@angular/cli 20.3.27 → 20.3.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@angular/cli",
-  "version": "20.3.27",
+  "version": "20.3.28",
   "description": "CLI tool for Angular",
   "main": "lib/cli/index.js",
   "bin": {
@@ -25,13 +25,13 @@
   },
   "homepage": "https://github.com/angular/angular-cli",
   "dependencies": {
-    "@angular-devkit/architect": "0.2003.27",
-    "@angular-devkit/core": "20.3.27",
-    "@angular-devkit/schematics": "20.3.27",
+    "@angular-devkit/architect": "0.2003.28",
+    "@angular-devkit/core": "20.3.28",
+    "@angular-devkit/schematics": "20.3.28",
     "@inquirer/prompts": "7.8.2",
     "@listr2/prompt-adapter-inquirer": "3.0.1",
     "@modelcontextprotocol/sdk": "1.26.0",
-    "@schematics/angular": "20.3.27",
+    "@schematics/angular": "20.3.28",
     "@yarnpkg/lockfile": "1.1.0",
     "algoliasearch": "5.35.0",
     "ini": "5.0.0",
@@ -47,14 +47,14 @@
   "ng-update": {
     "migrations": "@schematics/angular/migrations/migration-collection.json",
     "packageGroup": {
-      "@angular/cli": "20.3.27",
-      "@angular/build": "20.3.27",
-      "@angular/ssr": "20.3.27",
-      "@angular-devkit/architect": "0.2003.27",
-      "@angular-devkit/build-angular": "20.3.27",
-      "@angular-devkit/build-webpack": "0.2003.27",
-      "@angular-devkit/core": "20.3.27",
-      "@angular-devkit/schematics": "20.3.27"
+      "@angular/cli": "20.3.28",
+      "@angular/build": "20.3.28",
+      "@angular/ssr": "20.3.28",
+      "@angular-devkit/architect": "0.2003.28",
+      "@angular-devkit/build-angular": "20.3.28",
+      "@angular-devkit/build-webpack": "0.2003.28",
+      "@angular-devkit/core": "20.3.28",
+      "@angular-devkit/schematics": "20.3.28"
     }
   },
   "packageManager": "pnpm@10.19.0",

package/src/commands/update/cli.js

@@ -495,25 +495,24 @@ class UpdateCommandModule extends command_module_1.CommandModule {
                 case 'version':
                     manifest = metadata.versions[requestIdentifier.fetchSpec];
                     break;
-                case 'range':
-                    for (const potentialManifest of Object.values(metadata.versions)) {
-                        // Ignore deprecated package versions
-                        if (potentialManifest.deprecated) {
-                            continue;
-                        }
-                        // Only consider versions that are within the range
-                        if (!semver.satisfies(potentialManifest.version, requestIdentifier.fetchSpec, {
-                            loose: true,
-                        })) {
-                            continue;
-                        }
-                        // Update the used manifest if current potential is newer than existing or there is not one yet
-                        if (!manifest ||
-                            semver.gt(potentialManifest.version, manifest.version, { loose: true })) {
-                            manifest = potentialManifest;
+                case 'range': {
+                    const potentialManifests = Object.values(metadata.versions).filter((potentialManifest) => semver.satisfies(potentialManifest.version, requestIdentifier.fetchSpec, {
+                        loose: true,
+                    }));
+                    const nonDeprecated = potentialManifests.filter((m) => !m.deprecated);
+                    const deprecated = potentialManifests.filter((m) => !!m.deprecated);
+                    const selectLatest = (manifests) => {
+                        let max;
+                        for (const m of manifests) {
+                            if (!max || semver.gt(m.version, max.version, { loose: true })) {
+                                max = m;
+                            }
                         }
-                    }
+                        return max;
+                    };
+                    manifest = selectLatest(nonDeprecated) ?? selectLatest(deprecated);
                     break;
+                }
             }
             if (!manifest) {
                 logger.error(`Package specified by '${requestIdentifier.raw}' does not exist within the registry.`);

package/src/commands/update/schematic/index.js

@@ -541,7 +541,7 @@ function _addPackageGroup(tree, packages, allDependencies, npmPackageJson, logge
     let packageGroupNormalized = {};
     if (Array.isArray(packageGroup) && !packageGroup.some((x) => typeof x != 'string')) {
         packageGroupNormalized = packageGroup.reduce((acc, curr) => {
-            acc[curr] = maybePackage;
+            acc[curr] = version;
             return acc;
         }, {});
     }

package/src/utilities/package-metadata.js

@@ -143,19 +143,6 @@ function normalizeOptions(rawOptions, location = process.cwd(), existingNormaliz
             substitutedValue = value.replace(/\$\{([^}]+)\}/, (_, name) => process.env[name] || '');
         }
         switch (key) {
-            // Unless auth options are scope with the registry url it appears that npm-registry-fetch ignores them,
-            // even though they are documented.
-            // https://github.com/npm/npm-registry-fetch/blob/8954f61d8d703e5eb7f3d93c9b40488f8b1b62ac/README.md
-            // https://github.com/npm/npm-registry-fetch/blob/8954f61d8d703e5eb7f3d93c9b40488f8b1b62ac/auth.js#L45-L91
-            case '_authToken':
-            case 'token':
-            case 'username':
-            case 'password':
-            case '_auth':
-            case 'auth':
-                options['forceAuth'] ??= {};
-                options['forceAuth'][key] = substitutedValue;
-                break;
             case 'noproxy':
             case 'no-proxy':
                 options['noProxy'] = substitutedValue;

package/src/utilities/version.js

@@ -22,4 +22,4 @@ class Version {
         this.patch = patch;
     }
 }
-exports.VERSION = new Version('20.3.27');
+exports.VERSION = new Version('20.3.28');