Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency @angular-devkit/build-angular to v17 - autoclosed #214

Conversation

mend-for-github.aaakk.us.kg[bot]
Copy link
Contributor

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot commented Feb 28, 2024

This PR contains the following updates:

Package Type Update Change
@angular-devkit/build-angular dependencies major ^0.1102.8 -> ^17.2.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Critical 9.8 CVE-2022-0691 #157
Critical 9.8 CVE-2022-37601 #137
Critical 9.8 CVE-2022-37601 #137
Critical 9.8 CVE-2023-42282 #216
Critical 9.3 CVE-2023-45133 #204
Critical 9.1 CVE-2022-0686 #90
Critical 9.1 CVE-2024-48949 #250
High 8.1 CVE-2022-1650 #112
High 7.5 CVE-2021-23424 #50
High 7.5 CVE-2021-3803 #52
High 7.5 CVE-2022-24771 #104
High 7.5 CVE-2022-24772 #103
High 7.5 CVE-2022-37599 #136
High 7.5 CVE-2022-37603 #138
High 7.5 CVE-2022-37603 #138
High 7.5 CVE-2024-37890 #228
High 7.4 CVE-2024-29180 #221
High 7.1 CVE-2022-46175 #155
Medium 6.6 WS-2022-0008 #68
Medium 6.5 CVE-2023-46234 #198
Medium 6.1 CVE-2022-0122 #66
Medium 6.1 CVE-2024-47068 #247
Medium 5.3 CVE-2020-28469 #5
Medium 5.3 CVE-2022-0512 #88
Medium 5.3 CVE-2022-0639 #89
Medium 5.3 CVE-2022-24773 #102
Medium 5.3 CVE-2022-25858 #118
Medium 5.3 CVE-2022-25858 #118
Medium 5.3 CVE-2022-25883 #195
Medium 5.3 CVE-2022-25883 #195
Medium 4.0 CVE-2021-23566 #74

Release Notes

angular/angular-cli (@​angular-devkit/build-angular)

v17.2.0

Compare Source

@​angular/cli
Commit Type Description
b3e206741 feat add support to bun package manager
@​schematics/angular
Commit Type Description
03e1aa790 feat add support to bun package manager
@​angular-devkit/build-angular
Commit Type Description
7f57123fd feat add define build option to application builder
f4f535653 feat add JSON build logs when using the application builder
b59f663e5 feat allow control of Vite-based development server prebundling
8f47f1e96 feat provide default and abbreviated build target support for dev-server and extract-i18n
7a12074dc feat provide option to allow automatically cleaning the terminal screen during rebuilds
7c522aa87 feat support using custom postcss configuration with application builder
476a68daa fix add output location in build stats
5e6f1a9f4 fix avoid preloading server chunks
41ea985f9 fix display server bundles in build stats
d493609d3 fix downgrade copy-webpack-plugin to workaround Node.js support issue
8d5af1d5c fix ensure correct .html served with Vite dev-server
944cbcdb1 fix limit the number of lazy chunks visible in the stats table
905e13633 fix support string as plugin option in custom postcss plugin config
@​angular-devkit/schematics
Commit Type Description
da1c38c48 fix add bun to known package managers
@​angular/create
Commit Type Description
600498f2c feat add support to bun package manager

v17.1.4

Compare Source

@​angular/cli
Commit Type Description
6d2168db9 fix prevent BOM errors in package.json during ng update
@​angular-devkit/build-angular
Commit Type Description
bf42d6df2 fix bypass Vite prebundling for absolute URL imports

v17.1.3

Compare Source

@​angular-devkit/build-angular
Commit Type Description
3de3aa170 fix allow ./ baseHref when using vite based server
17f47a3c9 fix ensure WebWorker main entry is used in output code

v17.1.2

Compare Source

@​angular-devkit/build-angular
Commit Type Description
6815f13e3 fix add required modules as externals imports
a0e306098 fix correctly handle glob negation in proxy config when using vite
235c8403a fix handle regular expressions in proxy config when using Vite
5332e5b2e fix resolve absolute output-path when using esbuild based builders
3deb0d4a1 fix return 404 for assets that are not found

v17.1.1

Compare Source

@​angular/cli
Commit Type Description
8ebb754c2 fix update regex to validate the project-name
@​schematics/angular
Commit Type Description
35ebf1efd fix retain trailing comma when adding providers to app config
@​angular-devkit/build-angular
Commit Type Description
88de1da92 fix ENOENT: no such file or directory on Windows during component rebuild
4e2586aeb fix allow package file loader option with Vite prebundling
aca1cfcda fix do not add internal CSS resources files in watch
53258f617 fix handle load event for multiple stylesheets and CSP nonces
412fe6ec6 fix pre-transform error when using vite with SSR
45dea6f44 fix provide actionable error message when server bundle is missing default export
4e2b23f03 fix update dependency vite to v5.0.12
@​angular/ssr
Commit Type Description
02d9d84c5 fix handle load event for multiple stylesheets and CSP nonces

v17.1.0

Compare Source

@​schematics/angular
Commit Type Description
b513d89b7 feat add optional migration to use application builder
a708dccff feat update SSR and application builder migration schematics to work with new outputPath
4469e481f fix do not trigger NPM install when using ---skip-install and --ssr
@​angular-devkit/build-angular
Commit Type Description
e0b274b8f feat add option to retain CSS special comments in global styles
204794c4f feat add support for --no-browsers in karma builder
4784155bd feat add wildcard option for allowedCommonJsDependencies
3b93df42d feat allow configuring loaders for custom file extensions in application builder
cc246d50e feat allow customization of output locations
15a669c1e feat allowing control of index HTML initial preload generation
47a064b14 feat emit external sourcemaps for component styles
68dae539a feat initial experimental implementation of @web/test-runner builder
f6e67df1c feat inline Google and Adobe fonts located in stylesheets
364a16b7a feat move browser-sync as optional dependency
ccba849e4 feat support keyboard command shortcuts in application dev server
329d80075 fix alllow OPTIONS requests to be proxied when using vite
49ed9a26c fix emit error when using prerender and app-shell builders with application builder
6473b0160 fix ensure all configured assets can be served by dev server
874e576b5 fix filter explicit external dependencies for Vite prebundling
2a02b1320 fix fix normalization of the application builder extensions
9906ab7b4 fix normalize asset source locations in Vite-based development server
ceffafe1a fix provide better error messages for failed file reads
6d7fdb952 fix show diagnostic messages after build stats
4e1f0e44d fix the request url "..." is outside of Vite serving allow list for all assets
bd26a18e7 fix typo in preloadInitial option description
125fb779f perf reduce TypeScript JSDoc parsing in application builder

v17.0.10

Compare Source

@​angular/cli
Commit Type Description
ed1e130da fix retain existing EOL when updating JSON files
@​schematics/angular
Commit Type Description
09c32c678 fix retain existing EOL when adding imports
a5c339eaa fix retain existing EOL when updating JSON files
@​angular-devkit/core
Commit Type Description
3dc4db7d7 fix retain existing EOL when updating workspace config

v17.0.9

Compare Source

@​angular/cli
Commit Type Description
446dfb76a fix add prerender and ssr-dev-server schemas in angular.json schema
@​angular-devkit/schematics
Commit Type Description
88d6ca4a5 fix replace template line endings with platform specific

v17.0.8

Compare Source

@​angular/cli
Commit Type Description
6dba26a0b fix ng e2e and ng lint prompt requires to hit Enter twice to proceed on Windows
0b48acc4e fix re-add -d alias for --dry-run
@​schematics/angular
Commit Type Description
99b026ede fix add missing property "buildTarget" to interface "ServeBuilderOptions"
313004311 fix do not generate standalone component when using ng generate module
@​angular-devkit/build-angular
Commit Type Description
cf11cdf6c fix add missing tailwind @screen directive in matcher
aa6c757d7 fix construct SSR request URL using server resolvedUrls
0662048d4 fix ensure empty optimized Sass stylesheets stay empty
d1923a66d fix ensure external dependencies are used by Web Worker bundling

v17.0.7

Compare Source

@​angular-devkit/build-angular
Commit Type Description
3df3e583c fix baseHref with trailing slash causes server not to be accessible without trailing slash
ef1178188 fix allow vite to serve JavaScript and TypeScript assets
385eb77d2 fix cache loading of component resources in JIT mode
4b3af73ac fix ensure browser-esbuild is used in dev server with browser builder and forceEsbuild
d1b27e53e fix ensure port 0 uses random port with Vite development server
f2f7d7c70 fix file is missing from the TypeScript compilation with JIT
7b8d6cddd fix handle updates of an npm link library from another workspace when preserveSymlinks is true
c08c78cb8 fix inlining of fonts results in jagged fonts for Windows users
930024811 fix retain symlinks to output platform directories on builds
3623fe911 fix update ESM loader to work with Node.js 18.19.0

v17.0.6

Compare Source

@​schematics/angular
Commit Type Description
da5d39471 fix enable TypeScript skipLibCheck in new workspace
@​angular-devkit/build-angular
Commit Type Description
048512874 fix app-shell generation incorrect content when using the application builder
f9e982c44 fix check namespaced Sass variables when rebasing URLs
a1e8ffa9d fix correctly align error/warning messages when spinner is active
46d88a034 fix handle watch updates on Mac OSX when using native FSEvents API
4594407ae fix improve file watching on Windows when using certain IDEs
aa9e7c615 fix normalize locale tags with Intl API when resolving in application builder
a8dbf1da2 fix watch symlink when using preserveSymlinks option
e3820cb6c perf only enable advanced optimizations with script optimizations

v17.0.5

Compare Source

Rolling back bbbe13d67 which appears to break file watching on Mac devices.

v17.0.4

Compare Source

@​schematics/angular
Commit Type Description
7a2823080 fix remove CommonModule import from standalone components
@​angular-devkit/build-angular
Commit Type Description
0634a4e40 fix avoid native realpath in application builder
22880d9cb fix correct set locale when using esbuild based builders
a0680672f fix correctly watch files when app is in a directory that starts with a dot
bbbe13d67 fix improve file watching on Windows when using certain IDEs
27e7c2e1b fix propagate localize errors to full build result
7455fdca0 fix serve assets from the provided serve-path
657a07bd6 fix treeshake unused class that use custom decorators
77474951b fix use workspace real path when not preserving symlinks

v17.0.3

Compare Source

@​angular-devkit/build-angular
Commit Type Description
450dd29a1 fix default to watching project root on Windows with application builder
8072b8574 fix ensure service worker hashes index HTML file for application builder
d99870740 perf only create one instance of postcss when needed

v17.0.2

Compare Source

@​angular-devkit/build-angular
Commit Type Description
023645185 fix always normalize AOT file reference tracker paths
3b99980bd fix emit root files when localize is enabled when using the esbuild based builders
ef3e3abb8 fix ensure watch file paths from TypeScript are normalized
d11b36fe2 fix normalize paths in ssr sourcemaps to posix when using vite
62d51383a fix only include vendor sourcemaps when using the dev-server when the option is enabled
d28ba8a73 fix remove browser-esbuild usage warning

v17.0.1

Compare Source

@​angular/cli
Commit Type Description
ed1e130da fix retain existing EOL when updating JSON files
@​schematics/angular
Commit Type Description
09c32c678 fix retain existing EOL when adding imports
a5c339eaa fix retain existing EOL when updating JSON files
@​angular-devkit/core
Commit Type Description
3dc4db7d7 fix retain existing EOL when updating workspace config

v17.0.0

Compare Source

Breaking Changes

@​schematics/angular
  • Routing is enabled by default for new applications when using ng generate application and ng new. The --no-routing command line option can be used to disable this behaviour.
  • ng g interceptor now generate a functional interceptor by default. or guard by default. To generate a class-based interceptor the --no-functional command flag should be used.
  • rootModuleClassName, rootModuleFileName and main options have been removed from the public pwa and app-shell schematics.
  • App-shell and Universal schematics deprecated unused appId option has been removed.
@​angular-devkit/build-angular
@​angular-devkit/schematics
  • deprecated runExternalSchematicAsync and runSchematicAsync methods have been removed in favor of runExternalSchematic and runSchematic.

Deprecations

@​angular-devkit/build-angular
  • The browserTarget in the dev-server and extract-i18n builders have been deprecated in favor of buildTarget.
@​angular/cli
Commit Type Description
f4e7fa873 fix add @angular/ssr as part of the ng update packageGroup
1f7156b11 fix add Node.js 20 as supported version
4b9a87c90 fix ignore peer mismatch when updating @​nguniversal/builders
f66f9cf61 fix remove Node.js 16 from supported checks
@​schematics/angular
Commit Type Description
741cca73c feat add ng new --ssr
3938863b9 feat add migration to migrate from @nguniversal to @angular/ssr
dc6b6eaf6 feat add migration to replace usages of @nguniversal/builders
6979eba3c feat enable hydration when adding SSR, SSG or AppShell
1a6a139aa feat enable routing by default for new applications
ac0db6697 feat enable standalone by default in new applications
a189962a5 feat generate functional interceptors by default
ae45c4ab8 feat update ng new generated application
3f8aa9d8c feat update ng new to use the esbuild application builder based builder
03a1eaf01 fix account for new block syntax in starter template
eb0fc7434 fix add missing express REQUEST and RESPONSE tokens
ecdcff2db fix add missing icons in ng-new template
175944672 fix do not add unnecessary dependency on @angular/ssr during migration
23c4c5e42 fix enable TypeScript esModuleInterop by default for ESM compliance
d60a6e86a fix noop workspace config migration when already executed
e516a4bdb fix pass ssr option to application schematics
419b5c191 fix remove baseUrl from tsconfig.json
0368b23f2 fix use @​types/node v18
b15e82758 refactor remove deprecated appId option
@​angular-devkit/build-angular
Commit Type Description
c48982dc1 feat add buildTarget option to dev-server and extract-i18n builders
1fb0350eb feat add initial support for bundle budgets to esbuild builders
8168ae2a8 feat apply global CSS updates without a live-reload when using vite
91019bde2 feat enable localize support for SSR with application builder
3c0719bde feat initial i18n extraction support for application builder
8bce80b91 feat initial support for application Web Worker discovery with esbuild

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot added the security fix Security fix generated by WhiteSource label Feb 28, 2024
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot changed the title Update dependency @angular-devkit/build-angular to v17 Update dependency @angular-devkit/build-angular to v17 - autoclosed Dec 4, 2024
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot deleted the whitesource-remediate/angular-devkit-build-angular-17.x branch December 4, 2024 00:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants