chore(deps): bump koa, @nx/angular and @nx/react #182

dependabot · 2025-09-30T18:40:25Z

Bumps koa to 3.0.1 and updates ancestor dependencies koa, @nx/angular and @nx/react. These dependencies need to be updated together.

Updates koa from 2.15.3 to 3.0.1

Release notes

Sourced from koa's releases.

v3.0.1

What's Changed

fix(security): only allow same origin referer on response back koajs/koa@422c551

chore: adds initial doc text refresh; migration guide [CHORE-1870] by @yowainwright in koajs/koa#1877

build(deps-dev): bump formidable from 3.5.2 to 3.5.4 by @dependabot[bot] in koajs/koa#1878

chore: removes done callbacks in tests [CHORE-1870] by @yowainwright in koajs/koa#1875

build(deps-dev): bump supertest from 7.1.0 to 7.1.1 by @dependabot[bot] in koajs/koa#1879

build(deps): bump debug from 4.4.0 to 4.4.1 by @dependabot[bot] in koajs/koa#1880

feat: replace debug module with pure node:util::debuglog by @3imed-jaberi in koajs/koa#1885

feat: replace cache-content-type with mime-types directly by @3imed-jaberi in koajs/koa#1886

build(deps): bump statuses from 2.0.1 to 2.0.2 by @dependabot[bot] in koajs/koa#1888

build(deps-dev): bump supertest from 7.1.1 to 7.1.4 by @dependabot[bot] in koajs/koa#1895

build(deps-dev): bump form-data from 4.0.3 to 4.0.4 by @dependabot[bot] in koajs/koa#1894

Full Changelog: koajs/koa@v3.0.0...v3.0.1

v3.0.0

This is a major release.

Breaking

Minimum node v18

Removes .redirect('back'), adds .back(fallback_url) @fl0w koajs/koa#1115

For .redirect(), don't render redirect values in anchor ref koajs/koa@ff25eb4

req.origin should display the origin header if it exists, not the current hostname koajs/koa#1008. origin now aligns with the Origin header as used in CORS.

.body=<json> should not overwrite type if type already json koajs/koa#1120

Remove special ENOENT support koajs/koa#1861 - this is a big change and will require any file servers to adapt to this change for handling 404s / files not found

Removes generator deprecation messages. Generators are no longer supported. Koa no longer asserts if generators are used. Set content-length: 0 if body is explicitly set to null @ognjenjevremovic #1528 Remove obsolete createAsyncCtxStorageMiddleware koajs/koa#1817

ctx.throw now requires a format of ctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errors

New

Support custom streams @KristapsR koajs/koa#1825

Support WHATWG response bodies koajs/koa#1830 @kravorkid

Use asyncLocalStorage to get current context from app, e.g.: const ctx = app.currentContext.

Fixes

Handle responses when socket is no longer writable @titanism @azlond koajs/koa#1593

fix: Do not response Content-Length if Transfer-Encoding is defined #1562 @charlyzeng

fix: Set body to 'null' if ctx.type = 'json' and ctx.body = null #1059 @likegun

fix: can not get currentContext in error handler (#1758) (Gxkl <[email protected]>)

Fix exports.defaults in package.json koajs/koa#1630

Fix leaky handles in tests koajs/koa#1838

Fix body null checks koajs/koa#1814

Fix reformatting redirect URLs koajs/koa#1805 koajs/koa#1804

Fix passing ctx in error handler koajs/koa#1758

... (truncated)

Changelog

Sourced from koa's changelog.

[!IMPORTANT] Moving forwards we are using the GitHub releases page at https://github.com/koajs/koa/releases in combination with np for publishing releases and their changelogs.

3.0.0-alpha.3 / 2025-02-11

fixes

Avoid redos on host and protocol getter

3.0.0-alpha.2 / 2024-11-04

breaking changes

Update http-errors to v2.0.0 #1486

ctx.throw now requires a format of ctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errors

Remove res.redirect('back'), add back() method to ctx #1115

Replace node querystring with URLSearchParams #1828

Remove obsolete createAsyncCtxStorageMiddleware #1817

features

Add support for web WHATWG #1830

updates

Update cookies to ~0.9.1 #1846

Update statuses to ^2.0.1

Update supertest to ^7.0.0 #1841

fixes

Fix exports.defaults in package.json #1630

Fix leaky handles in tests #1838

Fix body null checks #1814

Fix reformatting redirect URLs #1805 #1804

Fix passing ctx in error handler #1758

migrations

Migrate from jest to the native node test runner #1845

3.0.0-alpha.1 / 2023-04-12

fixes

[e98b8d1] - fix: can not get currentContext in error handler (#1758) (Gxkl <[email protected]>)

3.0.0-alpha.0 / 2023-01-02

Breaking Changes

... (truncated)

Commits

1ddb048 3.0.1
422c551 Merge commit from fork
6e51eb1 build(deps-dev): bump form-data from 4.0.3 to 4.0.4 (#1894)
d378e5c build(deps-dev): bump supertest from 7.1.1 to 7.1.4 (#1895)
cb22d8d build(deps): bump statuses from 2.0.1 to 2.0.2 (#1888)
0acad8f feat: replace cache-content-type with mime-types directly (#1886)
2f6e814 feat: replace debug module with pure node:util::debuglog (#1885)
8620ced build(deps): bump debug from 4.4.0 to 4.4.1 (#1880)
dec1ffc build(deps-dev): bump supertest from 7.1.0 to 7.1.1 (#1879)
9057541 chore: removes done callbacks in tests [CHORE-1870] (#1875)
Additional commits viewable in compare view

Updates @nx/angular from 20.4.2 to 21.6.2

Release notes

Sourced from @nx/angular's releases.

21.6.2 (2025-09-29)

This was a version bump only, there were no code changes.

21.6.1 (2025-09-29)

🚀 Features

angular: support angular v20.3.0 (#32730)

core: replace the pagination from the tui tasks list with scrolling (#32560)

core: generate AI files in create-nx-workspace (#32442)

core: add NX_PROJECT_ROOT environment variable to runti… (#32736, #31428)

core: improve split target to support Gradle format (#32766)

core: add id, start and end time to lifecycle hooks (#32583)

core: add configure-ai-agents command (#32825)

docker: add env var for providing docker registry (#32676)

docker: ensure docker:build dependsOn build (#32697)

graph: unified graph UI and controls (#32724)

misc: add Cookiebot global scripts to astro-docs (#32660)

nx-dev: disable Algolia search on non-docs pages when Astro docs are enabled (#32789)

nx-dev: change login button to try nx cloud (5e0bcae9ef)

nx-dev: enhance UI animations & statistics display (#32863)

release: new option preserveMatchingDependencyRanges to not update matching version ranges (#32556)

rspack: respect deleteOutputPath option in rspack executor (#32609, #32015)

testing: infer task to merge reports from playwright atomized tasks (#31615)

testing: support inferring atomized tasks for cypress component tests (#32733)

testing: forward e2e-ci task options to their atomized tasks (#32765)

⚠️ webpack: remove SVGR option and provide withSvgr composable function (#32843)

🩹 Fixes

angular: install a compatible version of jest for angular (#32744)

angular-rspack: show correct file sizes in build stats for i18n builds (#32758, #32277)

angular-rspack: ensure assets extracted from stylesheets correctly #32487 (#32759, #32487)

bundling: postcss-cli-resources should handle relative urls #32582 (#32658, #32582)

core: ensure only supported bundlers are used for angular fallback to default (#32655)

core: invalidate project graph when external nodes change (#32626)

core: check if daemon process is actually alive before trying to kill it (#32661)

core: add bold styling to terminal pane title when focused (#32462)

core: resolve watcher infinite loops from missing parent gitignore support (#32604, #30313)

core: check nx packages for provenance config before running nx migrate (#32557)

core: handle uninstalled nx console case in autoinstall logic (#32673)

core: filter task duration estimation by successful tasks only (#32688)

core: move git utilities to fix WASM build (#32695)

core: detect vscode insiders as separate editor (#32679)

core: exit fork process and children when ipc connection closes (#32681)

core: improve error messages for provenance checks (#32680)

core: add missing view command to npm (#32729)

core: kill child process correctly when run-script executor process is killed and not using pseudoterminal (#32699)

core: do not shutdown daemon for project graph errors (#32764)

... (truncated)

Commits

d345362 docs(misc): strip Markdoc tags when processing API docs/examples (#32747)
040d7d7 fix(angular): install a compatible version of jest for angular (#32744)
e574baf feat(angular): support angular v20.3.0 (#32730)
ceaa58e fix(core): ensure only supported bundlers are used for angular fallback to de...
c7d5406 docs(misc): update new subtagline
8d067f8 feat(module-federation): align dynamic federation with latest from module fed...
a0c78e0 feat(angular): support angular v20.2 (#32351)
1fda6fe fix(angular): do not update project configuration when not changes were made ...
b8f9a95 fix(module-federation): do not rely on virtualRuntimeEntry #31831 (#32387)
74e0de0 fix(angular): set the tsConfig option when possible to aid with angular mig...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @nx/angular since your current version.

Updates @nx/react from 20.4.2 to 21.6.2

Release notes

Sourced from @nx/react's releases.

21.6.2 (2025-09-29)

This was a version bump only, there were no code changes.

