit/build-angular and ng-packagr. These dependencies need to be updated together.
Updates esbuild
from 0.17.18 to 0.25.5
Release notes
Sourced from esbuild's releases.
v0.25.5
-
Fix a regression with browser
in package.json
(#4187)
The fix to #4144 in version 0.25.3 introduced a regression that caused browser
overrides specified in package.json
to fail to override relative path names that end in a trailing slash. That behavior change affected the axios@0.30.0
package. This regression has been fixed, and now has test coverage.
-
Add support for certain keywords as TypeScript tuple labels (#4192)
Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ?
modifier. These labels included function
, import
, infer
, new
, readonly
, and typeof
. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:
type Foo = [
value: any,
readonly?: boolean, // This is now parsed correctly
]
-
Add CSS prefixes for the stretch
sizing value (#4184)
This release adds support for prefixing CSS declarations such as div { width: stretch }
. That CSS is now transformed into this depending on what the --target=
setting includes:
div {
width: -webkit-fill-available;
width: -moz-available;
width: stretch;
}
v0.25.4
-
Add simple support for CORS to esbuild's development server (#4125)
Starting with version 0.25.0, esbuild's development server is no longer configured to serve cross-origin requests. This was a deliberate change to prevent any website you visit from accessing your running esbuild development server. However, this change prevented (by design) certain use cases such as "debugging in production" by having your production website load code from localhost
where the esbuild development server is running.
To enable this use case, esbuild is adding a feature to allow Cross-Origin Resource Sharing (a.k.a. CORS) for simple requests. Specifically, passing your origin to the new cors
option will now set the Access-Control-Allow-Origin
response header when the request has a matching Origin
header. Note that this currently only works for requests that don't send a preflight OPTIONS
request, as esbuild's development server doesn't currently support OPTIONS
requests.
Some examples:
-
CLI:
esbuild --servedir=. --cors-origin=https://example.com
-
JS:
const ctx = await esbuild.context({})
await ctx.serve({
servedir: '.',
cors: {
... (truncated)
Changelog
Sourced from esbuild's changelog.
Changelog: 2023
This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).
0.19.11
-
Fix TypeScript-specific class transform edge case (#3559)
The previous release introduced an optimization that avoided transforming super()
in the class constructor for TypeScript code compiled with useDefineForClassFields
set to false
if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private
instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super()
(since super()
is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:
// Original code
class Foo extends Bar {
#private = 1;
public: any;
constructor() {
super();
}
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}
-
Minifier: allow reording a primitive past a side-effect (#3568)
The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:
... (truncated)
Commits
Updates @angular-devkit/build-angular
from 16.0.2 to 20.0.2
Release notes
Sourced from @angular-devkit/build-angular
's releases.
20.0.2
@schematics/angular
Commit |
Description |
fix - bf64a0f2d |
add less as a devDependency when selected as the style preprocessor |
fix - cb258a3e1 |
correctly detect modules using new file extension format |
@angular/build
Commit |
Description |
fix - 424f1cbbf |
do not consider internal Angular files as external imports |
20.0.1
@schematics/angular
Commit |
Description |
fix - 525ddcbd2 |
only overwrite JSON file if actually changed |
fix - 83c820e5a |
remove karma config devkit package usages during application migration |
fix - 87266b38a |
skip zone.js dependency for zoneless applications |
@angular/cli
Commit |
Description |
fix - 0883248cb |
improve Node.js version check and error messages |
@angular/build
20.0.0
@angular/cli
@schematics/angular
... (truncated)
Changelog
Sourced from @angular-devkit/build-angular
's changelog.
20.0.2 (2025年06月11日)
@schematics/angular
Commit |
Type |
Description |
bf64a0f2d |
fix |
add less as a devDependency when selected as the style preprocessor |
cb258a3e1 |
fix |
correctly detect modules using new file extension format |
@angular/build
Commit |
Type |
Description |
424f1cbbf |
fix |
do not consider internal Angular files as external imports |
19.2.15 (2025年06月11日)
@angular-devkit/build-angular
Commit |
Type |
Description |
b120e1411 |
fix |
update dependency webpack-dev-server to v5.2.2 |
18.2.20 (2025年06月11日)
@angular-devkit/build-angular
Commit |
Type |
Description |
f048078 |
fix |
update dependency webpack-dev-server to v5.2.2 |
20.1.0-next.0 (2025年06月05日)
@schematics/angular
Commit |
Type |
Description |
0b7d48c7c |
fix |
correctly detect modules using new file extension format |
... (truncated)
Commits
e89245d
release: cut the v20.0.2 release
bf64a0f
fix(@schematics/angular
): add less
as a devDependency when selected as the ...
424f1cb
fix(@angular/build
): do not consider internal Angular files as external imports
631ac7e
ci: use new pull-request-labeling action
fa25385
build: fix perf workflows
1db861c
build: improve globbing of jasmine test files
cb258a3
fix(@schematics/angular
): correctly detect modules using new file extension f...
19dc7dd
build: simplify unit test target names
d513e58
build: simplify unit test target names
4e7e0b0
release: cut the v20.0.1 release
- Additional commits viewable in compare view
Updates ng-packagr
from 16.0.1 to 20.0.0
Release notes
Sourced from ng-packagr's releases.
20.0.0
⚠ BREAKING CHANGES
- Node.js versions from 22.0 to 22.10 are no longer supported
- Node.js v18 is no longer supported
- TypeScript versions less than 5.8 are no longer supported.
Features
- expand browser support to widely available Baseline (94f7fbe)
- add DTS bundles for entry-points (ca9d568), closes #139
- support Angular version 20 (cebe060)
- drop support for TypeScript older than 5.8 (a8255ce)
- support Sass package importers (f767d3c)
Bug Fixes
- correctly resolve SCSS resources from nested paths (f34a73d), closes #3006
- correctly update reference to bin (e73db8e), closes #3062
- update min Node.js support to 20.19, 22.12, and 24.0 (5a7eac4)
- ensure in package
.browserslistrc
is correctly resolved (14ed50d)
- prevent nested CSS in components (e2d9ef0)
- disable TypeScript
composite
option with Angular compiler (5dfbdba)
- disable emitting empty chunk warning (638c107)
- remove Node.js v18 support (69d9d9e)
- update minimum supported Node.js 22 version to 22.11.0 (a836a71)
Performance
- optimize node deletion using
Set
(a99785c)
- prevent redundant entry-point builds in watch mode (2f2668b), closes #2936
20.0.0-rc.2
Bug Fixes
20.0.0-rc.1
Bug Fixes
- update min Node.js support to 20.19, 22.12, and 24.0 (5a7eac4)
20.0.0-next.8
Bug Fixes
- ensure in package
.browserslistrc
is correctly resolved (14ed50d)
... (truncated)
Changelog
Sourced from ng-packagr's changelog.
20.0.0 (2025年05月28日)
⚠ BREAKING CHANGES
- Node.js versions from 22.0 to 22.11 are no longer supported
- Node.js v18 is no longer supported
- TypeScript versions less than 5.8 are no longer supported.
Features
- expand browser support to widely available Baseline (94f7fbe)
- add DTS bundles for entry-points (ca9d568), closes #139
- support Angular version 20 (cebe060)
- drop support for TypeScript older than 5.8 (a8255ce)
- support Sass package importers (f767d3c)
Bug Fixes
- correctly resolve SCSS resources from nested paths (f34a73d), closes #3006
- correctly update reference to bin (e73db8e), closes #3062
- update min Node.js support to 20.19, 22.12, and 24.0 (5a7eac4)
- ensure in package
.browserslistrc
is correctly resolved (14ed50d)
- prevent nested CSS in components (e2d9ef0)
- disable TypeScript
composite
option with Angular compiler (5dfbdba)
- disable emitting empty chunk warning (638c107)
- remove Node.js v18 support (69d9d9e)
- update minimum supported Node.js 22 version to 22.11.0 (a836a71)
Performance
- optimize node deletion using
Set
(a99785c)
- prevent redundant entry-point builds in watch mode (2f2668b), closes #2936
Bug Fixes
Bug Fixes
- update min Node.js support to 20.19, 22.12, and 24.0 (5a7eac4)
... (truncated)
Commits
bc9ef06
docs: update changelog
c47c6af
release: cut 20.0.0
46a4345
build: update all non-major dependencies to v8.33.0
322173c
release: cut 20.0.0-rc.2
22a7ba1
build: update typescript-eslint monorepo to v8
e9aa810
Update discover-packages.ts
0d0711c
Update .eslintrc.json
4d11154
build: remove unused @types/chokidar
dependency
916f585
build: remove unused @types/read-pkg-up
dependency
e73db8e
fix: correctly update reference to bin
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it
@dependabot merge
will merge this PR after your CI passes on it
@dependabot squash and merge
will squash and merge this PR after your CI passes on it
@dependabot cancel merge
will cancel a previously requested merge and block automerging
@dependabot reopen
will reopen this PR if it is closed
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps esbuild to 0.25.5 and updates ancestor dependencies esbuild, @angular-devkit/build-angular and ng-packagr. These dependencies need to be updated together.
Updates
esbuild
from 0.17.18 to 0.25.5Release notes
Sourced from esbuild's releases.
... (truncated)
Changelog
Sourced from esbuild's changelog.
... (truncated)
Commits
ea453bf
publish 0.25.5 to npm223ddc6
fix #4187: browserpackage.json
regressionb2c8251
fix #4192: typescript tuple label parser edge case28cf2f3
fix #4184: css prefixes forstretch
bee1b09
fix comment indents9ddfe5f
runmake update-compat-table
c339f34
fix a misplaced comment218d29e
publish 0.25.4 to npme66cd0b
dev server: simple support for CORS requests (#4171)8bf3368
js api: validate some options as arrays of stringsUpdates
@angular-devkit/build-angular
from 16.0.2 to 20.0.2Release notes
Sourced from
@angular-devkit/build-angular
's releases.... (truncated)
Changelog
Sourced from
@angular-devkit/build-angular
's changelog.... (truncated)
Commits
e89245d
release: cut the v20.0.2 releasebf64a0f
fix(@schematics/angular
): addless
as a devDependency when selected as the ...424f1cb
fix(@angular/build
): do not consider internal Angular files as external imports631ac7e
ci: use new pull-request-labeling actionfa25385
build: fix perf workflows1db861c
build: improve globbing of jasmine test filescb258a3
fix(@schematics/angular
): correctly detect modules using new file extension f...19dc7dd
build: simplify unit test target namesd513e58
build: simplify unit test target names4e7e0b0
release: cut the v20.0.1 releaseUpdates
ng-packagr
from 16.0.1 to 20.0.0Release notes
Sourced from ng-packagr's releases.
... (truncated)
Changelog
Sourced from ng-packagr's changelog.
... (truncated)
Commits
bc9ef06
docs: update changelogc47c6af
release: cut 20.0.046a4345
build: update all non-major dependencies to v8.33.0322173c
release: cut 20.0.0-rc.222a7ba1
build: update typescript-eslint monorepo to v8e9aa810
Update discover-packages.ts0d0711c
Update .eslintrc.json4d11154
build: remove unused@types/chokidar
dependency916f585
build: remove unused@types/read-pkg-up
dependencye73db8e
fix: correctly update reference to binDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.