Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency @angular/cli to v13 - abandoned #162

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented May 6, 2022

This PR contains the following updates:

Package Type Update Change
@angular/cli devDependencies major ~1.7.3 -> ~13.3.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2018-1000620 #86
High 9.8 CVE-2018-11499 #83
High 9.8 CVE-2020-7774 #85
High 9.1 CVE-2019-10744 #14
High 8.8 CVE-2018-11694 #21
High 8.8 CVE-2018-11695 #22
High 8.8 CVE-2018-11696 #24
High 8.8 CVE-2018-19827 #92
High 8.6 CVE-2021-37701 #147
High 8.6 CVE-2021-37712 #148
High 8.6 CVE-2021-37713 #149
High 8.1 CVE-2018-11693 #27
High 8.1 CVE-2018-11697 #25
High 8.1 CVE-2018-11698 #19
High 8.1 CVE-2021-32803 #146
High 8.1 CVE-2021-32804 #30
High 7.5 CVE-2018-20834 #48
High 7.5 CVE-2019-13173 #74
High 7.3 WS-2019-0180 #66

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2018-3774 #4
High 9.8 CVE-2018-3774 #4
High 9.8 CVE-2019-10746 #17
High 9.8 CVE-2019-10747 #16
High 9.8 CVE-2019-10747 #16
High 9.8 CVE-2019-15599 #7
High 9.8 CVE-2020-7774 #85
High 9.8 CVE-2021-23807 #11
High 9.8 CVE-2021-3918 #39
High 9.8 CVE-2022-29078 #159
High 9.8 WS-2020-0344 #34
High 9.8 WS-2021-0153 #53
High 9.3 CVE-2022-1650 #164
High 9.1 CVE-2019-10744 #14
High 9.1 CVE-2022-0686 #141
High 9.1 CVE-2022-0686 #141
High 8.8 CVE-2018-3728 #118
High 8.2 WS-2020-0345 #31
High 8.1 CVE-2020-7660 #87
High 7.8 CVE-2021-43138 #155
High 7.5 CVE-2018-14732 #38
High 7.5 CVE-2019-20149 #8
High 7.5 CVE-2020-28469 #46
High 7.5 CVE-2020-7662 #95
High 7.5 CVE-2021-23343 #94
High 7.5 CVE-2021-23424 #41
High 7.5 CVE-2021-27290 #15
High 7.5 CVE-2021-33623 #49
High 7.5 CVE-2021-3803 #60
High 7.5 CVE-2021-3807 #64
High 7.5 CVE-2022-24771 #153
High 7.5 CVE-2022-24772 #152
High 7.5 WS-2020-0042 #78
High 7.5 WS-2020-0342 #33
High 7.4 CVE-2020-8203 #57
High 7.4 WS-2018-0588 #99
High 7.4 WS-2018-0588 #99
High 7.3 CVE-2020-7720 #121
High 7.2 CVE-2021-23337 #88

Release Notes

angular/angular-cli

v13.3.3

Compare Source

@​angular-devkit/build-angular
Commit Type Description
d38b247cf fix display debug logs when using the --verbose option
@​angular-devkit/build-webpack
Commit Type Description
5682baee4 fix emit devserver setup errors

Special Thanks

Alan Agius

v13.3.2

Compare Source

@​angular/cli
Commit Type Description
49dc63d09 fix ensure lint command auto-add exits after completion
@​schematics/angular
Commit Type Description
bbe74b87e fix provide actionable error message when routing declaration cannot be found
@​angular-devkit/build-angular
Commit Type Description
c97c8e7c9 fix update minimatch dependency to 3.0.5

Special Thanks

Alan Agius, Charles Lyding and Morga Cezary

v13.3.1

Compare Source

@​schematics/angular
Commit Type Description
cf3cb2ecf fix fix extra comma added when use --change-detection=onPush and --style=none to generate a component
@​angular-devkit/architect-cli
Commit Type Description
9f8d4dea0 fix update minimist to 1.2.6
@​angular-devkit/schematics-cli
Commit Type Description
ba3486de9 fix update minimist to 1.2.6
@​angular-devkit/benchmark
Commit Type Description
1f7fa6970 fix update minimist to 1.2.6
@​angular-devkit/build-angular
Commit Type Description
293526c31 fix add node_modules prefix to excludes RegExp
58ed97410 fix allow Workers in Stackblitz
4cd2331d3 fix don't override asset info when updating assets
@​angular-devkit/core
Commit Type Description
c7c75820f fix add Angular CLI major version as analytics dimension

Special Thanks

Alan Agius and gauravsoni119

v13.3.0

Compare Source

@​angular/cli
Commit Type Description
c995ed5e8 feat support TypeScript 4.6

Special Thanks

Alan Agius and Doug Parker

v13.2.6

Compare Source

@​angular-devkit/build-angular
Commit Type Description
90a5531b1 fix ignore css only chunks during naming

Special Thanks

Alan Agius, Charles Lyding and Daniele Maltese

v13.2.5

Compare Source

@​angular-devkit/build-angular
Commit Type Description
acf1e5e4a fix don't rename blocks which have a name
7a493979c fix update terser to 5.11.0

Special Thanks

Alan Agius and Paul Gschwendtner

v13.2.4

Compare Source

@​angular-devkit/build-angular
Commit Type Description
48c655ac9 fix update esbuild to 0.14.22
c0736ea0b fix update license-webpack-plugin to 4.0.2

Special Thanks

Alan Agius, Anner Visser and Charles Lyding

v13.2.3

Compare Source

@​angular-devkit/build-angular
Commit Type Description
8c8377fee fix block Karma from starting until build is complete
@​ngtools/webpack
Commit Type Description
1317e470e fix support locating PNPM lock file during NGCC processing

Special Thanks

Alan Agius, Derek Cormier and Joey Perrott

v13.2.2

Compare Source

@​angular-devkit/build-angular
Commit Type Description
cc5505cfc fix add whatwg-url to downlevel exclusion list
ff54b49e7 fix ensure to use content hash as filenames hashing mechanism
b0e2bb289 perf update license-webpack-plugin to 4.0.1
@​angular-devkit/core
Commit Type Description
c8826a973 fix correctly resolve schema references defaults

Special Thanks

Alan Agius, Derek Cormier and Joey Perrott

v13.2.1

Compare Source

@​angular-devkit/build-angular
Commit Type Description
acd752773 fix invalid browsers version ranges

Special Thanks

Alan Agius

v13.2.0

Compare Source

@​schematics/angular
Commit Type Description
41a828e20 fix updated Angular new project version to v13.2.0-next.0
@​angular-devkit/architect
Commit Type Description
f2c6b2b7e fix correctly handle ESM builders
@​angular-devkit/build-angular
Commit Type Description
cbe028e37 feat expose i18nDuplicateTranslation option of browser and server builders
509322b62 fix Don't use TAILWIND_MODE=watch
@​angular-devkit/build-webpack
Commit Type Description
820ff2a3e fix correctly handle ESM webpack configurations

Special Thanks

Alan Agius, Cédric Exbrayat, Derek Cormier, Doug Parker, Joey Perrott, Jordan Pittman, grant-wilson and minijus

v13.1.4

Compare Source

@​angular-devkit/build-angular
Commit Type Description
2f2069dba fix disable parsing new URL syntax
bddd0fb9f fix support ESNext as target for JavaScript optimizations

Special Thanks

Alan Agius, Derek Cormier and Doug Parker

v13.1.3

Compare Source

@​angular/cli
Commit Type Description
4c9d72c65 fix remove extra space in Unable to find compatible package during ng add
@​schematics/angular
Commit Type Description
9b07191b1 fix set skipTest flag for resolvers when using ng new --skip-tests
@​angular-devkit/build-angular
Commit Type Description
5b39e0eca fix automatically purge stale build cache entries
6046e06b9 fix correctly resolve core-js/proposals/reflect-metadata
de68daa55 fix enable :where CSS pseudo-class
6a617ff4a fix ensure $localize calls are replaced in watch mode
92b4e067b fix load translations fresh start
d674dcd1a fix localized bundle generation fails in watch mode
6876ad36e fix use contenthash instead of chunkhash for chunks
11fd02105 fix websocket client only injected if required
6ca0e41a9 perf update esbuild to 0.14.11

Special Thanks

Alan Agius, Bill Barry, Derek Cormier, Elio Goettelmann, Joey Perrott, Kasper Christensen, Lukas Spirig and Zoltan Lehoczky

v13.1.2

Compare Source

@​angular-devkit/build-angular
Commit Type Description
1ddbd75ae fix add tailwindcss support for version 3
adf925c07 fix display FS cache information when verbose option is used
09c3826c9 fix only extract CSS styles when are specified in styles option
@​ngtools/webpack
Commit Type Description
f31d7f79d perf reduce redudant module rebuilds when cache is restored

Special Thanks

Alan Agius, Derek Cormier and Doug Parker

v13.1.1

Compare Source

@​schematics/angular
Commit Type Description
a315b968a fix updated Angular new project version to v13.1.0

Special Thanks

Alan Agius, Cédric Exbrayat and Derek Cormier

v13.1.0

Compare Source

@​angular/cli
Commit Type Description
56f802b7d feat ask to install angular-eslint when running ng lint in new projects
ecd9fb5c7 feat provide more detailed error for not found builder
0b6071af3 fix ng doc does open browser on Windows
@​schematics/angular
Commit Type Description
d5d9f042f feat add VS Code configurations when generating a new workspace
f95cc8281 feat generate new projects using TypeScript 4.5
21809e14c feat loosen project name validation
@​angular-devkit/schematics-cli
Commit Type Description
339bab06c feat generate new projects using TypeScript 4.5
@​angular-devkit/build-angular
Commit Type Description
bc8563760 feat add estimated transfer size to build output report
bc17cf0cd feat colorize file raw sizes based on failing budgets
3c681b68d feat set dir attribute when using localization
6d0f99a2d feat support JSON comments in dev-server proxy configuration file
9300545e6 feat watch i18n translation files with dev server
9bacba342 fix differentiate components and global styles using file query instead of filename
7408511da fix display cleaner errors
d55fc62ef fix fallback to use language ID to set the dir attribute
4c288b8bd fix lazy modules bundle budgets
562dc6a89 fix prefer ES2015 entrypoints when application targets ES2019 or lower
ac66e400c fix Sass compilation in StackBlitz webcontainers
e1bac5bbb fix update Angular peer dependencies to v13.1 prerelease
789ddfaeb perf disable webpack backwards compatible APIs
@​ngtools/webpack
Commit Type Description
5402f99f8 fix add cjs and mjs to passthrough files
10d4ede2d fix handle promise rejection during Angular program analyzes

Special Thanks

Alan Agius, Charles Lyding, Doug Parker, Ferdinand Malcher, Joey Perrott and Ruslan Lekhman

v13.0.4

Compare Source

@​angular/cli
Commit Type Description
ded7b5c06 fix exit with a non-zero error code when migration fails during ng update
250a58b48 fix logic which determines which temp version of the CLI is to be download during ng update
@​schematics/angular
Commit Type Description
372e2e633 fix address eslint linting failures in test.ts
@​angular-devkit/build-angular
Commit Type Description
b835389c8 fix correctly extract messages when using cached build (#​22266)
647a5f0b1 fix don't watch nested node_modules when polling is enabled
4d01d4f72 fix transform remapped sourcemap into a plain object
@​ngtools/webpack
Commit Type Description
4d918ef99 fix JIT mode CommonJS accessing inexistent default property

Special Thanks

Alan Agius, Billy Lando, David-Emmanuel DIVERNOIS and Derek Cormier

v13.0.3

Compare Source

Special Thanks

Alan Agius, Joey Perrott and Krzysztof Platis

v13.0.2

Compare Source

@​angular/cli
Commit Type Description
34047b1ad fix avoid redirecting @​angular/core in Angular migrations
ff4538e98 fix favor ng-update packageGroupName in ng update output
@​schematics/angular
Commit Type Description
1bc00b6fe fix migrate ng-packagr configurations in package.json
9ea74a13d fix show warning when migrating ng-packagr JS configurations
@​angular-devkit/build-angular
Commit Type Description
35164bf92 fix don't restore input of type file during HMR
facb5d8ff fix don't show [NG HMR] Unknown input type when restoring file type input
ef8815d04 fix improve sourcemap fidelity during code-coverage
966a1334a fix suppress "@​charset" must be the first rule in the file warning
1cdc24da0 fix update Angular peer dependencies to 13.0 stable

Special Thanks

Alan Agius, Charles Lyding, Joey Perrott and Paul Gschwendtner

v13.0.1

Compare Source

@​schematics/angular
Commit Type Description
40f599241 fix updated Angular new project version to v13.0.0

Special Thanks

Charles Lyding and Joey Perrott

v13.0.0

Compare Source

Breaking Changes

@​angular/cli
  • We drop support for Node.js versions prior to 12.20.
@​schematics/angular
  • classlist.js and web-animations-js are removed from application polyfills and uninstalled from the package. These were only needed for compatibility with Internet Explorer, which is no longer needed now that Angular only supports evergreen browsers. See: https://angular.io/guide/browser-support.

