fix(deps): update all dependencies

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@angular/build	^21.2.9 → ^22.0.0			devDependencies	major
@angular/cli	^21.2.9 → ^22.0.0			devDependencies	major
@angular/common (source)	^21.2.0 → ^22.0.0			dependencies	major
@angular/compiler (source)	^21.2.0 → ^22.0.0			dependencies	major
@angular/compiler-cli (source)	^21.2.0 → ^22.0.0			devDependencies	major
@angular/core (source)	^21.2.0 → ^22.0.0			dependencies	major
@angular/forms (source)	^21.2.0 → ^22.0.0			dependencies	major
@angular/platform-browser (source)	^21.2.0 → ^22.0.0			dependencies	major
@angular/router (source)	^21.2.0 → ^22.0.0			dependencies	major
@babel/preset-env (source)	^7.24.7 → ^8.0.0			devDependencies	major
SQLAlchemy (changelog)	==2.0.49 → ==2.0.51				patch
actions/checkout	v6 → v7			action	major
aiohappyeyeballs (changelog)	==2.6.1 → ==2.6.2				patch
aiohttp	==3.13.5 → ==3.14.1				minor
apache-beam	==2.71.0 → ==2.74.0				minor
bigframes (source, changelog)	==2.39.0 → ==2.43.0				minor
cachetools (changelog)	==7.1.1 → ==7.1.4				patch
certifi	==2026.4.22 → ==2026.6.17				minor
click (changelog)	==8.3.3 → ==8.4.1				minor
cryptography (changelog)	==48.0.0 → ==49.0.0				major
db-dtypes (source)	==1.6.0 → ==1.7.0				minor
distlib	==0.4.0 → ==0.4.3				patch
dorny/paths-filter	v3 → v4			action	major
esbuild	^0.20.0 → ^0.28.0			devDependencies	minor
filelock	==3.29.0 → ==3.29.4				patch
google-api-core	==2.30.3 → ==2.31.0				minor
google-auth (source)	==2.50.0 → ==2.55.0				minor
google-auth (source)	==2.52.0 → ==2.55.0				minor
google-cloud-bigquery	==3.41.0 → ==3.42.0				minor
google-cloud-bigquery-storage (source)	==2.38.0 → ==2.39.0				minor
google-cloud-bigtable (source)	==2.35.0 → ==2.38.0				minor
google-cloud-core (source)	==2.5.1 → ==2.6.0				minor
google-cloud-core (source)	==2.5.0 → ==2.6.0				minor
google-cloud-monitoring (source)	==2.29.0 → ==2.31.0				minor
google-cloud-spanner (source)	==3.65.0 → ==3.68.0				minor
google-cloud-spanner (source)	==3.66.0 → ==3.68.0				minor
google-cloud-testutils (source)	==1.8.0 → ==1.9.0				minor
google-cloud-testutils (source)	==1.7.0 → ==1.9.0				minor
googleapis-common-protos (source)	==1.74.0 → ==1.75.0				minor
greenlet (changelog)	==3.5.0 → ==3.5.2				patch
grpcio	==1.80.0 → ==1.81.1				minor
grpcio-status	==1.80.0 → ==1.81.1				minor
idna (changelog)	==3.15 → ==3.18				minor
ipython	==9.13.0 → ==9.14.1				minor
jsdom	^28.0.0 → ^29.0.0			devDependencies	major
npm (source)	11.7.0 → 11.17.0			packageManager	minor
opentelemetry-api	==1.41.1 → ==1.42.1				minor
opentelemetry-sdk	==1.41.1 → ==1.42.1				minor
pandas	==2.3.3 → ==3.0.3				major
pip (changelog)	==26.1.1 → ==26.1.2				patch
platformdirs (changelog)	==4.9.6 → ==4.10.0				minor
polars (changelog)	==1.40.1 → ==1.41.2				minor
prettier (source)	3.8.3 → 3.8.4			devDependencies	patch
proto-plus	==1.27.2 → ==1.28.0				minor
protobuf	==7.34.1 → ==7.35.1				minor
pytest (changelog)	==9.0.3 → ==9.1.0				minor
pytest-asyncio (changelog)	==1.3.0 → ==1.4.0				minor
python	3.10 → 3.14			uses-with	minor
python	3.12 → 3.14			uses-with	minor
requests (changelog)	==2.33.1 → ==2.34.2				minor
ruff (source, changelog)	==0.15.12 → ==0.15.17				patch
rules_cc	0.1.1 → 0.2.19			http_archive	minor
tqdm (changelog)	==4.67.3 → ==4.68.3				minor
typescript (source)	~5.9.2 → ~6.0.0			devDependencies	major
virtualenv	==21.3.1 → ==21.5.1				minor
vitest (source)	4.1.5 → 4.1.9			devDependencies	patch
wrapt (changelog)	==2.1.2 → ==2.2.1				minor
yarl	==1.23.0 → ==1.24.2				minor
zipp	==3.23.1 → ==4.1.0				major

---

Release Notes

angular/angular-cli (@​angular/build)

v22.0.3

Compare Source

v22.0.2

Compare Source

@​angular/cli

Commit	Type	Description
136fc2714	fix	support registry metadata fetching under bun package manager
2653dd5c7	perf	implement semaphore backpressure throttling in PackageManager

@​angular/build

Commit	Type	Description
0b4a48add	perf	implement semaphore backpressure throttling in JavaScriptTransformer

@​angular/ssr

Commit	Type	Description
d996a27e9	fix	avoid caching non-SSG page lookups
285a34e42	fix	correct grammar in console warning for redirected location headers
c8088a536	fix	prioritize options over environment variables in AngularNodeAppEngine

v22.0.1

Compare Source

@​angular/cli

Commit	Type	Description
b54e9a549	fix	do not sort migrations of the same version alphabetically
d33311612	fix	fallback to local package.json for schematic detection on first run
918102a93	fix	isolate temporary package installation from parent pnpm workspace
b048b5f4a	fix	remove forceAuth and unscoped credential parsing
277934035	fix	validate registry option is a valid URL in ng add
4510dae02	perf	optimize update schematic registry query counts by fetching package metadata lazily

@​schematics/angular

Commit	Type	Description
c80012294	fix	fix browserMode option mapping in refactor-jasmine-vitest
a9b6bd904	fix	safely comment out multiline statements in refactor-jasmine-vitest
12199df00	fix	use null objects and callbacks in karma-to-vitest migration

@​angular/build

Commit	Type	Description
89d1be979	fix	allow disabling Vitest isolation from builder
d45b84be9	fix	exclude JSON imports from Vite dependency optimization
e3cab4ddd	fix	prevent concurrent stylesheet bundling esbuild context leaks
bd413b0eb	fix	restrict application builder output paths to output directory

v22.0.0

Compare Source

Breaking Changes

• Node.js v20 is no longer supported. The minimum supported Node.js versions are now v22.22.0 and v24.13.1.
• The @angular-devkit/architect-cli package is no longer available. The architect CLI tool has been moved to the @angular-devkit/architect package.
• The experimental @angular-devkit/build-angular:jest and @angular-devkit/build-angular:web-test-runner builders have been removed.

@​angular/build

• The @angular/build:dev-server (ng serve) now assigns the highest priority to the PORT environment variable. This value will override any port configurations specified in angular.json or via the --port command-line flag. This includes the default port 4200.
• istanbul-lib-instrument is now an optional peer dependency.
  Projects using karma with code coverage enabled will need to ensure that istanbul-lib-instrument is installed. Note: ng update will automatically add this dependency during the update process.

@​angular/ssr

• The server no longer falls back to Client-Side Rendering (CSR) when a request fails host validation. Requests with unrecognized 'Host' headers will now return a 400 Bad Request status code. Users must ensure all valid hosts are correctly configured in the 'allowedHosts' option.

Deprecations

@​angular-devkit/build-angular

• Webpack builders in build-angular are deprecated. Use @​angular/build builders instead.

@​angular-devkit/build-webpack

• Webpack builders in build-webpack are deprecated. Use @​angular/build builders instead.

@​angular/ssr

• CommonEngine APIs are deprecated in favor of AngularNodeAppEngine or AngularAppEngine.

@​ngtools/webpack

• @​ngtools/webpack loader and plugin are deprecated. Use @​angular/build instead.

@​angular/cli

Commit	Type	Description
58c0978f6	feat	add support for Node.js 26.0.0
a5c7c0b5f	fix	reflect new minimum supported Node version in ng.js
a5e1e48db	fix	update odd-numbered Node.js version warning condition for future releases
93c3eb8fb	fix	update zoneless migration tool to handle ChangeDetectionStrategy.Eager
a39a33128	perf	cache root manifest and resolve restricted package exports in ng add

@​schematics/angular

Commit	Type	Description
be60a63b7	feat	add migrate-karma-to-vitest update migration
43505066e	feat	add migration to add istanbul-lib-instrument
b2f7a038b	feat	conditionally install istanbul coverage provider for Vitest migration
d227e6985	feat	migrate fake async to Vitest fake timers
d2aa9ede5	feat	migrate fakeAsync's flush behavior when used in beforeEach
f98cc82eb	feat	rely on strict template default in generated workspaces
c9f408153	feat	set up fake timers in beforeEach instead of beforeAll
de630c2fc	feat	stabilize refactor-jasmine-vitest schematic
8d0805dd1	feat	update TSConfig globals during karma to vitest migration
470e1f937	fix	add istanbul-lib-instrument to application/library generator dependencies
dc1238e5a	fix	add trusted-proxy-headers migration
6572a6944	fix	default components to OnPush change detection
aed407db8	fix	defer karma config deletion in Karma to Vitest migration
4fbc60891	fix	preserve Jasmine stub-by-default semantics for bare spies
b3d838dfd	fix	replace deprecated ChangeDetectionStrategy.Default with Eager
a7ac8e5f0	fix	support spy call arguments migration in refactor-jasmine-vitest
7fb59eaa6	fix	use service decorator in ng generate

Commit	Type	Description
d0e9e8163	build	update minimum supported Node.js versions
1f21e89d9	refactor	remove @angular-devkit/architect-cli package
b4885b851	refactor	remove experimental Jest and Web Test Runner builders

@​angular-devkit/build-angular

Commit	Type	Description
b7940dbcb	refactor	deprecate Webpack builders

@​angular-devkit/build-webpack

Commit	Type	Description
3d5daa45e	refactor	deprecate webpack and webpack-dev-server builders

@​angular/build

Commit	Type	Description
e9aa7967b	feat	add isolate option to unit-test builder
fe720cab6	feat	add process.env.PORT support to the dev server
0781f7498	feat	add quiet option to suppress build noise in unit tests
cd2ad3c19	feat	enable chunk optimization by default with heuristics
3007f46b7	feat	move istanbul-lib-instrument to optional peer dependency
af2c7e944	feat	rename experimentalPlatform to platform in application builder
58c7c7a9d	feat	subresource integrity validation for dynamically loaded modules
73233dc5f	feat	support Istanbul coverage in Vitest runner
414320d02	feat	support runtime Zone.js detection in Vitest unit test runner
b85ec6798	fix	allow configuring Access-Control-Allow-Origin via headers option
edfa782d5	fix	use dynamic TestComponentRenderer for Vitest

@​angular/ssr

Commit	Type	Description
5adc92541	fix	enforce explicit opt-in for proxy headers
f85343925	fix	support all X-Forwarded-* headers when trustProxyHeaders is true
8471ba634	fix	support server-side rendering configuration options
50b16a65b	refactor	deprecate CommonEngine APIs
27cd35561	refactor	remove CSR fallback for invalid hosts

@​ngtools/webpack

Commit	Type	Description
547ca515b	refactor	deprecate @​ngtools/webpack loader and plugin

v21.2.16

Compare Source

@​angular/cli

Commit	Type	Description
77c9047ac	fix	update pacote to 21.5.1

@​angular/ssr

Commit	Type	Description
d052e97da	fix	prioritize options over environment variables in AngularNodeAppEngine

v21.2.15

Compare Source

@​angular/cli

Commit	Type	Description
42ac0ed0f	fix	remove forceAuth and unscoped credential parsing
c7a7f1955	fix	support registry metadata fetching under bun package manager

v21.2.14

Compare Source

@​angular/cli

Commit	Type	Description
aed448748	fix	expand package groups for newly added peer dependencies in update schematic

@​angular/build

Commit	Type	Description
d46c082fb	fix	prevent esbuild service child process leakage

v21.2.13

Compare Source

@​angular-devkit/build-angular

Commit	Type	Description
3c6d26a31	fix	remove unconditional CORS wildcard from webpack dev-server

@​angular/build

Commit	Type	Description
2b3e95517	fix	assert that asset input paths are within workspace root

v21.2.12

Compare Source

@​angular/build

Commit	Type	Description
cbad57579	fix	ignore virtual esbuild paths with (disabled):

v21.2.11

Compare Source

@​angular/cli

Commit	Type	Description
bbd63b7a5	fix	robustly parse npm manifest from array

@​angular/ssr

Commit	Type	Description
eafe1a719	fix	allow all hosts in common engine rendering options to prevent validation errors
7a116a80d	fix	remove stateful flag from URL_PARAMETER_REGEXP

v21.2.10

Compare Source

@​angular/cli

Commit	Type	Description
bb8611913	fix	restrict MCP workspace access to allowed client roots during resolution

angular/angular (@​angular/common)

v22.0.2

Compare Source

common

Commit	Type	Description

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Code Review

This pull request updates several dependencies across multiple packages, including bigframes, rules_cc, google-auth, requests, and pandas. A compatibility issue was identified in the BigQuery Storage sample requirements, where the version marker for pandas 3.0.3 needs to be updated to Python 3.10 or higher to prevent installation failures on Python 3.9.

[gemini-code-assist]

Pandas 3.0.0 and later versions require Python 3.10 or higher. The current environment marker python_version >= '3.9' will cause installation failures on Python 3.9. Since other dependencies updated in this pull request (such as google-cloud-core v2.6.0) are also dropping support for Python 3.9, this marker should be updated to reflect the new minimum requirement.

pandas==3.0.3; python_version >= '3.10'

[forking-renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: packages/bigframes/tests/js/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: js-tests@1.0.0
npm error Found: @babel/core@7.28.5
npm error node_modules/@babel/core
npm error   peer @babel/core@"^7.0.0" from @babel/helper-create-class-features-plugin@7.28.6
npm error   node_modules/@babel/helper-create-class-features-plugin
npm error     @babel/helper-create-class-features-plugin@"^7.28.6" from @babel/plugin-transform-class-properties@7.28.6
npm error     node_modules/@babel/plugin-transform-class-properties
npm error     @babel/helper-create-class-features-plugin@"^7.28.6" from @babel/plugin-transform-class-static-block@7.28.6
npm error     node_modules/@babel/plugin-transform-class-static-block
npm error     2 more (@babel/plugin-transform-private-methods, @babel/plugin-transform-private-property-in-object)
npm error   peer @babel/core@"^7.0.0" from @babel/helper-create-regexp-features-plugin@7.28.5
npm error   node_modules/@babel/helper-create-regexp-features-plugin
npm error     @babel/helper-create-regexp-features-plugin@"^7.18.6" from @babel/plugin-syntax-unicode-sets-regex@7.18.6
npm error     node_modules/@babel/plugin-syntax-unicode-sets-regex
npm error     @babel/helper-create-regexp-features-plugin@"^7.28.5" from @babel/plugin-transform-dotall-regex@7.28.6
npm error     node_modules/@babel/plugin-transform-dotall-regex
npm error     6 more (...)
npm error   92 more (@babel/helper-define-polyfill-provider, ...)
npm error
npm error Could not resolve dependency:
npm error dev @babel/preset-env@"^8.0.0" from the root project
npm error
npm error Conflicting peer dependency: @babel/core@8.0.1
npm error node_modules/@babel/core
npm error   peer @babel/core@"^8.0.0" from @babel/preset-env@8.0.2
npm error   node_modules/@babel/preset-env
npm error     dev @babel/preset-env@"^8.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-06-18T15_09_55_802Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-06-18T15_09_55_802Z-debug-0.log