Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency @angular-devkit/build-angular to v13 #9

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Nov 29, 2022

This PR contains the following updates:

Package Type Update Change
@angular-devkit/build-angular dependencies major ~0.900.4 -> ~13.2.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 9.8 CVE-2022-0691
High High 9.8 CVE-2022-37601
High High 9.8 CVE-2022-37601
High High 9.3 CVE-2022-1650
High High 9.1 CVE-2022-0686
High High 8.1 CVE-2020-7660
High High 7.8 CVE-2021-43138
High High 7.7 CVE-2020-13822
High High 7.5 CVE-2020-28469
High High 7.5 CVE-2020-7662
High High 7.5 CVE-2021-23343
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-23424
High High 7.5 CVE-2021-27290
High High 7.5 CVE-2021-28092
High High 7.5 CVE-2021-29059
High High 7.5 CVE-2021-3803
High High 7.5 CVE-2022-24771
High High 7.5 CVE-2022-24772
High High 7.5 CVE-2022-24999
High High 7.5 CVE-2022-25858
High High 7.5 CVE-2022-37603
High High 7.5 CVE-2022-37603
High High 7.5 CVE-2022-38900
High High 7.5 WS-2020-0042
High High 7.5 WS-2020-0091
High High 7.5 WS-2021-0152
High High 7.3 CVE-2020-7720
Medium Medium 6.8 CVE-2020-28498
Medium Medium 6.6 WS-2022-0008
Medium Medium 6.5 CVE-2021-23386
Medium Medium 6.5 CVE-2022-0155
Medium Medium 6.1 CVE-2022-0122
Medium Medium 5.9 CVE-2022-0536
Medium Medium 5.9 WS-2019-0424
Medium Medium 5.6 CVE-2020-15366
Medium Medium 5.3 CVE-2020-7608
Medium Medium 5.3 CVE-2020-7693
Medium Medium 5.3 CVE-2021-23364
Medium Medium 5.3 CVE-2021-23368
Medium Medium 5.3 CVE-2021-23368
Medium Medium 5.3 CVE-2021-23368
Medium Medium 5.3 CVE-2021-27515
Medium Medium 5.3 CVE-2021-29060
Medium Medium 5.3 CVE-2021-32640
Medium Medium 5.3 CVE-2021-3664
Medium Medium 5.3 CVE-2022-0512
Medium Medium 5.3 CVE-2022-0639
Medium Medium 5.3 CVE-2022-24773

Release Notes

angular/angular-cli

v13.2.1

Compare Source

@​angular-devkit/build-angular
Commit Type Description
acd752773 fix invalid browsers version ranges

Special Thanks

Alan Agius

v13.2.0

Compare Source

@​schematics/angular
Commit Type Description
41a828e20 fix updated Angular new project version to v13.2.0-next.0
@​angular-devkit/architect
Commit Type Description
f2c6b2b7e fix correctly handle ESM builders
@​angular-devkit/build-angular
Commit Type Description
cbe028e37 feat expose i18nDuplicateTranslation option of browser and server builders
509322b62 fix Don't use TAILWIND_MODE=watch
@​angular-devkit/build-webpack
Commit Type Description
820ff2a3e fix correctly handle ESM webpack configurations

Special Thanks

Alan Agius, Cédric Exbrayat, Derek Cormier, Doug Parker, Joey Perrott, Jordan Pittman, grant-wilson and minijus

v13.1.4

Compare Source

@​angular-devkit/build-angular
Commit Type Description
2f2069dba fix disable parsing new URL syntax
bddd0fb9f fix support ESNext as target for JavaScript optimizations

Special Thanks

Alan Agius, Derek Cormier and Doug Parker

v13.1.3

Compare Source

@​angular/cli
Commit Type Description
4c9d72c65 fix remove extra space in Unable to find compatible package during ng add
@​schematics/angular
Commit Type Description
9b07191b1 fix set skipTest flag for resolvers when using ng new --skip-tests
@​angular-devkit/build-angular
Commit Type Description
5b39e0eca fix automatically purge stale build cache entries
6046e06b9 fix correctly resolve core-js/proposals/reflect-metadata
de68daa55 fix enable :where CSS pseudo-class
6a617ff4a fix ensure $localize calls are replaced in watch mode
92b4e067b fix load translations fresh start
d674dcd1a fix localized bundle generation fails in watch mode
6876ad36e fix use contenthash instead of chunkhash for chunks
11fd02105 fix websocket client only injected if required
6ca0e41a9 perf update esbuild to 0.14.11

Special Thanks

Alan Agius, Bill Barry, Derek Cormier, Elio Goettelmann, Joey Perrott, Kasper Christensen, Lukas Spirig and Zoltan Lehoczky

v13.1.2

Compare Source

@​angular-devkit/build-angular
Commit Type Description
1ddbd75ae fix add tailwindcss support for version 3
adf925c07 fix display FS cache information when verbose option is used
09c3826c9 fix only extract CSS styles when are specified in styles option
@​ngtools/webpack
Commit Type Description
f31d7f79d perf reduce redudant module rebuilds when cache is restored

Special Thanks

Alan Agius, Derek Cormier and Doug Parker

v13.1.1

Compare Source

@​schematics/angular
Commit Type Description
a315b968a fix updated Angular new project version to v13.1.0

Special Thanks

Alan Agius, Cédric Exbrayat and Derek Cormier

v13.1.0

Compare Source

@​angular/cli
Commit Type Description
56f802b7d feat ask to install angular-eslint when running ng lint in new projects
ecd9fb5c7 feat provide more detailed error for not found builder
0b6071af3 fix ng doc does open browser on Windows
@​schematics/angular
Commit Type Description
d5d9f042f feat add VS Code configurations when generating a new workspace
f95cc8281 feat generate new projects using TypeScript 4.5
21809e14c feat loosen project name validation
@​angular-devkit/schematics-cli
Commit Type Description
339bab06c feat generate new projects using TypeScript 4.5
@​angular-devkit/build-angular
Commit Type Description
bc8563760 feat add estimated transfer size to build output report
bc17cf0cd feat colorize file raw sizes based on failing budgets
3c681b68d feat set dir attribute when using localization
6d0f99a2d feat support JSON comments in dev-server proxy configuration file
9300545e6 feat watch i18n translation files with dev server
9bacba342 fix differentiate components and global styles using file query instead of filename
7408511da fix display cleaner errors
d55fc62ef fix fallback to use language ID to set the dir attribute
4c288b8bd fix lazy modules bundle budgets
562dc6a89 fix prefer ES2015 entrypoints when application targets ES2019 or lower
ac66e400c fix Sass compilation in StackBlitz webcontainers
e1bac5bbb fix update Angular peer dependencies to v13.1 prerelease
789ddfaeb perf disable webpack backwards compatible APIs
@​ngtools/webpack
Commit Type Description
5402f99f8 fix add cjs and mjs to passthrough files
10d4ede2d fix handle promise rejection during Angular program analyzes

Special Thanks

Alan Agius, Charles Lyding, Doug Parker, Ferdinand Malcher, Joey Perrott and Ruslan Lekhman

v13.0.4

Compare Source

@​angular/cli
Commit Type Description
ded7b5c06 fix exit with a non-zero error code when migration fails during ng update
250a58b48 fix logic which determines which temp version of the CLI is to be download during ng update
@​schematics/angular
Commit Type Description
372e2e633 fix address eslint linting failures in test.ts
@​angular-devkit/build-angular
Commit Type Description
b835389c8 fix correctly extract messages when using cached build (#​22266)
647a5f0b1 fix don't watch nested node_modules when polling is enabled
4d01d4f72 fix transform remapped sourcemap into a plain object
@​ngtools/webpack
Commit Type Description
4d918ef99 fix JIT mode CommonJS accessing inexistent default property

Special Thanks

Alan Agius, Billy Lando, David-Emmanuel DIVERNOIS and Derek Cormier

v13.0.3

Compare Source

Special Thanks

Alan Agius, Joey Perrott and Krzysztof Platis

v13.0.2

Compare Source

@​angular/cli
Commit Type Description
34047b1ad fix avoid redirecting @​angular/core in Angular migrations
ff4538e98 fix favor ng-update packageGroupName in ng update output
@​schematics/angular
Commit Type Description
1bc00b6fe fix migrate ng-packagr configurations in package.json
9ea74a13d fix show warning when migrating ng-packagr JS configurations
@​angular-devkit/build-angular
Commit Type Description
35164bf92 fix don't restore input of type file during HMR
facb5d8ff fix don't show [NG HMR] Unknown input type when restoring file type input
ef8815d04 fix improve sourcemap fidelity during code-coverage
966a1334a fix suppress "@​charset" must be the first rule in the file warning
1cdc24da0 fix update Angular peer dependencies to 13.0 stable

Special Thanks

Alan Agius, Charles Lyding, Joey Perrott and Paul Gschwendtner

v13.0.1

Compare Source

@​schematics/angular
Commit Type Description
40f599241 fix updated Angular new project version to v13.0.0

Special Thanks

Charles Lyding and Joey Perrott

v13.0.0

Compare Source

Breaking Changes

@​angular/cli
  • We drop support for Node.js versions prior to 12.20.
@​schematics/angular
  • classlist.js and web-animations-js are removed from application polyfills and uninstalled from the package. These were only needed for compatibility with Internet Explorer, which is no longer needed now that Angular only supports evergreen browsers. See: https://angular.io/guide/browser-support.

Add the following to the polyfills file for an app to re-add these packages:

import 'classlist.js';
import 'web-animations-js';

And then run:

npm install classlist.js web-animations-js --save
  • We removed several deprecated @schematics/angular deprecated options.
  • lintFix have been removed from all schematics. ng lint --fix should be used instead.
  • legacyBrowsers have been removed from the application schematics since IE 11 is no longer supported.
  • configuration has been removed from the web-worker as it was unused.
  • target has been removed from the service-worker as it was unused.
@​angular-devkit/build-angular
  • Support for karma-coverage-instanbul-reporter has been dropped in favor of the official karma coverage plugin karma-coverage.

  • Support for node-sass has been removed. sass will be used by default to compile SASS and SCSS files.

  • NG_PERSISTENT_BUILD_CACHE environment variable option no longer have effect. Configure cli.cache in the workspace configuration instead.

{
  "$schema": "./node_modules/@​angular/cli/lib/config/schema.json",
  "version": 1,
  "cli": {
    "cache": {
      "enabled": true,
      "path": ".custom-cache-path",
      "environment": "all"
    }
  }
  ...
}
  • Calling BuilderContext.scheduleBuilder() with a builder from @angular-devkit/build-angular now requires passing the target property in the 3rd argument, like in the following example:

    context.scheduleBuilder('@​angular-devkit/build-angular:ng-packagr', options, {
      target: context.target,
    });
  • The automatic inclusion of Angular-required ES2015 polyfills to support ES5 browsers has been removed. Previously when targetting ES5 within the application's TypeScript configuration or listing an ES5 requiring browser in the browserslist file, Angular-required polyfills were included in the built application. However, with Angular no longer supporting IE11, there are now no browsers officially supported by Angular that would require these polyfills. As a result, the automatic inclusion of these ES2015 polyfills has been removed. Any polyfills manually added to an application's code are not affected by this change.

  • With this change a number of deprecated dev-server builder options which proxied to the browser builder have been removed. These options should be configured in the browser builder instead.

The removed options are:

  • aot

  • sourceMap

  • deployUrl

  • baseHref

  • vendorChunk

  • commonChunk

  • optimization

  • progress

  • With this change we removed several deprecated builder options

  • extractCss has been removed from the browser builder. CSS is now always extracted.

  • servePathDefaultWarning and hmrWarning have been removed from the dev-server builder. These options had no effect.

  • Deprecated @angular-devkit/build-angular:tslint builder has been removed. Use https://github.com/angular-eslint/angular-eslint instead.

  • Differential loading support has been removed. With Angular no longer supporting IE11, there are now no browsers officially supported by Angular that require ES5 code. As a result, differential loading's functionality for creating and conditionally loading ES5 and ES2015+ variants of an application is no longer required.

  • TypeScript versions prior to 4.4 are no longer supported.

  • The dev-server now uses WebSockets to communicate changes to the browser during HMR and live-reloaded. If during your development you are using a proxy you will need to enable proxying of WebSockets.

  • We remove inlining of Google fonts in WOFF format since IE 11 is no longer supported. Other supported browsers use WOFF2.

@​angular-devkit/build-webpack

Note: this change only affects users depending on @angular-devkit/build-webpack directly.

@​angular-devkit/core
  • With this change we drop support for the deprecated behaviour to transform id in schemas. Use $id instead.

Note: this only effects schematics and builders authors.

  • The deprecated JSON parser has been removed from public API. jsonc-parser should be used instead.
@​angular-devkit/schematics
  • isAction has been removed without replacement as it was unused.

  • With this change we remove the following deprecated APIs

  • TslintFixTask

  • TslintFixTaskOptions

Note: this only effects schematics developers.

@​ngtools/webpack
  • Deprecated inlineStyleMimeType option has been removed from AngularWebpackPluginOptions. Use inlineStyleFileExtension instead.

  • Applications directly using the webpack-cli and not the Angular CLI to build must set the environment variable DISABLE_V8_COMPILE_CACHE=1. The @ngtools/webpack package now uses dynamic imports to provide support for the ESM @angular/compiler-cli package. The v8-compile-cache package used by the webpack-cli does not currently support dynamic import expressions and will cause builds to fail if the environment variable is not specified. Applications using the Angular CLI are not affected by this limitation.

Deprecations

  • @angular-devkit/build-optimizer

It's functionality has been included in @angular-devkit/build-angular so this package is no longer needed by the CLI and we will stop publishing the package soon. It has been an experimental (never hit 1.0.0) and internal (only used by Angular itself) package and should be not be used directly by others.

@​angular-devkit/build-angular
  • NG_BUILD_CACHE environment variable option will be removed in the next major version. Configure cli.cache in the workspace configuration instead.
@​angular/cli
Commit Type Description
9fe55752d feat officially support Node.js v16
5ad145722 fix error when updating Angular packages across multi-major migrations
e4bc35e33 fix exclude packages from ng add that contain invalid peer dependencies
e1b954d70 fix keep relative migration paths during update analysis
c3acf3cc2 fix remove unused cli project options.
77fe6c4e6 fix update engines to require node 12.20.0
8795536a3 fix update ng update output for Angular packages
d8c9f6eaf fix update the update command to fully support Node.js v16
@​schematics/angular
Commit Type Description
7ff8c5350 feat add /.angular/cache to .gitignore
3ba13f467 feat add noImplicitOverride and noPropertyAccessFromIndexSignature to workspace tsconfig
268a03b63 feat add migration to update the workspace config
7bdcd7da1 feat create new projects with rxjs 7
eac18aed7 feat drop polyfills required only for Internet Explorer now that support has been dropped for it
4f91816b2 feat migrate libraries to be published from ViewEngine to Ivy Partial compilation
5986befcd feat remove deprecated options
9fbd16655 feat remove IE 11 specific polyfills
a7b2e6f51 feat update ngsw-config resources extensions
732ef7985 fix add browserslist configuration in library projects
585adacd0 fix don't add destroyAfterEach in newly generated spec files
e58226ee9 fix don't export renderModuleFactory from server file
0ec0ad8a4 fix remove target and lib options for library tsconfig
f227e145d fix updated Angular new project version to v13.0 prerelease

Commit Type Description
5e435ff37 docs mark @angular-devkit/build-optimizer as deprecated.
@​angular-devkit/architect
Commit Type Description
09e039500 feat include workspace extensions in project metadata
@​angular-devkit/build-angular
Commit Type Description
f53bf9dc2 feat add type=module to all scripts tags
e95ecb8ab feat deprecate deployUrl
7dcfffaff feat drop support for karma-coverage-instanbul-reporter
ac3fc2752 feat drop support for node-sass
5904afd1d feat enable disk cache by default and provide configurable options
22cd9edfa feat favor es2020 main fields
7576136b2 feat remove automatic inclusion of ES5 browser polyfills
000b0e51c feat remove deprecated dev-server options
20e48a33c feat remove deprecated options
e78f6ab5d feat remove deprecated tslint builder
701214d17 feat remove differential loading support
fb1ad7c5b feat support ESM proxy configuration files for the dev server
505438cc4 feat support TypeScript 4.4
32dbf659a feat update webpack-dev-server to version 4
c1efaa17f fix calculate valid Angular versions from peerDependencies
d7af4a7b5 fix enable custom es2020 and es2015 conditional exports
f383f3201 fix ESM-interop loaded plugin creators of @angular/localize/tools not respected
7934becb5 fix generate unique webpack runtimes
b14e0a547 fix improve sourcemaps fidelity when code coverage is enabled
e19287453 fix move @angular/localize detection prior to webpack initialization
76d6d8826 fix set browserslist defaults
167eed465 fix update Angular peer dependencies to v13.0 prerelease
1d8cdf853 fix update esbuild to 0.13.12
884111ac0 fix update IE unsupported and deprecation messages
4be6537dd fix update TS/JS regexp checks to latest extensions
427a9ee97 fix update workspace tsconfig lib es2020
ea926db25 fix use es2015 when generating server bundles
13cceab8e fix use URLs for absolute import paths with ESM
4e0743c8a perf change webpack hashing function to xxhash64
cb7d156c2 perf use esbuild as a CSS optimizer for global styles
8e82263c5 perf use esbuild/terser combination to optimize global scripts
e82eef924 refactor remove WOFF handling from inline-fonts processor
@​angular-devkit/build-webpack
Commit Type Description
a0b5897d5 feat update webpack-dev-server to version 4
9efcb32e3 fix better handle concurrent dev-servers
@​angular-devkit/core

| Commit

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Nov 29, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @angular-devkit/build-angular to v13 Update dependency @angular-devkit/build-angular to v13 - autoclosed Dec 4, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/angular-devkit-build-angular-13.x branch December 4, 2022 08:00
@mend-for-github-com mend-for-github-com bot changed the title Update dependency @angular-devkit/build-angular to v13 - autoclosed Update dependency @angular-devkit/build-angular to v13 Dec 4, 2022
@mend-for-github-com mend-for-github-com bot reopened this Dec 4, 2022
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/angular-devkit-build-angular-13.x branch December 4, 2022 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
0 participants