chore(deps): bump the npm_and_yarn group across 9 directories with 18…

[preechapon250]

… updates

---

updated-dependencies:

• dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 2.0.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 11.1.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: tmp dependency-version: dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: form-data dependency-version: 2.5.5 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: axios dependency-version: 1.13.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 2.0.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: tmp dependency-version: dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: form-data dependency-version: 2.5.5 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: axios dependency-version: 1.13.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 2.0.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 11.1.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: form-data dependency-version: 2.5.5 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: axios dependency-version: 1.13.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 11.1.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.25.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: form-data dependency-version: 2.5.5 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@modelcontextprotocol/sdk" dependency-version: 1.25.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 2.0.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: tmp dependency-version: dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: form-data dependency-version: 2.5.5 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: axios dependency-version: 1.13.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 2.0.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.26.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@angular/common" dependency-version: 21.0.6 dependency-type: direct:production dependency-group: npm_and_yarn
• dependency-name: "@angular/compiler" dependency-version: 21.0.6 dependency-type: direct:production dependency-group: npm_and_yarn
• dependency-name: prismjs dependency-version: 1.30.0 dependency-type: direct:production dependency-group: npm_and_yarn
• dependency-name: http-proxy-middleware dependency-version: 2.0.9 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: on-headers dependency-version: 1.1.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: vite dependency-version: 7.2.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: webpack-dev-server dependency-version: 5.2.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: brace-expansion dependency-version: 2.0.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: tmp dependency-version: dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: "@trpc/server" dependency-version: 10.45.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: form-data dependency-version: 2.5.5 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: axios dependency-version: 1.13.2 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 4.0.1 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: jws dependency-version: 3.2.3 dependency-type: indirect dependency-group: npm_and_yarn
• dependency-name: node-forge dependency-version: 1.3.3 dependency-type: indirect dependency-group: npm_and_yarn ...

Description here... Help the reviewer by:

• linking to an issue that includes more details
• if it's a new feature include samples of how to use the new feature
• (optional if issue link is provided) if you fixed a bug include basic bug details

Checklist (if applicable):

• PR title is following https://www.conventionalcommits.org/en/v1.0.0/
• Tested (manually, unit tested, etc.)
• Docs updated (updated docs or a docs bug required)

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[gemini-code-assist]

Summary of Changes

Hello @preechapon250, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs a comprehensive update of various npm and yarn dependencies across several sample applications. The primary goal is to bring development tools and framework components up to their latest stable versions, ensuring compatibility, security, and access to new features. This includes significant updates to Genkit CLI, Angular, and numerous underlying transitive dependencies, along with adjustments to dependency metadata in lock files.

Highlights

• Core Tooling Updates: The genkit-cli dependency has been significantly updated across multiple sample projects (js-character-generator, js-chatbot, js-menu, js-schoolAgent) from versions like ^1.0.4 or 1.0.0-rc.17 to ^1.27.0. The tsx development dependency has also been updated from ^4.19.x to ^4.21.0 in several places.
• Angular Framework Upgrade: The js-chatbot/genkit-app sample project received a major upgrade for its Angular dependencies, with @angular/common, @angular/compiler, @angular/forms, @angular/platform-browser, @angular/platform-browser-dynamic, and @angular/router all moving from ^18.0.0 to ^21.0.6. Related Angular development tools like @angular-devkit/build-angular and @angular/compiler-cli were also updated.
• Transitive Dependency Bumps: Numerous indirect dependencies have been updated, including esbuild and its platform-specific binaries (from 0.23.1 to 0.27.2), glob (from 10.4.5 to 10.5.0), js-yaml (from 4.1.0 to 4.1.1), @trpc/server (from 10.45.2 to 10.45.3), form-data, jws, jwa, and node-forge.
• Dependency Metadata Adjustments: Several peer: true flags were added to @opentelemetry/* packages, acorn, express, genkit, winston, and zod entries in lock files. Conversely, peer: true was removed from uuid, async-retry, p-limit, retry, strnum, mime, and yocto-queue. License information was also added or updated for some packages like buffer-equal-constant-time and node-forge.
• New Dependencies and Removals: The @modelcontextprotocol/sdk update (from 1.20.0 or 1.21.0 to 1.25.1) introduced new dependencies such as @hono/node-server, jose, and json-schema-typed. Additionally, punycode and uri-js were removed from one package-lock.json.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request is an automated dependency update. I've found a critical issue with the Angular dependency updates in samples/js-chatbot/genkit-app/package.json, where versions are bumped to a non-existent major version 21. This will break the build. Additionally, the pnpm-lock.yaml for the tests directory indicates that fluent-ffmpeg and puppeteer are now deprecated, which should be addressed to avoid future issues. The other dependency bumps seem acceptable.

[gemini-code-assist]

The versions for several Angular packages, ngx-markdown, and Angular devkit packages are being bumped to 21.x.x. This appears to be an error, as the latest stable version of Angular is v18. This major version jump to a non-existent version will likely break the application due to version mismatches with other Angular packages like @angular/core which remains at ^18.0.0. Please revert to a compatible version, such as ^18.x.x.

[gemini-code-assist]

The dependency fluent-ffmpeg@2.1.3 is now marked as deprecated and is no longer supported. It is recommended to migrate to a supported alternative to avoid potential security vulnerabilities and ensure long-term maintainability.

[gemini-code-assist]

The dependency puppeteer@22.12.0 is deprecated, and versions below 24.15.0 are no longer supported. Please update to a more recent version to ensure you receive security updates and bug fixes.