chore(deps-dev): bump the npm group across 1 directory with 31 updates

[dependabot]

Bumps the npm group with 28 updates in the / directory:

Package	From	To
@angular-devkit/build-angular	18.2.5	19.0.0
@angular-eslint/builder	18.3.1	18.4.1
@angular-eslint/eslint-plugin	18.3.1	18.4.1
@angular-eslint/eslint-plugin-template	18.3.1	18.4.1
@angular-eslint/schematics	18.3.1	18.4.1
@angular-eslint/template-parser	18.3.1	18.4.1
@angular/animations	18.2.5	19.0.0
@angular/cli	18.2.5	19.0.0
@angular/common	18.2.5	19.0.0
@angular/compiler	18.2.5	19.0.0
@angular/compiler-cli	18.2.5	19.0.0
@angular/core	18.2.5	19.0.0
@angular/forms	18.2.5	19.0.0
@angular/language-service	18.2.5	19.0.0
@angular/platform-browser	18.2.5	19.0.0
@angular/platform-browser-dynamic	18.2.5	19.0.0
@angular/router	18.2.5	19.0.0
@types/chrome	0.0.271	0.0.283
@types/node	22.5.5	22.9.1
@types/nw.js	0.91.0	0.92.0
@typescript-eslint/eslint-plugin	8.6.0	8.15.0
@typescript-eslint/parser	8.6.0	8.15.0
concurrently	9.0.1	9.1.0
eslint	9.10.0	9.15.0
eslint-plugin-jsdoc	50.2.4	50.5.0
jasmine-core	5.3.0	5.4.0
nw	0.91.0	0.93.0
nw-builder	4.10.0	4.12.0

Updates @angular-devkit/build-angular from 18.2.5 to 19.0.0

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v19.0.0

19.0.0 (2024-11-19)

@​angular/cli

Commit	Description
	handle string key/value pairs, e.g. --define
	recommend optional application update migration during v19 update
	enable Node.js compile code cache when available
	enable Node.js compile code cache when available

@​schematics/angular

Commit	Description
	add option to export component as default
	add option to setup new workspace or application as zoneless mode
	integrate withEventReplay() in provideClientHydration for new SSR apps
	update app-shell and ssr schematics to adopt new Server Rendering API
	component spec with export default
	don't show server routing prompt when using browser builder
	enable opt-in for new @angular/ssr feature
	explicitly set standalone:false
	remove declaration and sourceMap from default tsconfig
	use default import for express

@​angular-devkit/schematics-cli

Commit	Description
	add package manager option to blank schematic

@​angular-devkit/architect

Commit	Description
	merge object options from CLI

@​angular-devkit/build-angular

Commit	Description
	karma-coverage w/ app builder
	karma+esbuild+watch
	support karma with esbuild
	bring back style tags in browser builder
	fix --watch regression in karma
	fix hanging terminal when browser-sync is not installed
	handle basename collisions
	handle main field
	remove double-watch in karma
	serve assets
	zone.js/testing + karma + esbuild
	remove deprecated browserTarget
	remove Protractor builder and schematics

@​angular-devkit/core

Commit	Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

19.0.0 (2024-11-19)

Breaking Changes

@​schematics/angular

• The app-shell schematic is no longer compatible with Webpack-based builders.

@​angular-devkit/build-angular

• The browserTarget option has been removed from the DevServer and ExtractI18n builders. buildTarget is to be used instead.

• Protractor is no longer supported.

  Protractor was marked end-of-life in August 2023 (see https://protractortest.org/). Projects still relying on Protractor should consider migrating to another E2E testing framework, several support solid migration paths from Protractor.

  • https://angular.dev/tools/cli/end-to-end
  • https://blog.angular.dev/the-state-of-end-to-end-testing-with-angular-d175f751cb9c

@​angular-devkit/core

• The deprecated fileBuffer function is no longer available. Update your code to use stringToFileBuffer instead to maintain compatibility.

  Note: that this change does not affect application developers.

@​angular/build

• The @angular/localize/init polyfill will no longer be added automatically to projects. To prevent runtime issues, ensure that this polyfill is manually included in the "polyfills" section of your "angular.json" file if your application relies on Angular localization features.

@​angular/ssr

• The CommonEngine API now needs to be imported from @angular/ssr/node.

