Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: @angular/animations, @angular/common, @angular/compiler, @angular/core, @angular/forms, @angular/platform-browser, @angular/platform-browser-dynamic, @angular/router #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

andreasnicklaus
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
@angular/animations
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/common
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/compiler
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/core
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/forms
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/platform-browser
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/platform-browser-dynamic
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28
@angular/router
from 17.3.0 to 17.3.2
2 versions ahead of your current version 21 days ago
on 2024-03-28

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Path Traversal
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
Proof of Concept
Path Traversal
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
Proof of Concept
Open Redirect
SNYK-JS-EXPRESS-6474509
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
No Known Exploit
Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
Proof of Concept
Improper Access Control
SNYK-JS-VITE-6531286
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
Proof of Concept
Improper Access Control
SNYK-JS-UNDICI-6564963
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
No Known Exploit
Improper Authorization
SNYK-JS-UNDICI-6564964
691/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.4
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @angular/animations
  • 17.3.2 - 2024-03-28

    17.3.2 (2024-03-28)

    compiler

    Commit Description
    fix - 2b7bad5151 invoke method-based tracking function with context (#54960)

    compiler-cli

    Commit Description
    fix - b478dfbfda report errors when initializer APIs are used on private fields (#55070)

    core

    Commit Description
    fix - 708ba8115f establish proper injector resolution order for @ defer blocks (#55079)

    http

    Commit Description
    fix - cb433af0e1 include transferCache when cloning HttpRequest (#54939)
    fix - 64f202cab9 manage different body types for caching POST requests (#54980)

    migrations

    Commit Description
    fix - 2f9d94bc4a account for variables in imports initializer (#55081)

    router

    Commit Description
    fix - 365fd50407 RouterLinkActive will always remove active classes when links are not active (#54982)
  • 17.3.1 - 2024-03-20

    17.3.1 (2024-03-20)

    compiler

    Commit Description
    fix - c0788200e2 capture data bindings for content projection purposes in blocks (#54876)

    compiler-cli

    Commit Description
    fix - 99e9474aa2 symbol feature detection for the compiler (#54711)
  • 17.3.0 - 2024-03-13
from @angular/animations GitHub release notes
Package name: @angular/common
  • 17.3.2 - 2024-03-28

    17.3.2 (2024-03-28)

    compiler

    Commit Description
    fix - 2b7bad5151 invoke method-based tracking function with context (#54960)

    compiler-cli

    Commit Description
    fix - b478dfbfda report errors when initializer APIs are used on private fields (#55070)

    core

    Commit Description
    fix - 708ba8115f establish proper injector resolution order for @ defer blocks (#55079)

    http

    Commit Description
    fix - cb433af0e1 include transferCache when cloning HttpRequest (#54939)
    fix - 64f202cab9 manage different body types for caching POST requests (#54980)

    migrations

    Commit Description
    fix - 2f9d94bc4a account for variables in imports initializer (#55081)

    router

    Commit Description
    fix - 365fd50407 RouterLinkActive will always remove active classes when links are not active (#54982)
  • 17.3.1 - 2024-03-20

    17.3.1 (2024-03-20)

    compiler

    Commit Description
    fix - c0788200e2 capture data bindings for content projection purposes in blocks (#54876)

    compiler-cli

    Commit Description
    fix - 99e9474aa2 symbol feature detection for the compiler (#54711)
  • 17.3.0 - 2024-03-13
from @angular/common GitHub release notes
Package name: @angular/compiler
  • 17.3.2 - 2024-03-28

    17.3.2 (2024-03-28)

    compiler

    Commit Description
    fix - 2b7bad5151 invoke method-based tracking function with context (#54960)

    compiler-cli

    Commit Description
    fix - b478dfbfda report errors when initializer APIs are used on private fields (#55070)

    core

    Commit Description
    fix - 708ba8115f establish proper injector resolution order for @ defer blocks (#55079)

    http

    Commit Description
    fix - cb433af0e1 include transferCache when cloning HttpRequest (#54939)
    fix - 64f202cab9 manage different body types for caching POST requests (#54980)

    migrations

    Commit Description
    fix - 2f9d94bc4a account for variables in imports initializer (#55081)

    router

    Commit Description
    fix - 365fd50407 RouterLinkActive will always remove active classes when links are not active (#54982)
  • 17.3.1 - 2024-03-20
    Read more
  • 17.3.0 - 2024-03-13
from @angular/compiler GitHub release notes
Package name: @angular/core from @angular/core GitHub release notes
Package name: @angular/forms from @angular/forms GitHub release notes
Package name: @angular/platform-browser from @angular/platform-browser GitHub release notes
Package name: @angular/platform-browser-dynamic from @angular/platform-browser-dynamic GitHub release notes
Package name: @angular/router from @angular/router GitHub release notes
Commit messages
Package name: @angular/animations
  • 0401283 release: cut the v17.3.2 release
  • 2f9d94b fix(migrations): account for variables in imports initializer (#55081)
  • ee76001 refactor(compiler-cli): support ignoring specific doc entries during extraction (#55053)
  • b63afb9 refactor(core): improve API documentation for query initializer APIs (#55053)
  • 658fb0a refactor(core): improve API documentation for `output` (#55053)
  • f8aa778 refactor(core): improve API documentation for `model` (#55053)
  • 60ed00a refactor(core): improve API documentation for `input` after angular.dev support (#55053)
  • c7ff3d1 refactor(docs-infra): support initializer API functions (#55053)
  • aeb20f9 refactor(compiler-cli): support extracting initializer API functions (#55053)
  • 708ba81 fix(core): establish proper injector resolution order for `@ defer` blocks (#55079)
  • fb5a288 refactor(devtools): prevent exeception on state serializer (#55061)
  • 5b67c94 refactor(compiler-cli): improve error message for uncaught `FatalDiagnosticError` (#55070)
  • b478dfb fix(compiler-cli): report errors when initializer APIs are used on private fields (#55070)
  • 75d1cae refactor(compiler-cli): support enforcing field access for initializer APIs (#55070)
  • 53fe455 refactor(compiler-cli): reflection should inspect ES private fields and visibility (#55070)
  • 1470b7d refactor(compiler-cli): expand type of initializer parsing function (#55070)
  • 7663199 docs: link to http security now at best-practices/security (#55060)
  • 519e781 docs: explain difference between @ placeholder and @ loading (#54779)
  • 1af2be9 docs(docs-infra): replace link by HTTPsecurity tab (#55029)
  • a893f0b fix(zone.js): should not clear onhandler when remove capture listener (#54602)
  • 93ce4d0 refactor(compiler-cli): properly preserve file overview comments (#54983)
  • ed271eb test(compiler-cli): add tests to verify import generation in TCB files/blocks (#54983)
  • 6734b59 refactor(compiler-cli): rename `ImportManagerV2` to `ImportManager` (#54983)
  • 789326d refactor(compiler-cli): delete old unused `ImportManager` (#54983)

Compare

Package name: @angular/common
  • 0401283 release: cut the v17.3.2 release
  • 2f9d94b fix(migrations): account for variables in imports initializer (#55081)
  • ee76001 refactor(compiler-cli): support ignoring specific doc entries during extraction (#55053)
  • b63afb9 refactor(core): improve API documentation for query initializer APIs (#55053)
  • 658fb0a refactor(core): improve API documentation for `output` (#55053)
  • f8aa778 refactor(core): improve API documentation for `model` (#55053)
  • 60ed00a refactor(core): improve API documentation for `input` after angular.dev support (#55053)
  • c7ff3d1 refactor(docs-infra): support initializer API functions (#55053)
  • aeb20f9 refactor(compiler-cli): support extracting initializer API functions (#55053)
  • 708ba81 fix(core): establish proper injector resolution order for `@ defer` blocks (#55079)
  • fb5a288 refactor(devtools): prevent exeception on state serializer (#55061)
  • 5b67c94 refactor(compiler-cli): improve error message for uncaught `FatalDiagnosticError` (#55070)
  • b478dfb fix(compiler-cli): report errors when initializer APIs are used on private fields (#55070)
  • 75d1cae refactor(compiler-cli): support enforcing field access for initializer APIs (#55070)
  • 53fe455 refactor(compiler-cli): reflection should inspect ES private fields and visibility (#55070)
  • 1470b7d refactor(compiler-cli): expand type of initializer parsing function (#55070)
  • 7663199 docs: link to http security now at best-practices/security (#55060)
  • 519e781 docs: explain difference between @ placeholder and @ loading (#54779)
  • 1af2be9 docs(docs-infra): replace link by HTTPsecurity tab (#55029)
  • a893f0b fix(zone.js): should not clear onhandler when remove capture listener (#54602)
  • 93ce4d0 refactor(compiler-cli): properly preserve file overview comments (#54983)
  • ed271eb test(compiler-cli): add tests to verify import generation in TCB files/blocks (#54983)
  • 6734b59 refactor(compiler-cli): rename `ImportManagerV2` to `ImportManager` (#54983)
  • 789326d refactor(compiler-cli): delete old unused `ImportManager` (#54983)

Compare

Package name: @angular/compiler
  • 0401283 release: cut the v17.3.2 release
  • 2f9d94b fix(migrations): account for variables in imports initializer (#55081)
  • ee76001 refactor(compiler-cli): support ignoring specific doc entries during extraction (#55053)
  • b63afb9 refactor(core): improve API documentation for query initializer APIs (#55053)
  • 658fb0a refactor(core): improve API documentation for `output` (#55053)
  • f8aa778 refactor(core): improve API documentation for `model` (#55053)
  • 60ed00a refactor(core): improve API documentation for `input` after angular.dev support (#55053)
  • c7ff3d1 refactor(docs-infra): support initializer API functions (#55053)
  • aeb20f9 refactor(compiler-cli): support extracting initializer API functions (#55053)
  • 708ba81 fix(core): establish proper injector resolution order for `@ defer` blocks (#55079)
  • fb5a288 refactor(devtools): prevent exeception on state serializer (#55061)
  • 5b67c94 refactor(compiler-cli): improve error message for uncaught `FatalDiagnosticError` (#55070)
  • b478dfb fix(compiler-cli): report errors when initializer APIs are used on private fields (#55070)
  • 75d1cae refactor(compiler-cli): support enforcing field access for initializer APIs (#55070)
  • 53fe455 refactor(compiler-cli): reflection should inspect ES private fields and visibility (#55070)
  • 1470b7d refactor(compiler-cli): expand type of initializer parsing function (#55070)
  • 7663199 docs: link to http security now at best-practices/security (#55060)
  • 519e781 docs: explain difference between @ placeholder and @ loading (#54779)
  • 1af2be9 docs(docs-infra): replace link by HTTPsecurity tab (#55029)
  • a893f0b fix(zone.js): should not clear onhandler when remove capture listener (#54602)
  • 93ce4d0 refactor(compiler-cli): properly preserve file overview comments (#54983)
  • ed271eb test(compiler-cli): add tests to verify import generation in TCB files/blocks (#54983)
  • 6734b59 refactor(compiler-cli): rename `ImportManagerV2` to `ImportManager` (#54983)
  • 789326d refactor(compiler-cli): delete old unused `ImportManager` (#54983)

Compare

Package name: @angular/core
  • 0401283 release: cut the v17.3.2 release
  • 2f9d94b fix(migrations): account for variables in imports initializer (#55081)
  • ee76001 refactor(compiler-cli): support ignoring specific doc entries during extraction (#55053)
  • b63afb9 refactor(core): improve API documentation for query initializer APIs (#55053)
  • 658fb0a refactor(core): improve API documentation for `output` (#55053)
  • f8aa778 refactor(core): improve API documentation for `model` (#55053)
  • 60ed00a refactor(core): improve API documentation for `input` after angular.dev support (#55053)
  • c7ff3d1 refactor(docs-infra): support initializer API functions (#55053)
  • aeb20f9 refactor(compiler-cli): support extracting initializer API functions (#55053)
  • 708ba81 fix(core): establish proper injector resolution order for `@ defer` blocks (#55079)
  • fb5a288 refactor(devtools): prevent exeception on state serializer (#55061)
  • 5b67c94 refactor(compiler-cli): improve error message for uncaught `FatalDiagnosticError` (#55070)
  • b478dfb fix(compiler-cli): report errors when initializer APIs are used on private fields (#55070)
  • 75d1cae refactor(compiler-cli): support enforcing field access for initializer APIs (#55070)
  • 53fe455 refactor(compiler-cli): reflection should inspect ES private fields and visibility (#55070)
  • 1470b7d refactor(compiler-cli): expand type of initializer parsing function (#55070)
  • 7663199 docs: link to http security now at best-practices/security (#55060)
  • 519e781 docs: explain difference between @ placeholder and @ loading (#54779)
  • 1af2be9 docs(docs-infra): replace link by HTTPsecurity tab (#55029)
  • a893f0b fix(zone.js): should not clear onhandler when remove capture listener (#54602)
  • 93ce4d0 refactor(compiler-cli): properly preserve file overview comments (#54983)
  • ed271eb test(compiler-cli): add tests to verify import generation in TCB files/blocks (#54983)
  • 6734b59 refactor(compiler-cli): rename `ImportManagerV2` to `ImportManager` (#54983)
  • 789326d refactor(compiler-cli): delete old unused `ImportManager` (#54983)

