Bump the npm_and_yarn group across 1 directory with 13 updates #1363

dependabot · 2024-06-11T09:19:34Z

Bumps the npm_and_yarn group with 7 updates in the /client-rest directory:

Package	From	To
@angular/core	`11.2.14`	`12.0.0`
postcss	`7.0.39`	`8.4.38`
@angular-devkit/build-angular	`0.1102.13`	`18.0.3`
qs	`6.5.2`	`6.5.3`
follow-redirects	`1.14.8`	`1.15.6`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`

Updates @angular/core from 11.2.14 to 12.0.0

Changelog

Sourced from @angular/core's changelog.

18.1.0-next.1 (2024-06-05)

compiler-cli

Commit Type Description

9e21582456 fix Show template syntax errors in local compilation modified (#55855)

core

Commit Type Description

8d75627ddd fix Do not migrate HttpClientModule imports on components. (#56067)

1081c8d623 fix don't coerce all producers to consumers on liveness change (#56140)

b6fb53cdc7 fix Fix shouldPreventDefaultBeforeDispatching bug (#56188)

31f3975e4b fix handle missing withI18nSupport() call for components that use i18n blocks (#56175)

migrations

Commit Type Description

75e811c18b fix do not generate aliased variables with the same name (#56154)

18.0.2 (2024-06-05)

core

Commit Type Description

78cf9bfc0e fix Do not migrate HttpClientModule imports on components. (#56067)

616cdef474 fix don't coerce all producers to consumers on liveness change (#56140)

2a440e1064 fix Fix shouldPreventDefaultBeforeDispatching bug (#56188)

290a47d842 fix handle missing withI18nSupport() call for components that use i18n blocks (#56175)

migrations

Commit Type Description

b70b80ba55 fix do not generate aliased variables with the same name (#56154)

18.1.0-next.0 (2024-05-29)

core

Commit Type Description

e5a6f91722 feat support TypeScript 5.5 (#56096)

b2445a0953 fix link errors to ADEV (#55554) (#56038)

18.0.1 (2024-05-29)

compiler

| Commit | Type | Description |

... (truncated)

Commits

0a2191f Revert "refactor(core): optimize calls to split and slice while computing...
d555555 fix(platform-browser): prevent memory leak of style nodes if shadow DOM encap...
1449c5c fix(core): do not retain dynamically compiled components and modules (#42003)
effde9d refactor(core): remove unnecessary cast (#41960)
6bec2d4 refactor(core): optimize calls to split and slice while computing version...
e9ddc57 fix(core): invoke profiler around ngOnDestroy lifecycle hooks (#41969)
e218a8b refactor(common): change missing NgSwitch provider error message (#41704)
3361c19 docs: Remove references to protractor from documentation (#41731)
73c6c64 fix(core): handle multiple i18n attributes with expression bindings (#41882)
01cc995 fix(animations): ensure consistent transition namespace ordering (#19854)
Additional commits viewable in compare view

Updates postcss from 7.0.39 to 8.4.38

Release notes

Sourced from postcss's releases.

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by @tim-we).

Cleaned up code (by @DrKiraDmitry).

8.4.33

Fixed NoWorkResult behavior difference with normal mode (by @romainmenke).

Fixed NoWorkResult usage conditions (by @ahmdammarr).

8.4.32

Fixed postcss().process() types (by @ferreira-tb).

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by @romainmenke).

8.4.29

Fixed Node#source.offset (by @idoros).

Fixed docs (by @coliff).

8.4.28

Fixed Root.source.end for better source map (by @romainmenke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by @romainmenke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

... (truncated)

Changelog

Sourced from postcss's changelog.

8.4.38

Fixed endIndex: 0 in errors and warnings (by @romainmenke).

8.4.37

Fixed original.column are not numbers error in another case.

8.4.36

Fixed original.column are not numbers error on broken previous source map.

8.4.35

Avoid ! in node.parent.nodes type.

Allow to pass undefined to node adding method to simplify types.

8.4.34

Fixed AtRule#nodes type (by Tim Weißenfels).

Cleaned up code (by Dmitry Kirillov).

8.4.33

Fixed NoWorkResult behavior difference with normal mode (by Romain Menke).

Fixed NoWorkResult usage conditions (by @ahmdammarr).

8.4.32

Fixed postcss().process() types (by Andrew Ferreira).

8.4.31

Fixed \r parsing to fix CVE-2023-44270.

