[Snyk] Upgrade: , , , , , , tslib, , , , , , bulma, core-js, minimist, zone.js #32
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@angular/animations
from 12.0.4 to 12.2.17 | 36 versions ahead of your current version | 2 years ago
on 2022-11-22
@angular/common
from 12.0.4 to 12.2.17 | 36 versions ahead of your current version | 2 years ago
on 2022-11-22
@angular/forms
from 12.0.4 to 12.2.17 | 36 versions ahead of your current version | 2 years ago
on 2022-11-22
@angular/platform-browser
from 12.0.4 to 12.2.17 | 36 versions ahead of your current version | 2 years ago
on 2022-11-22
@angular/platform-browser-dynamic
from 12.0.4 to 12.2.17 | 36 versions ahead of your current version | 2 years ago
on 2022-11-22
@angular/router
from 12.0.4 to 12.2.17 | 36 versions ahead of your current version | 2 years ago
on 2022-11-22
tslib
from 2.2.0 to 2.6.3 | 12 versions ahead of your current version | 3 months ago
on 2024-06-04
@ngrx/data
from 12.1.0 to 12.5.1 | 5 versions ahead of your current version | 3 years ago
on 2021-10-25
@ngrx/effects
from 12.1.0 to 12.5.1 | 5 versions ahead of your current version | 3 years ago
on 2021-10-25
@ngrx/entity
from 12.1.0 to 12.5.1 | 5 versions ahead of your current version | 3 years ago
on 2021-10-25
@ngrx/store
from 12.1.0 to 12.5.1 | 5 versions ahead of your current version | 3 years ago
on 2021-10-25
@ngrx/store-devtools
from 12.1.0 to 12.5.1 | 5 versions ahead of your current version | 3 years ago
on 2021-10-25
bulma
from 0.9.2 to 0.9.4 | 2 versions ahead of your current version | 2 years ago
on 2022-05-08
core-js
from 3.12.0 to 3.38.1 | 82 versions ahead of your current version | 24 days ago
on 2024-08-20
minimist
from 1.2.5 to 1.2.8 | 3 versions ahead of your current version | 2 years ago
on 2023-02-09
zone.js
from 0.11.4 to 0.15.0 | 20 versions ahead of your current version | 23 days ago
on 2024-08-21
Issues fixed by the recommended upgrade:
SNYK-JS-MINIMIST-2429795
Release notes
Package name: @angular/animations
Package name: @angular/common
Package name: @angular/forms
Package name: @angular/platform-browser
Package name: @angular/platform-browser-dynamic
Package name: @angular/router
Package name: tslib
What's Changed
Full Changelog: v2.6.2...v2.6.3
What's Changed
exports["module"]["types"]
by @ andrewbranch in #217Full Changelog: v2.6.1...v2.6.2
What's Changed
Full Changelog: 2.6.0...v2.6.1
What's Changed
using
andawait using
by @ rbuckton in #213Full Changelog: v2.5.3...2.6.0
What's Changed
Full Changelog: 2.5.2...v2.5.3
This release explicitly re-exports helpers to work around TypeScript's incomplete symbol resolution for tslib.
This release of tslib provides fixes for two issues.
First, it reverses the order of
init
hooks provided by decorators to correctly reflect proposed behavior.Second, it corrects the
exports
field of tslib'spackage.json
and provides accurate declaration files so that it may be consumed under thenode16
andbundler
settings formoduleResolution.
What's New
__esDecorate
and related helpers by @ rbuckton in #193Full Changelog: 2.4.1...2.5.0
This release contains fixes for early
return
s andthrow
s invoked on generators.This release includes the
__classPrivateFieldIn
helper as well as an update to__createBinding
to reduce indirection between multiple re-exports.Package name: @ngrx/data
Package name: @ngrx/effects
Package name: @ngrx/entity
Package name: @ngrx/store
Package name: @ngrx/store-devtools
Package name: bulma
New features
@ mixin between
: takes 2 breakpoint values, outputs a media query for the range between these 2 values$breakpoints
Sass map: a map of named breakpoints and their type (from
,until
or both)@ mixin breakpoint
: uses the new$breakpoints
Sass map to output a media queryImprovements
Bugfix
New features
is-underlined
class for underlined text and linksauto
value for margin and padding helper classesImprovements
$section-padding-desktop
Sass variable$hero-body-padding-tablet
Sass variable$shadow
Sass variable (used for.box
,.card
,.dropdown
and.panel
)is-normal
size modifiers to.file
and.content
%reset
placeholderBugfix
Breaking change
To fix duplicate imports, all Sass placeholders have moved from the
utilities/mixins
file to its ownutilities/extends
file.The Sass placeholders are:
%control
%unselectable
%arrow
%block
%delete
%loader
%overlay
If you were importing them directly from
utilities/mixins
, you'll need to importutilities/extends
instead.If you were importing
utilities/_all
or evenbulma.sass
directly, no change is required.New features
is-ghost
button that behaves / looks like a regular linkicon-text
component, to combine an icon with text on its sideBug fixes
column
offsets in RTLwidth: unset
for narrow columnsmixins
imports, created a singleextends
file.sass
file extension have been removed, since they're unnecessary when there's no ambiguity between a.sass
file or a.scss
fileImprovements
$media-*
variables, set to!default
Package name: core-js
URLSearchParams
percent decoding, #1357, #1361, thanks @ slowcheetahIterator
helpers proposal methods marked as shipped from FF131Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
marked as shipped from Bun 1.1.23RegExp.escape
marked as shipped from Bun 1.1.22Promise.try
marked as shipped from Bun 1.1.22Uint8Array
to / from base64 and hex proposal methods marked as shipped from Bun 1.1.22RegExp.escape
proposal:RegExp.escape
/actual/
namespace entries, unconditional forced replacement changed to feature detectionPromise.try
proposal:Promise.try
/actual/
namespace entries, unconditional forced replacement changed to feature detectionUint8Array
to / from base64 and hex stage 3 proposal:Uint8Array.fromBase64
Uint8Array.fromHex
Uint8Array.prototype.setFromBase64
Uint8Array.prototype.setFromHex
Uint8Array.prototype.toBase64
Uint8Array.prototype.toHex
Uint8Array.prototype.{ setFromBase64, setFromHex }
methodsUint8Array.fromBase64
andUint8Array.prototype.setFromBase64
lastChunkHandling
option, proposal-arraybuffer-base64/33Uint8Array.prototype.toBase64
omitPadding
option, proposal-arraybuffer-base64/60TypeError
on arrays backed by detached buffersRegExp
named capture groups polyfill in combination with non-capturing groups, #1352, thanks @ Ulopprocess.getBuiltinModule
for getting built-in NodeJS modules where it's availablehttps
instead ofhttp
inURL
constructor feature detection to avoid extra notifications from some overly vigilant security scanners, #1345browserslist
incore-js-compat
dependencies that fixes an upstream issue with incorrect interpretation of somebrowserslist
queries, #1344, browserslist/829, browserslist/836Object.groupBy
andMap.groupBy
to work for non-objectsRangeError
ifSet
methods are called on an object with negative size propertySet.prototype.symmetricDifference
to callthis.has
in each iterationArray.fromAsync
to not call theArray
constructor twiceURL.parse
Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
marked as shipped from FF129Symbol.asyncDispose
added and marked as supported from V8 ~ Chromium 127Promise.try
added and marked as supported from V8 ~ Chromium 128self
descriptor is broken in Deno 1.45.3 (again)URL.parse
feature detection for some specific casesSet
methods proposal added and marked as supported from FF 127Symbol.dispose
added and marked as supported from V8 ~ Chromium 125Math.f16round
andDataView.prototype.{ getFloat16, setFloat16 }
added and marked as supported from Deno 1.43URL.parse
added and marked as supported from Chromium 126URL.parse
added and marked as supported from NodeJS 22.0URL.parse
added and marked as supported from Deno 1.43Set
methods proposal:Set.prototype.intersection
Set.prototype.union
Set.prototype.difference
Set.prototype.symmetricDifference
Set.prototype.isSubsetOf
Set.prototype.isSupersetOf
Set.prototype.isDisjointFrom
es.
namespace modules,/es/
and/stable/
namespaces entriesMath.sumPrecise
stage 2.7 proposal:Math.sumPrecise
Promise.try
proposal:Promise.try
RegExp.escape
stage 2 proposal:Symbol.customMatcher
Symbol.customMatcher
Symbol.customMatcher
well-known symbol from the pattern matching proposal is also used in the exactors proposal, added an entry also for this proposalURL.parse
, url/825{ Object, Map }.groupBy
bug that does not support iterable primitivesArray.fromAsync
URL.parse
added and marked as supported from FF 126URL.parse
added and marked as supported from Bun 1.1.4URL.canParse
fixed and marked as supported from Bun 1.1.0Set
methods fixed in JavaScriptCore and marked as supported from Bun 1.1.1Object.setPrototypeOf
, #1329, thanks @ minseok-choeArray.from
, #1331, thanks @ minseok-choequeueMicrotask
arityURL.canParse
aritySuppressedError
extra arguments support and arityvalue
argument ofURLSearchParams.prototype.{ has, delete }
marked as supported from Bun 1.0.31Array.prototype.{ toSpliced, toReversed, with }
andatob
marked as supportedArrayBuffer.prototype.transfer
and friends proposal:ArrayBuffer.prototype.detached
ArrayBuffer.prototype.transfer
ArrayBuffer.prototype.transferToFixedLength
es.
namespace modules,/es/
and/stable/
namespaces entriesUint8Array
to / from base64 and hex proposal:Uint8Array.fromBase64
Uint8Array.fromHex
Uint8Array.prototype.toBase64
Uint8Array.prototype.toHex
/actual/
namespace entriesPromise.try
proposal has been resurrected and moved to stage 2, Febrary 2024 TC39 meetingcore-js/stage/2.7
- still emptySet.prototype.intersection
feature detectionArray.prototype.{ indexOf, lastIndexOf, includes }
, #1325, thanks @ minseok-choeArray.prototype.{ reduce, reduceRight }
, #1327, thanks @ minseok-choeArray.from
and some other methods with proxy targets, #1322, thanks @ minseok-choeArrayBuffer.prototype.transfer
and friends proposal in some specific cases in IE10-Date.prototype.toJSON
toJSON.stringify
entries dependencies{ Map, Object }.groupBy
,