ngx-daterangepicker icon indicating copy to clipboard operation
ngx-daterangepicker copied to clipboard

[Security] Bump ng-packagr from 5.7.1 to 12.1.2

Open dependabot-preview[bot] opened this issue 3 years ago • 0 comments

Bumps ng-packagr from 5.7.1 to 12.1.2. This update includes a security fix.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

OS Command Injection in ng-packagr The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Affected versions: < 10.1.1

Release notes

Sourced from ng-packagr's releases.

v12.1.2

Bug Fixes

  • parse styles cache as JSON (f778b92)

v12.1.1

Bug Fixes

  • avoid non-actionable template type-checker syntax diagnostics (63598d0)

v12.1.0

Features

  • add compilation mode in build logs (4959f8b), closes #1991
  • add support for TypeScript 4.3 (d6cabcf)
  • update Ivy compilation pipeline to use faster NGTSC program (9f17304)

v12.1.0-next.0

  • add support for TypeScript 4.3 (d6cabcf)
  • update Ivy compilation pipeline to use faster NGTSC program (9f17304)

v12.0.8

Bug Fixes

  • error shown multiple times in terminal (22322e8)

v12.0.6

Bug Fixes

  • add version stamping during watch builds (4e13041)

v12.0.5

Bug Fixes

  • Debug Failure. False expression when using triple slash reference directive (043c53b)

v12.0.4

Bug Fixes

  • show error message on nested circular dependency (06e6700), closes #2001

... (truncated)

Changelog

Sourced from ng-packagr's changelog.

12.1.2 (2021-07-13)

Bug Fixes

  • parse styles cache as JSON (f778b92)

12.1.1 (2021-07-09)

Bug Fixes

  • avoid non-actionable template type-checker syntax diagnostics (63598d0)

12.1.0 (2021-06-25)

Features

  • add compilation mode in build logs (4959f8b), closes #1991
  • add support for TypeScript 4.3 (d6cabcf)
  • update Ivy compilation pipeline to use faster NGTSC program (9f17304)

12.1.0-next.0 (2021-06-22)

Features

  • add support for TypeScript 4.3 (d6cabcf)
  • update Ivy compilation pipeline to use faster NGTSC program (9f17304)

Bug Fixes

  • error shown multiple times in terminal (22322e8)

12.0.6 (2021-06-18)

Bug Fixes

  • add version stamping during watch builds (4e13041)

12.0.5 (2021-06-09)

Bug Fixes

  • Debug Failure. False expression when using triple slash reference directive (043c53b)

12.0.4 (2021-06-09)

... (truncated)

Commits
  • 1e0a7c3 release: cut v12.1.2
  • f778b92 fix: parse styles cache as JSON
  • a350cae build: lock file maintenance
  • 91e7372 build: update dependency commander to v8
  • 3193db9 Update CHANGELOG.md
  • fa7f5bc release: cut v12.1.1
  • 63598d0 fix avoid non-actionable template type-checker syntax diagnostics
  • 1e06fd1 build: lock file maintenance
  • b1eb223 build: update dependency typescript to v4.3.5
  • 80a2ccf build: update dependency husky to v7
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by alan.agius4, a new releaser for ng-packagr since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

dependabot-preview[bot] avatar Jul 14 '21 04:07 dependabot-preview[bot]