Bump the npm_and_yarn group in /src/angular/osww-frontend with 7 updates #59

dependabot · 2024-07-12T11:10:25Z

Bumps the npm_and_yarn group in /src/angular/osww-frontend with 7 updates:

Package	From	To
braces	`3.0.2`	`3.0.3`
express	`4.18.2`	`4.19.2`
socket.io	`4.6.0`	`4.7.5`
webpack-dev-middleware	`5.3.3`	`7.2.1`
@angular-devkit/build-angular	`14.2.10`	`18.1.0`
ws	`8.11.0`	`8.17.1`
socket.io-adapter	`2.5.2`	`2.5.5`

Updates braces from 3.0.2 to 3.0.3

Commits

74b2db2 3.0.3
88f1429 update eslint. lint, fix unit tests.
415d660 Snyk js braces 6838727 (#40)
190510f fix tests, skip 1 test in test/braces.expand
716eb9f readme bump
a5851e5 Merge pull request #37 from coderaiser/fix/vulnerability
2092bd1 feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...
9f5b4cf fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)
98414f9 remove funding file
665ab5d update keepEscaping doc (#27)
Additional commits viewable in compare view

Updates express from 4.18.2 to 4.19.2

Release notes

Sourced from express's releases.

4.19.2

What's Changed

Improved fix for open redirect allow list bypass

Full Changelog: expressjs/express@4.19.1...4.19.2

4.19.1

What's Changed

Fix ci after location patch by @wesleytodd in expressjs/express#5552

fixed un-edited version in history.md for 4.19.0 by @wesleytodd in expressjs/express#5556

Full Changelog: expressjs/express@4.19.0...4.19.1

4.19.0

What's Changed

fix typo in release date by @UlisesGascon in expressjs/express#5527

docs: nominating @wesleytodd to be project captian by @wesleytodd in expressjs/express#5511

docs: loosen TC activity rules by @wesleytodd in expressjs/express#5510

Add note on how to update docs for new release by @crandmck in expressjs/express#5541

Prevent open redirect allow list bypass due to encodeurl

Release 4.19.0 by @wesleytodd in expressjs/express#5551

New Contributors

@crandmck made their first contribution in expressjs/express#5541

Full Changelog: expressjs/express@4.18.3...4.19.0

4.18.3

Main Changes

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

Other Changes

Use https: protocol instead of deprecated git: protocol by @vcsjones in expressjs/express#5032

build: [email protected] and [email protected] by @abenhamdine in expressjs/express#5034

ci: update actions/checkout to v3 by @armujahid in expressjs/express#5027

test: remove unused function arguments in params by @raksbisht in expressjs/express#5124

Remove unused originalIndex from acceptParams by @raksbisht in expressjs/express#5119

Fixed typos by @raksbisht in expressjs/express#5117

examples: remove unused params by @raksbisht in expressjs/express#5113

fix: parameter str is not described in JSDoc by @raksbisht in expressjs/express#5130

fix: typos in History.md by @raksbisht in expressjs/express#5131

build : add [email protected] by @abenhamdine in expressjs/express#5028

test: remove unused function arguments in params by @raksbisht in expressjs/express#5137

... (truncated)

Changelog

Sourced from express's changelog.

4.19.2 / 2024-03-25

Improved fix for open redirect allow list bypass

4.19.1 / 2024-03-20

Allow passing non-strings to res.location with new encoding handling checks

4.19.0 / 2024-03-20

Prevent open redirect allow list bypass due to encodeurl

deps: [email protected]

4.18.3 / 2024-02-29

Fix routing requests without method

deps: [email protected]

Fix strict json error message on Node.js 19+

deps: content-type@~1.0.5

deps: [email protected]

deps: [email protected]

Add partitioned option

Commits

04bc627 4.19.2
da4d763 Improved fix for open redirect allow list bypass
4f0f6cc 4.19.1
a003cfa Allow passing non-strings to res.location with new encoding handling checks f...
a1fa90f fixed un-edited version in history.md for 4.19.0
11f2b1d build: fix build due to inconsistent supertest behavior in older versions
084e365 4.19.0
0867302 Prevent open redirect allow list bypass due to encodeurl
567c9c6 Add note on how to update docs for new release (#5541)
69a4cf2 deps: [email protected]
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by wesleytodd, a new releaser for express since your current version.

Updates socket.io from 4.6.0 to 4.7.5

Release notes

Sourced from socket.io's releases.

4.7.5

Bug Fixes

close the adapters when the server is closed (bf64870)

remove duplicate pipeline when serving bundle (e426f3e)

Links

Diff: socketio/socket.io@4.7.4...4.7.5

Client release: 4.7.5

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.4

Bug Fixes

typings: calling io.emit with no arguments incorrectly errored (cb6d2e0), closes #4914

Links

Diff: socketio/socket.io@4.7.3...4.7.4

Client release: 4.7.4

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.3

Bug Fixes

return the first response when broadcasting to a single socket (#4878) (df8e70f)

typings: allow to bind to a non-secure Http2Server (#4853) (8c9ebc3)

Links

Diff: socketio/socket.io@4.7.2...4.7.3

Client release: 4.7.3

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.2

Bug Fixes

clean up child namespace when client is rejected in middleware (#4773) (0731c0d)

webtransport: properly handle WebTransport-only connections (3468a19)

webtransport: add proper framing (a306db0)

Links

... (truncated)

Changelog

Sourced from socket.io's changelog.

4.7.5 (2024-03-14)

Bug Fixes

close the adapters when the server is closed (bf64870)

remove duplicate pipeline when serving bundle (e426f3e)

Dependencies

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.4 (2024-01-12)

Bug Fixes

typings: calling io.emit with no arguments incorrectly errored (cb6d2e0), closes #4914

Dependencies

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.3 (2024-01-03)

Bug Fixes

return the first response when broadcasting to a single socket (#4878) (df8e70f)

typings: allow to bind to a non-secure Http2Server (#4853) (8c9ebc3)

Dependencies

engine.io@~6.5.2 (no change)

ws@~8.11.0 (no change)

4.7.2 (2023-08-02)

... (truncated)

Commits

5017681 chore(release): 4.7.5
bf64870 fix: close the adapters when the server is closed
748e18c ci: test with older TypeScript version
b9ce6a2 refactor: create specific adapter for parent namespaces (#4950)
54dabe5 ci: upgrade to actions/checkout@4 and actions/setup-node@4
e426f3e fix: remove duplicate pipeline when serving bundle
e36062c docs: update the webtransport example
0bbe8ae docs: only execute the passport middleware once
914a8bd docs: add example with JWT
d943c3e docs: update the Passport.js example
Additional commits viewable in compare view

Updates webpack-dev-middleware from 5.3.3 to 7.2.1

Release notes

Sourced from webpack-dev-middleware's releases.

v7.2.1

7.2.1 (2024-04-02)

Bug Fixes

avoid extra log

v7.2.0

7.2.0 (2024-03-29)

Features

hapi support (b3f9126)

koa support (#1792) (458c17c)

support ETag header generation (#1797) (b759181)

support Last-Modified header generation (#1798) (18e5683)

v7.1.1

7.1.1 (2024-03-21)

Bug Fixes

ContentLength incorrectly set for empty files (#1785) (0f3e25e)

improve perf (#1777) (5b47c92)

types: make types better (#1786) (e4d183e)

v7.1.0

7.1.0 (2024-03-19)

Features

prefer to use fs.createReadStream over fs.readFileSync to read files (ab533de)

Bug Fixes

cleaup stream and handle errors (#1769) (1258fdd)

security: do not allow to read files above (#1771) (e10008c)

v7.0.0

7.0.0 (2023-12-26)

⚠ BREAKING CHANGES

minimum supported Node.js version is 18.12.0 (#1694)

... (truncated)

Changelog

Sourced from webpack-dev-middleware's changelog.

7.2.1 (2024-04-02)

Bug Fixes

avoid extra log

7.2.0 (2024-03-29)

Features

hapi support (b3f9126)

koa support (#1792) (458c17c)

support ETag header generation (#1797) (b759181)

support Last-Modified header generation (#1798) (18e5683)

7.1.1 (2024-03-21)

Bug Fixes

ContentLength incorrectly set for empty files (#1785) (0f3e25e)

improve perf (#1777) (5b47c92)

types: make types better (#1786) (e4d183e)

7.1.0 (2024-03-19)

Features

prefer to use fs.createReadStream over fs.readFileSync to read files (ab533de)

Bug Fixes

cleaup stream and handle errors (#1769) (1258fdd)

security: do not allow to read files above (#1771) (e10008c)

7.0.0 (2023-12-26)

⚠ BREAKING CHANGES

minimum supported Node.js version is 18.12.0 (#1694)

updated memfs@4 (#1693)

Features

updated memfs@4 (#1693) (244d9f8)

... (truncated)

Commits

3d422a9 chore(release): 7.2.1
8c2df86 docs(readme): fix options table (#1808)
5ac51a0 chore(deps): bump memfs from 4.8.0 to 4.8.1 (#1806)
adfd4f1 chore(deps-dev): bump @types/node from 20.11.30 to 20.12.2 (#1807)
79e7247 fixed: removed cache key logging (#1805)
17ed7eb chore(release): 7.2.0
7e1fe44 refactor: tests were rewritten, we don't need it anymore (#1803)
95c2fb0 test: refactor (#1802)
7b666a1 refactor: better types (#1801)
1f54424 test: more (#1800)
Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 14.2.10 to 18.1.0

Release notes

Sourced from @angular-devkit/build-angular's releases.

v18.1.0

18.1.0 (2024-07-10)

@schematics/angular

Commit Description

generate new projects with ECMAScript standard class field behavior

@angular/cli

Commit Description

add fallbacks for migration package resolution

@angular/build

Commit Description

add --inspect option to the dev-server

support WASM/ES Module integration proposal

address rxjs undefined issues during SSR prebundling

allow additional module preloads up to limit

allow top-level await in zoneless applications

check inlineSourceMap option with isolated modules optimization

normalize paths during module resolution in Vite

read WASM file from script location on Node.js

support import attributes in JavaScript transformer

enable dependency prebundling for server dependencies

use direct transpilation with isolated modules

v18.1.0-rc.1

18.1.0-rc.1 (2024-07-03)

@angular/cli

Commit Description

make ng update to keep newline at the end of package.json

@angular-devkit/build-angular

Commit Description

reduce the number of max workers to available CPUs minus one

rollback terser to 5.29.2

@angular/build

Commit Description

support WASM/ES Module integration proposal

allow top-level await in zoneless applications

correctly name entry points to match budgets

normalize paths during module resolution in Vite

redirect to path with trailing slash for asset directories

reduce the number of max workers to available CPUs minus one

support import attributes in JavaScript transformer

v18.1.0-rc.0

... (truncated)

Changelog

Sourced from @angular-devkit/build-angular's changelog.

18.1.0 (2024-07-10)

@angular/cli

Commit Type Description

6d266c146 fix add fallbacks for migration package resolution

@schematics/angular

Commit Type Description

22e05dcb4 fix generate new projects with ECMAScript standard class field behavior

@angular/build

Commit Type Description

687a6c7ec feat add --inspect option to the dev-server

628d87a94 feat support WASM/ES Module integration proposal

3e359da8d fix address rxjs undefined issues during SSR prebundling

4ff914a16 fix allow additional module preloads up to limit

fb8e3c39a fix allow top-level await in zoneless applications

83b75af9f fix check inlineSourceMap option with isolated modules optimization

cd97134a6 fix normalize paths during module resolution in Vite

13d2100dd fix read WASM file from script location on Node.js

3091956f5 fix support import attributes in JavaScript transformer

dd94a831b perf enable dependency prebundling for server dependencies

3acb77683 perf use direct transpilation with isolated modules

18.0.7 (2024-07-03)

@angular/cli

Commit Type Description

67bf90131 fix make ng update to keep newline at the end of package.json

@angular-devkit/build-angular

Commit Type Description

9b43ecbd0 fix reduce the number of max workers to available CPUs minus one

03dad6806 fix rollback terser to 5.29.2

@angular/build

... (truncated)

Commits

482d0be release: cut the v18.1.0 release
0c52d5f build: update Angular dependencies to version 18.1.0
13d2100 fix(@angular/build): read WASM file from script location on Node.js
1772c87 refactor(@angular/cli): provide a default extract-i18n target for applications
4c6c32c refactor: use explicit coercion of exitCode to number.
83b75af fix(@angular/build): check inlineSourceMap option with isolated modules optim...
713f456 release: cut the v18.1.0-rc.1 release
628d87a feat(@angular/build): support WASM/ES Module integration proposal
3091956 fix(@angular/build): support import attributes in JavaScript transformer
c6fc020 fix(@angular-devkit/build-angular): rollback terser to 5.29.2
Additional commits viewable in compare view

Updates ws from 8.11.0 to 8.17.1

Release notes

Sourced from ws's releases.

8.17.1

Bug fixes

Fixed a DoS vulnerability (#2231).

A request with a number of headers exceeding the[server.maxHeadersCount][] threshold could be used to crash a ws server.
const http = require('http');
const WebSocket = require('ws');
const wss = new WebSocket.Server({ port: 0 }, function () {
const chars = "!#$%&'*+-.0123456789abcdefghijklmnopqrstuvwxyz^_`|~".split('');
const headers = {};
let count = 0;
for (let i = 0; i < chars.length; i++) {
if (count === 2000) break;
for (let j = 0; j &lt; chars.length; j++) {
  const key = chars[i] + chars[j];
  headers[key] = 'x';
if (++count === 2000) break;
}

}
headers.Connection = 'Upgrade';
headers.Upgrade = 'websocket';
headers['Sec-WebSocket-Key'] = 'dGhlIHNhbXBsZSBub25jZQ==';
headers['Sec-WebSocket-Version'] = '13';
const request = http.request({
headers: headers,
host: '127.0.0.1',
port: wss.address().port
});
request.end();
});
The vulnerability was reported by Ryan LaPointe in websockets/ws#2230.

In vulnerable versions of ws, the issue can be mitigated in the following ways:

Reduce the maximum allowed length of the request headers using the [--max-http-header-size=size][] and/or the [maxHeaderSize][] options so that no more headers than the server.maxHeadersCount limit can be sent.

... (truncated)

Commits

3c56601 [dist] 8.17.1
e55e510 [security] Fix crash when the Upgrade header cannot be read (#2231)
6a00029 [test] Increase code coverage
ddfe4a8 [perf] Reduce the amount of crypto.randomFillSync() calls
b73b118 [dist] 8.17.0
29694a5 [test] Use the highWaterMark variable
934c9d6 [ci] Test on node 22
1817bac [ci] Do not test on node 21
96c9b3d [major] Flip the default value of allowSynchronousEvents (#2221)
e5f32c7 [fix] Emit at most one event per event loop iteration (#2218)
Additional commits viewable in compare view

Updates socket.io-adapter from 2.5.2 to 2.5.5

Release notes

Sourced from socket.io-adapter's releases.

2.5.4

Bug Fixes

ensure the order of the commands (a13f35f)

types: ensure compatibility with TypeScript < 4.5 (ca397f3)

Links

Diff: socketio/socket.io-adapter@2.5.3...2.5.4

2.5.3

Two abstract classes were imported from the Redis adapter repository:

the ClusterAdapter class, which manages the messages sent between the server instances of the cluster

the ClusterAdapterWithHeartbeat class, which extends the ClusterAdapter and adds a heartbeat mechanism in order to check the healthiness of the other instances

Other adapters can then just extend those classes and only have to implement the pub/sub mechanism (and not the internal chit-chat protocol):
class MyAdapter extends ClusterAdapterWithHeartbeat {
  constructor(nsp, pubSub, opts) {
    super(nsp, opts);
    this.pubSub = pubSub;
    pubSub.subscribe("main-channel", (message) => this.onMessage(message));
    pubSub.subscribe("specific-channel#" + this.uid, (response) => this.onResponse(response));
  }
doPublish(message) {
return this.pubSub.publish("main-channel", message);
}
doPublishResponse(requesterUid, response) {
return this.pubSub.publish("specific-channel#" + requesterUid, response);
}
}
Besides, the number of "timeout reached: only x responses received out of y" errors (which can happen when a server instance leaves the cluster) should be greatly reduced by this commit.

Bug Fixes

cluster: fix count in fetchSockets() method (80af4e9)

cluster: notify the other nodes when closing (0e23ff0)

Performance Improvements

cluster: use timer.refresh() (d99a71b)

... (truncated)

Changelog

Sourced from socket.io-adapter's changelog.

2.5.5 (2024-06-18)

This release contains a bump of the ws dependency, which includes an important security fix.

Advisory: GHSA-3h5v-q93c-6h6q

2.5.4 (2024-02-22)

Bug Fixes

ensure the order of the commands (a13f35f)

types: ensure compatibility with TypeScript < 4.5 (ca397f3)

2.5.3 (2024-02-21)

Two abstract classes were imported from the Redis adapter repository:

the ClusterAdapter class, which manages the messages sent between the server instances of the cluster

the ClusterAdapterWithHeartbeat class, which extends the ClusterAdapter and adds a heartbeat mechanism in order to check the healthiness of the other instances

Other adapters can then just extend those classes and only have to implement the pub/sub mechanism (and not the internal chit-chat protocol):
class MyAdapter extends ClusterAdapterWithHeartbeat {
  constructor(nsp, pubSub, opts) {
    super(nsp, opts);
    this.pubSub = pubSub;
    pubSub.subscribe("main-channel", (message) => this.onMessage(message));
    pubSub.subscribe("specific-channel#" + this.uid, (response) => this.onResponse(response));
  }
doPublish(message) {
return this.pubSub.publish("main-channel", message);
}
doPublishResponse(requesterUid, response) {
return this.pubSub.publish("specific-channel#" + requesterUid, response);
}
}
Besides, the number of "timeout reached: only x responses received out of y" errors (which can happen when a server instance leaves the cluster) should be greatly reduced by this commit.

Bug Fixes

... (truncated)

Commits

05a190a chore(release): 6.5.5
93fe190 chore(deps): bump ws from 8.11.0 to 8.17.1 (#93)
5eae5a0 chore(release): 2.5.4
005d546 ci: test with older TypeScript version
a13f35f fix: ensure the order of the commands
207c0db refactor: break circular dependency (2)
abc93a9 refactor: break circular dependency (1)
9d4c4a7 refactor(cluster): export ClusterAdapterOptions and MessageType types
ca397f3 fix(types): ensure compatibility with TypeScript < 4.5
549156c chore(release): 2.5.3
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group in /src/angular/osww-frontend with 7 updates: | Package | From | To | | --- | --- | --- | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [express](https://github.com/expressjs/express) | `4.18.2` | `4.19.2` | | [socket.io](https://github.com/socketio/socket.io) | `4.6.0` | `4.7.5` | | [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) | `5.3.3` | `7.2.1` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `14.2.10` | `18.1.0` | | [ws](https://github.com/websockets/ws) | `8.11.0` | `8.17.1` | | [socket.io-adapter](https://github.com/socketio/socket.io-adapter) | `2.5.2` | `2.5.5` | Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `express` from 4.18.2 to 4.19.2 - [Release notes](https://github.com/expressjs/express/releases) - [Changelog](https://github.com/expressjs/express/blob/master/History.md) - [Commits](expressjs/express@4.18.2...4.19.2) Updates `socket.io` from 4.6.0 to 4.7.5 - [Release notes](https://github.com/socketio/socket.io/releases) - [Changelog](https://github.com/socketio/socket.io/blob/4.7.5/CHANGELOG.md) - [Commits](socketio/socket.io@4.6.0...4.7.5) Updates `webpack-dev-middleware` from 5.3.3 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-dev-middleware/releases) - [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/master/CHANGELOG.md) - [Commits](webpack/webpack-dev-middleware@v5.3.3...v7.2.1) Updates `@angular-devkit/build-angular` from 14.2.10 to 18.1.0 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@14.2.10...18.1.0) Updates `ws` from 8.11.0 to 8.17.1 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.11.0...8.17.1) Updates `socket.io-adapter` from 2.5.2 to 2.5.5 - [Release notes](https://github.com/socketio/socket.io-adapter/releases) - [Changelog](https://github.com/socketio/socket.io-adapter/blob/2.5.5/CHANGELOG.md) - [Commits](socketio/socket.io-adapter@2.5.2...2.5.5) --- updated-dependencies: - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: express dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: webpack-dev-middleware dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@angular-devkit/build-angular" dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: ws dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: socket.io-adapter dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-08-05T07:36:07Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot bot added the waiting on dependencies label Jul 12, 2024

mwood77 closed this Aug 5, 2024

dependabot bot deleted the dependabot/npm_and_yarn/src/angular/osww-frontend/npm_and_yarn-f2b4456fd4 branch August 5, 2024 07:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the npm_and_yarn group in /src/angular/osww-frontend with 7 updates #59

Bump the npm_and_yarn group in /src/angular/osww-frontend with 7 updates #59

dependabot bot commented on behalf of github Jul 12, 2024

dependabot bot commented on behalf of github Aug 5, 2024

Commit	Description
	add `--inspect` option to the dev-server
	support WASM/ES Module integration proposal
	address rxjs undefined issues during SSR prebundling
	allow additional module preloads up to limit
	allow top-level await in zoneless applications
	check inlineSourceMap option with isolated modules optimization
	normalize paths during module resolution in Vite
	read WASM file from script location on Node.js
	support import attributes in JavaScript transformer
	enable dependency prebundling for server dependencies
	use direct transpilation with isolated modules

Commit	Description
	reduce the number of max workers to available CPUs minus one
	rollback terser to `5.29.2`

Commit	Description
	support WASM/ES Module integration proposal
	allow top-level await in zoneless applications
	correctly name entry points to match budgets
	normalize paths during module resolution in Vite
	redirect to path with trailing slash for asset directories
	reduce the number of max workers to available CPUs minus one
	support import attributes in JavaScript transformer

Commit	Type	Description
687a6c7ec	feat	add `--inspect` option to the dev-server
628d87a94	feat	support WASM/ES Module integration proposal
3e359da8d	fix	address rxjs undefined issues during SSR prebundling
4ff914a16	fix	allow additional module preloads up to limit
fb8e3c39a	fix	allow top-level await in zoneless applications
83b75af9f	fix	check inlineSourceMap option with isolated modules optimization
cd97134a6	fix	normalize paths during module resolution in Vite
13d2100dd	fix	read WASM file from script location on Node.js
3091956f5	fix	support import attributes in JavaScript transformer
dd94a831b	perf	enable dependency prebundling for server dependencies
3acb77683	perf	use direct transpilation with isolated modules

Commit	Type	Description
9b43ecbd0	fix	reduce the number of max workers to available CPUs minus one
03dad6806	fix	rollback terser to `5.29.2`

Bump the npm_and_yarn group in /src/angular/osww-frontend with 7 updates #59

Bump the npm_and_yarn group in /src/angular/osww-frontend with 7 updates #59

Conversation

dependabot bot commented on behalf of github Jul 12, 2024

4.19.2

What's Changed

4.19.1

What's Changed

4.19.0

What's Changed

New Contributors

4.18.3

Main Changes

Other Changes

4.19.2 / 2024-03-25

4.19.1 / 2024-03-20

4.19.0 / 2024-03-20

4.18.3 / 2024-02-29

4.7.5

Bug Fixes

Links

4.7.4

Bug Fixes

Links

4.7.3

Bug Fixes

Links

4.7.2

Bug Fixes

Links

4.7.5 (2024-03-14)

Bug Fixes

Dependencies

4.7.4 (2024-01-12)

Bug Fixes

Dependencies

4.7.3 (2024-01-03)

Bug Fixes

Dependencies

4.7.2 (2023-08-02)

v7.2.1

7.2.1 (2024-04-02)

Bug Fixes

v7.2.0

7.2.0 (2024-03-29)

Features

v7.1.1

7.1.1 (2024-03-21)

Bug Fixes

v7.1.0

7.1.0 (2024-03-19)

Features

Bug Fixes

v7.0.0

7.0.0 (2023-12-26)

⚠ BREAKING CHANGES

7.2.1 (2024-04-02)

Bug Fixes

7.2.0 (2024-03-29)

Features

7.1.1 (2024-03-21)

Bug Fixes

7.1.0 (2024-03-19)

Features

Bug Fixes

7.0.0 (2023-12-26)

⚠ BREAKING CHANGES

Features

v18.1.0

18.1.0 (2024-07-10)

@​schematics/angular

@​angular/cli

@​angular/build

v18.1.0-rc.1

18.1.0-rc.1 (2024-07-03)

@​angular/cli

@​angular-devkit/build-angular

@​angular/build

v18.1.0-rc.0

18.1.0 (2024-07-10)

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular/build`

`@angular/cli`

`@angular-devkit/build-angular`

`@angular/build`