Add the following to the polyfills file for an app to re-add these packages:

import 'classlist.js';
import 'web-animations-js';

And then run:

npm install classlist.js web-animations-js --save
  • We removed several deprecated @schematics/angular deprecated options.
  • lintFix have been removed from all schematics. ng lint --fix should be used instead.
  • legacyBrowsers have been removed from the application schematics since IE 11 is no longer supported.
  • configuration has been removed from the web-worker as it was unused.
  • target has been removed from the service-worker as it was unused.
@​angular-devkit/build-angular
  • Support for karma-coverage-instanbul-reporter has been dropped in favor of the official karma coverage plugin karma-coverage.

  • Support for node-sass has been removed. sass will be used by default to compile SASS and SCSS files.

  • NG_PERSISTENT_BUILD_CACHE environment variable option no longer have effect. Configure cli.cache in the workspace configuration instead.

{
  "$schema": "./node_modules/@​angular/cli/lib/config/schema.json",
  "version": 1,
  "cli": {
    "cache": {
      "enabled": true,
      "path": ".custom-cache-path",
      "environment": "all"
    }
  }
  ...
}
  • Calling BuilderContext.scheduleBuilder() with a builder from @angular-devkit/build-angular now requires passing the target property in the 3rd argument, like in the following example:

    context.scheduleBuilder('@​angular-devkit/build-angular:ng-packagr', options, {
      target: context.target,
    });
  • The automatic inclusion of Angular-required ES2015 polyfills to support ES5 browsers has been removed. Previously when targetting ES5 within the application's TypeScript configuration or listing an ES5 requiring browser in the browserslist file, Angular-required polyfills were included in the built application. However, with Angular no longer supporting IE11, there are now no browsers officially supported by Angular that would require these polyfills. As a result, the automatic inclusion of these ES2015 polyfills has been removed. Any polyfills manually added to an application's code are not affected by this change.

  • With this change a number of deprecated dev-server builder options which proxied to the browser builder have been removed. These options should be configured in the browser builder instead.

The removed options are:

  • aot

  • sourceMap

  • deployUrl

  • baseHref

  • vendorChunk

  • commonChunk

  • optimization

  • progress

  • With this change we removed several deprecated builder options

  • extractCss has been removed from the browser builder. CSS is now always extracted.

  • servePathDefaultWarning and hmrWarning have been removed from the dev-server builder. These options had no effect.

  • Deprecated @angular-devkit/build-angular:tslint builder has been removed. Use https://github.com/angular-eslint/angular-eslint instead.

  • Differential loading support has been removed. With Angular no longer supporting IE11, there are now no browsers officially supported by Angular that require ES5 code. As a result, differential loading's functionality for creating and conditionally loading ES5 and ES2015+ variants of an application is no longer required.

  • TypeScript versions prior to 4.4 are no longer supported.

  • The dev-server now uses WebSockets to communicate changes to the browser during HMR and live-reloaded. If during your development you are using a proxy you will need to enable proxying of WebSockets.

  • We remove inlining of Google fonts in WOFF format since IE 11 is no longer supported. Other supported browsers use WOFF2.

@​angular-devkit/build-webpack

Note: this change only affects users depending on @angular-devkit/build-webpack directly.

@​angular-devkit/core
  • With this change we drop support for the deprecated behaviour to transform id in schemas. Use $id instead.

Note: this only effects schematics and builders authors.

  • The deprecated JSON parser has been removed from public API. jsonc-parser should be used instead.
@​angular-devkit/schematics
  • isAction has been removed without replacement as it was unused.

  • With this change we remove the following deprecated APIs

  • TslintFixTask

  • TslintFixTaskOptions

Note: this only effects schematics developers.

@​ngtools/webpack
  • Deprecated inlineStyleMimeType option has been removed from AngularWebpackPluginOptions. Use inlineStyleFileExtension instead.

  • Applications directly using the webpack-cli and not the Angular CLI to build must set the environment variable DISABLE_V8_COMPILE_CACHE=1. The @ngtools/webpack package now uses dynamic imports to provide support for the ESM @angular/compiler-cli package. The v8-compile-cache package used by the webpack-cli does not currently support dynamic import expressions and will cause builds to fail if the environment variable is not specified. Applications using the Angul

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label May 6, 2022
@mend-for-github-com
Copy link
Contributor Author

mend-for-github-com bot commented Jun 19, 2022

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@mend-for-github-com mend-for-github-com bot changed the title Update dependency @angular/cli to v13 Update dependency @angular/cli to v13 - abandoned Jan 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants