chore(deps): Bump undici and @angular-devkit/build-angular in /apps/angular-13
Bumps undici to 6.11.1 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.
Updates undici from 6.7.1 to 6.11.1
Release notes
Sourced from undici's releases.
v6.11.1
:warning: Security Release ⚠️
What's Changed
- Fixes https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7 CVE-2024-30260
- Fixes https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672 CVE-2024-30261
- Revert "fix: don't leak internal class (#3024)" by
@mcollinain nodejs/undici#3044Full Changelog: https://github.com/nodejs/undici/compare/v6.11.0...v6.11.1
v6.11.0
What's Changed
- refactor(#3023): Pass headers as array instead by
@metcoder95in nodejs/undici#3025- fix: don't leak internal class by
@ronagin nodejs/undici#3024- build(deps): bump codecov/codecov-action from 4.1.0 to 4.1.1 by
@dependabotin nodejs/undici#3034- build(deps-dev): bump tsd from 0.30.7 to 0.31.0 by
@dependabotin nodejs/undici#3038- build(deps-dev): bump borp from 0.9.1 to 0.10.0 by
@dependabotin nodejs/undici#2947- missing commits by
@ronagin nodejs/undici#3040- build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by
@dependabotin nodejs/undici#3036- fix: regexp pattern by
@tsctxin nodejs/undici#3041Full Changelog: https://github.com/nodejs/undici/compare/v6.10.2...v6.11.0
v6.10.2
What's Changed
- Do not fail test if streams support typed arrays by
@mcollinain nodejs/undici#2978- fix(fetch): properly redirect non-ascii location header url by
@Xvezdain nodejs/undici#2971- perf: Remove double-stringify in setCookie by
@peterverin nodejs/undici#2980- [fix #2982] use DispatcherInterceptor type for Dispatcher#Compose by
@clovis-guillemotin nodejs/undici#2983- fix: make EventSource properties enumerable by
@MattBidewellin nodejs/undici#2987- docs: ✏️ fixed benchmark links by
@benhalversonin nodejs/undici#2991- fix(#2986): bad start check by
@metcoder95in nodejs/undici#2992- fix(H2 Client): bind stream 'data' listener only after received 'response' event by
@St3ffGv4in nodejs/undici#2985- feat: added search input by
@benhalversonin nodejs/undici#2993- chore: validate responses can be consumed without a Content-Length or… by
@jacob-ebeyin nodejs/undici#2995- fix error message by
@KhafraDevin nodejs/undici#2998- Revert "perf: reuse TextDecoder instance (#2863)" by
@panvain nodejs/undici#2999- test: remove only by
@metcoder95in nodejs/undici#3001New Contributors
@Xvezdamade their first contribution in nodejs/undici#2971@petervermade their first contribution in nodejs/undici#2980@clovis-guillemotmade their first contribution in nodejs/undici#2983@MattBidewellmade their first contribution in nodejs/undici#2987@benhalversonmade their first contribution in nodejs/undici#2991@St3ffGv4made their first contribution in nodejs/undici#2985@jacob-ebeymade their first contribution in nodejs/undici#2995
... (truncated)
Commits
6df3c73Bumped v6.11.1c346b66Revert "fix: don't leak internal class (#3024)"d542b8cMerge pull request from GHSA-9qxr-qj54-h6726805746Merge pull request from GHSA-m4v8-wqvr-p9f7ee5f892Bumped v6.11.071a6d74Merge branch 'main' of github.com:nodejs/undici0f0f239fix: regexp pattern (#3041)31f9e67build(deps): bump actions/checkout from 4.1.1 to 4.1.2 (#3036)c8a43aefixup8b5e2c8fixup- Additional commits viewable in compare view
Updates @angular-devkit/build-angular from 17.3.2 to 17.3.5
Release notes
Sourced from @angular-devkit/build-angular's releases.
v17.3.5
17.3.5 (2024-04-17)
@angular-devkit/build-angular
Commit Description address Unable to deserialize cloned dataissue with Yarn PnPremove type="text/css"fromstyletagv17.3.4
17.3.4 (2024-04-11)
@angular-devkit/build-angular
Commit Description ensure esbuild-based builders exclusively produce ESM output v17.3.3
@schematics/angular
Commit Description Revert "fix( @schematics/angular): rename SSR port env variable"
Changelog
Sourced from @angular-devkit/build-angular's changelog.
17.3.5 (2024-04-17)
@angular-devkit/build-angular
Commit Type Description 6191d06ca fix address Unable to deserialize cloned dataissue with Yarn PnP0335d6a5d fix remove type="text/css"fromstyletag17.3.4 (2024-04-11)
@angular-devkit/build-angular
Commit Type Description 1128bdd64 fix ensure esbuild-based builders exclusively produce ESM output 16.2.14 (2024-04-11)
@angular-devkit/build-angular
Commit Type Description 1068c3c73 fix update vite to 4.5.318.0.0-next.2 (2024-04-03)
@schematics/angular
Commit Type Description 725883713 feat use eventCoalescing option by default (standalone bootstrap) 508d97da7 feat use ngZoneEventCoalescing option by default (module bootstrap) 157329384 fix add spaces around eventCoalescing option
... (truncated)
Commits
c5f20a3release: cut the v17.3.5 release6191d06fix(@angular-devkit/build-angular): address `Unable to deserialize cloned dat...0335d6afix(@angular-devkit/build-angular): removetype="text/css"fromstyletagd0bff79release: cut the v17.3.4 release84ee482docs: replace links links to aio with links to adev1128bddfix(@angular-devkit/build-angular): ensure esbuild-based builders exclusively...1f47a10build: updateviteandundici97acaffrelease: cut the v17.3.3 release6061a0bRevert "fix(@schematics/angular): rename SSR port env variable"97da8babuild: add missing dep in test to fix CI- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.