Compare

Package name: @angular/forms
  • 0401283 release: cut the v17.3.2 release
  • 2f9d94b fix(migrations): account for variables in imports initializer (#55081)
  • ee76001 refactor(compiler-cli): support ignoring specific doc entries during extraction (#55053)
  • b63afb9 refactor(core): improve API documentation for query initializer APIs (#55053)
  • 658fb0a refactor(core): improve API documentation for `output` (#55053)
  • f8aa778 refactor(core): improve API documentation for `model` (#55053)
  • 60ed00a refactor(core): improve API documentation for `input` after angular.dev support (#55053)
  • c7ff3d1 refactor(docs-infra): support initializer API functions (#55053)
  • aeb20f9 refactor(compiler-cli): support extracting initializer API functions (#55053)
  • 708ba81 fix(core): establish proper injector resolution order for `@ defer` blocks (#55079)
  • fb5a288 refactor(devtools): prevent exeception on state serializer (#55061)
  • 5b67c94 refactor(compiler-cli): improve error message for uncaught `FatalDiagnosticError` (#55070)
  • b478dfb fix(compiler-cli): report errors when initializer APIs are used on private fields (#55070)
  • 75d1cae refactor(compiler-cli): support enforcing field access for initializer APIs (#55070)
  • 53fe455 refactor(compiler-cli): reflection should inspect ES private fields and visibility (#55070)
  • 1470b7d refactor(compiler-cli): expand type of initializer parsing function (#55070)
  • 7663199 docs: link to http security now at best-practices/security (#55060)
  • 519e781 docs: explain difference between @ placeholder and @ loading (#54779)
  • 1af2be9 docs(docs-infra): replace link by HTTPsecurity tab (#55029)
  • a893f0b fix(zone.js): should not clear onhandler when remove capture listener (#54602)
  • 93ce4d0 refactor(compiler-cli): properly preserve file overview comments (#54983)
  • ed271eb test(compiler-cli): add tests to verify import generation in TCB files/blocks (#54983)
  • 6734b59 refactor(compiler-cli): rename `ImportManagerV2` to `ImportManager` (#54983)
  • 789326d refactor(compiler-cli): delete old unused `ImportManager` (#54983)

Compare

Package name: @angular/platform-browser
  • 0401283 release: cut the v17.3.2 release
  • 2f9d94b fix(migrations): account for variables in imports initializer (#55081)
  • ee76001 refactor(compiler-cli): support ignoring specific doc entries during extraction (#55053)
  • b63afb9 refactor(core): improve API documentation for query initializer APIs (#55053)
  • 658fb0a refactor(core): improve API documentation for `output` (#55053)
  • f8aa778 refactor(core): improve API documentation for `model` (#55053)
  • 60ed00a refactor(core): improve API documentation for `input` after angular.dev support (#55053)
  • c7ff3d1 refactor(docs-infra): support initializer API functions (#55053)
  • aeb20f9 refactor(compiler-cli): support extracting initializer API functions (#55053)
  • 708ba81 fix(core): establish proper injector resolution order for `@ defer` blocks (#55079)
  • fb5a288 refactor(devtools): prevent exeception on state serializer (#55061)
  • 5b67c94 refactor(compiler-cli): improve error message for uncaught `FatalDiagnosticError` (#55070)
  • b478dfb fix(compiler-cli): report errors when initializer APIs are used on private fields (#55070)
  • 75d1cae refactor(compiler-cli): support enforcing field access for initializer APIs (#55070)
  • 53fe455 refactor(compiler-cli): reflection should inspect ES private fields and visibility (#55070)

Snyk has created this PR to upgrade:
  - @angular/animations from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/animations
  - @angular/common from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/common
  - @angular/compiler from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/compiler
  - @angular/core from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/core
  - @angular/forms from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/forms
  - @angular/platform-browser from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/platform-browser
  - @angular/platform-browser-dynamic from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/platform-browser-dynamic
  - @angular/router from 17.3.0 to 17.3.2.
    See this package in npm: https://www.npmjs.com/package/@angular/router

See this project in Snyk:
https://app.snyk.io/org/andreasnicklaus/project/c3720acd-47a2-4bcc-8c00-397a96c483e2?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants