Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , , , , , , , , , bootstrap, core-js, moment, ng-jhipster, ngx-infinite-scroll, rxjs, tslib, zone.js #8082

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

sanjeevi-mariappan
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@angular/common
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@angular/compiler
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@angular/core
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@angular/forms
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@angular/platform-browser
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@angular/platform-browser-dynamic
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@angular/router
from 7.2.4 to 7.2.16 | 12 versions ahead of your current version | 5 years ago
on 2020-01-08
@fortawesome/fontawesome-svg-core
from 1.2.14 to 1.2.36 | 37 versions ahead of your current version | 3 years ago
on 2021-08-04
@fortawesome/free-solid-svg-icons
from 5.7.1 to 5.15.4 | 37 versions ahead of your current version | 3 years ago
on 2021-08-04
@fortawesome/angular-fontawesome
from 0.3.0 to 0.15.0 | 21 versions ahead of your current version | 4 months ago
on 2024-05-23
@ng-bootstrap/ng-bootstrap
from 4.0.2 to 4.2.2 | 10 versions ahead of your current version | 5 years ago
on 2019-09-03
bootstrap
from 4.2.1 to 4.6.2 | 11 versions ahead of your current version | 2 years ago
on 2022-07-19
core-js
from 2.6.4 to 2.6.12 | 8 versions ahead of your current version | 4 years ago
on 2020-11-25
moment
from 2.24.0 to 2.30.1 | 14 versions ahead of your current version | 9 months ago
on 2023-12-27
ng-jhipster
from 0.9.1 to 0.16.0 | 15 versions ahead of your current version | 4 years ago
on 2020-10-18
ngx-infinite-scroll
from 7.0.1 to 7.2.0 | 3 versions ahead of your current version | 5 years ago
on 2019-06-10
rxjs
from 6.4.0 to 6.6.7 | 13 versions ahead of your current version | 3 years ago
on 2021-03-28
tslib
from 1.9.3 to 1.14.1 | 8 versions ahead of your current version | 4 years ago
on 2020-10-09
zone.js
from 0.8.29 to 0.15.0 | 31 versions ahead of your current version | 24 days ago
on 2024-08-21

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
696 Proof of Concept
high severity Directory Traversal
SNYK-JS-MOMENT-2440688
696 No Known Exploit
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
696 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-BOOTSTRAP-173700
696 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764
696 Proof of Concept
medium severity Information Exposure
SNYK-JS-NODEFETCH-2342118
696 No Known Exploit
medium severity Denial of Service
SNYK-JS-NODEFETCH-674311
696 No Known Exploit
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795
696 Proof of Concept
Release notes
Package name: @angular/common
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/common GitHub release notes
Package name: @angular/compiler
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/compiler GitHub release notes
Package name: @angular/core
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/core GitHub release notes
Package name: @angular/forms
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/forms GitHub release notes
Package name: @angular/platform-browser
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/platform-browser GitHub release notes
Package name: @angular/platform-browser-dynamic
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/platform-browser-dynamic GitHub release notes
Package name: @angular/router
  • 7.2.16 - 2020-01-08
  • 7.2.15 - 2019-05-07
  • 7.2.14 - 2019-04-23
  • 7.2.13 - 2019-04-13
  • 7.2.12 - 2019-04-03
  • 7.2.11 - 2019-03-26
  • 7.2.10 - 2019-03-20
  • 7.2.9 - 2019-03-12
  • 7.2.8 - 2019-03-06
  • 7.2.7 - 2019-02-27
  • 7.2.6 - 2019-02-20
  • 7.2.5 - 2019-02-15
  • 7.2.4 - 2019-02-06
from @angular/router GitHub release notes
Package name: @fortawesome/fontawesome-svg-core
  • 1.2.36 - 2021-08-04
  • 1.2.35 - 2021-03-16
  • 1.2.34 - 2021-01-13
  • 1.2.32 - 2020-10-05
  • 1.2.31 - 2020-09-29
  • 1.2.30 - 2020-07-15
  • 1.2.29 - 2020-06-18
  • 1.2.28 - 2020-03-23
  • 1.2.27 - 2020-02-05
  • 1.2.26 - 2019-12-10
  • 1.2.26-2 - 2019-12-10
  • 1.2.26-1 - 2019-11-06
  • 1.2.25 - 2019-09-23
  • 1.2.24 - 2019-09-18
  • 1.2.23 - 2019-09-18
  • 1.2.22 - 2019-08-22
  • 1.2.21 - 2019-08-02
  • 1.2.20 - 2019-07-29
  • 1.2.20-14 - 2019-07-25
  • 1.2.20-13 - 2019-07-25
  • 1.2.20-12 - 2019-07-23
  • 1.2.20-11 - 2019-06-25
  • 1.2.20-10 - 2019-06-24
  • 1.2.20-9 - 2019-06-24
  • 1.2.20-8 - 2019-06-21
  • 1.2.20-7 - 2019-06-20
  • 1.2.20-6 - 2019-06-19
  • 1.2.20-5 - 2019-06-17
  • 1.2.20-4 - 2019-06-14
  • 1.2.20-3 - 2019-06-12
  • 1.2.20-2 - 2019-05-29
  • 1.2.20-1 - 2019-05-28
  • 1.2.19 - 2019-06-04
  • 1.2.18 - 2019-05-07
  • 1.2.17 - 2019-03-21
  • 1.2.16 - 2019-03-19
  • 1.2.15 - 2019-02-12
  • 1.2.14 - 2019-02-01
from @fortawesome/fontawesome-svg-core GitHub release notes
Package name: @fortawesome/free-solid-svg-icons
  • 5.15.4 - 2021-08-04
  • 5.15.3 - 2021-03-16
  • 5.15.2 - 2021-01-13
  • 5.15.1 - 2020-10-05
  • 5.15.0 - 2020-09-29
  • 5.14.0 - 2020-07-15
  • 5.13.1 - 2020-06-18
  • 5.13.0 - 2020-03-23
  • 5.12.1 - 2020-02-05
  • 5.12.0 - 2019-12-10
  • 5.12.0-2 - 2019-12-10
  • 5.12.0-1 - 2019-11-06
  • 5.11.2 - 2019-09-23
  • 5.11.1 - 2019-09-18
  • 5.11.0 - 2019-09-18
  • 5.10.2 - 2019-08-22
  • 5.10.1 - 2019-08-02
  • 5.10.0 - 2019-07-29
  • 5.10.0-14 - 2019-07-25
  • 5.10.0-13 - 2019-07-25
  • 5.10.0-12 - 2019-07-23
  • 5.10.0-11 - 2019-06-25
  • 5.10.0-10 - 2019-06-24
  • 5.10.0-9 - 2019-06-24
  • 5.10.0-8 - 2019-06-21
  • 5.10.0-7 - 2019-06-20
  • 5.10.0-6 - 2019-06-19
  • 5.10.0-5 - 2019-06-17
  • 5.10.0-4 - 2019-06-14
  • 5.10.0-3 - 2019-06-12
  • 5.10.0-2 - 2019-05-29
  • 5.10.0-1 - 2019-05-28
  • 5.9.0 - 2019-06-04
  • 5.8.2 - 2019-05-07
  • 5.8.1 - 2019-03-21
  • 5.8.0 - 2019-03-19
  • 5.7.2 - 2019-02-12
  • 5.7.1 - 2019-02-01
from @fortawesome/free-solid-svg-icons GitHub release notes
Package name: @fortawesome/angular-fontawesome
  • 0.15.0 - 2024-05-23

    Make sure to check upgrade instructions.

    Added

    • Support for Angular 18.
    • Documentation on how to use NPM Kit packages.
    • Documentation on how to correctly use fa-stack in standalone components.
    • Documentation on how to use custom icons.
    • FAQ page with considerations on whether to use this library.
    • Configuration option for the FontAwesomeTestingModule to not throw errors when adding icons.
    • Documentation on how to add global styles to the page.

    Fixed

    • Documentation for the rotate input.
    • Global styles are now correctly added to the page in SSR context.

    Changed

    • icon input type is now more permissive.
    • @ fortawesome/fontawesome-svg-core became a regular dependency.

    Removed

    • Angular 17.x is no longer supported. If you are using this version, please, stick with version 0.14.1.
    • Deprecated inputs spin and pulse. Use animation input instead.
    • Deprecated inputs styles and classes.
  • 0.14.1 - 2023-12-23

    Fixed

    • Removed import from @ fortawesome/fontawesome-common-types, which was an undeclared dependency.
  • 0.14.0 - 2023-11-08

    Added

    • Support for Angular 17.
    • Possibility to use all components as standalone.

    Changed

    • Examples to use standalone components instead of modules.

    Removed

    • Angular 16.x is no longer supported. If you are using this version, please, stick with version 0.13.0.
  • 0.13.0 - 2023-05-04

    Added

    • Support for Angular 16.

    Removed

    • Angular 15.x is no longer supported. If you are using this version, please, stick with version 0.12.1.
  • 0.12.1 - 2023-01-09

    Added

  • 0.12.0 - 2022-11-18

    Make sure to check upgrade instructions.

    Added

    • Support for Angular 15.
    • Documentation and option in ng-add schematic to use new Sharp Solid icons style.

    Changed

    • Documentation on how to create fa-icon programmatically updated to not use deprecated ComponentFactoryResolver.

    Deprecated

    • classes and styles inputs on all components are deprecated for removal as confusing and generally not useful. See upgrade instructions for the suggested migration path.

    Removed

    • Angular 14.x is no longer supported. If you are using this version, please, stick with version 0.11.1.
  • 0.11.1 - 2022-06-16
    • Added a missing peer dependency on @ angular/core.
  • 0.11.0 - 2022-06-03

    Added

    • Support for Angular 14.

    Removed

    • Angular 13.x is no longer supported. If you are using this version, please, stick with version 0.10.2.
  • 0.10.2 - 2022-03-20

    Added

    • position input for fa-layers-counter component.
    • @ fortawesome/fontawesome-svg-core@^6.1.0 as a valid peer dependency.
    • Possibility to pick v5 or v6 to the ng-add schematic.
  • 0.10.1 - 2021-11-13

    Added

    • Official support for Font Awesome 6 Beta.
    • Support for icon aliases introduced in Font Awesome 6 Beta.
  • 0.10.0 - 2021-11-03
  • 0.9.0 - 2021-05-13
  • 0.8.2 - 2021-02-03
  • 0.8.1 - 2020-12-11
  • 0.8.0 - 2020-11-12
  • 0.7.0 - 2020-07-08
  • 0.6.1 - 2020-03-27
  • 0.6.0 - 2020-02-08
  • 0.6.0-alpha.0 - 2019-11-11
  • 0.5.0 - 2019-08-11
  • 0.4.0 - 2019-05-28
  • 0.3.0 - 2018-10-23
from @fortawesome/angular-fontawesome GitHub release notes
Package name: @ng-bootstrap/ng-bootstrap
  • 4.2.2 - 2019-09-03
  • 4.2.1 - 2019-06-03
  • 4.2.0 - 2019-05-29
  • 4.1.3 - 2019-05-13
  • 4.1.2 - 2019-04-30
  • 4.1.1 - 2019-04-01
  • 4.1.0 - 2019-03-05
  • 4.0.5 - 2019-03-05
  • 4.0.4 - 2019-02-21
  • 4.0.3 - 2019-02-12
  • 4.0.2 - 2019-01-28
from @ng-bootstrap/ng-bootstrap GitHub release notes
Package name: bootstrap from bootstrap GitHub release notes
Package name: core-js
  • 2.6.12 - 2020-11-25
    • Added code points / code units explicit feature detection in String#at for preventing breakage code which use obsolete String#at proposal polyfill
    • Added OPEN_SOURCE_CONTRIBUTOR detection in postinstall
    • Added Drone CI detection in postinstall
  • 2.6.11 - 2019-12-08
  • 2.6.10 - 2019-10-13
  • 2.6.9 - 2019-05-27
  • 2.6.8 - 2019-05-21
  • 2.6.7 - 2019-05-20
  • 2.6.6 - 2019-05-19
  • 2.6.5 - 2019-02-15
  • 2.6.4 - 2019-02-07
from core-js GitHub release notes
Package name: moment from moment GitHub release notes
Package name: ng-jhipster

Snyk has created this PR to upgrade:
  - @angular/common from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/common
  - @angular/compiler from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/compiler
  - @angular/core from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/core
  - @angular/forms from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/forms
  - @angular/platform-browser from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/platform-browser
  - @angular/platform-browser-dynamic from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/platform-browser-dynamic
  - @angular/router from 7.2.4 to 7.2.16.
    See this package in npm: https://www.npmjs.com/package/@angular/router
  - @fortawesome/fontawesome-svg-core from 1.2.14 to 1.2.36.
    See this package in npm: https://www.npmjs.com/package/@fortawesome/fontawesome-svg-core
  - @fortawesome/free-solid-svg-icons from 5.7.1 to 5.15.4.
    See this package in npm: https://www.npmjs.com/package/@fortawesome/free-solid-svg-icons
  - @fortawesome/angular-fontawesome from 0.3.0 to 0.15.0.
    See this package in npm: https://www.npmjs.com/package/@fortawesome/angular-fontawesome
  - @ng-bootstrap/ng-bootstrap from 4.0.2 to 4.2.2.
    See this package in npm: https://www.npmjs.com/package/@ng-bootstrap/ng-bootstrap
  - bootstrap from 4.2.1 to 4.6.2.
    See this package in npm: https://www.npmjs.com/package/bootstrap
  - core-js from 2.6.4 to 2.6.12.
    See this package in npm: https://www.npmjs.com/package/core-js
  - moment from 2.24.0 to 2.30.1.
    See this package in npm: https://www.npmjs.com/package/moment
  - ng-jhipster from 0.9.1 to 0.16.0.
    See this package in npm: https://www.npmjs.com/package/ng-jhipster
  - ngx-infinite-scroll from 7.0.1 to 7.2.0.
    See this package in npm: https://www.npmjs.com/package/ngx-infinite-scroll
  - rxjs from 6.4.0 to 6.6.7.
    See this package in npm: https://www.npmjs.com/package/rxjs
  - tslib from 1.9.3 to 1.14.1.
    See this package in npm: https://www.npmjs.com/package/tslib
  - zone.js from 0.8.29 to 0.15.0.
    See this package in npm: https://www.npmjs.com/package/zone.js

See this project in Snyk:
https://app.snyk.io/org/jeevi251296/project/1bdfe6b2-fde7-4b61-8425-9397aaec6b88?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants