Skip to content

Conversation

@cheefbird
Copy link
Member

@cheefbird cheefbird commented Dec 27, 2025

Context

Dependencies haven't really been updated in a year. Goal for this PR is to bring Angular, CDK/Material, and packaging tooling up to current versions THEN patch any vulnerable packages.

Target: 0 vulnerabilities found on npm audit.

Changes

  • Upgraded Angular-related packages (ran ng update).
  • Bumped @angular/material, @angular/cdk, and ng-packagr (-> 19.2.2).
  • Synced package-lock.json to resolved versions.
  • Added .nvmrc to match package.json engines.

What to verify (quick checklist)

  • Install & build: npm ci && npm run build — fix compile/template errors.
  • Tests: npm test and sandbox app/manual smoke test.
  • Package output: validate library bundle/metadata (ng-packagr step).
  • Peer deps: confirm no incompatible peer warnings for consumers.
  • (Optional) Environment: use Node from .nvmrc and reinstall dependencies.

@cheefbird cheefbird self-assigned this Dec 27, 2025
@cheefbird cheefbird added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 27, 2025
@cheefbird cheefbird marked this pull request as ready for review December 27, 2025 08:42
@cheefbird cheefbird requested a review from slcwebguy December 29, 2025 23:04
Copy link
Contributor

@slcwebguy slcwebguy left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

praise: thank you for doing this 🙏

question: now we just have to figure out how to do a limble-tree deploy. I'm not ever done one myself but hopefully it won't be too bad. Of note: this tool is public facing.

@slcwebguy slcwebguy merged commit ed984c2 into main Dec 30, 2025
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants