Bump the npm_and_yarn group across 1 directory with 48 updates by dependabot[bot] · Pull Request #1 · guden/securitydev

dependabot · 2024-06-04T04:19:27Z

Bumps the npm_and_yarn group with 26 updates in the /Samples/aspnet-angular/MicrosoftGraph_Security_API_Sample/ClientApp directory:

Package	From	To
@angular/core	`7.2.6`	`10.2.5`
moment	`2.24.0`	`2.29.4`
karma	`4.1.0`	`6.3.16`
node-sass	`4.11.0`	`7.0.0`
y18n	`3.2.1`	`3.2.2`
@babel/traverse	`7.3.4`	`7.24.6`
ajv	`6.9.1`	`6.12.6`
@angular-devkit/build-angular	`0.13.8`	`18.0.2`
@angular/cli	`7.3.3`	`18.0.2`
chart.js	`2.7.3`	`2.9.4`
decode-uri-component	`0.2.0`	`0.2.2`
follow-redirects	`1.7.0`	`1.15.6`
fsevents	`1.2.7`	`1.2.13`
ini	`1.3.5`	`1.3.8`
minimatch	`3.0.4`	`3.0.8`
glob-parent	`3.1.0`	`removed`
@angular/compiler-cli	`7.2.6`	`18.0.1`
handlebars	`4.1.0`	`4.7.8`
hosted-git-info	`2.7.1`	`2.8.9`
json-schema	`0.2.3`	`0.4.0`
jsprim	`1.4.1`	`1.4.2`
jszip	`3.2.0`	`3.10.1`
lodash	`4.17.11`	`4.17.21`
path-parse	`1.0.6`	`1.0.7`
qs	`6.5.2`	`6.5.3`
scss-tokenizer	`0.2.3`	`0.4.3`
node-sass	`7.0.0`	`7.0.3`

Updates @angular/core from 7.2.6 to 10.2.5

Changelog

Sourced from @angular/core's changelog.

10.2.5 (2021-04-14)

Bug Fixes

compiler-cli: show a more specific error for Ivy NgModules (#41534) (#41598) (f630f33)

core: fix possible XSS attack in development through SSR (#40525) (ba8da74)

10.2.4 (2020-12-17)

Bug Fixes

core: fix possible XSS attack in development through SSR. (#40152) (0b8e3d5)

core: set ngDevMode to false when calling enableProdMode() (#40160) (90570c0)

10.2.3 (2020-11-09)

Bug Fixes

compiler: ensure that i18n message-parts have the correct source-span (#39589) (e67a331)

compiler: skipping leading whitespace should not break placeholder source-spans (#39589) (2b684b7), closes #39195

compiler-cli: avoid duplicate diagnostics about unknown pipes (#39517) (861e4fa)

compiler-cli: do not drop non-Angular decorators when downleveling (#39577) (1c6cf8a), closes #39574

10.2.2 (2020-11-04)

Bug Fixes

compiler-cli: report missing pipes when fullTemplateTypeCheck is disabled (#39320) (71d0063), closes #38195

core: markDirty() should only mark flags when really scheduling tick. (#39316) (8c82106), closes #39296

router: Ensure all outlets are used when commands have a prefix (#39456) (85d5242)

Performance Improvements

core: do not recurse into modules that have already been registered (#39514) (812355c), closes #39487

... (truncated)

Commits

ba8da74 fix(core): fix possible XSS attack in development through SSR (#40525)
90570c0 fix(core): set ngDevMode to false when calling enableProdMode() (#40160)
0b8e3d5 fix(core): fix possible XSS attack in development through SSR. (#40152)
1aee8b3 refactor(compiler): store the fullStart location on ParseSourceSpans (#39...
812355c perf(core): do not recurse into modules that have already been registered (#3...
8f36c21 refactor(router): Small refactor of createUrlTree and extra tests (#39456)
90acb91 docs: tView.preOrderHooks and tView.preOrderCheckHooks docs update (#39497)
8c82106 fix(core): markDirty() should only mark flags when really scheduling tick. (#...
0b37249 docs(core): update a typo in the comment of ngZoneEventCoalescing (#39423)
3b779a1 docs: fix typo in initializeInputAndOutputAliases docstring (#39438)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @angular/core since your current version.

Updates moment from 2.24.0 to 2.29.4

Changelog

Sourced from moment's changelog.

2.29.4

Release Jul 6, 2022

#6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

Release Apr 17, 2022

#5995 [bugfix] Remove const usage

#5990 misc: fix advisory link

2.29.2 See full changelog

Release Apr 3 2022

Address GHSA-8hfj-j24r-96c4

2.29.1 See full changelog

Release Oct 6, 2020

Updated deprecation message, bugfix in hi locale

2.29.0 See full changelog

Release Sept 22, 2020

New locales (es-mx, bn-bd). Minor bugfixes and locale improvements. More tests. Moment is in maintenance mode. Read more at this link: https://momentjs.com/docs/#/-project-status/

2.28.0 See full changelog

Release Sept 13, 2020

Fix bug where .format() modifies original instance, and locale updates

2.27.0 See full changelog

Release June 18, 2020

Added Turkmen locale, other locale improvements, slight TypeScript fixes

2.26.0 See full changelog

Release May 19, 2020

... (truncated)

Commits

000ac18 Build 2.24.4
f2006b6 Bump version to 2.24.4
536ad0c Update changelog for 2.29.4
9a3b589 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)
6374fd8 Merge branch 'master' into develop
b4e6153 Revert "[bugfix] Fix redos in preprocessRFC2822 regex (#6015)"
7aebb16 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)
57c9062 Build 2.29.3
aaf50b6 Fixup release complaints
26f4aef Bump version to 2.29.3
Additional commits viewable in compare view

Updates karma from 4.1.0 to 6.3.16

Release notes

Sourced from karma's releases.

v6.3.16

6.3.16 (2022-02-10)

Bug Fixes

security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

v6.3.15

6.3.15 (2022-02-05)

Bug Fixes

helper: make mkdirIfNotExists helper resilient to concurrent calls (d9dade2), closes karma-runner/karma-coverage#434

v6.3.14

6.3.14 (2022-02-05)

Bug Fixes

remove string template from client code (91d5acd)

warn when singleRun and autoWatch are false (69cfc76)

security: remove XSS vulnerability in returnUrl query param (839578c)

v6.3.13

6.3.13 (2022-01-31)

Bug Fixes

deps: bump log4js to resolve security issue (5bf2df3), closes #3751

v6.3.12

6.3.12 (2022-01-24)

Bug Fixes

remove depreciation warning from log4js (41bed33)

v6.3.11

6.3.11 (2022-01-13)

Bug Fixes

deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

... (truncated)

Changelog

Sourced from karma's changelog.

6.3.16 (2022-02-10)

Bug Fixes

security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

6.3.15 (2022-02-05)

Bug Fixes

helper: make mkdirIfNotExists helper resilient to concurrent calls (d9dade2), closes karma-runner/karma-coverage#434

6.3.14 (2022-02-05)

Bug Fixes

remove string template from client code (91d5acd)

warn when singleRun and autoWatch are false (69cfc76)

security: remove XSS vulnerability in returnUrl query param (839578c)

6.3.13 (2022-01-31)

Bug Fixes

deps: bump log4js to resolve security issue (5bf2df3), closes #3751

6.3.12 (2022-01-24)

Bug Fixes

remove depreciation warning from log4js (41bed33)

6.3.11 (2022-01-13)

Bug Fixes

deps: pin colors package to 1.4.0 due to security vulnerability (a5219c5)

6.3.10 (2022-01-08)

Bug Fixes

logger: create parent folders if they are missing (0d24bd9), closes #3734

... (truncated)

Commits

ab4b328 chore(release): 6.3.16 [skip ci]
ff7edbb fix(security): mitigate the "Open Redirect Vulnerability"
c1befa0 chore(release): 6.3.15 [skip ci]
d9dade2 fix(helper): make mkdirIfNotExists helper resilient to concurrent calls
653c762 ci: prevent duplicate CI tasks on creating a PR
c97e562 chore(release): 6.3.14 [skip ci]
91d5acd fix: remove string template from client code
69cfc76 fix: warn when singleRun and autoWatch are false
839578c fix(security): remove XSS vulnerability in returnUrl query param
db53785 chore(release): 6.3.13 [skip ci]
Additional commits viewable in compare view

Updates node-sass from 4.11.0 to 7.0.0

Release notes

Sourced from node-sass's releases.

v7.0.0

Breaking changes

Drop support for Node 15 (@nschonni)

Set rejectUnauthorized to true by default (@scott-ut, #3149)

Features

Add support for Node 17 (@nschonni)

Dependencies

Bump eslint from 7.32.0 to 8.0.0 (@nschonni, #3191)

Bump fs-extra from 0.30.0 to 10.0.0 (@nschonni, #3102)

Bump npmlog from 4.1.2 to 5.0.0 (@nschonni, #3156)

Bump chalk from 1.1.3 to 4.1.2 (@nschonni, #3161)

Community

Remove double word "support" from documentation (@pzrq, #3159)

Misc

Bump various GitHub Actions dependencies (@nschonni)

Supported Environments

OS Architecture Node

Windows x86 & x64 12, 14, 16, 17

OSX x64 12, 14, 16, 17

Linux* x64 12, 14, 16, 17

Alpine Linux x64 12, 14, 16, 17

FreeBSD i386 amd64 12, 14

*Linux support refers to major distributions like Ubuntu, and Debian

v6.0.1

Dependencies

Remove mkdirp (@jimmywarting, #3108)

Bump meow to 9.0.0 (@ykolbin, #3125)

Bump mocha to 9.0.1 (@xzyfer, #3134)

Misc

Use default Apline version from docker-node (@nschonni, #3121)

Supported Environments

... (truncated)

Changelog

Sourced from node-sass's changelog.

v4.14.0

https://github.com/sass/node-sass/releases/tag/v4.14.0

v4.13.1

https://github.com/sass/node-sass/releases/tag/v4.13.1

v4.13.0

https://github.com/sass/node-sass/releases/tag/v4.13.0

v4.12.0

https://github.com/sass/node-sass/releases/tag/v4.12.0

Commits

918dcb3 Lint fix
0a21792 Set rejectUnauthorized to true by default (#3149)
e80d4af chore: Drop EOL Node 15 (#3122)
d753397 feat: Add Node 17 support (#3195)
dcf2e75 build(deps-dev): bump eslint from 7.32.0 to 8.0.0
bfa1a3c build(deps): bump actions/setup-node from 2.4.0 to 2.4.1
80d6c00 chore: Windows x86 on GitHub Actions (#3041)
566dc27 build(deps-dev): bump fs-extra from 0.30.0 to 10.0.0 (#3102)
7bb5157 build(deps): bump npmlog from 4.1.2 to 5.0.0 (#3156)
2efb38f build(deps): bump chalk from 1.1.3 to 4.1.2 (#3161)
Additional commits viewable in compare view

Updates y18n from 3.2.1 to 3.2.2

Release notes

Sourced from y18n's releases.

y18n y18n-v4.0.3

Bug Fixes

release: 4.x.x should not enforce Node 10 (#126) (1e21a53)

y18n y18n-v4.0.2

Bug Fixes

security: ensure entry exists for backport (#120) (b22c0df)

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Updates yargs-parser from 5.0.0 to 7.0.0

Changelog

Sourced from yargs-parser's changelog.

17.0.0 (2020-02-10)

⚠ BREAKING CHANGES

this reverts parsing behavior of booleans to that of yargs@14

objects used during parsing are now created with a null prototype. There may be some scenarios where this change in behavior leaks externally.

Features

boolean arguments will not be collected into an implicit array (#236) (34c4e19)

introduce nargs-eats-options config option (#246) (d50822a)

Bug Fixes

address bugs with "uknown-options-as-args" (bc023e3)

array should take precedence over nargs, but enforce nargs (#243) (4cbc188)

support keys that collide with object prototypes (#234) (1587b6d)

unknown options terminated with digits now handled by unknown-options-as-args (#238) (d36cdfa)

16.1.0 (2019-11-01)

⚠ BREAKING CHANGES

populate error if incompatible narg/count or array/count options are used (#191)

Features

options that have had their default value used are now tracked (#211) (a525234)

populate error if incompatible narg/count or array/count options are used (#191) (84a401f)

Reverts

revert 16.0.0 CHANGELOG entry (920320a)

Commits

8ae91cd chore(release): 7.0.0
6003e6d chore: revert populate-- logic (#91)
0552218 chore(release): 6.0.1
4e739cc fix: default '--' to undefined when not provided; this is closer to the array...
4a383cf chore(release): 6.0.0
cd666db feat: when parsing stops, we now populate "--" by default (#88)
4a298d5 chore: no longer run tests on 0.12
3e47d62 fix: parsing hints should apply for dot notation keys (#86)
f1903aa chore: upgrade to newest version of camelcase (#87)
d2a76f0 chore: drop support for Node 0.10/0.12 (#85)
Additional commits viewable in compare view

Updates @babel/traverse from 7.3.4 to 7.24.6

Release notes

Sourced from @babel/traverse's releases.

v7.24.6 (2024-05-24)

Thanks @amjed-98, @blakewilson, @coelhucas, and @SukkaW for your first PRs!

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

#16476 fix: Correctly parse cls.fn<C> = x (@liuxingbaoyu)

🏠 Internal

babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16501 Generate helper metadata at build time (@nicolo-ribaudo)

babel-helpers

#16499 Add tsconfig.json for @babel/helpers/src/helpers (@nicolo-ribaudo)

babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16495 Move all runtime helpers to individual files (@nicolo-ribaudo)

babel-parser, babel-traverse

#16482 Statically generate boilerplate for bitfield accessors (@nicolo-ribaudo)

Other

#16466 Migrate import assertions syntax (@JLHwung)

Committers: 9

Amjad Yahia Robeen Hassan (@amjed-98)

Babel Bot (@babel-bot)

Blake Wilson (@blakewilson)

Huáng Jùnliàng (@JLHwung)

Lucas Coelho (@coelhucas)

Nicolò Ribaudo (@nicolo-ribaudo)

Sukka (@SukkaW)

Zzzen (@Zzzen)

@liuxingbaoyu

v7.24.5 (2024-04-29)

Thanks @romgrk and @sossost for your first PRs!

🐛 Bug Fix

babel-plugin-transform-classes, babel-traverse

#16377 fix: TypeScript annotation affects output (@liuxingbaoyu)

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16440 Fix suppressed error order (@sossost)

#16408 Await nullish async disposable (@JLHwung)

... (truncated)

Changelog

Sourced from @babel/traverse's changelog.

v7.24.6 (2024-05-24)

🐛 Bug Fix

babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties

#16514 Fix source maps for private member expressions (@nicolo-ribaudo)

babel-core, babel-generator, babel-plugin-transform-modules-commonjs

#16515 Fix source maps for template literals (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

#16485 Support undecorated static accessor in anonymous classes (@JLHwung)

#16484 Fix decorator bare yield await (@JLHwung)

babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3

#16483 Fix: throw TypeError if addInitializer is called after finished (@JLHwung)

babel-parser, babel-plugin-transform-typescript

#16476 fix: Correctly parse cls.fn<C> = x (@liuxingbaoyu)

🏠 Internal

babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16501 Generate helper metadata at build time (@nicolo-ribaudo)

babel-helpers

#16499 Add tsconfig.json for @babel/helpers/src/helpers (@nicolo-ribaudo)

babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

#16495 Move all runtime helpers to individual files (@nicolo-ribaudo)

babel-parser, babel-traverse

#16482 Statically generate boilerplate for bitfield accessors (@nicolo-ribaudo)

Other

#16466 Migrate import assertions syntax (@JLHwung)

v7.24.5 (2024-04-29)

🐛 Bug Fix

babel-plugin-transform-classes, babel-traverse

#16377 fix: TypeScript annotation affects output (@liuxingbaoyu)

babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3

#16440 Fix suppressed error order (@sossost)

#16408 Await nullish async disposable (@JLHwung)

💅 Polish

babel-parser

#16407 Recover from exported using declaration (@JLHwung)

🏠 Internal

Other

#16414 Relax ESLint peerDependency constraint to allow v9 (@liuxingbaoyu)

babel-parser

#16425 Improve @babel/parser AST types (@nicolo-ribaudo)

#16417 Always pass type argument to .startNode (@nicolo-ribaudo)

babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse

#16439 Make NodePath<T | U> distributive (@nicolo-ribaudo)

babel-plugin-proposal-partial-application, babel-types

#16421 Remove JSXNamespacedName from valid CallExpression args (@nicolo-ribaudo)

babel-plugin-transform-class-properties, babel-preset-env

... (truncated)

Commits

9630250 v7.24.6
1f010df Explicitly define NodePath.prototype.* (#16488)
6e3539b [babel 8] Publish .d.ts files for every package (#16416)
e37e64d Use eslint v9 (#16479)
3ff20b9 Statically generate boilerplate for bitfield accessors (#16482)
97c3eb1 Remove syntaxType option for record-and-tuple (parser&plugin) (#16458)
71c247a [babel 8] Require Node.js ^18.20.0 || ^20.10.0 || >=21.0.0 (#16457)
ddbea7d v7.24.5
e779cad fix: TypeScript annotation affects output (#16377)
ee48754 Use multiple TypeScript projects (#16430)
Additional commits viewable in compare view

Updates ajv from 6.9.1 to 6.12.6

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

Commits

fe59143 6.12.6
d580d3e Merge pull request #1298 from ajv-validator/fix-url
fd36389 fix: regular expression for "url" format
490e34c docs: link to v7-beta branch
9cd93a1 docs: note about v7 in readme
877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type
f1c8e45 6.12.5
764035e Merge branch 'ChALkeR-chalker/fix-comma'
3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...
a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 0.13.8 to 18.0.2

Release notes

Sourced from @angular-devkit/build-angular's releases.

v18.0.2

18.0.2 (2024-05-29)

@schematics/angular

Commit Description

check both application builder packages in SSR schematic

set builders assets option correctly for new applications

@angular/build

Commit Description

disable Worker wait loop for Sass compilations in web containers

print Sass @warn location

support valid self-closing MathML tags in HTML index file

support valid self-closing SVG tags in HTML index file

@angular/pwa

Commit Description

set manifest icons location to match assets builder option

v18.0.1

18.0.1 (2024-05-23)

@schematics/angular

Commit Description

use angular.dev in readme

@angular/build

Commit Description

avoid rebasing URLs with function calls

disable persistent disk caching inside webcontainers by default

handle esbuild-browser polyfills option as string during ng serve

only import persistent cache store with active caching

v18.0.0

18.0.0 (2024-05-22)

@schematics/angular

Commit Description

allow application migration to use new build package in projects where possible

replace assets with public directory

use eventCoalescing option by default (standalone bootstrap)

use ngZoneEventCoalescing option by default (module bootstrap)

use TypeScript bundler module resolution for new projects

add less dependency in application migration if needed

add postcss dependency in application migration if needed

add spaces around eventCoalescing option

keep deployUrl option when migrating to application builder

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

18.0.2 (2024-05-29)

@schematics/angular

Commit Type Description

9967c04b8 fix check both application builder packages in SSR schematic

Bumps the npm_and_yarn group with 26 updates in the /Samples/aspnet-angular/MicrosoftGraph_Security_API_Sample/ClientApp directory: | Package | From | To | | --- | --- | --- | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `7.2.6` | `10.2.5` | | [moment](https://github.com/moment/moment) | `2.24.0` | `2.29.4` | | [karma](https://github.com/karma-runner/karma) | `4.1.0` | `6.3.16` | | [node-sass](https://github.com/sass/node-sass) | `4.11.0` | `7.0.0` | | [y18n](https://github.com/yargs/y18n) | `3.2.1` | `3.2.2` | | [@babel/traverse](https://github.com/babel/babel/tree/HEAD/packages/babel-traverse) | `7.3.4` | `7.24.6` | | [ajv](https://github.com/ajv-validator/ajv) | `6.9.1` | `6.12.6` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `0.13.8` | `18.0.2` | | [@angular/cli](https://github.com/angular/angular-cli) | `7.3.3` | `18.0.2` | | [chart.js](https://github.com/chartjs/Chart.js) | `2.7.3` | `2.9.4` | | [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) | `0.2.0` | `0.2.2` | | [follow-redirects](https://github.com/follow-redirects/follow-redirects) | `1.7.0` | `1.15.6` | | [fsevents](https://github.com/fsevents/fsevents) | `1.2.7` | `1.2.13` | | [ini](https://github.com/npm/ini) | `1.3.5` | `1.3.8` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.0.8` | | [glob-parent](https://github.com/gulpjs/glob-parent) | `3.1.0` | `removed` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `7.2.6` | `18.0.1` | | [handlebars](https://github.com/handlebars-lang/handlebars.js) | `4.1.0` | `4.7.8` | | [hosted-git-info](https://github.com/npm/hosted-git-info) | `2.7.1` | `2.8.9` | | [json-schema](https://github.com/kriszyp/json-schema) | `0.2.3` | `0.4.0` | | [jsprim](https://github.com/joyent/node-jsprim) | `1.4.1` | `1.4.2` | | [jszip](https://github.com/Stuk/jszip) | `3.2.0` | `3.10.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.11` | `4.17.21` | | [path-parse](https://github.com/jbgutierrez/path-parse) | `1.0.6` | `1.0.7` | | [qs](https://github.com/ljharb/qs) | `6.5.2` | `6.5.3` | | [scss-tokenizer](https://github.com/sasstools/scss-tokenizer) | `0.2.3` | `0.4.3` | | [node-sass](https://github.com/sass/node-sass) | `7.0.0` | `7.0.3` | Updates `@angular/core` from 7.2.6 to 10.2.5 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/10.2.5/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/10.2.5/packages/core) Updates `moment` from 2.24.0 to 2.29.4 - [Changelog](https://github.com/moment/moment/blob/develop/CHANGELOG.md) - [Commits](moment/moment@2.24.0...2.29.4) Updates `karma` from 4.1.0 to 6.3.16 - [Release notes](https://github.com/karma-runner/karma/releases) - [Changelog](https://github.com/karma-runner/karma/blob/master/CHANGELOG.md) - [Commits](karma-runner/karma@v4.1.0...v6.3.16) Updates `node-sass` from 4.11.0 to 7.0.0 - [Release notes](https://github.com/sass/node-sass/releases) - [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md) - [Commits](sass/node-sass@v4.11.0...v7.0.0) Updates `y18n` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/yargs/y18n/releases) - [Changelog](https://github.com/yargs/y18n/blob/master/CHANGELOG.md) - [Commits](https://github.com/yargs/y18n/commits) Updates `yargs-parser` from 5.0.0 to 7.0.0 - [Release notes](https://github.com/yargs/yargs-parser/releases) - [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md) - [Commits](yargs/yargs-parser@v5.0.0...v7.0.0) Updates `@babel/traverse` from 7.3.4 to 7.24.6 - [Release notes](https://github.com/babel/babel/releases) - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md) - [Commits](https://github.com/babel/babel/commits/v7.24.6/packages/babel-traverse) Updates `ajv` from 6.9.1 to 6.12.6 - [Release notes](https://github.com/ajv-validator/ajv/releases) - [Commits](ajv-validator/ajv@v6.9.1...v6.12.6) Updates `@angular-devkit/build-angular` from 0.13.8 to 18.0.2 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular-cli/commits/18.0.2) Updates `@angular/cli` from 7.3.3 to 18.0.2 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v7.3.3...18.0.2) Updates `async` from 1.5.2 to 2.6.2 - [Release notes](https://github.com/caolan/async/releases) - [Changelog](https://github.com/caolan/async/blob/v2.6.2/CHANGELOG.md) - [Commits](caolan/async@v1.5.2...v2.6.2) Updates `browserslist` from 4.5.5 to 4.23.0 - [Release notes](https://github.com/browserslist/browserslist/releases) - [Changelog](https://github.com/browserslist/browserslist/blob/main/CHANGELOG.md) - [Commits](browserslist/browserslist@4.5.5...4.23.0) Updates `chart.js` from 2.7.3 to 2.9.4 - [Release notes](https://github.com/chartjs/Chart.js/releases) - [Commits](chartjs/Chart.js@v2.7.3...v2.9.4) Updates `decode-uri-component` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/SamVerschueren/decode-uri-component/releases) - [Commits](SamVerschueren/decode-uri-component@v0.2.0...v0.2.2) Updates `dns-packet` from 1.3.1 to 5.6.1 - [Changelog](https://github.com/mafintosh/dns-packet/blob/master/CHANGELOG.md) - [Commits](mafintosh/dns-packet@v1.3.1...v5.6.1) Updates `express` from 4.16.4 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.16.4...4.19.2) Updates `follow-redirects` from 1.7.0 to 1.15.6 - [Release notes](https://github.com/follow-redirects/follow-redirects/releases) - [Commits](follow-redirects/follow-redirects@v1.7.0...v1.15.6) Updates `fsevents` from 1.2.7 to 1.2.13 - [Release notes](https://github.com/fsevents/fsevents/releases) - [Commits](fsevents/fsevents@v1.2.7...v1.2.13) Updates `ini` from 1.3.5 to 1.3.8 - [Release notes](https://github.com/npm/ini/releases) - [Changelog](https://github.com/npm/ini/blob/main/CHANGELOG.md) - [Commits](npm/ini@v1.3.5...v1.3.8) Updates `minimatch` from 3.0.4 to 3.0.8 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.0.8) Updates `minimist` from 0.0.8 to 0.0.10 - [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md) - [Commits](minimistjs/minimist@v0.0.8...v0.0.10) Updates `semver` from 5.3.0 to 5.6.0 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v5.3.0...v5.6.0) Updates `tar` from 2.2.1 to 6.2.1 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v2.2.1...v6.2.1) Removes `glob-parent` Updates `@angular/compiler-cli` from 7.2.6 to 18.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/18.0.1/packages/compiler-cli) Updates `handlebars` from 4.1.0 to 4.7.8 - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.8/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.0...v4.7.8) Updates `hosted-git-info` from 2.7.1 to 2.8.9 - [Release notes](https://github.com/npm/hosted-git-info/releases) - [Changelog](https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md) - [Commits](npm/hosted-git-info@v2.7.1...v2.8.9) Updates `json-schema` from 0.2.3 to 0.4.0 - [Commits](kriszyp/json-schema@v0.2.3...v0.4.0) Updates `jsprim` from 1.4.1 to 1.4.2 - [Changelog](https://github.com/TritonDataCenter/node-jsprim/blob/v1.4.2/CHANGES.md) - [Commits](TritonDataCenter/node-jsprim@v1.4.1...v1.4.2) Updates `json5` from 1.0.1 to 2.2.3 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v2.2.3) Updates `jszip` from 3.2.0 to 3.10.1 - [Changelog](https://github.com/Stuk/jszip/blob/main/CHANGES.md) - [Commits](Stuk/jszip@v3.2.0...v3.10.1) Updates `loader-utils` from 1.2.3 to 2.0.4 - [Release notes](https://github.com/webpack/loader-utils/releases) - [Changelog](https://github.com/webpack/loader-utils/blob/v2.0.4/CHANGELOG.md) - [Commits](webpack/loader-utils@v1.2.3...v2.0.4) Updates `lodash` from 4.17.11 to 4.17.21 - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](lodash/lodash@4.17.11...4.17.21) Updates `log4js` from 4.1.0 to 6.9.1 - [Changelog](https://github.com/log4js-node/log4js-node/blob/master/CHANGELOG.md) - [Commits](log4js-node/log4js-node@v4.1.0...v6.9.1) Updates `ssri` from 5.3.0 to 10.0.6 - [Release notes](https://github.com/npm/ssri/releases) - [Changelog](https://github.com/npm/ssri/blob/main/CHANGELOG.md) - [Commits](npm/ssri@v5.3.0...v10.0.6) Updates `node-forge` from 0.7.5 to 1.3.1 - [Changelog](https://github.com/digitalbazaar/forge/blob/main/CHANGELOG.md) - [Commits](digitalbazaar/forge@0.7.5...v1.3.1) Updates `path-parse` from 1.0.6 to 1.0.7 - [Commits](https://github.com/jbgutierrez/path-parse/commits/v1.0.7) Updates `postcss` from 7.0.14 to 8.4.38 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@7.0.14...8.4.38) Updates `qs` from 6.5.2 to 6.5.3 - [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md) - [Commits](ljharb/qs@v6.5.2...v6.5.3) Updates `scss-tokenizer` from 0.2.3 to 0.4.3 - [Release notes](https://github.com/sasstools/scss-tokenizer/releases) - [Commits](sasstools/scss-tokenizer@v0.2.3...v0.4.3) Updates `node-sass` from 7.0.0 to 7.0.3 - [Release notes](https://github.com/sass/node-sass/releases) - [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md) - [Commits](sass/node-sass@v4.11.0...v7.0.0) Updates `socket.io` from 2.1.1 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io@2.1.1...4.7.5) Updates `socket.io-parser` from 3.2.0 to 4.2.4 - [Release notes](https://github.com/socketio/socket.io-parser/releases) - [Changelog](https://github.com/socketio/socket.io-parser/blob/main/CHANGELOG.md) - [Commits](socketio/socket.io-parser@3.2.0...4.2.4) Updates `sockjs` from 0.3.19 to 0.3.24 - [Release notes](https://github.com/sockjs/sockjs-node/releases) - [Changelog](https://github.com/sockjs/sockjs-node/blob/v0.3.24/Changelog) - [Commits](sockjs/sockjs-node@v0.3.19...v0.3.24) Updates `terser` from 3.17.0 to 5.31.0 - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v3.17.0...v5.31.0) Updates `tree-kill` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/pkrumins/node-tree-kill/releases) - [Commits](pkrumins/node-tree-kill@v1.2.1...v1.2.2) Updates `trim-newlines` from 1.0.0 to 3.0.1 - [Release notes](https://github.com/sindresorhus/trim-newlines/releases) - [Commits](https://github.com/sindresorhus/trim-newlines/commits) Updates `webpack-dev-middleware` from 3.4.0 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v3.4.0...v7.2.1) Updates `webpack-subresource-integrity` from 1.1.0-rc.6 to 5.1.0 - [Release notes](https://github.com/waysact/webpack-subresource-integrity/releases) - [Changelog](https://github.com/waysact/webpack-subresource-integrity/blob/main/CHANGELOG.md) - [Commits](waysact/webpack-subresource-integrity@v1.1.0-rc.6...v5.1.0) --- updated-dependencies: - dependency-name: "@angular/core" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: moment dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: karma dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: node-sass dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: y18n dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: yargs-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@babel/traverse" dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ajv dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/cli" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: async dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: browserslist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: chart.js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: decode-uri-component dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: dns-packet dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: follow-redirects dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fsevents dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ini dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimist dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: semver dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob-parent dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular/compiler-cli" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: handlebars dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: hosted-git-info dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json-schema dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jsprim dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: jszip dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: loader-utils dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: lodash dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: log4js dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: ssri dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-forge dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: path-parse dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: postcss dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: qs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: scss-tokenizer dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: node-sass dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-parser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: sockjs dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: terser dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tree-kill dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: trim-newlines dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-subresource-integrity dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-06-16T08:09:54Z

Superseded by #7.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 4, 2024

prmerger-automator Bot added the do-not-merge label Jun 4, 2024

dependabot Bot closed this Jun 16, 2024

dependabot Bot deleted the dependabot/npm_and_yarn/Samples/aspnet-angular/MicrosoftGraph_Security_API_Sample/ClientApp/npm_and_yarn-68d4e889a7 branch June 16, 2024 08:09

Navigation Menu

Bump the npm_and_yarn group across 1 directory with 48 updates - #1

Bump the npm_and_yarn group across 1 directory with 48 updates#1
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/Samples/aspnet-angular/MicrosoftGraph_Security_API_Sample/ClientApp/npm_and_yarn-68d4e889a7

dependabot Bot commented on behalf of github Jun 4, 2024

Uh oh!

dependabot Bot commented on behalf of github Jun 16, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

OS	Architecture	Node
Windows	x86 & x64	12, 14, 16, 17
OSX	x64	12, 14, 16, 17
Linux*	x64	12, 14, 16, 17
Alpine Linux	x64	12, 14, 16, 17
FreeBSD	i386 amd64	12, 14

Commit	Description
	check both application builder packages in SSR schematic
	set builders `assets` option correctly for new applications

Commit	Description
	disable Worker wait loop for Sass compilations in web containers
	print Sass `@warn` location
	support valid self-closing MathML tags in HTML index file
	support valid self-closing SVG tags in HTML index file

Commit	Description
	avoid rebasing URLs with function calls
	disable persistent disk caching inside webcontainers by default
	handle esbuild-browser `polyfills` option as `string` during `ng serve`
	only import persistent cache store with active caching

Commit	Description
	allow application migration to use new build package in projects where possible
	replace `assets` with `public` directory
	use eventCoalescing option by default (standalone bootstrap)
	use ngZoneEventCoalescing option by default (module bootstrap)
	use TypeScript bundler module resolution for new projects
	add less dependency in application migration if needed
	add postcss dependency in application migration if needed
	add spaces around eventCoalescing option
	keep deployUrl option when migrating to application builder

Commit	Type	Description
9967c04b8	fix	check both application builder packages in SSR schematic

Conversation

dependabot Bot commented on behalf of github Jun 4, 2024

10.2.5 (2021-04-14)

Bug Fixes

10.2.4 (2020-12-17)

Bug Fixes

10.2.3 (2020-11-09)

Bug Fixes

10.2.2 (2020-11-04)

Bug Fixes

Performance Improvements

2.29.4

2.29.3 Full changelog

2.29.2 See full changelog

2.29.1 See full changelog

2.29.0 See full changelog

2.28.0 See full changelog

2.27.0 See full changelog

2.26.0 See full changelog

v6.3.16

6.3.16 (2022-02-10)

Bug Fixes

v6.3.15

6.3.15 (2022-02-05)

Bug Fixes

v6.3.14

6.3.14 (2022-02-05)

Bug Fixes

v6.3.13

6.3.13 (2022-01-31)

Bug Fixes

v6.3.12

6.3.12 (2022-01-24)

Bug Fixes

v6.3.11

6.3.11 (2022-01-13)

Bug Fixes

6.3.16 (2022-02-10)

Bug Fixes

6.3.15 (2022-02-05)

Bug Fixes

6.3.14 (2022-02-05)

Bug Fixes

6.3.13 (2022-01-31)

Bug Fixes

6.3.12 (2022-01-24)

Bug Fixes

6.3.11 (2022-01-13)

Bug Fixes

6.3.10 (2022-01-08)

Bug Fixes

v7.0.0

Breaking changes

Features

Dependencies

Community

Misc

Supported Environments

v6.0.1

Dependencies

Misc

Supported Environments

v4.14.0

v4.13.1

v4.13.0

v4.12.0

y18n y18n-v4.0.3

Bug Fixes

y18n y18n-v4.0.2

Bug Fixes

17.0.0 (2020-02-10)

⚠ BREAKING CHANGES

Features

Bug Fixes

16.1.0 (2019-11-01)

⚠ BREAKING CHANGES

Features

Reverts

v7.24.6 (2024-05-24)

🐛 Bug Fix

`@schematics/angular`

`@angular/build`

`@angular/pwa`

`@schematics/angular`

`@angular/build`

`@schematics/angular`

`@schematics/angular`