search

mlim-scw / angular

0 stars 0 forks source link

chore(deps): bump http-cache-semantics and @angular/cli #16

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps http-cache-semantics to 4.1.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates http-cache-semantics from 3.8.1 to 4.1.1

Commits


Updates @angular/cli from 10.0.4 to 15.1.4

Release notes

Sourced from @​angular/cli's releases.

v15.1.4

15.1.4 (2023-02-01)

@​angular-devkit/build-angular

Commit Description
fix - 6c8fdfc69 load JavaScript bundles as modules in karma
fix - 317452e3b print server builder errors and warnings

Special Thanks

Alan Agius

v15.1.3

15.1.3 (2023-01-25)

@​schematics/angular

Commit Description
fix - 2c04f4a8f update browserslist config to include last 2 Chrome version

@​angular/cli

Commit Description
fix - de15ec576 handle extended schematics when retrieving aliases

@​angular-devkit/build-angular

Commit Description
fix - f31bf300b avoid undefined module path for Sass imports in esbuild
fix - c152a4a13 update browserslist config to include last 2 Chrome versions

@​angular-devkit/core

Commit Description
fix - 9de99202e handle number like strings in workspace writer

Special Thanks

Alan Agius, Charles Lyding and Doug Parker

v15.1.2

15.1.2 (2023-01-18)

@​schematics/angular

Commit Description
fix - 0f5fb7e59 replace existing BrowserModule.withServerTransition calls when running universal schematic

@​angular/cli

Commit Description
fix - 387472a95 register schematic aliases when providing collection name in ng generate
fix - 5d9fd788a remove --to option from being required when using --from in ng update

@​angular-devkit/build-angular

Commit Description
fix - bf4639a6e prevent hanging initial build during exception with esbuild

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

15.1.4 (2023-02-01)

@​angular-devkit/build-angular

Commit Type Description
6c8fdfc69 fix load JavaScript bundles as modules in karma
317452e3b fix print server builder errors and warnings

Special Thanks

Alan Agius

15.2.0-next.2 (2023-01-25)

@​angular/cli

Commit Type Description
0f58a17c4 feat log number of files update during ng update
b5737efae fix handle extended schematics when retrieving aliases

@​schematics/angular

Commit Type Description
7b0c1ce0c fix update browserslist config to include last 2 Chrome version

@​angular-devkit/schematics-cli

Commit Type Description
ecf43090d feat auto detect package manager (#24305)

@​angular-devkit/build-angular

Commit Type Description
d19f260ba fix avoid undefined module path for Sass imports in esbuild
97907addf fix update browserslist config to include last 2 Chrome versions

@​angular-devkit/core

Commit Type Description
f6f5d7919 fix handle number like strings in workspace writer

... (truncated)

Commits
  • 1bfcc18 release: cut the v15.1.4 release
  • 6c8fdfc fix(@​angular-devkit/build-angular): load JavaScript bundles as modules in karma
  • 317452e fix(@​angular-devkit/build-angular): print server builder errors and warnings
  • b27ce5d release: cut the v15.1.3 release
  • 3c459c3 build: update bazel aspect lib to 1.23.3
  • e293cb1 docs(@​angular/cli): minor updates to ng run description
  • 2c04f4a fix(@​schematics/angular): update browserslist config to include last 2 Chrome...
  • c152a4a fix(@​angular-devkit/build-angular): update browserslist config to include las...
  • 9de9920 fix(@​angular-devkit/core): handle number like strings in workspace writer
  • f31bf30 fix(@​angular-devkit/build-angular): avoid undefined module path for Sass impo...
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mlim-scw/angular/network/alerts).
mlim-scw commented 1 year ago

xss

mlim-scw commented 1 year ago

xss

secure-code-warrior-for-github[bot] commented 1 year ago

Micro-Learning Topic: Cross-site scripting (Detected by phrase)

Matched on "xss"

What is this? (2min video)

Cross-site scripting vulnerabilities occur when unescaped input is rendered into a page displayed to the user. When HTML or script is included in the input, it will be processed by a user's browser as HTML or script and can alter the appearance of the page or execute malicious scripts in their user context.

Try a challenge in Secure Code Warrior

Helpful references
dev-secure-code-warrior-pilot[bot] commented 1 year ago

Micro-Learning Topic: Cross-site scripting (Detected by phrase)

Matched on "xss"

What is this? (2min video)

Cross-site scripting vulnerabilities occur when unescaped input is rendered into a page displayed to the user. When HTML or script is included in the input, it will be processed by a user's browser as HTML or script and can alter the appearance of the page or execute malicious scripts in their user context.

Try a challenge in Secure Code Warrior

Helpful references
mlim-scw commented 1 year ago

sqli

dev-secure-code-warrior-pilot[bot] commented 1 year ago

Micro-Learning Topic: SQL injection (Detected by phrase)

Matched on "sqli"

What is this? (2min video)

This is probably one of the two most exploited vulnerabilities in web applications and has led to a number of high profile company breaches. It occurs when an application fails to sanitize or validate input before using it to dynamically construct a statement. An attacker that exploits this vulnerability will be able to gain access to the underlying database and view or modify data without permission.

Try a challenge in Secure Code Warrior

Helpful references
dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.