Update dependency @angular-devkit/build-angular to v18 #257

mend-for-github-com · 2024-12-04T00:06:25Z

This PR contains the following updates:

Package	Type	Update	Change
@angular-devkit/build-angular	dependencies	major	`^0.1102.8` -> `^18.2.0`

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
Critical	9.8	CVE-2022-0691	#157
Critical	9.8	CVE-2022-37601	#137
Critical	9.8	CVE-2022-37601	#137
Critical	9.8	CVE-2023-42282	#216
Critical	9.3	CVE-2023-45133	#204
Critical	9.1	CVE-2022-0686	#90
Critical	9.1	CVE-2024-48949	#250
High	8.1	CVE-2022-1650	#112
High	7.5	CVE-2021-23424	#50
High	7.5	CVE-2021-3803	#52
High	7.5	CVE-2022-24771	#104
High	7.5	CVE-2022-24772	#103
High	7.5	CVE-2022-37599	#136
High	7.5	CVE-2022-37603	#138
High	7.5	CVE-2022-37603	#138
High	7.5	CVE-2024-37890	#228
High	7.4	CVE-2024-29180	#221
High	7.1	CVE-2022-46175	#155
Medium	6.6	WS-2022-0008	#68
Medium	6.5	CVE-2023-46234	#198
Medium	6.4	CVE-2024-43788	#242
Medium	6.1	CVE-2022-0122	#66
Medium	6.1	CVE-2024-47068	#247
Medium	5.3	CVE-2020-28469	#5
Medium	5.3	CVE-2022-0512	#88
Medium	5.3	CVE-2022-0639	#89
Medium	5.3	CVE-2022-24773	#102
Medium	5.3	CVE-2022-25858	#118
Medium	5.3	CVE-2022-25858	#118
Medium	5.3	CVE-2022-25883	#195
Medium	5.3	CVE-2022-25883	#195
Medium	4.3	CVE-2024-55565	#259
Medium	4.0	CVE-2021-23566	#74

Release Notes

angular/angular-cli (@angular-devkit/build-angular)

`v18.2.0`

Compare Source

@schematics/angular

Commit	Type	Description
4da922e4f	feat	use isolatedModules in generated project

@angular/build

Commit	Type	Description
24aaf1e37	feat	support import attribute based loader configuration

`v18.1.4`

Compare Source

@angular/build

Commit	Type	Description
f8b092711	fix	allow explicitly disabling TypeScript incremental mode
f3a5970fc	fix	lazy load Node.js inspector for dev server

`v18.1.3`

Compare Source

@angular/build

Commit	Type	Description
a28615d7d	fix	add CSP `nonce` attribute to script tags when inline critical CSS is disabled
747a1447c	fix	prevent build failures with remote CSS imports when Tailwind is configured
c0933f2c0	fix	resolve error with `extract-i18n` builder for libraries

`v18.1.2`

Compare Source

@angular/build

Commit	Type	Description
5b9378a3b	fix	account for HTML base HREF for dev-server externals
3e4ea77d7	fix	correctly detect comma in Sass URL lexer
d868270f1	fix	prevent redirection loop
3573ac655	fix	serve HTML files directly

`v18.1.1`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
4f6cee272	fix	skip undefined files when generating budget stats

@angular/build

Commit	Type	Description
96dc7e6ed	fix	remove Vite "/@id/" prefix for explicit external dependencies
bdef39801	fix	resolve only ".wasm" files

`v18.1.0`

Compare Source

@angular/cli

Commit	Type	Description
6d266c146	fix	add fallbacks for migration package resolution

@schematics/angular

Commit	Type	Description
22e05dcb4	fix	generate new projects with ECMAScript standard class field behavior

@angular/build

Commit	Type	Description
687a6c7ec	feat	add `--inspect` option to the dev-server
628d87a94	feat	support WASM/ES Module integration proposal
3e359da8d	fix	address rxjs undefined issues during SSR prebundling
4ff914a16	fix	allow additional module preloads up to limit
fb8e3c39a	fix	allow top-level await in zoneless applications
83b75af9f	fix	check inlineSourceMap option with isolated modules optimization
cd97134a6	fix	normalize paths during module resolution in Vite
13d2100dd	fix	read WASM file from script location on Node.js
3091956f5	fix	support import attributes in JavaScript transformer
dd94a831b	perf	enable dependency prebundling for server dependencies
3acb77683	perf	use direct transpilation with isolated modules

`v18.0.7`

Compare Source

@angular/cli

Commit	Type	Description
67bf90131	fix	make `ng update` to keep newline at the end of package.json

@angular-devkit/build-angular

Commit	Type	Description
9b43ecbd0	fix	reduce the number of max workers to available CPUs minus one
03dad6806	fix	rollback terser to `5.29.2`

@angular/build

Commit	Type	Description
fc928f638	fix	correctly name entry points to match budgets
2d51e8607	fix	redirect to path with trailing slash for asset directories
16f1c1e01	fix	reduce the number of max workers to available CPUs minus one

`v18.0.6`

Compare Source

@angular/build

Commit	Type	Description
98a8a8a78	fix	show JavaScript cache store initialization warning

`v18.0.5`

Compare Source

@schematics/angular

Commit	Type	Description
5c705e800	fix	update schematics to use RouterModule when --routing flag is present

@angular-devkit/build-angular

Commit	Type	Description
86e031dc7	fix	use istanbul-lib-instrument directly for karma code coverage

@angular/build

Commit	Type	Description
bdd168f37	fix	add CSP nonce to script with src tags
405c14809	fix	automatically resolve `.mjs` files when using Vite
7360a346e	fix	use Node.js available parallelism for default worker count

`v18.0.4`

Compare Source

@angular/build

Commit	Type	Description
791ef809d	fix	do not reference sourcemaps in web workers and global stylesheet bundles when hidden setting is enabled
20fc6ca05	fix	generate module preloads next to script elements in index HTML
3a1bf5c8a	fix	Initiate PostCSS only once
78c611754	fix	issue warning when auto adding `@angular/localize/init`

`v18.0.3`

Compare Source

@angular/cli

Commit	Type	Description
b709d2a24	fix	add `schema.json` options to parsed command, also when a version is passed to `ng add <package>@<version>`

@angular/build

Commit	Type	Description
43a2a7d13	fix	avoid escaping rebased Sass URL values
9acb5c7ca	fix	disable JS transformer persistent cache on web containers
346df4909	fix	improve Sass rebaser ident token detection
6526a5f59	fix	watch all related files during a Sass error

`v18.0.2`

Compare Source

@schematics/angular

Commit	Type	Description
9967c04b8	fix	check both application builder packages in SSR schematic
92b48ab14	fix	set builders `assets` option correctly for new applications

@angular/build

Commit	Type	Description
3bb06c37d	fix	disable Worker wait loop for Sass compilations in web containers
c4cf35923	fix	print Sass `@warn` location
352879804	fix	support valid self-closing MathML tags in HTML index file
476f3084a	fix	support valid self-closing SVG tags in HTML index file

@angular/pwa

Commit	Type	Description
acbffd236	fix	set manifest `icons` location to match `assets` builder option

`v18.0.1`

Compare Source

@schematics/angular

Commit	Type	Description
01842f515	fix	use angular.dev in readme

@angular/build

Commit	Type	Description
7d253e9cd	fix	avoid rebasing URLs with function calls
6b6a76a99	fix	disable persistent disk caching inside webcontainers by default
ba70a50b6	fix	handle esbuild-browser `polyfills` option as `string` during `ng serve`
706423aca	fix	only import persistent cache store with active caching

`v18.0.0`

Compare Source

Breaking Changes

@angular/cli

The ng doc command has been removed without a replacement. To perform searches, please visit www.angular.dev
Node.js support for versions <18.19.1 and <20.11.1 has been removed.

@angular-devkit/build-angular

By default, the index.html file is no longer emitted in the browser directory when using the application builder with SSR. Instead, an index.csr.html file is emitted. This change is implemented because in many cases server and cloud providers incorrectly treat the index.html file as a statically generated page. If you still require the old behavior, you can use the index option to specify the output file name.
```
"architect": {
  "build": {
    "builder": "@&#8203;angular-devkit/build-angular:application",
    "options": {
      "outputPath": "dist/my-app",
      "index": {
        "input": "src/index.html",
        "output": "index.html"
      }
    }
  }
}
```
The support for the legacy Sass build pipeline, previously accessible via NG_BUILD_LEGACY_SASS when utilizing webpack-based builders, has been removed.

Deprecations

@angular-devkit/schematics

NodePackageLinkTask in @angular-devkit/schematics. A custom task should be created instead.

@angular/cli

Commit	Type	Description
ac3019570	feat	add `ng dev` alias to `ng serve`
4087728c3	feat	support for Node.js v22
41ab6c8c3	fix	add `--version` option
df4dde95d	fix	add `@angular/build` package to update group list
1039f6d79	fix	change update guide link to angular.dev
f4670fcb1	fix	eliminate prompts during `ng version` command
a99ec6a54	fix	keep cli package first in update package group metadata
dd786d495	fix	only add --version option on default command
03eee0545	refactor	remove `ng doc` command
c7b208555	refactor	remove support for Node.js versions <18.19.1 and <20.11.1

@schematics/angular

Commit	Type	Description
b2ac5fac7	feat	allow application migration to use new build package in projects where possible
6530aa11b	feat	replace `assets` with `public` directory
725883713	feat	use eventCoalescing option by default (standalone bootstrap)
508d97da7	feat	use ngZoneEventCoalescing option by default (module bootstrap)
f452589e2	feat	use TypeScript bundler module resolution for new projects
95a4d6ee5	fix	add less dependency in application migration if needed
c46aa084f	fix	add postcss dependency in application migration if needed
157329384	fix	add spaces around eventCoalescing option
23cc337aa	fix	keep deployUrl option when migrating to application builder

@angular-devkit/architect

Commit	Type	Description
ddd08efef	fix	resolve builder aliases from containing package

@angular-devkit/build-angular

Commit	Type	Description
53c319aaa	feat	add support for the `poll` option in the library builder
83d1d233a	feat	enhance Sass rebasing importer for resources URL defined in variables and handling of external paths
d51cb598a	feat	inject event-dispatch in SSR HTML page
0b03829bc	feat	move i18n extraction for application builder to new build system package
4ffe07aa2	feat	move Vite-based dev-server for application builder to new build system package
d1c632af9	feat	support native async/await when app is zoneless
37fc7f0cc	fix	disable Vite prebundling when script optimizations are enabled
2acf95a94	fix	do not generate an `index.html` file in the browser directory when using SSR.
8a54875cb	fix	handle wrapping of class expressions emitted by esbuild
97973059e	refactor	remove Sass legacy implementation

@angular-devkit/schematics

Commit	Type	Description
797584583	refactor	deprecate `NodePackageLinkTask`

@angular/build

Commit	Type	Description
810d213e1	feat	introduce new official build system package
b7a0792b3	fix	add a maximum rendering timeout for SSG
411115303	fix	add console note about development server raw file size
921fa7cf4	fix	add missing `ansi-colors` and `picomatch` dependencies
791cf75af	fix	check both potential build packages in Angular version check
4d7cd5e3e	fix	correctly wrap class expressions with static properties or blocks emitted by esbuild
57f448a0f	fix	decode URL pathname decoding during SSG fetch
940e382db	fix	disable Vite prebundling when script optimizations are enabled
70dbc7a6e	fix	emit error for invalid self-closing element in index HTML
44b401747	fix	ensure input index HTML file triggers rebuilds when changed
dff4deaeb	fix	ensure recreated files are watched
17931166d	fix	format sizes using decimal byte units consistently
2085365e0	fix	only generate shallow preload links for initial files
33cd47c85	fix	properly configure headers for media resources and HTML page
d10fece2c	fix	properly rebase Sass url() values with leading interpolations
3f2963835	perf	add persistent caching of JavaScript transformations
a15eb7d1c	perf	improve rebuild time for file loader usage with prebundling

`v17.3.11`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
8bad9cee0	fix	update `http-proxy-middleware` to `2.0.7`

`v17.3.10`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
30489d8fd	fix	update vite to 4.1.8

`v17.3.9`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
e2c5c034d	fix	clear context in Karma by default for single run executions
88501f3d5	fix	upgrade webpack to `5.94.0`

`v17.3.8`

Compare Source

@angular/cli

Commit	Type	Description
3ada6eb52	fix	clarify optional migration instructions during ng update

@angular-devkit/schematics

Commit	Type	Description
4b6ba8df1	fix	`SchematicTestRunner.runExternalSchematic` fails with "The encoded data was not valid for encoding utf-8"

`v17.3.7`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
998c72036	fix	decode URL pathname decoding during SSG fetch

@angular-devkit/schematics

Commit	Type	Description
1ab1c6c9e	fix	use web standard error check for Deno support

`v17.3.6`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
dcec59799	fix	properly configure headers for media resources and HTML page

`v17.3.5`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
6191d06ca	fix	address `Unable to deserialize cloned data` issue with Yarn PnP
0335d6a5d	fix	remove `type="text/css"` from `style` tag

`v17.3.4`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
1128bdd64	fix	ensure esbuild-based builders exclusively produce ESM output

`v17.3.3`

Compare Source

@schematics/angular

Commit	Type	Description
a673baf5c	fix	Revert "fix(@schematics/angular): rename SSR port env variable"

`v17.3.2`

Compare Source

@schematics/angular

Commit	Type	Description
935f931ee	fix	rename SSR port env variable

@angular-devkit/build-angular

| Commit

Update dependency @angular-devkit/build-angular to v18

a7d4576

mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Dec 4, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency @angular-devkit/build-angular to v18 #257

Update dependency @angular-devkit/build-angular to v18 #257

mend-for-github-com bot commented Dec 4, 2024 •

edited

Loading

Update dependency @angular-devkit/build-angular to v18 #257

Are you sure you want to change the base?

Update dependency @angular-devkit/build-angular to v18 #257

Conversation

mend-for-github-com bot commented Dec 4, 2024 • edited Loading

Release Notes

Breaking Changes

Deprecations

mend-for-github-com bot commented Dec 4, 2024 •

edited

Loading