8.4.30

Improved source map performance (by Romain Menke).

8.4.29

Fixed Node#source.offset (by Ido Rosenthal).

Fixed docs (by Christian Oliff).

8.4.28

Fixed Root.source.end for better source map (by Romain Menke).

Fixed Result.root types when process() has no parser.

8.4.27

Fixed Container clone methods types.

8.4.26

Fixed clone methods types.

8.4.25

Improve stringify performance (by Romain Menke).

Fixed docs (by @vikaskaliramna07).

8.4.24

Fixed Plugin types.

... (truncated)

Commits

a69d45e Release 8.4.38 version
64e35d9 Update dependencies
c1ad8fb Merge pull request #1932 from romainmenke/fix-warning-end-index--inventive-nu...
b45e7e9 fix endIndex
1bea246 failing test: for endIndex 0 in rangeBy
0fd1d86 Add changelog auto release on Github
49c906e Release 8.4.37 version
b5bd92c Fix another broken prev source map issue
2882039 Update dependencies
e5ad939 Release 8.4.36 version
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 0.1102.13 to 18.0.3

Release notes

Sourced from @angular-devkit/build-angular's releases.

v18.0.3

18.0.3 (2024-06-05)

@angular/cli

Commit Description

add schema.json options to parsed command, also when a version is passed to ng add <package>@<version>

@angular/build

Commit Description

avoid escaping rebased Sass URL values

disable JS transformer persistent cache on web containers

improve Sass rebaser ident token detection

watch all related files during a Sass error

v18.0.2

18.0.2 (2024-05-29)

@schematics/angular

Commit Description

check both application builder packages in SSR schematic

set builders assets option correctly for new applications

@angular/build

Commit Description

disable Worker wait loop for Sass compilations in web containers

print Sass @warn location

support valid self-closing MathML tags in HTML index file

support valid self-closing SVG tags in HTML index file

@angular/pwa

Commit Description

set manifest icons location to match assets builder option

v18.0.1

18.0.1 (2024-05-23)

@schematics/angular

Commit Description

use angular.dev in readme

@angular/build

Commit Description

avoid rebasing URLs with function calls

disable persistent disk caching inside webcontainers by default

handle esbuild-browser polyfills option as string during ng serve

only import persistent cache store with active caching

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

18.0.3 (2024-06-05)

@angular/cli

Commit Type Description

b709d2a24 fix add schema.json options to parsed command, also when a version is passed to ng add <package>@<version>

@angular/build

Commit Type Description

43a2a7d13 fix avoid escaping rebased Sass URL values

9acb5c7ca fix disable JS transformer persistent cache on web containers

346df4909 fix improve Sass rebaser ident token detection

6526a5f59 fix watch all related files during a Sass error

18.1.0-next.0 (2024-05-29)

@angular/build

Commit Type Description

721d50bae fix avoid escaping rebased Sass URL values

f17b78de7 fix improve Sass rebaser ident token detection

18.0.2 (2024-05-29)

@schematics/angular

Commit Type Description

9967c04b8 fix check both application builder packages in SSR schematic

92b48ab14 fix set builders assets option correctly for new applications

@angular/build

Commit Type Description

3bb06c37d fix disable Worker wait loop for Sass compilations in web containers

c4cf35923 fix print Sass @warn location

352879804 fix support valid self-closing MathML tags in HTML index file

... (truncated)

Commits

See full diff in compare view

Updates json5 from 1.0.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

v2.1.0

New: The index.mjs and index.min.mjs browser builds in the dist directory support ES6 modules. (#187)

v2.0.1

Fix: The browser builds in the dist directory support ES5. (#182)

v2.0.0

Major: JSON5 officially supports Node.js v6 and later. Support for Node.js v4 has been dropped. Since Node.js v6 supports ES5 features, the code has been rewritten in native ES5, and the dependence on Babel has been eliminated.

New: Support for Unicode 10 has been added.

New: The test framework has been migrated from Mocha to Tap.

New: The browser build at dist/index.js is no longer minified by default. A minified version is available at dist/index.min.js. (#181)

Fix: The warning has been made clearer when line and paragraph separators are

... (truncated)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1 [code, [diff][d2.1.1]]

... (truncated)

Commits

c3a7524 2.2.3
94fd06d docs: update CHANGELOG for v2.2.3
3b8cebf docs(security): use GitHub security advisories
f0fd9e1 docs: publish a security policy
6a91a05 docs(template): bug -> bug report
14f8cb1 2.2.2
10cc7ca docs: update CHANGELOG for v2.2.2
7774c10 fix: add proto to objects and arrays
edde30a Readme: slight tweak to intro
97286f8 Improve example in readme
Additional commits viewable in compare view

Updates loader-utils from 1.4.2 to 2.0.4

Release notes

Sourced from loader-utils's releases.

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

v2.0.2

2.0.2 (2021-11-04)

Bug Fixes

base64 generation and unicode characters (#197) (8c2d24e)

v2.0.1

2.0.1 (2021-10-29)

Bug Fixes

md4 support on Node.js v17 (#193) (1069f61)

v2.0.0

2.0.0 (2020-03-17)

⚠ BREAKING CHANGES

minimum required Node.js version is 8.9.0 (#166) (c937e8c)

the getOptions method returns empty object on empty query (#167) (b595cfb)

Use md4 by default

Changelog

Sourced from loader-utils's changelog.

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

2.0.2 (2021-11-04)

Bug Fixes

base64 generation and unicode characters (#197) (8c2d24e)

2.0.1 (2021-10-29)

Bug Fixes

md4 support on Node.js v17 (#193) (1069f61)

2.0.0 (2020-03-17)

⚠ BREAKING CHANGES

minimum required Node.js version is 8.9.0 (#166) (c937e8c)

the getOptions method returns empty object on empty query (#167) (b595cfb)

Use md4 by default

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

... (truncated)

Commits

6688b50 chore(release): 2.0.4
ac09944 fix: ReDoS problem (#225)
7162619 chore(release): 2.0.3
a93cf6f fix(security): prototype polution exploit (#217)
90c7c4b chore(release): 2.0.2
8c2d24e fix: base64 generation and unicode characters (#197)
5fb5562 chore(release): 2.0.1
1069f61 fix: md4 support on Node.js v17 (#193)
d9f4e23 chore(release): 2.0.0
865dc03 refactor: switch to md4 by default (#168)
Additional commits viewable in compare view

Updates qs from 6.5.2 to 6.5.3

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3
ed0f5dc [Fix] parse: ignore __proto__ keys (#428)
691e739 [Robustness] stringify: avoid relying on a global undefined (#427)
1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs
12ac1c4 [meta] fix README.md (#399)
0338716 [actions] backport actions from main
5639c20 Clean up license text so it’s properly detected as BSD-3-Clause
51b8a0b add FUNDING.yml
45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...
f814a7f [Dev Deps] backport from main
Additional commits viewable in compare view

Updates braces from 2.3.2 to 3.0.3

Changelog

Sourced from braces's changelog.

Release history

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

Changelogs are for humans, not machines.

There should be an entry for every single version.

The same types of changes should be grouped.

Versions and sections should be linkable.

The latest version comes first.

The release date of each versions is displayed.

Mention whether you follow Semantic Versioning.

Changelog entries are classified using the following labels (from keep-a-changelog):

Added for new features.

Changed for changes in existing functionality.

Deprecated for soon-to-be removed features.

Removed for now removed features.

Fixed for any bug fixes.

Security in case of vulnerabilities.

[3.0.0] - 2018-04-08

v3.0 is a complete refactor, resulting in a faster, smaller codebase, with fewer deps, and a more accurate parser and compiler.

Breaking Changes

The undocumented .makeRe method was removed

Non-breaking changes

Caching was removed

Commits

See full diff in compare view

Updates express from 4.18.1 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: Node.js@16.18 and Node.js@18.12 by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add Node.js@19.7 by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: cookie@0.6.0

4.18.3 / 2024-02-29

Fix routing requests without method

deps: body-parser@1.20.2

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: raw-body@2.5.2

deps: cookie@0.6.0

Add partitioned option

4.18.2 / 2022-10-08

Fix regression routing a large stack in a single route

deps: body-parser@1.20.1

deps: qs@6.11.0

perf: remove unnecessary object clone

deps: qs@6.11.0

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: cookie@0.6.0
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates follow-redirects from 1.14.8 to 1.15.6

Commits

35a517c Release version 1.15.6 of the npm package.
c4f847f Drop Proxy-Authorization across hosts.
8526b4a Use GitHub for disclosure.
b1677ce Release version 1.15.5 of the npm package.
d8914f7 Preserve fragment in responseUrl.
6585820 Release version 1.15.4 of the npm package.
7a6567e Disallow bracketed hostnames.
05629af Prefer native URL instead of deprecated url.parse.
1cba8e8 Prefer native URL instead of legacy url.resolve.
72bc2a4 Simplify _processResponse error handling.
Additional commits viewable in compare view

Updates json-schema from 0.2.3 to 0.4.0

Commits

f6f6a3b Use a little more robust method of checking instances
ef60987 Update version
b62f1da Protect against constructor modification, #84
fb427cd Link to json-schema-org repository in addition to site, fixes #54
22f1461 Don't allow proto property to be used for schema default/coerce, fixes #84
c52a27c Get basic test to pass
b3f42b3 Add security policy
3b0cec3 Update version
c28470f Update readme to acknowledge the state of the package
7dff9cd Merge pull request #81 from hodovani/patch-1
Additional commits viewable in compare view

Updates jsprim from 1.4.1 to 1.4.2

Changelog

Sourced from jsprim's changelog.

v1.4.2 (2021-11-29)

#35 Backport json-schema 0.4.0 to version 1.4.x

Commits

5c8475f joyent/node-jsprim#35 Backport json-schema 0.4.0 to version 1.4.x
See full diff in compare view

Maintainer changes

This version was pushed to npm by bahamat, a new releaser for jsprim since your current version.

Updates node-forge from 0.10.0 to 1.3.1

Changelog

Sourced from node-forge's changelog.

1.3.1 - 2022-03-29

Fixes

RFC 3447 and RFC 8017 allow for optional DigestAlgorithm NULL parameters for sha* algorithms and require NULL paramters for md2 and md5 algorithms.

1.3.0 - 2022-03-17

Security

Three RSA PKCS#1 v1.5 signature verification issues were reported by Moosa Yahyazadeh (moosa-yahyazadeh@uiowa.edu).

HIGH: Leniency in checking digestAlgorithm structure can lead to signature forgery.

The code is lenient in checking the digest algorithm structure. This can allow a crafted structure that steals padding bytes and uses unchecked portion of the PKCS#1 encoded message to forge a signature when a low public exponent is being used. For more information, please see "Bleichenbacher's RSA signature forgery based on implementation error" by Hal Finney.

CVE ID: CVE-2022-24771

GHSA ID: GHSA-cfm4-qjh2-4765

HIGH: Failing to check tailing garbage bytes can lead to signature forgery.

The code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed and garbage data added to forge a signature when a low public exponent is being used. For more information, please see "Bleichenbacher's RSA signature forgery based on implementation error" by Hal Finney.

CVE ID: CVE-2022-24772

GHSA ID: GHSA-x4jg-mjrx-434g

MEDIUM: Leniency in checking type octet.

DigestInfo is not properly checked for proper ASN.1 structure. This can lead to successful verificatio...
Description has been truncated

Bumps the npm_and_yarn group with 7 updates in the /client-rest directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `11.2.14` | `12.0.0` | | [postcss](https://github.com/postcss/postcss) | `7.0.39` | `8.4.38` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `0.1102.13` | `18.0.3` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.14.8` | `1.15.6` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | Updates `@angular/core` from 11.2.14 to 12.0.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/12.0.0/packages/core) Updates `postcss` from 7.0.39 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.39...8.4.38) Updates `@angular-devkit/build-angular` from 0.1102.13 to 18.0.3 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/18.0.3) Updates `json5` from 1.0.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v2.2.3) Updates `loader-utils` from 1.4.2 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.4.2...v2.0.4) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `braces` from 2.3.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/braces/commits/3.0.3) Updates `express` from 4.18.1 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.1...4.19.2) Updates `follow-redirects` from 1.14.8 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.14.8...v1.15.6) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `node-forge` from 0.10.0 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.10.0...v1.3.1) Updates `webpack-dev-middleware` from 3.7.2 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.7.2...v7.2.1) --- updated-dependencies: - dependency-name: "@angular/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-06-18T18:45:59Z

Superseded by #1366.

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 11, 2024

dependabot bot closed this Jun 18, 2024

dependabot bot deleted the dependabot/npm_and_yarn/client-rest/npm_and_yarn-746e9e4882 branch June 18, 2024 18:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the npm_and_yarn group across 1 directory with 13 updates #1363

Bump the npm_and_yarn group across 1 directory with 13 updates #1363

Uh oh!

dependabot bot commented on behalf of github Jun 11, 2024

Uh oh!

dependabot bot commented on behalf of github Jun 18, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Type	Description
8d75627ddd	fix	Do not migrate `HttpClientModule` imports on components. (#56067)
1081c8d623	fix	don't coerce all producers to consumers on liveness change (#56140)
b6fb53cdc7	fix	Fix shouldPreventDefaultBeforeDispatching bug (#56188)
31f3975e4b	fix	handle missing `withI18nSupport()` call for components that use i18n blocks (#56175)

Commit	Type	Description
78cf9bfc0e	fix	Do not migrate `HttpClientModule` imports on components. (#56067)
616cdef474	fix	don't coerce all producers to consumers on liveness change (#56140)
2a440e1064	fix	Fix shouldPreventDefaultBeforeDispatching bug (#56188)
290a47d842	fix	handle missing `withI18nSupport()` call for components that use i18n blocks (#56175)

Commit	Type	Description
e5a6f91722	feat	support TypeScript 5.5 (#56096)
b2445a0953	fix	link errors to ADEV (#55554) (#56038)

Commit	Description
	avoid escaping rebased Sass URL values
	disable JS transformer persistent cache on web containers
	improve Sass rebaser ident token detection
	watch all related files during a Sass error

Commit	Description
	check both application builder packages in SSR schematic
	set builders `assets` option correctly for new applications

Commit	Description
	disable Worker wait loop for Sass compilations in web containers
	print Sass `@warn` location
	support valid self-closing MathML tags in HTML index file
	support valid self-closing SVG tags in HTML index file

Commit	Description
	avoid rebasing URLs with function calls
	disable persistent disk caching inside webcontainers by default
	handle esbuild-browser `polyfills` option as `string` during `ng serve`
	only import persistent cache store with active caching

Commit	Type	Description
43a2a7d13	fix	avoid escaping rebased Sass URL values
9acb5c7ca	fix	disable JS transformer persistent cache on web containers
346df4909	fix	improve Sass rebaser ident token detection
6526a5f59	fix	watch all related files during a Sass error

Commit	Type	Description
721d50bae	fix	avoid escaping rebased Sass URL values
f17b78de7	fix	improve Sass rebaser ident token detection

Commit	Type	Description
9967c04b8	fix	check both application builder packages in SSR schematic
92b48ab14	fix	set builders `assets` option correctly for new applications

Commit	Type	Description
3bb06c37d	fix	disable Worker wait loop for Sass compilations in web containers
c4cf35923	fix	print Sass `@warn` location
352879804	fix	support valid self-closing MathML tags in HTML index file

Bump the npm_and_yarn group across 1 directory with 13 updates #1363

Bump the npm_and_yarn group across 1 directory with 13 updates #1363

Uh oh!

Conversation

dependabot bot commented on behalf of github Jun 11, 2024

18.1.0-next.1 (2024-06-05)

compiler-cli

core

migrations

18.0.2 (2024-06-05)

core

migrations

18.1.0-next.0 (2024-05-29)

core

18.0.1 (2024-05-29)

compiler

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.33

8.4.32

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

8.4.38

8.4.37

8.4.36

8.4.35

8.4.34

8.4.33

8.4.32

8.4.31

8.4.30

8.4.29

8.4.28

8.4.27

8.4.26

8.4.25

8.4.24

v18.0.3

18.0.3 (2024-06-05)

@​angular/cli

@​angular/build

v18.0.2

18.0.2 (2024-05-29)

@​schematics/angular

@​angular/build

@​angular/pwa

v18.0.1

18.0.1 (2024-05-23)

@​schematics/angular

@​angular/build

18.0.3 (2024-06-05)

@​angular/cli

@​angular/build

18.1.0-next.0 (2024-05-29)

@​angular/build

18.0.2 (2024-05-29)

@​schematics/angular

@​angular/build

v2.2.3

v2.2.2

v2.2.1

v2.2.0

v2.1.3 [code, diff]

v2.1.2

v2.1.1

v2.1.0

v2.0.1

v2.0.0

v2.2.3 [code, diff]

v2.2.2 [code, diff]

v2.2.1 [code, diff]

`@angular/cli`

`@angular/build`

`@schematics/angular`

`@angular/build`

`@angular/pwa`

`@schematics/angular`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/build`

`@schematics/angular`

`@angular/build`