fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@angular/animations (source)	^20.3.12 → ^20.3.20
@angular/build	^20.3.10 → ^20.3.25
@angular/cli	^20.3.10 → ^20.3.25
@angular/common (source)	^20.3.12 → ^20.3.20
@angular/compiler (source)	^20.3.12 → ^20.3.20
@angular/compiler-cli (source)	^20.3.12 → ^20.3.20
@angular/core (source)	^20.3.12 → ^20.3.20
@angular/forms (source)	^20.3.12 → ^20.3.20
@angular/platform-browser (source)	^20.3.12 → ^20.3.20
@angular/platform-browser-dynamic (source)	^20.3.12 → ^20.3.20
@angular/router (source)	^20.3.12 → ^20.3.20
@astrojs/check (source)	^0.9.5 → ^0.9.9
@docusaurus/core (source)	3.9.2 → 3.10.1
@docusaurus/module-type-aliases (source)	3.9.2 → 3.10.1
@docusaurus/preset-classic (source)	3.9.2 → 3.10.1
@docusaurus/tsconfig (source)	3.9.2 → 3.10.1
@docusaurus/types (source)	3.9.2 → 3.10.1
@preact/preset-vite	^2.10.2 → ^2.10.5
@sveltejs/adapter-auto (source)	^7.0.0 → ^7.0.1
@sveltejs/kit (source)	^2.48.5 → ^2.59.1
@sveltejs/vite-plugin-svelte (source)	^6.2.1 → ^6.2.4
@tsconfig/svelte (source)	^5.0.6 → ^5.0.8
@types/node (source)	^24.10.1 → ^24.12.3
@types/react (source)	^19.2.5 → ^19.2.14
@vitejs/plugin-react (source)	^5.1.1 → ^5.2.0
@vitejs/plugin-vue (source)	^6.0.1 → ^6.0.6
next (source)	15.5.6 → 15.5.18
nuxt (source)	^3.20.1 → ^3.21.4
preact (source)	^10.27.2 → ^10.29.1
prettier (source)	^3.6.2 → ^3.8.3
react (source)	^19.2.0 → ^19.2.6
react (source)	19.2.0 → 19.2.6
react-dom (source)	^19.2.0 → ^19.2.6
react-dom (source)	19.2.0 → 19.2.6
solid-js (source)	^1.9.10 → ^1.9.12
svelte (source)	^5.43.7 → ^5.55.5
svelte-check	^4.3.4 → ^4.4.8
vite (source)	^7.2.2 → ^7.3.3
vite-plugin-solid	^2.11.10 → ^2.11.12
vue (source)	^3.5.24 → ^3.5.34
vue-router (source)	^4.6.3 → ^4.6.4
vue-tsc (source)	^3.1.4 → ^3.2.8
yarn (source)	4.11.0 → 4.14.1
zone.js (source, changelog)	~0.15.1 → ~0.16.2

---

Release Notes

angular/angular (@​angular/animations)

v20.3.20

Compare Source

core

Commit	Type	Description
a9bcffdbc7	fix	disallow event attribute bindings in host bindings unconditionally (#​68468)
97eeb45cfa	fix	validate security-sensitive attributes in i18n bindings (#​68468)

platform-server

Commit	Type	Description
25e4e07238	fix	ensure origin has a trailing slash when parsing url (#​68468)

v20.3.19

Compare Source

platform-server

Commit	Type	Description
303d4cd580	fix	prevent SSRF bypasses via protocol-relative and backslash URLs

v20.3.18

Compare Source

compiler

Commit	Type	Description
02fbf08890	fix	disallow translations of iframe src

core

Commit	Type	Description
72126f9a08	fix	sanitize translated attribute bindings with interpolations
626bc8bc20	fix	sanitize translated form attributes

v20.3.17

Compare Source

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204)

core

Commit	Type	Description
7f9de3c118	fix	block creation of sensitive URI attributes from ICU messages

v20.3.16

Compare Source

core

Commit	Type	Description
c2c2b4aaa8	fix	sanitize sensitive attributes on SVG script elements

v20.3.15

Compare Source

compiler

Commit	Type	Description
d1ca8ae043	fix	prevent XSS via SVG animation attributeName and MathML/SVG URLs

v20.3.14

Compare Source

http

Commit	Type	Description
0276479e7d	fix	prevent XSRF token leakage to protocol-relative URLs

v20.3.13

Compare Source

angular/angular-cli (@​angular/build)

v20.3.25

Compare Source

@​angular-devkit/build-angular

Commit	Type	Description
5e01ef40e	fix	upgrade postcss to 8.5.12

@​angular/ssr

Commit	Type	Description
6686848d9	fix	introduce trustProxyHeaders option to safely validate and sanitize proxy headers

v20.3.24

Compare Source

@​angular/build

Commit	Type	Description
10c09c77b	fix	update esbuild to 0.28.0

v20.3.23

Compare Source

@​angular/build

Commit	Type	Description
ccab02ba0	fix	update vite to 7.3.2

v20.3.22

Compare Source

@​angular-devkit/build-angular

Commit	Type	Description
5978eeeff	fix	update picomatch to 4.0.4

@​angular-devkit/core

Commit	Type	Description
6e9b92612	fix	update picomatch to 4.0.4

@​angular/build

Commit	Type	Description
6f209c26d	fix	update picomatch to 4.0.4

v20.3.21

Compare Source

@​angular/ssr

Commit	Type	Description
1dc6992a5	fix	disallow x-forwarded-prefix starting with a backslash
0a2ff0b2b	fix	ensure unique values in redirect response Vary header
cdbac82a8	fix	support custom headers in redirect responses

v20.3.20

Compare Source

@​angular/build

Commit	Type	Description
0fd6823af	fix	pass process environment variables to prerender workers

v20.3.19

Compare Source

@​angular-devkit/build-angular

Commit	Type	Description
0299b4d1a	fix	update copy-webpack-plugin to v14.0.0

v20.3.18

Compare Source

@​angular-devkit/core

Commit	Type	Description
39596d529	fix	update ajv to 8.18.0

@​angular/build

Commit	Type	Description
f668e2778	fix	update rollup to 4.59.0

v20.3.17

Compare Source

@​angular/ssr

Commit	Type	Description
8700e18d7	fix	prevent open redirect via X-Forwarded-Prefix header
67582a946	fix	validate host headers to prevent header-based SSRF

v20.3.16

Compare Source

@​angular/cli

Commit	Type	Description
656888a25	fix	update dependency @​modelcontextprotocol/sdk to v1.26.0

v20.3.15

Compare Source

@​angular/cli

Commit	Type	Description
795d65413	fix	update pacote to v21.0.4

@​angular-devkit/build-angular

Commit	Type	Description
ffc72cbc5	fix	update webpack to version 5.104.1

v20.3.14

Compare Source

@​angular/cli

Commit	Type	Description
ff366499e	fix	update dependency @​modelcontextprotocol/sdk to v1.25.2

v20.3.13

Compare Source

@​angular/cli

Commit	Type	Description
cfbb61602	fix	update @modelcontextprotocol/sdk to v1.24.0

v20.3.12

Compare Source

@​angular/build

Commit	Type	Description
25bb7e65c	fix	ensure correct URL joining for prerender routes

@​angular/ssr

Commit	Type	Description
cceb86296	fix	handle X-Forwarded-Prefix and APP_BASE_HREF in redirects
1abe68ad8	fix	prevent redirect loop with encoded query parameters

v20.3.11

Compare Source

@​angular/build

Commit	Type	Description
8053f2d92	fix	ensure ɵgetOrCreateAngularServerApp is always defined after errors

withastro/astro (@​astrojs/check)

v0.9.9

Compare Source

Patch Changes

• #​16471 f56bb3f Thanks @​delucis! - Adds support for TypeScript v6 to peer dependencies range

• Updated dependencies [8c62159]:

  • @​astrojs/language-server@​2.16.7

v0.9.8

Compare Source

Patch Changes

• #​15892 a2f597d Thanks @​Princesseuh! - Fixes Astro not being able to find astro check sometimes

• Updated dependencies [7b4b254]:

  • @​astrojs/language-server@​2.16.5

v0.9.7

Compare Source

Patch Changes

• #​15187 bbb5811 Thanks @​matthewp! - Update to Astro 6 beta

• #​15198 55107a1 Thanks @​HiDeoo! - Updates to Astro 6 beta

• Updated dependencies [bbb5811, df6d2d7]:

  • @​astrojs/language-server@​2.16.1

v0.9.6

Patch Changes

• #​14740 abfed97 Thanks @​ArmandPhilippot! - Fixes link targets in documentation following repository relocation.

• Updated dependencies [abfed97]:

  • @​astrojs/language-server@​2.16.1

facebook/docusaurus (@​docusaurus/core)

v3.10.1

Compare Source

🐛 Bug Fix

• docusaurus-bundler
  • #​11981 fix(bundler): fix v3 webpackbar bug due to webpack breaking change (@​slorber)

🔧 Maintenance

• docusaurus
  • #​11982 chore: cherry-pick commits for v3.10.1 patch release (@​slorber)

Committers: 1

• Sébastien Lorber (@​slorber)

v3.10.0

Compare Source

🚀 New Feature

• docusaurus-types, docusaurus
  • #​11896 feat(core): add future.v4.mdx1CompatDisabledByDefault flag (@​slorber)
  • #​11797 feat(core): promote siteConfig.storage to stable + add future.v4.siteStorageNamespacing flag [Claude] (@​slorber)
  • #​11571 feat(core): support custom html elements in head tags (@​lebalz)
• create-docusaurus
  • #​11897 feat(create-docusaurus): update init template to .mdx extension and strict MDX syntax (@​slorber)
  • #​11696 feat(create-docusaurus): Newly initialized TS sites should use "strict: true" (@​slorber)
  • #​11611 feat(create-docusaurus): enable creation in current directory (@​Mcheung7272)
• Other
  • #​11874 feat(ci): improve npm supply chain security - improve Dependabot config (@​slorber)
  • #​11712 feat(publish): Use trusted publishing (OIDC) for canary releases (@​slorber)
• create-docusaurus, docusaurus-bundler, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages, docusaurus-plugin-pwa, docusaurus-types, docusaurus
  • #​11802 feat(core): Docusaurus Faster is stable + v4 future flag turns it on by default (@​slorber)
• docusaurus-mdx-loader, docusaurus-utils, docusaurus
  • #​11777 feat(cli): write-heading-ids CLI now supports the --syntax and --migrate options (@​slorber)
• docusaurus-mdx-loader
  • #​11755 feat(mdx-loader): add support for explicit headingId based on MD/MDX comments (@​slorber)
• docusaurus-theme-live-codeblock, docusaurus-theme-translations
  • #​11675 feat(theme-live-codeblock): reset button + wire position prop (@​NPX2218)
• docusaurus-theme-classic, docusaurus-theme-common
  • #​11734 feat(theme): Split <DocCard>, improve extensibility, better handling of emoji icons, stable classNames (@​slorber)
  • #​11733 feat(theme): Use React context for <Tabs>, allow custom <TabItem> components (@​slorber)
• docusaurus-faster, docusaurus
  • #​11715 feat(bundler): upgrade to Rspack 1.7, remove useless experimental feature flags (@​slorber)
• docusaurus-plugin-content-pages
  • #​11666 feat(pages): add support for Markdown file path links (@​VedantMadane)
• docusaurus-mdx-loader, docusaurus-theme-classic
  • #​11642 feat(mdx-loader): add admonitions directive support for class/id shortcuts (@​lebalz)
• docusaurus-theme-classic
  • #​11635 feat(theme): add MDXComponents/Li to swizzle config (@​moskalakamil)
• docusaurus-theme-search-algolia
  • #​11581 feat(theme-search-algolia): allow overriding transformSearchClient (@​hugohaggmark)
  • #​11541 feat(theme-search-algolia): add support for DocSearch v4.3.2 and new Suggested Questions (@​NatanTechofNY)
• create-docusaurus, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages, docusaurus-plugin-sitemap, docusaurus-types, docusaurus-utils, docusaurus
  • #​11512 feat(core): New siteConfig future.experimental_vcs API + future.experimental_faster.gitEagerVcs flag (@​slorber)

🐛 Bug Fix

• docusaurus
  • #​11844 fix(core): fix url.resolve() Node.js deprecation warning (@​slorber)
  • #​11833 fix(core): upgrade serve handler min version to for upgrade users to a secure version (@​BearAlliance)
  • #​11763 fix(cli): fix write-heading-ids CLI when no files provided (@​slorber)
  • #​11693 fix(core): Remove deprecated experiments.lazyBarrel config for RsPack (@​VedikaGupt)
  • #​11604 fix(core): webpack aliases shouldn't be created for test files and typedefs (@​slorber)
  • #​11603 fix(core): Fix openBrowser AppleScript support for Arc (@​slorber)
  • #​11579 fix(core): in isInternalUrl(), URI protocol scheme detection should implement the spec more strictly (@​slorber)
  • #​11550 fix(core): optimize i18n integration for site builds + improve inference of locale config (@​slorber)
• docusaurus-faster, docusaurus
  • #​11817 fix(faster): upgrade Rspack, fix Yarn PnP support (@​slorber)
• create-docusaurus, docusaurus-logger, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-google-gtag, docusaurus-plugin-pwa, docusaurus
  • #​11843 fix(create-docusaurus): fix support for TypeScript 6.0 + fix our CI (@​slorber)
• docusaurus-utils
  • #​11804 fix(utils): Git Eager VSC should have better DX (@​slorber)
• docusaurus-theme-classic
  • #​11796 fix(theme): restore copy-text-to-clipboard as lazy fallback for non-secure contexts (@​dmoranp)
  • #​11513 fix(a11y): add Space key support for navbar dropdowns (@​TheCyperpunk)
  • #​11565 fix(theme): Change code block line from span to div, fix Firefox text selection/copy bug (@​slorber)
• docusaurus-plugin-content-docs
  • #​11794 fix(content-docs): translate generated-index category titles in pagination links (@​dmoranp)
  • [#&#8203

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 12pm on Sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.