Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
This version was pushed to npm by nrwlowner, a new releaser for @nrwl/node since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/koshevy/codegena/network/alerts).
Bumps json5 to 2.2.3 and updates ancestor dependencies json5, @nrwl/angular, @angular-devkit/build-angular, @nrwl/cypress, @nrwl/nest and @nrwl/node. These dependencies need to be updated together.
Updates
json5from 2.2.1 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
@nrwl/angularfrom 12.3.6 to 15.4.2Release notes
Sourced from
@nrwl/angular's releases.... (truncated)
Commits
88f860dfix(testing): warn and default if sourceRoot isn't set for ng CT (#13940)712d65bcleanup(angular): remove v14 specific code for generators that did not change...82fbb98feat(misc): dont generate defaultProject for non standalone workspaces2614669fix(angular): cache server build (#13933)e53303bfeat(angular): support alternate remoteEntry name in dynamic federation #1368...dc4a123fix(angular): missing remotes form mf config should not break mf server (#13901)19fd40ddocs(nxdev): refactor docs sources generation and app consumption (#13834)f1ac23fdocs: fix cypress component generator command (#13613)4e54b1afix(angular): handle not provided path when generating a component without th...a049d6cfix(misc): set schema when converting a project to standalone configuration (...Maintainer changes
This version was pushed to npm by nrwlowner, a new releaser for
@nrwl/angularsince your current version.Updates
@angular-devkit/build-angularfrom 12.0.4 to 15.0.4Release notes
Sourced from
@angular-devkit/build-angular's releases.... (truncated)
Changelog
Sourced from
@angular-devkit/build-angular's changelog.... (truncated)
Commits
8771258release: cut the v15.0.4 release8e85f47fix(@angular-devkit/build-angular): updatecss-loaderto6.7.39fd3562fix(@angular-devkit/build-angular): only set ngDevMode when script optimizati...ccc8e03fix(@angular-devkit/build-angular): display actionable error when a style doe...507f756fix(@angular-devkit/build-angular): downlevel class private methods when targ...b2d4415fix(@angular-devkit/build-angular): update locale setting snippet to use `glo...a0da91dfix(@angular-devkit/build-angular): include sources in generatedeb2a73arelease: cut the v15.0.3 release3d9971efix(@angular-devkit/build-angular): default preserve symlinks to Node.js valu...24f4b51fix(@angular-devkit/build-angular): downlevel class fields with Safari <= v15...Updates
@nrwl/cypressfrom 12.3.6 to 15.4.2Release notes
Sourced from
@nrwl/cypress's releases.... (truncated)
Commits
e91179efix(testing): change ignoreTestFiles to excludeSpecPattern for cy10+ (#13942)4f9b9d4feat(testing): remove unused dependencies from@nrwl/cypress(#13771)1ef01f8feat(testing): cypress vite (#13474)5d910c0fix(testing): rename cy 10 migration to 11 (#13646)2c81904fix(angular): fix imports into nx from ng-add (#13645)6f8a849fix(testing): handle cypress-project generation for standalone projects (#13602)fe062f4fix(core): deduce layout directory110b5f2feat(core): enable linter on root projects (#13347)6d35fd4chore(core): reconcile functions to find project of a path (#13364)16fd437feat(misc): derive workspace layout dynamicallyMaintainer changes
This version was pushed to npm by nrwlowner, a new releaser for
@nrwl/cypresssince your current version.Updates
@nrwl/nestfrom 12.3.6 to 15.4.2Release notes
Sourced from
@nrwl/nest's releases.... (truncated)
Commits
34d861dfix(testing): preserve the old coverage layout40b39b2fix(core): remove leading ./ when normalizing root project outputs61d7d74fix(misc): fix tsconfig file includes5b7dba1fix(react): clean-up after dependency removal from@nrwl/react(#13563)cded83bfeat(react): remove unnecessary dependencies from@nrwl/react(#13525)fe062f4fix(core): deduce layout directoryf311ecbchore(repo): remove workspace.json (#13040)23de788chore(repo): update to 15.0.0-rc1 (#12586)d8f3c6bfix(react): migrations use tsquery, so we should provide it (#12575)834e2dbfeat(core): prefix outputs and warn on non-prefixed outputs (#12470)Maintainer changes
This version was pushed to npm by nrwlowner, a new releaser for
@nrwl/nestsince your current version.Updates
@nrwl/nodefrom 12.3.6 to 15.4.2Release notes
Sourced from
@nrwl/node's releases.... (truncated)
Commits
82fbb98feat(misc): dont generate defaultProject for non standalone workspaces34d861dfix(testing): preserve the old coverage layout40b39b2fix(core): remove leading ./ when normalizing root project outputs75de165feat(core): add lockfile pruning to executors that generate package.json (#13...61d7d74fix(misc): fix tsconfig file includesfe062f4fix(core): deduce layout directoryf311ecbchore(repo): remove workspace.json (#13040)9cbf9bffix(js): patch migration from@nrwl/node:package to@nrwl/js:tsc to rename sr...23de788chore(repo): update to 15.0.0-rc1 (#12586)d8f3c6bfix(react): migrations use tsquery, so we should provide it (#12575)Maintainer changes
This version was pushed to npm by nrwlowner, a new releaser for
@nrwl/nodesince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/koshevy/codegena/network/alerts).