chore(deps): bump the npm minor/patch group across 44 packages

Rebuilt from #1251 so the group can actually merge: same 45 bumps minus
epg-parser, plus the one-line tsconfig fix the group needs, with the lockfile
regenerated on top of the transitive-CVE overrides that landed in #1258. The
overrides were re-checked afterwards — none of them stopped applying.

This also carries axios 1.16.0 -> 1.18.1, which closes seven runtime-scope
advisories, and sharp 0.34.5 -> 0.35.3 for the libvips CVEs.

artplayer 5.3.0 -> 5.4.0 changed bundler: 5.3.0 was a Parcel build that exposed
`module.exports.default`, 5.4.0 is UMD and assigns `module.exports` directly.
`esModuleInterop` was only set in apps/web, so every lib compiled
`import Artplayer from 'artplayer'` down to `.default` and got `undefined` —
that is the `Cannot set properties of undefined (setting
'AUTO_PLAYBACK_TIMEOUT')` failure on #1251. Production was never affected
(esbuild resolves the ESM entry); it is a CJS/Jest interop gap, so
`esModuleInterop` moves to tsconfig.base.json where it belongs.

epg-parser ^0.1.6 -> ^0.5.0 is held back deliberately. Dependabot groups it as
a minor, but 0.x minors are breaking and this one reshapes the parse output:
`channel.name` -> `displayName`, icons/urls become objects, `credits` becomes
role-keyed, and start/stop/date switch from raw XMLTV strings to ISO. Its only
consumer is the web-backend `/parse-xml` endpoint, which has no coverage and no
caller yet, so the change belongs in its own PR next to a consumer update.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
4grayandClaude Opus 5 committed 2026-07-26 08:23:54 +02:00
1 parent 7e8c2ccce1
commit 32c00d0ac7
4 files changed
+2567 -1455

No files matched your search

+9
View File
@@ -0,0 +1,9 @@
---
type: internal
area: deps
---
Updated 44 dependencies, including the HTTP client behind every playlist and
portal request — that one closes seven advisories that affect the shipped app,
among them a proxy-credential leak on redirects. Also refreshes the ArtPlayer,
hls.js, Video.js and Shaka player engines. No behaviour change intended.
+44 -44
View File
@@ -82,39 +82,39 @@
"@angular/platform-browser": "21.2.17",
"@angular/platform-browser-dynamic": "21.2.17",
"@angular/router": "21.2.17",
"@ngrx/effects": "21.0.1",
"@ngrx/entity": "21.0.1",
"@ngrx/router-store": "21.0.1",
"@ngrx/signals": "21.0.1",
"@ngrx/store": "21.0.1",
"@ngrx/store-devtools": "21.0.1",
"@ngrx/effects": "21.1.1",
"@ngrx/entity": "21.1.1",
"@ngrx/router-store": "21.1.1",
"@ngrx/signals": "21.1.1",
"@ngrx/store": "21.1.1",
"@ngrx/store-devtools": "21.1.1",
"@ngx-pwa/local-storage": "21.0.0",
"@yangkghjh/videojs-aspect-ratio-panel": "0.0.1",
"angularx-qrcode": "21.0.4",
"artplayer": "5.3.0",
"axios": "1.16.0",
"artplayer": "5.4.0",
"axios": "1.18.1",
"better-sqlite3": "12.9.0",
"date-fns": "4.1.0",
"date-fns": "4.4.0",
"drizzle-orm": "0.45.2",
"electron-conf": "1.3.0",
"electron-updater": "6.8.9",
"epg-parser": "^0.1.6",
"fix-path": "5.0.0",
"hls.js": "1.6.13",
"hls.js": "1.6.16",
"iptv-playlist-parser": "github:4gray/iptv-playlist-parser#v0.15.2-iptvnator.2",
"marked": "18.0.5",
"marked": "18.0.7",
"mpegts.js": "1.8.0",
"ms": "2.1.3",
"ngx-indexed-db": "21.0.0",
"ngx-skeleton-loader": "11.3.0",
"rxjs": "7.8.2",
"saxes": "6.0.0",
"shaka-player": "5.2.1",
"shaka-player": "5.2.2",
"uuid": "9.0.0",
"video.js": "8.23.4",
"video.js": "8.23.9",
"videojs-contrib-quality-levels": "4.1.0",
"videojs-quality-selector-hls": "1.1.1",
"zone.js": "~0.15.1"
"zone.js": "~0.16.2"
},
"devDependencies": {
"@angular-devkit/core": "21.2.17",
@@ -137,17 +137,17 @@
"@angular/router": "21.2.17",
"@angular/service-worker": "21.2.17",
"@astrojs/mdx": "4.3.13",
"@astrojs/sitemap": "3.7.0",
"@astrojs/sitemap": "3.7.3",
"@astrojs/tailwind": "6.0.2",
"@electron/asar": "3.4.1",
"@eslint/eslintrc": "3.3.1",
"@eslint/eslintrc": "3.3.6",
"@eslint/js": "^9.38.0",
"@faker-js/faker": "10.3.0",
"@fontsource/crimson-pro": "5.2.8",
"@fontsource/dm-sans": "5.2.8",
"@fontsource/jetbrains-mono": "5.2.8",
"@fontsource/roboto": "5.2.10",
"@ngrx/eslint-plugin": "^21.0.1",
"@faker-js/faker": "10.5.0",
"@fontsource/crimson-pro": "5.3.0",
"@fontsource/dm-sans": "5.3.0",
"@fontsource/jetbrains-mono": "5.3.0",
"@fontsource/roboto": "5.3.0",
"@ngrx/eslint-plugin": "^21.1.1",
"@ngx-translate/core": "16.0.4",
"@ngx-translate/http-loader": "16.0.1",
"@nx/angular": "22.7.1",
@@ -160,12 +160,12 @@
"@nx/playwright": "22.7.1",
"@nx/web": "22.7.1",
"@nx/workspace": "22.7.1",
"@playwright/test": "^1.36.0",
"@playwright/test": "^1.62.0",
"@schematics/angular": "21.2.9",
"@swc-node/register": "1.11.1",
"@swc/core": "1.15.8",
"@swc/helpers": "0.5.18",
"@tailwindcss/typography": "0.5.19",
"@swc-node/register": "1.12.1",
"@swc/core": "1.15.46",
"@swc/helpers": "0.5.23",
"@tailwindcss/typography": "0.5.20",
"@types/better-sqlite3": "^7.6.12",
"@types/cors": "2.8.19",
"@types/express": "5.0.6",
@@ -173,16 +173,16 @@
"@types/mocha": "9.0.0",
"@types/node": "20.19.9",
"@types/uuid": "^10.0.0",
"@types/video.js": "7.3.29",
"@typescript-eslint/eslint-plugin": "^8.46.2",
"@typescript-eslint/parser": "^8.46.2",
"@typescript-eslint/utils": "^8.46.2",
"@types/video.js": "7.3.58",
"@typescript-eslint/eslint-plugin": "^8.65.0",
"@typescript-eslint/parser": "^8.65.0",
"@typescript-eslint/utils": "^8.65.0",
"angular-eslint": "21.3.1",
"astro": "5.18.1",
"cors": "2.8.6",
"drizzle-kit": "0.31.5",
"drizzle-kit": "0.31.10",
"electron": "^41.7.2",
"electron-builder": "^26.0.12",
"electron-builder": "^26.15.3",
"electron-playwright-helpers": "1.8.2",
"esbuild": "0.28.1",
"eslint": "^9.8.0",
@@ -194,26 +194,26 @@
"istanbul-lib-coverage": "3.2.2",
"istanbul-lib-report": "3.0.1",
"istanbul-reports": "3.2.0",
"jest": "^30.0.2",
"jest-environment-jsdom": "^30.0.2",
"jest-environment-node": "^30.0.2",
"jest": "^30.4.2",
"jest-environment-jsdom": "^30.4.1",
"jest-environment-node": "^30.4.1",
"jest-preset-angular": "~15.0.0",
"jest-util": "^30.0.2",
"jest-util": "^30.4.1",
"jsonc-eslint-parser": "^2.1.0",
"material-design-icons-iconfont": "6.7.0",
"ng-mocks": "14.15.1",
"ng-mocks": "14.15.3",
"nx": "22.7.1",
"nx-electron": "22.0.0",
"prettier": "^3.8.1",
"sharp": "0.34.5",
"prettier": "^3.9.6",
"sharp": "0.35.3",
"tailwindcss": "^3.4.19",
"ts-jest": "^29.4.5",
"ts-jest": "^29.4.12",
"ts-node": "10.9.2",
"tslib": "^2.8.1",
"tsx": "4.21.0",
"tsx": "4.23.1",
"typescript": "5.9.3",
"typescript-eslint": "^8.46.2",
"yaml": "2.8.2"
"typescript-eslint": "^8.65.0",
"yaml": "2.9.0"
},
"pnpm": {
"overrides": {
+2513 -1411
View File
File diff suppressed because it is too large. Load diff
+1
View File
@@ -5,6 +5,7 @@
"sourceMap": true,
"declaration": false,
"moduleResolution": "node",
"esModuleInterop": true,
"emitDecoratorMetadata": true,
"experimentalDecorators": true,
"importHelpers": true,