  Before

  import { CommonEngine } from '@angular/ssr';

  After

  import { CommonEngine } from '@angular/ssr/node';

@​angular-devkit/schematics-cli

Commit	Type	Description
37693c40e	feat	add package manager option to blank schematic

... (truncated)

Commits

• d622e59 release: cut the v19.0.0 release
• 86acfe0 build: update Angular packages to v19 stable
• 805379e release: cut the v19.0.0-rc.3 release
• fb05e7f fix(@​angular/ssr): use wildcard server route configuration on the '/' route w...
• 4b4e000 fix(@​schematics/angular): don't show server routing prompt when using `browse...
• 2551df5 fix(@​angular/build): fully disable component style HMR in JIT mode
• 25d928b fix(@​angular-devkit/build-angular): fix hanging terminal when browser-sync ...
• ea5ae68 fix(@​angular-devkit/build-angular): bring back style tags in browser builder
• 9e6ab1b fix(@​schematics/angular): use default import for express
• 5b009cd refactor: add ngServerMode to Webpack SSR dev server
• Additional commits viewable in compare view

Updates @angular-eslint/builder from 18.3.1 to 18.4.1

Release notes

Sourced from @​angular-eslint/builder's releases.

v18.4.1

18.4.1 (2024-11-18)

🩹 Fixes

• update dependency ignore to v6 (#2047)
• update dependency @​angular/compiler to v18.2.12 (#2090)

v18.4.0

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency aria-query to v5.3.2 (#2053)
• update dependency @​angular/compiler to v18.2.8 (#2049)
• update dependency eslint-scope to v8.1.0 (#2075)
• update typescript-eslint packages to v8.10.0 (#2046)
• update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• eslint-plugin: update list of native events (#1881)
• template-parser: traverse ng-content fallback content (#2031)

❤️ Thank You

• Dementii K @​demkalkov
• James Henry @​JamesHenry
• Matt Lewis @​mattlewis92

Changelog

Sourced from @​angular-eslint/builder's changelog.

18.4.1 (2024-11-18)

This was a version bump only for builder to align it with other projects, there were no code changes.

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency eslint to v9.13.0, support noConfigLookup (#2045)

❤️ Thank You

• James Henry @​JamesHenry

Commits

• 3e05a84 chore(release): publish 18.4.1
• 1796bd7 chore(release): publish 18.4.0
• a769f44 fix: update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• 2130596 feat: support ESM configs and .cjs and .mjs extensions (#2068)
• See full diff in compare view

Updates @angular-eslint/eslint-plugin from 18.3.1 to 18.4.1

Release notes

Sourced from @​angular-eslint/eslint-plugin's releases.

v18.4.1

18.4.1 (2024-11-18)

🩹 Fixes

• update dependency ignore to v6 (#2047)
• update dependency @​angular/compiler to v18.2.12 (#2090)

v18.4.0

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency aria-query to v5.3.2 (#2053)
• update dependency @​angular/compiler to v18.2.8 (#2049)
• update dependency eslint-scope to v8.1.0 (#2075)
• update typescript-eslint packages to v8.10.0 (#2046)
• update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• eslint-plugin: update list of native events (#1881)
• template-parser: traverse ng-content fallback content (#2031)

❤️ Thank You

• Dementii K @​demkalkov
• James Henry @​JamesHenry
• Matt Lewis @​mattlewis92

Changelog

Sourced from @​angular-eslint/eslint-plugin's changelog.

18.4.1 (2024-11-18)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

18.4.0 (2024-10-21)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

Commits

• 3e05a84 chore(release): publish 18.4.1
• 1796bd7 chore(release): publish 18.4.0
• See full diff in compare view

Updates @angular-eslint/eslint-plugin-template from 18.3.1 to 18.4.1

Release notes

Sourced from @​angular-eslint/eslint-plugin-template's releases.

v18.4.1

18.4.1 (2024-11-18)

🩹 Fixes

• update dependency ignore to v6 (#2047)
• update dependency @​angular/compiler to v18.2.12 (#2090)

v18.4.0

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency aria-query to v5.3.2 (#2053)
• update dependency @​angular/compiler to v18.2.8 (#2049)
• update dependency eslint-scope to v8.1.0 (#2075)
• update typescript-eslint packages to v8.10.0 (#2046)
• update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• eslint-plugin: update list of native events (#1881)
• template-parser: traverse ng-content fallback content (#2031)

❤️ Thank You

• Dementii K @​demkalkov
• James Henry @​JamesHenry
• Matt Lewis @​mattlewis92

Changelog

Sourced from @​angular-eslint/eslint-plugin-template's changelog.

18.4.1 (2024-11-18)

This was a version bump only for eslint-plugin-template to align it with other projects, there were no code changes.

