Skip to content
This repository has been archived by the owner on Sep 20, 2023. It is now read-only.

chore(deps): update dependency ng-packagr to v10 [security] #131

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 19, 2022

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
ng-packagr 5.7.1 -> 10.1.1 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.


Release Notes

ng-packagr/ng-packagr (ng-packagr)

v10.1.1

Compare Source

v10.1.0

Compare Source

v10.0.4

Compare Source

v10.0.3

Compare Source

v10.0.2

Compare Source

v10.0.1

Compare Source

v10.0.0

Compare Source

v9.1.5

Compare Source

Bug Fixes
  • remove tslib from peerDependencies when adding it to dependencies (593f861)

v9.1.4

Compare Source

Bug Fixes
  • auto add tslib as direct dependency (298fbc4)
9.1.3 (2020-05-06)

v9.1.3

Compare Source

Bug Fixes
  • update browserslist and autoprefixer (8293497), closes #​1611
  • update rollup-plugin-sourcemaps to version ^0.6.0 (f8c3459)

v9.1.2

Compare Source

v9.1.1

Compare Source

v9.1.0

Compare Source

v9.0.3

Compare Source

v9.0.2

Compare Source

v9.0.1

Compare Source

v9.0.0

Compare Source

⚠ BREAKING CHANGES
  • Remove usage of deprecated less-plugin-npm-import. In less v3 is supports node_modules resolutions by default.

Before

@​import '~module/less/linenumbers';

After

@​import 'module/less/linenumbers';
  • TypeScript versions prior to 3.6.4 are no longer supported.no longer supported.
  • tslib will be longer be added as a dependencies, but rather it will be added as a peerDependencies.

This is to be inline with the Angular framework.

Bug Fixes
  • downlevel constructor parameters transformer with tsickle (51d5498), closes #​1517
  • add assets option to schema (a5efd1c), closes #​1092
  • add link to Angular guide when showing ivy publish warning (6bee029), closes #​1453
  • add more package json sections to remove (57cc4d1)
  • analyse only non done entry points (e8db885)
  • analyse should cater for module name being the primary entry point (7b8e491)
  • circular dependency on itself error (702c3f2), closes #​1508
  • ignore .gitkeep, Thumbs.db and .DS_Store when copying files (a5b10e2)
  • ignore JSON files in tsickle processing (#​1489) (ec44059), closes #​325
  • incorrect detection of potential dependent entry-points (932bf48), closes #​1510
  • lock rollup version (75ac180), closes #​1431
  • remove redundant section in package.json (5efad3a)
  • reset glob cache on file add (0306d59)
  • skip NGCC when file system is read only (0e44793)
  • switch to a more accurate module analyse (92ca053), closes #​1523
  • update commander to version ^4.0.0 (ee41977)
  • update rollup to version 1.31.0 (f8704fd)
  • update update-notifier to version ^4.0.0 (f05cbbf)
Features
  • add support for TypeScript 3.7 (9e05fb3)
  • add support for TypeScript 3.6 (342b799)
  • add tslib as peerDepedency (5077f87)
  • update peerDependencies (7ff60f5)
Performance
  • re-populate glob cache (3323b2a)
  • remove less-plugin-npm-import (6a5ae37)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Development

Successfully merging this pull request may close these issues.

0 participants