👷 Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@angular/common (source)	21.2.10 → 21.2.11					devDependencies	patch	21.2.12
@angular/compiler (source)	21.2.10 → 21.2.11					devDependencies	patch	21.2.12
@angular/core (source)	21.2.10 → 21.2.11					devDependencies	patch	21.2.12
@angular/platform-browser (source)	21.2.10 → 21.2.11					devDependencies	patch	21.2.12
@angular/router (source)	21.2.10 → 21.2.11					devDependencies	patch	21.2.12
@swc/core (source)	1.15.32 → 1.15.33					devDependencies	patch
@tanstack/react-router (source)	1.168.25 → 1.169.1					dependencies	minor	1.169.2
@tanstack/react-router (source)	1.168.25 → 1.169.1					devDependencies	minor	1.169.2
@vue/test-utils	2.4.9 → 2.4.10					devDependencies	patch
github/codeql-action	v4.35.2 → v4.35.3					action	patch	v4.35.4
globals	17.5.0 → 17.6.0					devDependencies	minor
undici (source)	8.1.0 → 8.2.0					devDependencies	minor

---

Release Notes

angular/angular (@​angular/common)

v21.2.11

Compare Source

common

Commit	Type	Description
10ad3c0692	fix	prevent focus from scrollToAnchor

compiler

Commit	Type	Description
4f5d8a2c0b	fix	let declaration span not including end character

core

Commit	Type	Description
a40e2cebc8	fix	fix ordering of view queries metadata in JIT mode
885a1a1d97	fix	guard against non-object events and avoid listener wrapper identity mismatch
7a64aff9b5	fix	prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit	Type	Description
be1f80a253	fix	ensure origin has a trailing slash when parsing url

swc-project/swc (@​swc/core)

v1.15.33

Compare Source

Bug Fixes

• (ci) Update rand lockfile entries (#​11827) (7988966)

• (es/minifier) Fold unary bool nullish coalescing (#​11826) (e39ae3d)

• (es/minifier) Preserve for-init sequence order (#​11837) (16a56d0)

• (es/parser) Parse empty Flow exact object type (#​11836) (3d18a26)

Features

• Move swc ast explorer into workspace (#​11831) (02a8f81)

TanStack/router (@​tanstack/react-router)

v1.169.1

Compare Source

Patch Changes

• Updated dependencies [4a1e63f]:
  • @​tanstack/router-core@​1.169.1

v1.169.0

Compare Source

Minor Changes

• Allow params.parse to experimentally return false to skip an incoming route candidate during path matching. Thrown parse errors still surface on the selected match instead of falling through, and outgoing typed route-template links continue to use exact route lookup followed by params.stringify for URL generation. (#​7263)

Patch Changes

• Updated dependencies [c992495]:
  • @​tanstack/router-core@​1.169.0

v1.168.26

Compare Source

Patch Changes

• Updated dependencies [b5c4183]:
  • @​tanstack/router-core@​1.168.18

vuejs/test-utils (@​vue/test-utils)

v2.4.10

Compare Source

github/codeql-action (github/codeql-action)

v4.35.3

Compare Source

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
• Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
• Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
• Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
• Update default CodeQL bundle version to 2.25.3. #​3865

sindresorhus/globals (globals)

v17.6.0

Compare Source

nodejs/undici (undici)

v8.2.0

Compare Source

What's Changed

• chore: use native addAbortListener by @​trivikr in #​5021
• fix: fix the logic for the UNDICI_NO_WASM_SIMD environment variable by @​ShenHongFei in #​5026
• fix(http2): send body for non-expectsPayload methods with content by @​mcollina in #​5030
• fix(fetch): correct 'navigator' typo to 'navigate' in fetchFinale by @​deepview-autofix in #​5044
• fix(webidl): correct signed integer bounds in ConvertToInt by @​deepview-autofix in #​5038
• fix(fetch): use || for CRLF check in multipart formdata-parser by @​deepview-autofix in #​5049
• fix(websocket): correct argument order in WebSocketStream UTF-8 failure by @​deepview-autofix in #​5050
• fix(pool): propagate useH2c to connector when connections > 1 by @​SAY-5 in #​5031
• fix(cache): return immutable staleAt in milliseconds by @​deepview-autofix in #​5048
• fix(socks5-proxy-agent): use per-origin pools to prevent cross-origin routing by @​deepview-autofix in #​5041
• fix(cache): evict oldest entries first in SqliteCacheStore prune by @​deepview-autofix in #​5039
• fix(socks5): correctly expand IPv6 '::' compressed notation by @​deepview-autofix in #​5046
• Remove unused func and unnecessary shim by @​tsctx in #​5053
• fix: reject malformed content-length request headers by @​trivikr in #​5060
• fix(request): reject NaN highWaterMark during option validation by @​trivikr in #​5062
• docs: fix broken links in docsify sidebar by @​maruthang in #​5065
• fix(fetch): prefer filename* over filename in multipart form-data by @​maruthang in #​5068
• fix(http2): reject websocket upgrades on non-200 responses by @​trivikr in #​5072
• feat: support username-only proxy authentication in ProxyAgent by @​rossilor95 in #​4935
• build(deps): bump uWebSockets.js from v20.58.0 to v20.64.0 in /benchmarks by @​dependabot[bot] in #​5083
• fix(client-h2): stop double-decrementing kOpenStreams on stream timeout by @​SAY-5 in #​5076
• fix(http2): reject upgrade streams closed before response headers by @​trivikr in #​5069
• fix(http2): allow GET and HEAD request bodies over h2 by @​trivikr in #​5058
• fix(cache): include query in cache key when opts.path is undefined by @​maruthang in #​5081
• fix: avoid premature cleanup of dispatcher in Agent by @​bienzaaron in #​5034
• fix(http2): record ping failures on the socket by @​trivikr in #​5075
• add undici security policy by @​mcollina in #​5056
• fix(mock): make filterCalls AND operator actually intersect results by @​deepview-autofix in #​5045
• fix(socks5): enforce authenticated state before CONNECT by @​trivikr in #​5097
• fix(cache): skip expired sqlite vary entries during lookup by @​trivikr in #​5095
• fix: enforce maxCachedSessions in TLS session cache by @​trivikr in #​5102
• fix(socks5): encode embedded IPv4 tails in IPv6 literals correctly by @​trivikr in #​5099
• fix: handle invalid HTTP/2 connection headers (#​4356) by @​mcollina in #​5101
• fix(interceptor): add throwOnMaxRedirect to types and interceptor opts by @​maruthang in #​5066
• fix(websocket): avoid double-closing canceled stream readers by @​colinaaa in #​5105
• fix(cache): persist vary when updating sqlite cache entries by @​trivikr in #​5109
• refactor(h1): track HEAD keep-alive override as boolean by @​trivikr in #​5110
• client: cache llhttp wasm buffer view by @​trivikr in #​5115
• deps: update llhttp to 9.3.1 by @​mcollina in #​5113
• fix(http2): preserve accepted streams after GOAWAY by @​trivikr in #​5090
• fix: reuse parser WeakRef for timeout callbacks by @​trivikr in #​5125
• fix: stop buffering data after SOCKS5 connect by @​trivikr in #​5118
• perf(http2): avoid response header reserialization by @​trivikr in #​5085
• fix(cache): enforce sqlite maxCount after insert by @​trivikr in #​5112
• perf: reduce EventSourceStream parser allocations by @​trivikr in #​5032
• types(dispatcher): use OutgoingHttpHeaders for request headers by @​maruthang in #​5067
• cleanup: delete redundant .gitkeep file by @​shivarm in #​5133
• fix(http2): respect peer max concurrent streams by @​trivikr in #​5135
• test(http2): ensure websocket upgrade resumes queued requests by @​trivikr in #​5132
• test(mock): cover SnapshotAgent excludeUrls playback by @​maruthang in #​5080
• perf(client): parse h1 content-length statelessly by @​trivikr in #​5124
• perf(http2): reduce writeH2 per-request callback allocations by @​trivikr in #​5138
• chore(deps): add lockfile by @​aduh95 in #​5139
• perf: use byteLength property for binary body chunks by @​trivikr in #​5126
• fix(cache): allow streamed entries at maxEntrySize limit by @​trivikr in #​5129
• perf(http2): avoid cloning headers when removing status by @​trivikr in #​5127
• fix: validate H2CClient maxConcurrentStreams option by @​trivikr in #​5143
• perf: avoid redundant scans in BalancedPool dispatcher selection by @​trivikr in #​5146
• fix: replace stale pool clients under connection limit by @​trivikr in #​5145

New Contributors

• @​deepview-autofix made their first contribution in #​5044
• @​SAY-5 made their first contribution in #​5031
• @​maruthang made their first contribution in #​5065
• @​bienzaaron made their first contribution in #​5034

Full Changelog: nodejs/undici@v8.1.0...v8.2.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cit-pr-commenter-54b7da]

Bundles Sizes Evolution

📦 Bundle Name	Base Size	Local Size	𝚫	𝚫%	Status
Rum	179.52 KiB	179.52 KiB	0 B	0.00%	✅
Rum Profiler	6.17 KiB	6.17 KiB	0 B	0.00%	✅
Rum Recorder	27.03 KiB	27.03 KiB	0 B	0.00%	✅
Logs	56.65 KiB	56.65 KiB	0 B	0.00%	✅
Rum Slim	135.38 KiB	135.38 KiB	0 B	0.00%	✅
Worker	23.63 KiB	23.63 KiB	0 B	0.00%	✅

🚀 CPU Performance

Action Name	Base CPU Time (ms)	Local CPU Time (ms)	𝚫%
RUM - add global context	0.0039	0.0065	+66.67%
RUM - add action	0.0126	0.0168	+33.33%
RUM - add error	0.0119	0.0142	+19.33%
RUM - add timing	0.0025	0.0037	+48.00%
RUM - start view	0.0115	0.0168	+46.09%
RUM - start/stop session replay recording	0.0006	0.0007	+16.67%
Logs - log message	0.0138	0.0153	+10.87%

🧠 Memory Performance

Action Name	Base Memory Consumption	Local Memory Consumption	𝚫
RUM - add global context	32.41 KiB	31.92 KiB	-502 B
RUM - add action	58.03 KiB	54.60 KiB	-3.42 KiB
RUM - add timing	32.33 KiB	33.19 KiB	+877 B
RUM - add error	61.52 KiB	60.65 KiB	-889 B
RUM - start/stop session replay recording	31.52 KiB	32.88 KiB	+1.36 KiB
RUM - start view	484.56 KiB	482.69 KiB	-1.87 KiB
Logs - log message	107.58 KiB	49.63 KiB	-57.95 KiB

🔗 RealWorld

[datadog-datadog-prod-us1]

🎉 All green!

❄️ No new flaky tests detected
🧪 All tests passed

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 77.02% (+0.00%)

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 9eb4b62 | Docs | Datadog PR Page | Give us feedback!}