18.4.0 (2024-10-21)

🩹 Fixes

• update typescript-eslint packages to v8.10.0 (#2046)
• update dependency aria-query to v5.3.2 (#2053)
• update dependency aria-query to v5.3.1 (#2043)

Commits

• 3e05a84 chore(release): publish 18.4.1
• 1796bd7 chore(release): publish 18.4.0
• fc3a77b fix: update typescript-eslint packages to v8.10.0 (#2046)
• d0cf3c6 fix: update dependency aria-query to v5.3.2 (#2053)
• f0667ec fix: update dependency aria-query to v5.3.1 (#2043)
• See full diff in compare view

Updates @angular-eslint/schematics from 18.3.1 to 18.4.1

Release notes

Sourced from @​angular-eslint/schematics's releases.

v18.4.1

18.4.1 (2024-11-18)

🩹 Fixes

• update dependency ignore to v6 (#2047)
• update dependency @​angular/compiler to v18.2.12 (#2090)

v18.4.0

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency aria-query to v5.3.2 (#2053)
• update dependency @​angular/compiler to v18.2.8 (#2049)
• update dependency eslint-scope to v8.1.0 (#2075)
• update typescript-eslint packages to v8.10.0 (#2046)
• update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• eslint-plugin: update list of native events (#1881)
• template-parser: traverse ng-content fallback content (#2031)

❤️ Thank You

• Dementii K @​demkalkov
• James Henry @​JamesHenry
• Matt Lewis @​mattlewis92

Changelog

Sourced from @​angular-eslint/schematics's changelog.

18.4.1 (2024-11-18)

🩹 Fixes

• update dependency ignore to v6 (#2047)

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• update typescript-eslint packages to v8.10.0 (#2046)
• update typescript-eslint packages to v8.5.0 (#2020)

❤️ Thank You

• James Henry @​JamesHenry

Commits

• 3e05a84 chore(release): publish 18.4.1
• a55aab3 fix: update dependency ignore to v6 (#2047)
• 8c289b7 chore: update/trim repo deps (#2099)
• 1796bd7 chore(release): publish 18.4.0
• a769f44 fix: update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• fc3a77b fix: update typescript-eslint packages to v8.10.0 (#2046)
• 2130596 feat: support ESM configs and .cjs and .mjs extensions (#2068)
• 1f115ed fix: update typescript-eslint packages to v8.5.0 (#2020)
• See full diff in compare view

Updates @angular-eslint/template-parser from 18.3.1 to 18.4.1

Release notes

Sourced from @​angular-eslint/template-parser's releases.

v18.4.1

18.4.1 (2024-11-18)

🩹 Fixes

• update dependency ignore to v6 (#2047)
• update dependency @​angular/compiler to v18.2.12 (#2090)

v18.4.0

18.4.0 (2024-10-21)

🚀 Features

• support ESM configs and .cjs and .mjs extensions (#2068)

🩹 Fixes

• update dependency aria-query to v5.3.2 (#2053)
• update dependency @​angular/compiler to v18.2.8 (#2049)
• update dependency eslint-scope to v8.1.0 (#2075)
• update typescript-eslint packages to v8.10.0 (#2046)
• update dependency eslint to v9.13.0, support noConfigLookup (#2045)
• eslint-plugin: update list of native events (#1881)
• template-parser: traverse ng-content fallback content (#2031)

❤️ Thank You

• Dementii K @​demkalkov
• James Henry @​JamesHenry
• Matt Lewis @​mattlewis92

Changelog

Sourced from @​angular-eslint/template-parser's changelog.

18.4.1 (2024-11-18)

This was a version bump only for template-parser to align it with other projects, there were no code changes.

18.4.0 (2024-10-21)

🩹 Fixes

• template-parser: traverse ng-content fallback content (#2031)

❤️ Thank You

• Matt Lewis @​mattlewis92

Commits

• 3e05a84 chore(release): publish 18.4.1
• 1796bd7 chore(release): publish 18.4.0
• 159658f fix(template-parser): traverse ng-content fallback content (#2031)
• See full diff in compare view

Updates @angular/animations from 18.2.5 to 19.0.0

Release notes

Sourced from @​angular/animations's releases.

v19.0.0

19.0.0 (2024-11-19)

Explore Angular v19 with a blog post from the Angular team: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

• this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

• Angular directives, components and pipes are now standalone by default.

  • Specify standalone: false for declarations that are currently declared in @NgModules.
  • ng update for v19 will take care of this automatically.

• TypeScript versions less than 5.5 are no longer supported.

• Timing changes for effect API (in developer preview):

  • effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the specifics of application/test setup, this can result in them executing earlier or later (or requiring additional test steps to trigger; see below examples).

  • effects which are triggered during change detection (e.g. by input signals) run earlier, before the component's template.

• ExperimentalPendingTasks has been renamed to PendingTasks.

• The autoDetect feature of ComponentFixture will now attach the fixture to the ApplicationRef. As a result, errors during automatic change detection of the fixture be reported to the ErrorHandler. This change may cause custom error handlers to observe new failures that were previously unreported.

• createComponent will now render default fallback with empty projectableNodes.

  • When passing an empty array to projectableNodes in the createComponent API, the default fallback content of the ng-content will be rendered if present. To prevent rendering the default content, pass document.createTextNode('') as a projectableNode.

  // The first ng-content will render the default fallback content if present
  createComponent(MyComponent. { projectableNodes: [[], [secondNode]] });
  // To prevent projecting the default fallback content:
  createComponent(MyComponent. { projectableNodes: [[document.createTextNode('')], [secondNode]] });

• Errors that are thrown during ApplicationRef.tick will now be rethrown when using TestBed. These errors should be resolved by ensuring the test environment is set up correctly to complete change detection successfully. There are two alternatives to catch the errors:

  • Instead of waiting for automatic change detection to happen, trigger

... (truncated)

Changelog

Sourced from @​angular/animations's changelog.

19.0.0 (2024-11-19)

Blog post: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

• this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

• Angular directives, components and pipes are now standalone by default.

  • Specify standalone: false for declarations that are currently declared in @NgModules.
  • ng update for v19 will take care of this automatically.

• TypeScript versions less than 5.5 are no longer supported.

• Timing changes for effect API (in developer preview):

  • effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the specifics of application/test setup, this can result in them executing earlier or later (or requiring additional test steps to trigger; see below examples).

  • effects which are triggered during change detection (e.g. by input signals) run earlier, before the component's template.

• ExperimentalPendingTasks has been renamed to PendingTasks.

• The autoDetect feature of ComponentFixture will now attach the fixture to the ApplicationRef. As a result, errors during automatic change detection of the fixture be reported to the ErrorHandler. This change may cause custom error handlers to observe new failures that were previously unreported.

• createComponent will now render default fallback with empty projectableNodes.

  • When passing an empty array to projectableNodes in the createComponent API, the default fallback content of the ng-content will be rendered if present. To prevent rendering the default content, pass document.createTextNode('') as a projectableNode.

  // The first ng-content will render the default fallback content if present
  createComponent(MyComponent. { projectableNodes: [[], [secondNode]] });
  // To prevent projecting the default fallback content:
  createComponent(MyComponent. { projectableNodes: [[document.createTextNode('')], [secondNode]] });

• Errors that are thrown during ApplicationRef.tick will now be rethrown when using TestBed. These errors should be resolved by ensuring the test environment is set up correctly to complete change detection successfully. There are two alternatives to catch the errors:

  • Instead of waiting for automatic change detection to happen, trigger it synchronously and expect the error. For example, a jasmine test could write expect(() => TestBed.inject(ApplicationRef).tick()).toThrow()

... (truncated)

Commits

• 09df589 refactor(core): Migrate all packages with the explicit-standalone-flag sche...
• 84b6896 refactor(platform-server): Add an ssr benchmark setup. (#57647)
• 9dbe6fc refactor: update license text to point to angular.dev (#57901)
• See full diff in compare view

Updates @angular/cli from 18.2.5 to 19.0.0

Release notes

Sourced from @​angular/cli's releases.

v19.0.0

19.0.0 (2024-11-19)

@​angular/cli

Commit	Description
	handle string key/value pairs, e.g. --define
	recommend optional application update migration during v19 update
	enable Node.js compile code cache when available
	enable Node.js compile code cache when available

@​schematics/angular

Commit	Description
	add option to export component as default
	add option to setup new workspace or application as zoneless mode
	integrate withEventReplay() in provideClientHydration for new SSR apps
	update app-shell and ssr schematics to adopt new Server Rendering API
	component spec with export default
	don't show server routing prompt when using browser builder
	enable opt-in for new @angular/ssr feature
	explicitly set standalone:false
	remove declaration and sourceMap from default tsconfig
	use default import for express

@​angular-devkit/schematics-cli

Commit	Description
	add package manager option to blank schematic

@​angular-devkit/architect

Commit	Description
	merge object options from CLI

@​angular-devkit/build-angular

Commit	Description
	karma-coverage w/ app builder
	karma+esbuild+watch
	support karma with esbuild
	bring back style tags in browser builder
	fix --watch regression in karma
	fix hanging terminal when browser-sync is not installed
	handle basename collisions
	handle main field
	remove double-watch in karma
	serve assets
	zone.js/testing + karma + esbuild
	remove deprecated browserTarget
	remove Protractor builder and schematics

@​angular-devkit/core

Commit	Description

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

19.0.0 (2024-11-19)

Breaking Changes

@​schematics/angular

• The app-shell schematic is no longer compatible with Webpack-based builders.

@​angular-devkit/build-angular

• The browserTarget option has been removed from the DevServer and ExtractI18n builders. buildTarget is to be used instead.

• Protractor is no longer supported.

  Protractor was marked end-of-life in August 2023 (see https://protractortest.org/). Projects still relying on Protractor should consider migrating to another E2E testing framework, several support solid migration paths from Protractor.

  • https://angular.dev/tools/cli/end-to-end
  • https://blog.angular.dev/the-state-of-end-to-end-testing-with-angular-d175f751cb9c

@​angular-devkit/core

• The deprecated fileBuffer function is no longer available. Update your code to use stringToFileBuffer instead to maintain compatibility.

  Note: that this change does not affect application developers.

@​angular/build

• The @angular/localize/init polyfill will no longer be added automatically to projects. To prevent runtime issues, ensure that this polyfill is manually included in the "polyfills" section of your "angular.json" file if your application relies on Angular localization features.

@​angular/ssr

• The CommonEngine API now needs to be imported from @angular/ssr/node.

  Before

  import { CommonEngine } from '@angular/ssr';

  After

  import { CommonEngine } from '@angular/ssr/node';

@​angular-devkit/schematics-cli

Commit	Type	Description
37693c40e	feat	add package manager option to blank schematic

... (truncated)

Commits

• d622e59 release: cut the v19.0.0 release
• 86acfe0 build: update Angular packages to v19 stable
• 805379e release: cut the v19.0.0-rc.3 release
• fb05e7f fix(@​angular/ssr): use wildcard server route configuration on the '/' route w...
• 4b4e000 fix(@​schematics/angular): don't show server routing prompt when using `browse...
• 2551df5 fix(@​angular/build): fully disable component style HMR in JIT mode
• 25d928b fix(@​angular-devkit/build-angular): fix hanging terminal when browser-sync ...
• ea5ae68 fix(@​angular-devkit/build-angular): bring back style tags in browser builder
• 9e6ab1b fix(@​schematics/angular): use default import for express
• 5b009cd refactor: add ngServerMode to Webpack SSR dev server
• Additional commits viewable in compare view

Updates @angular/common from 18.2.5 to 19.0.0

Release notes

Sourced from @​angular/common's releases.

v19.0.0

19.0.0 (2024-11-19)

Explore Angular v19 with a blog post from the Angular team: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

• this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

• Angular directives, components and pipes are now standalone by default.

  • Specify standalone: false for declarations that are currently declared in @NgModules.
  • ng update for v19 will take care of this automatically.

• TypeScript versions less than 5.5 are no longer supported.

• Timing changes for effect API (in developer preview):

  • effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the specifics of application/test setup, this can result in them executing earlier or later (or requiring additional test steps to trigger; see below examples).

  • effects which are triggered during change detection (e.g. by input signals) run earlier, before the component's template.

• ExperimentalPendingTasks has been renamed to PendingTasks.

• The autoDetect feature of ComponentFixture will now attach the fixture to the ApplicationRef. As a result, errors during automatic change detection of the fixture be reported to the ErrorHandler. This change may cause custom error handlers to observe new failures that were previously unreported.

• createComponent will now render default fallback with empty projectableNodes.

  • When passing an empty array to projectableNodes in the createComponent API, the default fallback content of the ng-content will be rendered if present. To prevent rendering the default content, pass document.createTextNode('') as a projectableNode.

  // The first ng-content will render the default fallback content if present
  createComponent(MyComponent. { projectableNodes: [[], [secondNode]] });
  // To prevent projecting the default fallback content:
  createComponent(MyComponent. { projectableNodes: [[document.createTextNode('')], [secondNode]] });

• Errors that are thrown during ApplicationRef.tick will now be rethrown when using TestBed. These errors should be resolved by ensuring the test environment is set up correctly to complete change detection successfully. There are two alternatives to catch the errors:

  • Instead of waiting for automatic change detection to happen, trigger

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

19.0.0 (2024-11-19)

Blog post: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

• this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

• Angular directives, components and pipes are now standalone by default.

  • Specify ...

    Description has been truncated

[ayushmanchhabra]

@dependabot close

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml