Bump json5, @angular/cli, webpack, html-webpack-plugin and istanbul-instrumenter-loader #34

dependabot · 2023-01-07T17:29:32Z

Bumps json5 to 1.0.2 and updates ancestor dependencies json5, @angular/cli, webpack, html-webpack-plugin and istanbul-instrumenter-loader. These dependencies need to be updated together.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

a62db1e 1.0.2
e0c23fe docs: update CHANGELOG for v1.0.2
62a6540 fix: add proto to objects and arrays
See full diff in compare view

Updates @angular/cli from 1.5.0 to 15.0.5

Release notes

Sourced from @angular/cli's releases.

v15.0.5

15.0.5 (2023-01-06)

@angular-devkit/build-angular

Commit Description

format esbuild error messages to include more information

Special Thanks

Alan Agius, Kristiyan Kostadinov, Paul Gschwendtner and aanchal

v15.0.4

15.0.4 (2022-12-14)

@angular-devkit/build-angular

Commit Description

display actionable error when a style does not exist in Karma builder

downlevel class private methods when targeting Safari <=v15

include sources in generated Sass source maps

only set ngDevMode when script optimizations are enabled

update css-loader to 6.7.3

update locale setting snippet to use globalThis.

Special Thanks

Alan Agius and Charles Lyding

v15.0.3

15.0.3 (2022-12-07)

@angular-devkit/build-angular

Commit Description

default preserve symlinks to Node.js value for esbuild

downlevel class fields with Safari <= v15 for esbuild

downlevel class properties when targeting Safari <=v15

prevent optimization adding unsupported ECMASCript features

Special Thanks

Charles Lyding, Dominic Elm and Paul Gschwendtner

v15.0.2

15.0.2 (2022-11-30)

@angular-devkit/build-angular

Commit Description

correctly set Sass quietDeps and verbose options

@ngtools/webpack

Commit Description

elide unused type references

Special Thanks

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

15.0.5 (2023-01-06)

@angular-devkit/build-angular

Commit Type Description

c2030dec7 fix format esbuild error messages to include more information

Special Thanks

Alan Agius, Kristiyan Kostadinov, Paul Gschwendtner and aanchal

15.1.0-next.3 (2022-12-14)

Deprecations

@angular-devkit/schematics

The Observable based SchematicTestRunner.runSchematicAsync and SchematicTestRunner.runExternalSchematicAsync methods have been deprecated in favor of the Promise based SchematicTestRunner.runSchematic and SchematicTestRunner.runExternalSchematic.

@schematics/angular

Commit Type Description

8d000d156 feat add environments generation schematic

@angular-devkit/build-angular

Commit Type Description

216991b9d feat support inline component Sass styles with esbuild builder

8fd08491a fix display actionable error when a style does not exist in Karma builder

97373016c fix downlevel class private methods when targeting Safari <=v15

27b22b02d fix include sources in generated

310144d32 fix only set ngDevMode when script optimizations are enabled

20376649c fix transform async generator class methods for Zone.js support

afe9feaa4 fix update locale setting snippet to use globalThis.

@angular-devkit/schematics

Commit Type Description

207358afb feat add runSchematic and runExternalSchematic methods

Special Thanks

... (truncated)

Commits

3463486 release: cut the v15.0.5 release
ae35a05 ci: use snapshot deploy secret directly
c2030de fix(@angular-devkit/build-angular): format esbuild error messages to include ...
8b285dd test: removed empty methods
4ad951e docs: remove default project from schematic description
f8a6392 refactor(@ngtools/webpack): remove TypeScript 4.7 compatibility code
8771258 release: cut the v15.0.4 release
8e85f47 fix(@angular-devkit/build-angular): update css-loader to 6.7.3
9fd3562 fix(@angular-devkit/build-angular): only set ngDevMode when script optimizati...
ccc8e03 fix(@angular-devkit/build-angular): display actionable error when a style doe...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @angular/cli since your current version.

Updates webpack from 3.8.1 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

experiments.* normalize to false when opt-out

avoid NaN%

show the correct error when using a conflicting chunk name in code

HMR code tests existance of window before trying to access it

fix eval-nosources-* actually exclude sources

fix race condition where no module is returned from processing module

fix position of standalong semicolon in runtime code

Features

add support for @import to extenal CSS when using experimental CSS in node

add i64 support to the deprecated WASM implementation

Developer Experience

expose EnableWasmLoadingPlugin

add more typings

generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")

add support for ES2022 features like static blocks

add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive

make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules

remove left-over from debugging in TLA/async modules runtime code

remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed

fix shareScope option for ModuleFederationPlugin

set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance

Extensibility

export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

8241da7 5.75.0
a91d923 Merge pull request #16458 from webpack/bugfix/semi
4608b11 Merge pull request #16457 from webpack/tooling/update
dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback
23b9a1c Merge pull request #16167 from exposir/fixts
6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose
f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64
761a542 fix semicolon position
2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources
c18203c update tooling
Additional commits viewable in compare view

Updates html-webpack-plugin from 2.30.1 to 5.5.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.0 (2021-10-25)

Features

Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

update terser (9c7fba0

5.3.2 (2021-06-22)

Bug Fixes

update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

allow to modify the interpolation options in webpack config (d654f5b)

drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

improve ssr (73d2a66)

5.1.0 (2021-02-12)

Features

omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598

5.0.0 (2021-02-03)

... (truncated)

Commits

873d75b chore(release): 5.5.0
ddeb774 chore: update examples
1e42625 feat: Support type=module via scriptLoading option
7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
79be779 [chore] changes actions to run on pull_requests
b7e5859 [chore] fixes CI to avoid race conditions
48131d3 chore(release): 5.4.0
16a841a [chore] rebuild examples
3bb7c17 Update index.js
e38ac97 Update index.js
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.

Updates istanbul-instrumenter-loader from 2.0.0 to 3.0.1

Release notes

Sourced from istanbul-instrumenter-loader's releases.

v3.0.1

3.0.1 (2018-03-09)

Bug Fixes

package: add webpack >= v4.0.0 (peerDependencies) (#84) (00e20a4)

v3.0.0

2017-07-26

Bug Fixes

index: correct loader sourcemaps usage (#67) (691b565)

use latest API (loader-utils) (#61) (27cf4eb)

Code Refactoring

upgrade to webpack-defaults (#51) (b46a5c8)

Features

add options validation (schema-utils) (#65) (091eded)

BREAKING CHANGES

Enforces schema validation ( invalid configuration will throw )

Enforces Webpack standard NodeJS engines range. at the time of merge >= 4.3 < 5.0.0 || >= 5.10.

Upgrades loader-utils to 1.1.0 which has a minimum NodeJS version of 4.

Release v3.0.0-rc.1

3.0.0-rc.1 (2017-07-13)

Features

add options validation (schema-utils) (#65) (091eded)

BREAKING CHANGES

Enforces schema validation ( invalid configuration will throw )

... (truncated)

Changelog

Sourced from istanbul-instrumenter-loader's changelog.

3.0.1 (2018-03-09)

Bug Fixes

package: add webpack >= v4.0.0 (peerDependencies) (#84) (00e20a4)

3.0.0 (2017-07-26)

Bug Fixes

index: correct loader sourcemaps usage (#67) (691b565)

use latest API (loader-utils) (#61) (27cf4eb)

Code Refactoring

upgrade to webpack-defaults (#51) (b46a5c8)

Features

add options validation (schema-utils) (#65) (091eded)

BREAKING CHANGES

Enforces schema validation ( invalid configuration will throw )

Enforces Webpack standard NodeJS engines range. at the time of merge >= 4.3 < 5.0.0 || >= 5.10.

Upgrades loader-utils to 1.1.0 which has a minimum NodeJS version of 4.

3.0.0-rc.1 (2017-07-13)

Features

add options validation (schema-utils) (#65) (091eded)

BREAKING CHANGES

Enforces schema validation ( invalid configuration will throw )

... (truncated)

Commits

fe5fedb chore(release): 3.0.1
00e20a4 fix(package): add webpack >= v4.0.0 (peerDependencies) (#84)
2275102 build(defaults): update to v1.6.0 (#78)
5baa395 chore: Use npm 5 compatible Node 4 version
19b683a ci(Appveyor): Use npm 5 compatible Node 4 version
41f5e3a ci(Travis): Use npm 5 compatible Node 4 version
bdd51a2 docs(README): add file name to examples (#77)
df7a77d chore: Update changelog for 3.0.0 final
05eee6c chore(release): 3.0.0
6da749f docs(README): fix default value (options.esModules) (#68)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by d3viant0ne, a new releaser for istanbul-instrumenter-loader since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

…nstrumenter-loader Bumps [json5](https://github.com/json5/json5) to 1.0.2 and updates ancestor dependencies [json5](https://github.com/json5/json5), [@angular/cli](https://github.com/angular/angular-cli), [webpack](https://github.com/webpack/webpack), [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) and [istanbul-instrumenter-loader](https://github.com/webpack-contrib/istanbul-instrumenter-loader). These dependencies need to be updated together. Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) Updates `@angular/cli` from 1.5.0 to 15.0.5 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v1.5.0...15.0.5) Updates `webpack` from 3.8.1 to 5.75.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v3.8.1...v5.75.0) Updates `html-webpack-plugin` from 2.30.1 to 5.5.0 - [Release notes](https://github.com/jantimon/html-webpack-plugin/releases) - [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md) - [Commits](jantimon/html-webpack-plugin@v2.30.1...v5.5.0) Updates `istanbul-instrumenter-loader` from 2.0.0 to 3.0.1 - [Release notes](https://github.com/webpack-contrib/istanbul-instrumenter-loader/releases) - [Changelog](https://github.com/webpack-contrib/istanbul-instrumenter-loader/blob/master/CHANGELOG.md) - [Commits](webpack-contrib/istanbul-instrumenter-loader@v2.0.0...v3.0.1) --- updated-dependencies: - dependency-name: json5 dependency-type: indirect - dependency-name: "@angular/cli" dependency-type: direct:development - dependency-name: webpack dependency-type: direct:development - dependency-name: html-webpack-plugin dependency-type: direct:development - dependency-name: istanbul-instrumenter-loader dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 7, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump json5, @angular/cli, webpack, html-webpack-plugin and istanbul-instrumenter-loader #34

Bump json5, @angular/cli, webpack, html-webpack-plugin and istanbul-instrumenter-loader #34

Uh oh!

dependabot bot commented on behalf of github Jan 7, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	display actionable error when a style does not exist in Karma builder
	downlevel class private methods when targeting Safari <=v15
	include sources in generated Sass source maps
	only set ngDevMode when script optimizations are enabled
	update `css-loader` to `6.7.3`
	update locale setting snippet to use `globalThis`.

Commit	Description
	default preserve symlinks to Node.js value for esbuild
	downlevel class fields with Safari <= v15 for esbuild
	downlevel class properties when targeting Safari <=v15
	prevent optimization adding unsupported ECMASCript features

Commit	Type	Description
216991b9d	feat	support inline component Sass styles with esbuild builder
8fd08491a	fix	display actionable error when a style does not exist in Karma builder
97373016c	fix	downlevel class private methods when targeting Safari <=v15
27b22b02d	fix	include sources in generated
310144d32	fix	only set ngDevMode when script optimizations are enabled
20376649c	fix	transform async generator class methods for Zone.js support
afe9feaa4	fix	update locale setting snippet to use `globalThis`.

Bump json5, @angular/cli, webpack, html-webpack-plugin and istanbul-instrumenter-loader #34

Are you sure you want to change the base?

Bump json5, @angular/cli, webpack, html-webpack-plugin and istanbul-instrumenter-loader #34

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 7, 2023

v1.0.2

Unreleased [code, diff]

v2.2.3 [code, diff]

v2.2.2 [code, diff]

v2.2.1 [code, diff]

v2.2.0 [code, diff]

v2.1.3 [code, diff]

v2.1.2 [code, diff]

v15.0.5

15.0.5 (2023-01-06)

@​angular-devkit/build-angular

Special Thanks

v15.0.4

15.0.4 (2022-12-14)

@​angular-devkit/build-angular

Special Thanks

v15.0.3

15.0.3 (2022-12-07)

@​angular-devkit/build-angular

Special Thanks

v15.0.2

15.0.2 (2022-11-30)

@​angular-devkit/build-angular

@​ngtools/webpack

Special Thanks

15.0.5 (2023-01-06)

@​angular-devkit/build-angular

Special Thanks

15.1.0-next.3 (2022-12-14)

Deprecations

@​angular-devkit/schematics

@​schematics/angular

@​angular-devkit/build-angular

@​angular-devkit/schematics

Special Thanks

v5.75.0

Bugfixes

Features

Developer Experience

v5.74.0

Features

Bugfixes

Performance

Extensibility

v5.73.0

5.5.0 (2021-10-25)

Features

5.4.0 (2021-10-15)

Features

5.3.2 (2021-06-22)

Bug Fixes

5.3.1 (2021-03-09)

Bug Fixes

5.3.0 (2021-03-07)

Features

5.2.0 (2021-02-19)

Features

5.1.0 (2021-02-12)

Features

5.0.0 (2021-02-03)

v3.0.1

3.0.1 (2018-03-09)

Bug Fixes

v3.0.0

2017-07-26

Bug Fixes

Code Refactoring

Features

BREAKING CHANGES

Release v3.0.0-rc.1

3.0.0-rc.1 (2017-07-13)

Features

BREAKING CHANGES

3.0.1 (2018-03-09)

`@angular-devkit/build-angular`

`@angular-devkit/build-angular`

`@angular-devkit/build-angular`

`@angular-devkit/build-angular`

`@ngtools/webpack`

`@angular-devkit/build-angular`

`@angular-devkit/schematics`

`@schematics/angular`

`@angular-devkit/build-angular`

`@angular-devkit/schematics`