21.6.1 (2025-09-29)

🚀 Features

angular: support angular v20.3.0 (#32730)

core: replace the pagination from the tui tasks list with scrolling (#32560)

core: generate AI files in create-nx-workspace (#32442)

core: add NX_PROJECT_ROOT environment variable to runti… (#32736, #31428)

core: improve split target to support Gradle format (#32766)

core: add id, start and end time to lifecycle hooks (#32583)

core: add configure-ai-agents command (#32825)

docker: add env var for providing docker registry (#32676)

docker: ensure docker:build dependsOn build (#32697)

graph: unified graph UI and controls (#32724)

misc: add Cookiebot global scripts to astro-docs (#32660)

nx-dev: disable Algolia search on non-docs pages when Astro docs are enabled (#32789)

nx-dev: change login button to try nx cloud (5e0bcae9ef)

nx-dev: enhance UI animations & statistics display (#32863)

release: new option preserveMatchingDependencyRanges to not update matching version ranges (#32556)

rspack: respect deleteOutputPath option in rspack executor (#32609, #32015)

testing: infer task to merge reports from playwright atomized tasks (#31615)

testing: support inferring atomized tasks for cypress component tests (#32733)

testing: forward e2e-ci task options to their atomized tasks (#32765)

⚠️ webpack: remove SVGR option and provide withSvgr composable function (#32843)

🩹 Fixes

angular: install a compatible version of jest for angular (#32744)

angular-rspack: show correct file sizes in build stats for i18n builds (#32758, #32277)

angular-rspack: ensure assets extracted from stylesheets correctly #32487 (#32759, #32487)

bundling: postcss-cli-resources should handle relative urls #32582 (#32658, #32582)

core: ensure only supported bundlers are used for angular fallback to default (#32655)

core: invalidate project graph when external nodes change (#32626)

core: check if daemon process is actually alive before trying to kill it (#32661)

core: add bold styling to terminal pane title when focused (#32462)

core: resolve watcher infinite loops from missing parent gitignore support (#32604, #30313)

core: check nx packages for provenance config before running nx migrate (#32557)

core: handle uninstalled nx console case in autoinstall logic (#32673)

core: filter task duration estimation by successful tasks only (#32688)

core: move git utilities to fix WASM build (#32695)

core: detect vscode insiders as separate editor (#32679)

core: exit fork process and children when ipc connection closes (#32681)

core: improve error messages for provenance checks (#32680)

core: add missing view command to npm (#32729)

core: kill child process correctly when run-script executor process is killed and not using pseudoterminal (#32699)

core: do not shutdown daemon for project graph errors (#32764)

... (truncated)

Commits

6b634b8 Revert "feat(webpack)!: remove SVGR option and provide withSvgr composable fu...
2e9b543 feat(webpack)!: remove SVGR option and provide withSvgr composable function (...
e4ec3b3 fix(react): only add react router plugin when using react router #32525 (#32814)
dd5daea fix(misc): add typescript output to the eslint ignore when needed (#32775)
d345362 docs(misc): strip Markdoc tags when processing API docs/examples (#32747)
1ff26dd fix(core): check nx packages for provenance config before running nx migrate ...
c7d5406 docs(misc): update new subtagline
8d067f8 feat(module-federation): align dynamic federation with latest from module fed...
ec6b707 fix(js): use a unique typescript custom condition name for the workspace (#32...
3142624 fix(module-federation): module federation does not depend on static remotes p...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @nx/react since your current version.

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [koa](https://github.com/koajs/koa) to 3.0.1 and updates ancestor dependencies [koa](https://github.com/koajs/koa), [@nx/angular](https://github.com/nrwl/nx/tree/HEAD/packages/angular) and [@nx/react](https://github.com/nrwl/nx/tree/HEAD/packages/react). These dependencies need to be updated together. Updates `koa` from 2.15.3 to 3.0.1 - [Release notes](https://github.com/koajs/koa/releases) - [Changelog](https://github.com/koajs/koa/blob/master/History.md) - [Commits](koajs/koa@2.15.3...v3.0.1) Updates `@nx/angular` from 20.4.2 to 21.6.2 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/21.6.2/packages/angular) Updates `@nx/react` from 20.4.2 to 21.6.2 - [Release notes](https://github.com/nrwl/nx/releases) - [Commits](https://github.com/nrwl/nx/commits/21.6.2/packages/react) --- updated-dependencies: - dependency-name: koa dependency-version: 3.0.1 dependency-type: indirect - dependency-name: "@nx/angular" dependency-version: 21.6.2 dependency-type: direct:development - dependency-name: "@nx/react" dependency-version: 21.6.2 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 30, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump koa, @nx/angular and @nx/react #182

chore(deps): bump koa, @nx/angular and @nx/react #182

Uh oh!

dependabot bot commented on behalf of github Sep 30, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

chore(deps): bump koa, @nx/angular and @nx/react #182

Are you sure you want to change the base?

chore(deps): bump koa, @nx/angular and @nx/react #182

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 30, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.0.1

What's Changed

v3.0.0

Breaking

New

Fixes

3.0.0-alpha.3 / 2025-02-11

3.0.0-alpha.2 / 2024-11-04

3.0.0-alpha.1 / 2023-04-12

3.0.0-alpha.0 / 2023-01-02

Breaking Changes

21.6.2 (2025-09-29)

21.6.1 (2025-09-29)

🚀 Features

🩹 Fixes

21.6.2 (2025-09-29)

21.6.1 (2025-09-29)

🚀 Features

🩹 Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Sep 30, 2025 •

edited

Loading