chore: update npm dependencies (#12375)

# Which Problems Are Solved

- npm dependencies across the monorepo are behind current patch/minor
releases.
- Transitive dependencies are pinned to older versions by parent
packages (karma, nx, @changesets/cli, etc.).
- Console build fails after the Angular toolchain update because
`angular.json` references assets outside the workspace root.

# How the Problems Are Solved

- Bumps `@angular/*` to `^21.2.17` in console.
- Bumps `js-yaml` to `^4.2.0` in docs.
- Bumps `concurrently` to `^10.0.3` in login.
- Adds pnpm overrides for transitive deps that cannot be bumped directly
(ws, undici, minimatch, esbuild, dompurify, qs, and others).

# Additional Changes

- Removes 10 overrides that are no longer needed after parent packages
resolve to newer versions.
- Updates 4 existing overrides (`tar`, `js-yaml`, `dompurify`,
`brace-expansion`) to match current upstream ranges.
- 2 low-severity findings remain via the abandoned `raw-loader` package
in docs (peer dep resolution; no upstream fix without replacing
`raw-loader`).
- Fixes console build: replaced the `angular.json` asset glob
`../apps/docs/public/img/tech` with a `prebuild` script that copies tech
images into `src/assets/docs/img/tech`. **Verify at runtime that tech
images on project grant / integration pages still load.**

# Additional Context

- Overrides remain where parent packages still pin older transitive
versions.
- The `angular.json` asset path issue predates this PR (not introduced
by the Angular bump).

---------

Co-authored-by: Livio Spring <9405495+livio-a@users.noreply.github.com>
This commit is contained in:
Max Peintner
2026-07-06 14:18:51 +00:00
committed by GitHub
co-authored by Livio Spring
parent 653a968d91
commit bc9333aef9
7 changed files with 749 additions and 1701 deletions
+1
View File
@@ -49,6 +49,7 @@ cmd/zitadel/zitadel
# buildfolders and generated files
console/dist
console/src/app/proto/generated
console/src/assets/docs
console/.angular
**.pb.go
!pkg/grpc/protoc/v2/options.pb.go
+2 -2
View File
@@ -34,7 +34,7 @@
"fumadocs-mdx": "14.3.2",
"fumadocs-openapi": "10.8.2",
"fumadocs-ui": "16.8.10",
"js-yaml": "^4.1.1",
"js-yaml": "^4.2.0",
"lucide-react": "^0.577.0",
"mixpanel-browser": "^2.78.0",
"next": "16.2.6",
@@ -72,7 +72,7 @@
"semver": "^7.8.0",
"tailwindcss": "^4.3.0",
"tailwindcss-animate": "^1.0.7",
"tsx": "^4.21.0",
"tsx": "4.21.0",
"typescript": "^5.9.3",
"yaml-loader": "^0.9.0"
}
+1 -1
View File
@@ -84,7 +84,7 @@
"@vitejs/plugin-react": "^4.7.0",
"@zitadel/client": "workspace:*",
"@zitadel/proto": "workspace:*",
"concurrently": "^9.2.1",
"concurrently": "^10.0.3",
"dotenv-cli": "^11.0.0",
"env-cmd": "^11.0.0",
"esbuild": "^0.28.0",
+1 -6
View File
@@ -28,12 +28,7 @@
"assets": [
"src/favicon.ico",
"src/assets",
"src/manifest.webmanifest",
{
"glob": "**/*",
"input": "../apps/docs/public/img/tech",
"output": "assets/docs/img/tech"
}
"src/manifest.webmanifest"
],
"styles": ["src/styles.scss", "src/tailwind.css"],
"scripts": ["./node_modules/tinycolor2/dist/tinycolor-min.js"],
+19 -18
View File
@@ -4,27 +4,28 @@
"scripts": {
"ng": "ng",
"dev": "wait-on --verbose --interval 2000 --simultaneous 1 --timeout 30m ${ENVIRONMENT_JSON_URL} && node prebuild.development.js && ng serve --host=${DEVCONTAINER_LISTEN_HOST:-127.0.0.1}",
"build": "ng build --configuration production --base-href=/ui/console/",
"copy-docs-assets": "rm -rf src/assets/docs && mkdir -p src/assets/docs/img && cp -r ../apps/docs/public/img/tech src/assets/docs/img/",
"build": "pnpm run copy-docs-assets && ng build --configuration production --base-href=/ui/console/",
"lint-check-ng": "eslint .",
"lint-check-prettier": "prettier --check src",
"lint-fix": "prettier --write src",
"generate": "pnpm exec buf generate ../proto --include-imports --include-wkt",
"clean": "rm -rf dist .angular node_modules src/app/proto/generated"
"clean": "rm -rf dist .angular node_modules src/app/proto/generated src/assets/docs"
},
"private": true,
"dependencies": {
"@angular/animations": "^21.2.13",
"@angular/cdk": "^21.2.11",
"@angular/common": "^21.2.13",
"@angular/compiler": "^21.2.13",
"@angular/core": "^21.2.13",
"@angular/forms": "^21.2.13",
"@angular/material": "^21.2.11",
"@angular/material-moment-adapter": "^21.2.11",
"@angular/platform-browser": "^21.2.13",
"@angular/platform-browser-dynamic": "^21.2.13",
"@angular/router": "^21.2.13",
"@angular/service-worker": "^21.2.13",
"@angular/animations": "^21.2.17",
"@angular/cdk": "^21.2.14",
"@angular/common": "^21.2.17",
"@angular/compiler": "^21.2.17",
"@angular/core": "^21.2.17",
"@angular/forms": "^21.2.17",
"@angular/material": "^21.2.14",
"@angular/material-moment-adapter": "^21.2.14",
"@angular/platform-browser": "^21.2.17",
"@angular/platform-browser-dynamic": "^21.2.17",
"@angular/router": "^21.2.17",
"@angular/service-worker": "^21.2.17",
"@bufbuild/protobuf": "^2.12.0",
"@connectrpc/connect": "^2.1.1",
"@connectrpc/connect-web": "^2.1.1",
@@ -62,10 +63,10 @@
"@angular-eslint/eslint-plugin": "21.4.0",
"@angular-eslint/eslint-plugin-template": "21.4.0",
"@angular-eslint/template-parser": "21.4.0",
"@angular/build": "^21.2.11",
"@angular/cli": "^21.2.11",
"@angular/compiler-cli": "^21.2.13",
"@angular/language-service": "^21.2.13",
"@angular/build": "^21.2.17",
"@angular/cli": "^21.2.17",
"@angular/compiler-cli": "^21.2.17",
"@angular/language-service": "^21.2.17",
"@eslint/js": "^10.0.1",
"@tailwindcss/postcss": "^4.3.0",
"@types/file-saver": "^2.0.7",
+710 -1669
View File
File diff suppressed because it is too large Load Diff
+15 -5
View File
@@ -9,23 +9,33 @@ exclude:
- benchmark # because of the node 18 or 20 dependency
overrides:
"tar@<7.5.11": "^7.5.11 <8.0.0"
"tar@<7.5.16": "^7.5.16 <8.0.0"
"flatted@<3.4.2": "^3.4.2"
"rollup@>=4.0.0 <4.59.0": "^4.59.0"
"socket.io-parser@>=4.0.0 <4.2.6": "^4.2.6"
"picomatch@>=4.0.0 <4.0.4": "^4.0.4"
"lodash@>=4.0.0 <4.18.0": "^4.18.0"
"js-yaml@<3.14.2": "^3.14.2"
"qs@<6.14.2": "^6.14.2"
"js-yaml@<3.15.0": "^3.15.0"
"qs@>=6.11.1 <=6.15.1": "^6.15.2"
"ajv@<6.14.0": "^6.14.0"
"minimatch@<3.1.4": "^3.1.4"
"dompurify@>=3.1.3 <3.3.2": "^3.3.2"
"dompurify@>=3.1.3 <3.4.11": "^3.4.11"
"unhead@<2.1.11": "^2.1.11"
"brace-expansion@<1.1.13": "^1.1.13"
"brace-expansion@>=5.0.0 <5.0.6": "^5.0.6"
"yaml@>=2.0.0 <2.8.3": "^2.8.3"
"follow-redirects@<1.16.0": "^1.16.0"
"axios@<1.17.0": "^1.17.0"
"protobufjs@>=7.0.0 <7.5.7": "^7.5.7"
"systeminformation@<5.31.6": "^5.31.6"
"tmp@<0.2.6": "^0.2.6"
"fast-uri@<3.1.2": "^3.1.2"
"ws@>=8.0.0 <8.21.0": "^8.21.0"
"undici@<6.27.0": "^6.27.0"
"webpack@>=5.0.0 <5.104.1": "^5.104.1"
"minimatch@>=9.0.0 <9.0.7": "^9.0.7"
"esbuild@>=0.27.3 <0.28.1": "^0.28.1"
"postcss@<8.5.10": "^8.5.10"
"ip-address@<=10.1.0": "^10.1.1"
"uuid@<11.1.1": "^11.1.1"
"@babel/core@<=7.29.0": "^7.29.6"
"@opentelemetry/core@<2.8.0": "^2.8.0"