ngx-daterangepicker
ngx-daterangepicker copied to clipboard
[Security] Bump ng-packagr from 5.7.1 to 12.1.2
Bumps ng-packagr from 5.7.1 to 12.1.2. This update includes a security fix.
Vulnerabilities fixed
Sourced from The GitHub Security Advisory Database.
OS Command Injection in ng-packagr The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.
Affected versions: < 10.1.1
Release notes
Sourced from ng-packagr's releases.
v12.1.2
Bug Fixes
- parse styles cache as JSON (f778b92)
v12.1.1
Bug Fixes
- avoid non-actionable template type-checker syntax diagnostics (63598d0)
v12.1.0
Features
- add compilation mode in build logs (4959f8b), closes #1991
- add support for TypeScript 4.3 (d6cabcf)
- update Ivy compilation pipeline to use faster NGTSC program (9f17304)
v12.1.0-next.0
- add support for TypeScript 4.3 (d6cabcf)
- update Ivy compilation pipeline to use faster NGTSC program (9f17304)
v12.0.8
Bug Fixes
- error shown multiple times in terminal (22322e8)
v12.0.6
Bug Fixes
- add version stamping during watch builds (4e13041)
v12.0.5
Bug Fixes
- Debug Failure. False expression when using triple slash reference directive (043c53b)
v12.0.4
Bug Fixes
... (truncated)
Changelog
Sourced from ng-packagr's changelog.
12.1.2 (2021-07-13)
Bug Fixes
- parse styles cache as JSON (f778b92)
12.1.1 (2021-07-09)
Bug Fixes
- avoid non-actionable template type-checker syntax diagnostics (63598d0)
12.1.0 (2021-06-25)
Features
- add compilation mode in build logs (4959f8b), closes #1991
- add support for TypeScript 4.3 (d6cabcf)
- update Ivy compilation pipeline to use faster NGTSC program (9f17304)
12.1.0-next.0 (2021-06-22)
Features
- add support for TypeScript 4.3 (d6cabcf)
- update Ivy compilation pipeline to use faster NGTSC program (9f17304)
Bug Fixes
- error shown multiple times in terminal (22322e8)
12.0.6 (2021-06-18)
Bug Fixes
- add version stamping during watch builds (4e13041)
12.0.5 (2021-06-09)
Bug Fixes
- Debug Failure. False expression when using triple slash reference directive (043c53b)
12.0.4 (2021-06-09)
... (truncated)
Commits
1e0a7c3
release: cut v12.1.2f778b92
fix: parse styles cache as JSONa350cae
build: lock file maintenance91e7372
build: update dependency commander to v83193db9
Update CHANGELOG.mdfa7f5bc
release: cut v12.1.163598d0
fix avoid non-actionable template type-checker syntax diagnostics1e06fd1
build: lock file maintenanceb1eb223
build: update dependency typescript to v4.3.580a2ccf
build: update dependency husky to v7- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by alan.agius4, a new releaser for ng-packagr since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labels
will set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewers
will set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assignees
will set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestone
will set the current milestone as the default for future PRs for this repo and language -
@dependabot badge me
will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot dashboard:
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)