chore(angular): sync prerelease branch with main by benjavicente · Pull Request #12054 · TanStack/query

benjavicente · 2026-10-17T01:44:31Z

🎯 Changes

Updates the angular adapter prerelease branch with new commits from master, from sep 22 to today. Applies changes that where applied into other adapters, like Nx upgrades, Oxlint, test changes, typescript setups, etc

✅ Checklist

I have followed the steps in the Contributing guide.
I have tested code changes locally with pnpm run test:pr, or these tests do not apply to this pull request.
I have followed the AI contribution policy and fully understand the code in this pull request, including any code generated with AI assistance.

🚀 Release Impact

This change affects published code, and I have generated a changeset.
This change is docs/CI/dev-only (no release).

…efetchOnMount' tests into separate tests (TanStack#11762)

…o static filters and filters updated on host updates (TanStack#11763)

…n cache updates while disconnected (TanStack#11764)

…ng the query function when disconnected and for replacing 'skipToken' (TanStack#11761)

… detached updates when disconnected while in-flight (TanStack#11770)

…detached updates when disconnected while in-flight (TanStack#11771)

…essing cache updates while disconnected (TanStack#11772)

…tateAsync' and state transition tests into separate tests (TanStack#11773)

…tial page, 'fetchNextPage', and 'fetchPreviousPage' test into separate tests (TanStack#11774)

…reateQueriesController}): add tests for returning the same result between reads when nothing changed (TanStack#11775)

…n states through the rendered output (TanStack#11776)

…t user-visible counts and states through the rendered output (TanStack#11777)

…es through the rendered output (TanStack#11778)

…ges and errors through the rendered output (TanStack#11779)

…ta, type parameters, and 'select' (TanStack#11768)

…sults through the rendered output (TanStack#11780)

…#11781)

…#11782)

…#11783)

)

…catalog' (TanStack#11785)

… unnecessary nullish fallback for 'optionalDependencies' (TanStack#11789) * chore(tsconfig.json): add 'knip.ts' to 'include' for type-aware linting * chore(knip): remove unnecessary nullish fallback for 'optionalDependencies'

… entries and align its range with '@typescript-eslint/parser' (TanStack#11790)

@ts-check

…' in preact packages and remove redundant eslint options (TanStack#11791) * chore(*): replace 'typescript-eslint' with '@typescript-eslint/parser' in preact packages and remove redundant eslint options * style(*): add a blank line after '@ts-check' and remove the blank line between imports in preact eslint configs

…f' suffix (TanStack#11792) * refactor(preact-query*): rename local 'useRef' variables with the 'Ref' suffix * test(preact-query): name 'useState' value and setter pairs and use stable keys

… defaults (TanStack#11793)

…lient when the host cannot dispatch events (TanStack#11797)

…lling an ongoing 'fetchNextPage' with 'cancelRefetch: false' (TanStack#11800)

… ongoing 'refetch' with 'cancelRefetch: false' (TanStack#11801)

…e closures with 'combine' (TanStack#11802)

…ing (TanStack#12042)

…' and 'strokeLinejoin' on the send icon (TanStack#12048)

…tions get their own React key and query (TanStack#12047)

… of the nonexistent 'airDate' (TanStack#12046)

…f the query 'status' (TanStack#12045)

…end an empty question (TanStack#12049)

…rface the server's message instead of a JSON parse error (TanStack#12050)

…'refetchInterval', which is the option it sets (TanStack#12051)

changeset-bot · 2026-10-17T01:44:36Z

🦋 Changeset detected

Latest commit: 3841d96

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 3 packages

Name	Type
@tanstack/angular-query	Patch
@tanstack/angular-query-devtools	Patch
@tanstack/angular-query-persist-client	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

coderabbitai · 2026-10-17T01:44:44Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: TanStack/query/.coderabbit.yaml
Review profile: CHILL
Plan: Advanced
Run ID: 934970bc-0610-41f1-83ec-0ec925bb4a8a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-10-17T01:45:01Z

View your CI Pipeline Execution ↗ for commit 3841d96

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	1m 42s	View ↗
`nx run-many --target=build --exclude=examples/*...`	✅ Succeeded	2s	View ↗

☁️ Nx Cloud last updated this comment at 2026-10-17 02:46:35 UTC

socket-security · 2026-10-17T01:45:54Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance
	@angular/common@22.1.6 ⏵ 20.1.8	⁺¹	^-60	⁺¹	⁺¹
	@angular/core@22.1.6 ⏵ 20.1.8	^-17	^-50	⁺²	⁺¹
	@size-limit/preset-small-lib@12.0.1 ⏵ 14.0.0				⁺⁸
	@angular/compiler@22.1.6 ⏵ 20.1.8	^-19	^-40	⁺¹	⁺¹
	@tanstack/typedoc-config@0.3.1 ⏵ 0.3.4	⁺¹¹		⁺²	⁺¹
	@tanstack/eslint-config@0.3.2 ⏵ 0.4.0			⁺²	^-2
	nx@22.1.3 ⏵ 23.2.1	⁺¹¹	⁺³¹
	@sveltejs/adapter-auto@6.1.1 ⏵ 7.0.1
	@typescript-eslint/parser@8.58.1 ⏵ 8.71.1			⁺¹
	@angular/ssr@22.1.8 ⏵ 22.2.2	⁺²		^-2	⁺¹
	@changesets/cli@2.30.0 ⏵ 3.0.3	⁺²		^-25
	@angular/platform-browser@22.1.6 ⏵ 22.2.3	⁺¹		⁺¹
	typescript-eslint@8.58.1 ⏵ 8.70.1			⁺¹
	@oxc-project/runtime@0.151.0
	@angular/compiler-cli@22.1.6 ⏵ 20.1.8			^-1
	@typescript-eslint/rule-tester@8.58.1 ⏵ 8.71.1			⁺¹
	@angular/compiler-cli@22.1.6 ⏵ 22.2.3	⁺¹		⁺¹	⁺¹
	@angular/compiler-cli@22.1.6 ⏵ 21.2.25	⁺¹		⁺¹
	@angular/router@22.1.6 ⏵ 22.2.3	⁺¹	⁺¹⁶	⁺¹	⁺¹
	@expo/config@11.0.13 ⏵ 57.0.9	⁺¹
	@angular/platform-server@22.1.6 ⏵ 22.2.3	⁺¹		⁺¹	⁺¹
	@angular/forms@22.1.6 ⏵ 22.2.3	⁺¹		⁺¹	⁺¹
	@typescript-eslint/utils@8.71.1
	@angular/cli@22.1.8 ⏵ 22.2.2			⁺¹	^-1
	@angular/build@22.1.8 ⏵ 22.2.2	^-7		⁺¹	⁺²
	@angular/compiler@22.1.6 ⏵ 21.2.25
	@angular/compiler@22.1.6 ⏵ 22.2.3				⁺¹
	react-native-safe-area-context@4.14.1 ⏵ 5.10.0			^-22	⁺⁴
	@angular/core@22.1.6 ⏵ 21.2.25	⁺¹			^-1
	vitest@4.1.2 ⏵ 4.1.11	⁺¹	⁺²	⁺¹	⁺¹
	@angular/core@22.1.6 ⏵ 22.2.3			⁺¹
	@angular/common@22.1.6 ⏵ 22.2.3				⁺¹
See 75 more rows in the dashboard

View full report

socket-security · 2026-10-17T01:45:56Z

Caution

Review the following alerts detected in dependencies.

According to your organization's Security Policy, you must resolve all "Block" alerts before proceeding. It is recommended to resolve "Warn" alerts too. Learn more about Socket for GitHub.

Priority	Alert (click "▶" to expand/collapse)	Action
	Critical CVE: npm `shell-quote`: `quote()` command injection via a line terminator in a token after a `{ comment }` token CVE: GHSA-pqg4-j6r4-53mv shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token (CRITICAL) Affected versions: >= 1.8.4 < 1.11.0 Patched version: 1.11.0 From: pnpm-lock.yaml → `npm/npm-run-all2@9.0.3` → `npm/react-native@0.86.3` → `npm/@changesets/cli@3.0.3` → `npm/shell-quote@1.10.0` ℹ Read more on: This package \| This alert \| What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/shell-quote@1.10.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Block
	High CVE: npm `@angular/common`: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning CVE: GHSA-39pv-4j6c-2g6v @angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.1; >= 21.0.0-next.0 < 21.2.17; >= 20.0.0-next.0 < 20.3.25; <= 19.2.25 Patched version: 20.3.25 From: integrations/angular-types-20/package.json → `npm/@angular/common@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/common@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: npm `@angular/common`: Denial of Service (DoS) via OOM in Date Formatting (formatDate) CVE: GHSA-48r7-hpm6-gfxm @angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate) (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.1; >= 21.0.0-next.0 < 21.2.17; >= 20.0.0-next.0 < 20.3.25; <= 19.2.25 Patched version: 20.3.25 From: integrations/angular-types-20/package.json → `npm/@angular/common@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/common@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: npm `@angular/common`: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache CVE: GHSA-q6f4-qqrg-jv6x @angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.0-rc.2; >= 20.0.0-next.0 < 20.3.22; >= 19.0.0-next.0 < 19.2.23; <= 18.2.14; >= 21.0.0-next.0 < 21.2.15 Patched version: 20.3.22 From: integrations/angular-types-20/package.json → `npm/@angular/common@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/common@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: npm `@angular/common`: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) CVE: GHSA-p3vc-36g9-x9gr @angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo) (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.0-rc.2; >= 20.0.0-next.0 < 20.3.22; >= 19.0.0-next.0 < 19.2.23; <= 18.2.14; >= 21.0.0-next.0 < 21.2.15 Patched version: 20.3.22 From: integrations/angular-types-20/package.json → `npm/@angular/common@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/common@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client in npm `@angular/common` CVE: GHSA-58c5-g7wp-6w37 Angular is Vulnerable to XSRF Token Leakage via Protocol-Relative URLs in Angular HTTP Client (HIGH) Affected versions: >= 21.0.0-next.0 < 21.0.1; >= 20.0.0-next.0 < 20.3.14; < 19.2.16 Patched version: 20.3.14 From: integrations/angular-types-20/package.json → `npm/@angular/common@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/common@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning in npm `@angular/common` CVE: GHSA-jhpw-976m-542j Angular: Cache-Key Ambiguity in HttpTransferCache Leading to Cross-Request Response Reuse and State Poisoning (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.2; >= 21.0.0-next.0 < 21.2.19; >= 20.0.0-next.0 < 20.3.27; <= 19.2.25 Patched version: 20.3.27 From: integrations/angular-types-20/package.json → `npm/@angular/common@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/common@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular vulnerable to XSS in i18n attribute bindings in npm `@angular/compiler` CVE: GHSA-g93w-mfhg-p222 Angular vulnerable to XSS in i18n attribute bindings (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.0-next.3; >= 21.0.0-next.0 < 21.2.4; >= 20.0.0-next.0.0.0 < 20.3.18; >= 19.0.0-next.0 < 19.2.20; >= 17.0.0-next.0 <= 18.2.14 Patched version: 20.3.18 From: integrations/angular-types-20/package.json → `npm/@angular/compiler@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/compiler@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular has XSS Vulnerability via Unsanitized SVG Script Attributes in npm `@angular/compiler` CVE: GHSA-jrmj-c5cx-3cw6 Angular has XSS Vulnerability via Unsanitized SVG Script Attributes (HIGH) Affected versions: >= 21.1.0-next.0 < 21.1.0-rc.0; >= 21.0.0-next.0 < 21.0.7; >= 20.0.0-next.0 < 20.3.16; >= 19.0.0-next.0 < 19.2.18; <= 18.2.14 Patched version: 20.3.16 From: integrations/angular-types-20/package.json → `npm/@angular/compiler@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/compiler@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes in npm `@angular/compiler` CVE: GHSA-v4hv-rgfq-gp49 Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes (HIGH) Affected versions: >= 21.0.0-next.0 < 21.0.2; >= 20.0.0-next.0 < 20.3.15; >= 19.0.0-next.0 < 19.2.17; <= 18.2.14 Patched version: 20.3.15 From: integrations/angular-types-20/package.json → `npm/@angular/compiler@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/compiler@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes in npm `@angular/compiler` CVE: GHSA-jj27-h5hq-8x99 Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.1; >= 21.0.0-next.0 < 21.2.19; >= 20.0.0-next.0 < 20.3.27; <= 19.2.25 Patched version: 20.3.27 From: integrations/angular-types-20/package.json → `npm/@angular/compiler@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/compiler@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular i18n vulnerable to Cross-Site Scripting in npm `@angular/core` CVE: GHSA-prjf-86w9-mfqv Angular i18n vulnerable to Cross-Site Scripting (HIGH) Affected versions: >= 21.2.0-next.0 < 21.2.0; >= 21.0.0-next.0 < 21.1.6; >= 20.0.0-next.0 < 20.3.17; >= 19.0.0-next.0 < 19.2.19; <= 18.2.14 Patched version: 20.3.17 From: integrations/angular-types-20/package.json → `npm/@angular/core@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/core@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular has XSS Vulnerability via Unsanitized SVG Script Attributes in npm `@angular/core` CVE: GHSA-jrmj-c5cx-3cw6 Angular has XSS Vulnerability via Unsanitized SVG Script Attributes (HIGH) Affected versions: >= 21.1.0-next.0 < 21.1.0-rc.0; >= 21.0.0-next.0 < 21.0.7; >= 20.0.0-next.0 < 20.3.16; >= 19.0.0-next.0 < 19.2.18; <= 18.2.14 Patched version: 20.3.16 From: integrations/angular-types-20/package.json → `npm/@angular/core@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/core@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular Client Hydration DOM Clobbering & Response-Cache Poisoning in npm `@angular/core` CVE: GHSA-rgjc-h3x7-9mwg Angular Client Hydration DOM Clobbering & Response-Cache Poisoning (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.1; >= 21.0.0-next.0 < 21.2.17; >= 20.0.0-next.0 < 20.3.25; <= 19.2.25 Patched version: 20.3.25 From: integrations/angular-types-20/package.json → `npm/@angular/core@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/core@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular vulnerable to XSS in i18n attribute bindings in npm `@angular/core` CVE: GHSA-g93w-mfhg-p222 Angular vulnerable to XSS in i18n attribute bindings (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.0-next.3; >= 21.0.0-next.0 < 21.2.4; >= 20.0.0-next.0.0.0 < 20.3.18; >= 19.0.0-next.0 < 19.2.20; >= 17.0.0-next.0 <= 18.2.14 Patched version: 20.3.18 From: integrations/angular-types-20/package.json → `npm/@angular/core@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/core@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes in npm `@angular/core` CVE: GHSA-jj27-h5hq-8x99 Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes (HIGH) Affected versions: >= 22.0.0-next.0 < 22.0.1; >= 21.0.0-next.0 < 21.2.19; >= 20.0.0-next.0 < 20.3.27; <= 19.2.25 Patched version: 20.3.27 From: integrations/angular-types-20/package.json → `npm/@angular/core@20.1.8` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/core@20.1.8`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection CVE: GHSA-m8m8-qj5v-23w3 Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection (HIGH) Affected versions: >= 1.15.2 < 1.20.0 Patched version: 1.20.0 From: pnpm-lock.yaml → `npm/nx@23.2.1` → `npm/axios@1.18.1` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/axios@1.18.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Axios: Prototype Pollution Gadget in npm `axios` toFormData Options CVE: GHSA-x97p-jq2g-jp4f Axios: Prototype Pollution Gadget in axios toFormData Options (HIGH) Affected versions: >= 0.28.0 < 0.34.0; >= 1.15.1 < 1.20.0 Patched version: 1.20.0 From: pnpm-lock.yaml → `npm/nx@23.2.1` → `npm/axios@1.18.1` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/axios@1.18.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) CVE: GHSA-c29m-xwm3-cm6r Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS) (HIGH) Affected versions: >= 1.16.1 < 1.20.0 Patched version: 1.20.0 From: pnpm-lock.yaml → `npm/nx@23.2.1` → `npm/axios@1.18.1` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/axios@1.18.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF CVE: GHSA-r4gj-5m52-g5wh Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF (HIGH) Affected versions: >= 1.17.0 < 1.20.0 Patched version: 1.20.0 From: pnpm-lock.yaml → `npm/nx@23.2.1` → `npm/axios@1.18.1` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/axios@1.18.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location CVE: GHSA-mghh-pgcx-3jjj Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location (HIGH) Affected versions: >= 1.15.0 < 1.20.0 Patched version: 1.20.0 From: pnpm-lock.yaml → `npm/nx@23.2.1` → `npm/axios@1.18.1` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/axios@1.18.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn
	High CVE: npm `smol-toml`: Denial of Service via malformed TOML documents CVE: GHSA-7w5x-hrqm-74c2 smol-toml: Denial of Service via malformed TOML documents (HIGH) Affected versions: < 1.7.1 Patched version: 1.7.1 From: pnpm-lock.yaml → `npm/nx@23.2.1` → `npm/smol-toml@1.6.1` ℹ Read more on: This package \| This alert \| What is a CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Remove or replace dependencies that include known high severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/smol-toml@1.6.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.	Warn

View full report

pkg-pr-new · 2026-10-17T01:46:16Z

More templates

@tanstack/angular-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/angular-query@12054

@tanstack/angular-query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/angular-query-devtools@12054

@tanstack/angular-query-persist-client

npm i https://pkg.pr.new/TanStack/query/@tanstack/angular-query-persist-client@12054

@tanstack/eslint-plugin-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/eslint-plugin-query@12054

@tanstack/lit-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/lit-query@12054

@tanstack/preact-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/preact-query@12054

@tanstack/preact-query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/preact-query-devtools@12054

@tanstack/preact-query-persist-client

npm i https://pkg.pr.new/TanStack/query/@tanstack/preact-query-persist-client@12054

@tanstack/query-async-storage-persister

npm i https://pkg.pr.new/TanStack/query/@tanstack/query-async-storage-persister@12054

@tanstack/query-broadcast-client-experimental

npm i https://pkg.pr.new/TanStack/query/@tanstack/query-broadcast-client-experimental@12054

@tanstack/query-core

npm i https://pkg.pr.new/TanStack/query/@tanstack/query-core@12054

@tanstack/query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/query-devtools@12054

@tanstack/query-persist-client-core

npm i https://pkg.pr.new/TanStack/query/@tanstack/query-persist-client-core@12054

@tanstack/query-sync-storage-persister

npm i https://pkg.pr.new/TanStack/query/@tanstack/query-sync-storage-persister@12054

@tanstack/react-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/react-query@12054

@tanstack/react-query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/react-query-devtools@12054

@tanstack/react-query-next-experimental

npm i https://pkg.pr.new/TanStack/query/@tanstack/react-query-next-experimental@12054

@tanstack/react-query-persist-client

npm i https://pkg.pr.new/TanStack/query/@tanstack/react-query-persist-client@12054

@tanstack/solid-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/solid-query@12054

@tanstack/solid-query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/solid-query-devtools@12054

@tanstack/solid-query-persist-client

npm i https://pkg.pr.new/TanStack/query/@tanstack/solid-query-persist-client@12054

@tanstack/svelte-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/svelte-query@12054

@tanstack/svelte-query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/svelte-query-devtools@12054

@tanstack/svelte-query-persist-client

npm i https://pkg.pr.new/TanStack/query/@tanstack/svelte-query-persist-client@12054

@tanstack/vue-query

npm i https://pkg.pr.new/TanStack/query/@tanstack/vue-query@12054

@tanstack/vue-query-devtools

npm i https://pkg.pr.new/TanStack/query/@tanstack/vue-query-devtools@12054

commit: 3841d96

benjavicente · 2026-10-17T02:16:53Z

Socket warnings don't look relevant at all

Merge latest upstream/main, including the Changesets v3 preview action and release workflow fixes. Resolve against the main revision already included by the squash merge in TanStack#12054, preserving Angular package configuration.

sukvvon added 30 commits October 1, 2026 02:17

test(lit-query/createQueryController): split combined 'select' and 'r…

809e9df

…efetchOnMount' tests into separate tests (TanStack#11762)

test(lit-query/{useIsFetching,useIsMutating}): split filter tests int…

327f4ab

…o static filters and filters updated on host updates (TanStack#11763)

test(lit-query/useMutationState): add test for not processing mutatio…

73f0761

…n cache updates while disconnected (TanStack#11764)

test(lit-query/createInfiniteQueryController): add tests for cancelli…

e09f07e

…ng the query function when disconnected and for replacing 'skipToken' (TanStack#11761)

test(lit-query/createMutationController): add test for not processing…

f1ad8d9

… detached updates when disconnected while in-flight (TanStack#11770)

test(lit-query/createQueriesController): add test for not processing …

cfe3aca

…detached updates when disconnected while in-flight (TanStack#11771)

test(lit-query/{useIsFetching,useIsMutating}): add tests for not proc…

5646be2

…essing cache updates while disconnected (TanStack#11772)

test(lit-query/createMutationController): split combined 'mutate'/'mu…

f2032dd

…tateAsync' and state transition tests into separate tests (TanStack#11773)

test(lit-query/createInfiniteQueryController): split the combined ini…

8cd151d

…tial page, 'fetchNextPage', and 'fetchPreviousPage' test into separate tests (TanStack#11774)

test(lit-query/{createQueryController,createInfiniteQueryController,c…

27f8875

…reateQueriesController}): add tests for returning the same result between reads when nothing changed (TanStack#11775)

test(lit-query/createMutationController): assert user-visible mutatio…

6622c5e

…n states through the rendered output (TanStack#11776)

test(lit-query/{useIsFetching,useIsMutating,useMutationState}): asser…

06441d9

…t user-visible counts and states through the rendered output (TanStack#11777)

test(lit-query/createQueryController): assert user-visible query stat…

c5486aa

…es through the rendered output (TanStack#11778)

test(lit-query/createInfiniteQueryController): assert user-visible pa…

69de5a6

…ges and errors through the rendered output (TanStack#11779)

test(lit-query/createQueriesController): add type tests for initialDa…

ecc633a

…ta, type parameters, and 'select' (TanStack#11768)

test(lit-query/createQueriesController): assert user-visible query re…

d1e1bac

…sults through the rendered output (TanStack#11780)

chore(*): manage 'react' eslint plugins with pnpm 'catalog' (TanStack…

339e09f

…#11781)

chore(*): manage 'preact' eslint config with pnpm 'catalog' (TanStack…

53eac47

…#11782)

chore(*): manage 'svelte' eslint plugin with pnpm 'catalog' (TanStack…

de6b50c

…#11783)

chore(*): manage 'vue' eslint plugin with pnpm 'catalog' (TanStack#11784

5d14b15

)

chore(*): manage 'eslint' and '@typescript-eslint/parser' with pnpm '…

b90d8ce

…catalog' (TanStack#11785)

chore(pnpm-workspace): move 'typescript-eslint' to the shared catalog…

4c8d15f

… entries and align its range with '@typescript-eslint/parser' (TanStack#11790)

refactor(preact-query*): rename local 'useRef' variables with the 'Re…

3df6cb9

…f' suffix (TanStack#11792) * refactor(preact-query*): rename local 'useRef' variables with the 'Ref' suffix * test(preact-query): name 'useState' value and setter pairs and use stable keys

test(lit-query/createMutationController): add test for using mutation…

ea21494

… defaults (TanStack#11793)

test(lit-query/BaseController): add test for resolving to a missing c…

782b2e6

…lient when the host cannot dispatch events (TanStack#11797)

test(lit-query/createInfiniteQueryController): add test for not cance…

17e498e

…lling an ongoing 'fetchNextPage' with 'cancelRefetch: false' (TanStack#11800)

test(lit-query/createQueryController): add test for not cancelling an…

113ce9d

… ongoing 'refetch' with 'cancelRefetch: false' (TanStack#11801)

test(lit-query/createQueriesController): add test for not having stal…

d547e21

…e closures with 'combine' (TanStack#11802)

sukvvon and others added 13 commits October 17, 2026 02:40

docs(eslint/no-void-query-fn): note that the rule requires typed lint…

cc185b0

…ing (TanStack#12042)

fix(examples/react/chat): use camelCase 'strokeWidth', 'strokeLinecap…

8ca99d1

…' and 'strokeLinejoin' on the send icon (TanStack#12048)

fix(examples/react/chat): give each question an 'id' so repeated ques…

817f823

…tions get their own React key and query (TanStack#12047)

fix(examples/react/rick-morty): read the episode's 'air_date' instead…

116818a

… of the nonexistent 'airDate' (TanStack#12046)

fix(examples/react/batching): show the character's 'status' instead o…

9583088

…f the query 'status' (TanStack#12045)

fix(examples/react/chat): submit through a 'form' so 'Enter' cannot s…

6f1fa2b

…end an empty question (TanStack#12049)

fix(examples/react/offline): throw on non-ok responses so failures su…

b71ff31

…rface the server's message instead of a JSON parse error (TanStack#12050)

fix(examples): rename the auto-refetching title from 'stale-time' to …

83b0831

…'refetchInterval', which is the option it sets (TanStack#12051)

chore(angular): merge latest upstream main into prerelease branch

af69cb9

test(angular): verify supported Angular and TypeScript pairs

17e24f9

chore(angular): adopt shared Oxlint rules

cb3b1e6

build(angular): upgrade library builds to Vite 8

6fd824d

chore(angular): add changeset for next RC

7a03ead

benjavicente requested a review from a team as a code owner October 17, 2026 01:44

benjavicente changed the title ~~Update core in angular pre~~ chore(angular): sync prerelease branch with main Oct 17, 2026

test(angular): use standard package validation commands

c748ba5

benjavicente added 3 commits October 16, 2026 23:25

fix(angular): resolve core sources during docs generation

98e0189

fix(angular): correct devtools test project reference

d67afd2

chore(angular): align compile commands with other adapters

3841d96

TkDodo approved these changes Oct 17, 2026

View reviewed changes

benjavicente merged commit 9464a5e into TanStack:angular-adapter-pre Oct 17, 2026
8 of 9 checks passed

github-actions Bot mentioned this pull request Oct 17, 2026

ci: Version Packages (rc) #12060

Merged

Navigation Menu

Repository navigation

chore(angular): sync prerelease branch with main - #12054

chore(angular): sync prerelease branch with main#12054
benjavicente merged 409 commits into
TanStack:angular-adapter-prefrom
benjavicente:update-core-in-angular-pre

benjavicente commented Oct 17, 2026

Uh oh!

changeset-bot Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 17, 2026 •

edited

Loading

Review skipped

Uh oh!

nx-cloud Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

benjavicente commented Oct 17, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

Conversation

benjavicente commented Oct 17, 2026

🎯 Changes

✅ Checklist

🚀 Release Impact

Uh oh!

changeset-bot Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

coderabbitai Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

nx-cloud Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

benjavicente commented Oct 17, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

changeset-bot Bot commented Oct 17, 2026 •

edited

Loading

coderabbitai Bot commented Oct 17, 2026 •

edited

Loading

nx-cloud Bot commented Oct 17, 2026 •

edited

Loading

socket-security Bot commented Oct 17, 2026 •

edited

Loading

socket-security Bot commented Oct 17, 2026 •

edited

Loading

pkg-pr-new Bot commented Oct 17, 2026 •

edited

Loading