Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump npm-registry-fetch from 4.0.3 to 4.0.7 in /integration/angular_cli #58

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Mar 7, 2021

Bumps npm-registry-fetch from 4.0.3 to 4.0.7.

Changelog

Sourced from npm-registry-fetch's changelog.

4.0.7 (2020-08-17)

Bug Fixes

  • correct password redaction (110032b)

4.0.6 (2020-08-14)

Bug Fixes

  • import URL from url module (cd35987)

4.0.5 (2020-06-30)

4.0.4 (2020-04-28)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 7, 2021
@auto-add-label auto-add-label bot added the build label Mar 7, 2021
@guardrails
Copy link

guardrails bot commented Mar 7, 2021

⚠️ We detected security issues in this pull request:
Mode: paranoid | Total findings: 529 | Considered vulnerability: 0

Hard-Coded Secrets (67)

https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L33067
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L35219
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L35284
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L68400
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L68527
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L104957
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L104969
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111859
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111860
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111861
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111865
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111866
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111880
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111881
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111889
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111890
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111895
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111896
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111910
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111911
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111919
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111920
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111925
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111926
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111934
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111935
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111940
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111941
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111949
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111950
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111951
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111955
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L111956
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L128456
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L132860
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L132864
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/.yarn/releases/yarn-1.22.10.cjs#L136379

sha256 = "dd4dc46066e2ce034cba0c81aa3e862b27e8e8d95871f567359f7a534cccb666",

"12.14.1-darwin_amd64": ("node-v12.14.1-darwin-x64.tar.gz", "node-v12.14.1-darwin-x64", "0be10a28737527a1e5e3784d3ad844d742fe8b0718acd701fd48f718fd3af78f"),

"12.14.1-linux_amd64": ("node-v12.14.1-linux-x64.tar.xz", "node-v12.14.1-linux-x64", "07cfcaa0aa9d0fcb6e99725408d9e0b07be03b844701588e3ab5dbc395b98e1b"),

"12.14.1-windows_amd64": ("node-v12.14.1-win-x64.zip", "node-v12.14.1-win-x64", "1f96ccce3ba045ecea3f458e189500adb90b8bc1a34de5d82fc10a5bf66ce7e3"),

"1.22.4": ("yarn-v1.22.4.tar.gz", "yarn-v1.22.4", "bc5316aa110b2f564a71a3d6e235be55b98714660870c5b6b2d2d3f12587fb58"),

sha256 = "1adf5db506a7e3c465a26988514cfc3971af6d5b3c2218925cd6e71ee443fc3f",

'/index.html': 'f0bea8ced1dfbeeb771a5f48651fbcff52a625eb',

'/spectrum.png': '8d048ece46c0f3af4b598a95fd8e4709b631c3c0',

'/foo/bar/favicon.ico': '84161b857f5c547e3699ddfbffc6d8d737542e01',

'/foo/bar/assets/folder-asset.txt': '617f202968a6a81050aa617c2e28e1dca11ce8d4',

'/foo/bar/index.html': 'f6650ac91428c6933dfe4c24079b3b15400da1ba',




if (message.hash === '5d4b9a5c0a4e0f9977598437b0e85bcc') {

const identValidFirstChar = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMOPQRSTUVWXYZ';


expect(mb.toString()).toBe('012345A67890');

expect(mb.toString()).toBe('01B2345A67890');

expect(mb.toString()).toBe('01234AB56789');

expect(mb.toString()).toBe('01234AB56789C');

expect(mb.toString()).toBe('01234A56789');

'3dba718d7afe009e112e10d69073d2a2', // 6.0 - unmodified

'fccdb76b06ea636933f8b99b1c8d9725', // 6.0 - all core-js uncommented

'97e16639be1de06153695f5fefde745d', // 7.0 - unmodified

'd6c13d6dcf94ff3749283f33dd0d4864', // 7.0 - all core-js uncommented

'79bf0fd46c215e5f4145e15641c325f3', // 7.2 - unmodified

'6fe8080c7e38ee0ce677fdbc3884377a', // 7.2 - all core-js uncommented

'8e7f6abb3d2dca03b4dbb300e400a880', // 7.3 - unmodified

-----BEGIN RSA PRIVATE KEY-----

More info on how to fix Hard-Coded Secrets in General.


Insecure Use of Dangerous Function (32)

const child_process = require('child_process');

const requiredModule = require(message.modulePath);

https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3634
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7258
const spawnSync = require('child_process').spawnSync;

const runfiles = require(process.env['BAZEL_NODE_RUNFILES_HELPER']);

const config = require(runfiles.resolveWorkspaceRelative(process.argv[2]));

const child_process = require('child_process');

const exec = util.promisify(child_process.exec);

const root = loadRootPackageJson();

const pkg = packages[pkgName];


const builderJsonPath = path.resolve(path.dirname(packageJsonPath), packageJson['builders']);




angularPkgJson = require(angularPackagePath);

const angularCliPkgPath = require.resolve('@angular/cli/package.json', resolveOptions);






const packageJsonPath = require.resolve(join(name, 'package.json'), resolveOptions);







encode: (x: string) => global.encodeURIComponent(x),

More info on how to fix Insecure Use of Dangerous Function in Javascript and Typescript.


Insecure File Management (291)

fs.writeFileSync(filePath, profileData);

if (fs.realpathSync(filename).match(/node_modules/)) {

return m._compile(fs.readFileSync(filename).toString(), filename);

const source = fs.readFileSync(filename).toString();

const source = fs.readFileSync(filename).toString();

if (fs.existsSync(maybeTsPath)) {

if (!fs.existsSync(tmpJsonSchemaPath)) {

if (fs.existsSync(path.join(current, 'angular-cli.json'))

|| fs.existsSync(path.join(current, '.angular-cli.json'))) {

found = os.homedir() !== current || fs.existsSync(path.join(current, 'package.json'));

if (fs.existsSync(path.join(current, 'angular.json'))

|| fs.existsSync(path.join(current, '.angular.json'))

|| fs.existsSync(path.join(current, 'package.json'))) {


if (!fs.statSync(dir).isDirectory()) return;



const content = fs.readFileSync(file, { encoding: 'utf-8' });

https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3671
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3672
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3682
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3788
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3866
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L6898
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L6973
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7185
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7219
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7323
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7331
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7336
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7372
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7375
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7451
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7502
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7544
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7556
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7572
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7605
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7630
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7638
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7646
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7654
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L11791
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L17250
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L18019
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L36969
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L37152
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L38093
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L39417
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L99713
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L99845
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L99863
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L99870
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100014
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100017
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100020
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100025
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100028
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100039
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L100092
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104250
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104323
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104368
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104570
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104713
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104754
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104772
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104784
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L104795
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L105568
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L106021
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L106023
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L106065
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L106785
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L107070
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L107916
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L109136
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L109162
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L109179
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L109242
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110494
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110822
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110854
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110874
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110878
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110889
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110929
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110933
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L110937
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L111012
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L111722
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L112160
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L112239
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L112854
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L113164
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L113169
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L113269
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L113319
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L115412
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L116361
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L128788
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L128842
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L147046
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L147111
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L147165
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L149079
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L149099
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L149113


return fs.existsSync(p) && fs.statSync(p).isFile();

fs.chmodSync(dest, isExecutable(src) ? '755' : '644');

binary = (runfilesBinary && fs.existsSync(runfilesBinary)) ? runfilesBinary : binary;

const contents = JSON.parse(fs.readFileSync(packageJson, {encoding: 'utf-8'}));

fs.writeFileSync(packageJson, contentsEncoded);

fs.readFileSync(`${outputBase}/DO_NOT_BUILD_HERE`, {encoding: 'utf-8'});

fs.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));

fs.readFileSync(nodePath, {encoding: 'utf-8'}).replace(' --preserve-symlinks-main ', ' ');

fs.writeFileSync(nodePath, nodeContents, 'utf8');

content = fs.readFileSync(filePath, 'utf-8').trim();

if (fs.existsSync(resolvedPath)) {

content = fs.readFileSync(resolvedPath, 'utf-8');

if (content === null && fs.existsSync(address)) {

content = fs.readFileSync(address, 'utf-8').trim();

fs.writeFileSync(outPath, content, 'utf-8');

const content = fs.readFileSync(inPath, 'utf-8');

const result: string[] = [];

result.push(p);

let p = path.resolve(pkg.root, packageJson['bin'][binName]);


const re = /^main\.(?:[a-zA-Z0-9]{20}\.)?js$/;

let filename = path.join(webpackStats.outputPath!, file.file);




filename: path.basename(result.original.filename),


filename: path.basename(result.downlevel.filename),



const outputPath = path.dirname(outFile);



// See: https://github.com/npm/cacache/blob/073fbe1a9f789ba42d9a41de7b8429c93cf61579/lib/util/move-file.js#L36





export const mkdir = promisify(fs.mkdir);

export const readFile = promisify(fs.readFile);


const originalMapPath = originalPath + '.map';













// The path is validated during option processing before the build starts

let resolvedPath = path.resolve(root, style.input);


const fullPath = path.join(basePath, tailwindConfigFile);


.then(() => fs.mkdirSync(root + '/sub1'))


.then(() => fs.mkdirSync(root + '/sub1'))


.then(() => fs.mkdirSync(root + '/rename'))

host.rename(normalize('/rename/a.txt'), normalize('/rename/b/c/d/a.txt'));

return _callFs<void, string, fs.MakeDirectoryOptions>(

mergeMap(() => _callFs<void, string, Uint8Array>(

read(path: Path): Observable<virtualFs.FileBuffer> {

const _recurseList = (path: Path) => {

for (const fragment of fs.readdirSync(getSystemPath(path))) {

observableFrom(allFiles).pipe(

observableFrom(allDirs).pipe(


rename(from: Path, to: Path): Observable<void> {

list(path: Path): Observable<PathFragment[]> {

return new Observable(obs => {

isDirectory(path: Path): Observable<boolean> {

isFile(path: Path): Observable<boolean> {

stat(path: Path): Observable<virtualFs.Stats<fs.Stats>> | null {

return new Observable(obs => {

fs.mkdirSync(getSystemPath(dirname(path)), { recursive: true });

return new Observable(obs => {


const rmDirComplete = new Observable<void>((obs) => {


const toSystemPath = getSystemPath(to);

fs.mkdirSync(path.dirname(toSystemPath), { recursive: true });

return new Observable(obs => {

return new Observable(obs => {

return new Observable(obs => {

const root = normalize(path.join(os.tmpdir(), `devkit-host-${+Date.now()}-${process.pid}`));

// https://stackoverflow.com/questions/24356713





fs.mkdirSync(path.join(tmpDir, 'node_modules'));

fs.mkdirSync(path.join(tmpDir, 'node_modules/@angular/'));

fs.mkdirSync(path.join(tmpDir, 'node_modules/@angular/core'));

fs.mkdirSync(path.join(tmpDir, 'node_modules/@angular/core/schematics'));


const localMigrations = path.join(packagePath, migrations);

const localMigrations = path.join(packagePath, migration.collection);

const cpuProfile = profiler.stopProfiling();




// We resolve symbolic links in order to get the real path that would be used in webpack.

function _recursiveMkDir(p: string) {

_recursiveMkDir(path.dirname(p));

_recursiveMkDir(path.dirname(i18nOutFilePath));

// Check if the locale file exists

// Check for an alternative locale (if the locale id was badly formatted).

// Create parent folder if necessary.


if (!fs.existsSync(p)) {

glob.sync(path.join(p, '**/*'), { dot: true, nodir: true })

.sort((a, b) => b.length - a.length)

for (const fileName of allJsonFiles) {

if (fs.existsSync(fileName.replace(/\.json$/, '.ts'))


_mkdirp(path.dirname(tsPath));


// Create parent folder if necessary.


if (!fs.existsSync(p)) {

function _recursiveFileList(p: string): string[] {


// Filter out directories.

// Create parent folder if necessary.

// Error out if destination already exists.


const buffer = fs.readFileSync(from);

function _recursiveCopy(from: string, to: string, logger: logging.Logger) {


if (fs.statSync(from).isDirectory()) {

p = path.relative(process.cwd(), p);


// Verify that it was actually built.


_rm(fileName);


args.githubToken ||

const packageJsonPath = path.join(projectName, 'package.json');


function _copy(from: string, to: string) {

const toPath = path.join(to, name);

if (fs.statSync(fromPath).isDirectory()) {

if (!fs.existsSync(toPath)) {




// empty commits).

opts.githubToken

const helpOutputRoot = path.join(packages['@angular/cli'].dist, 'help');

const jsonOutput = JSON.stringify(JSON.parse(stdout.trim()), undefined, 2);


const analyticsMarkdownPath = path.join(__dirname, '../docs/design/analytics.md');

const registryPath =

fs.writeFileSync('dirToSymlink/subdir2/subsubdir1/d.txt', '');

fs.readdirSync('./dist/test-project').forEach(name => {




for (const { lang, outputPath } of langTranslations) {

for (const { lang, outputPath } of langTranslations) {

return new Promise<string>((resolve, reject) => {

return new Promise<void>((resolve, reject) => {

return new Promise<void>((resolve, reject) => {

return new Promise<void>((resolve, reject) => {

return new Promise<void>((resolve, reject) => {

function _recursiveMkDir(path: string): Promise<void> {

return _recursiveMkDir(dirname(path))

.then(() => new Promise((resolve, reject) => {


return new Promise((resolve, reject) => {

return new Promise((resolve, reject) => {

return new Promise((resolve, reject) => {

export async function getFileSize(fileName: string) {


More info on how to fix Insecure File Management in Javascript and Typescript.


Insecure Use of Regular Expressions (69)

if (!__dirname.match(new RegExp(`\\${path.sep}node_modules\\${path.sep}`))) {

https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L2148
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L2781
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3042
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3048
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3053
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L3237
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L7233
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L11761
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L19166
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L35618
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L38270
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L38494
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L81076
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L107863
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L117253
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L126754
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L128767
https://github.com/turkdevops/angular-cli/blob/67c12d98352b04aac1a5aeb88f082e66ef0b4001/packages/schematics/angular/third_party/github.com/Microsoft/TypeScript/lib/typescript.js#L148011
+ ')($|/|\\\\)';

// We have some invalid goldens. Remove everything after the second :.

): Observable<experimental.jobs.JobHandler<A, I, O> | null> {

// The below will match 'project:target:configuration'


// The golden values should be present and in the right order.


const matches: { [path: string]: RegExp } = {







// If root-relative, absolute or protocol relative url, leave as is


const exportVarSetter = /(?:export )?(?:var|const)\s+(?:\S+)\s*=\s*/;


Insecure Use of Language/Framework API (1)
Insecure Use of Crypto (66)
Insecure Access Control (1)
Insecure Use of SQL Queries (2)

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

@kadirselcuk kadirselcuk merged commit 42226b1 into renovate/angular Mar 24, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
build dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants