Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency @angular/core to v17 [security] - autoclosed #542

Closed
wants to merge 1 commit into from
Closed

chore(deps): update dependency @angular/core to v17 [security] - autoclosed #542

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 25, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@angular/core (source) ^16.2.12 -> ^17.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-4231

A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 10.2.5, 11.0.5 or 11.1.0-next.3 is advised to to address this issue.

Release Notes

angular/angular (@​angular/core)

v17.0.0

Compare Source

Blog post "Angular v17 is now available".

Breaking Changes

  • Node.js v16 support has been removed and the minimum support version has been bumped to 18.13.0.

    Node.js v16 is planned to be End-of-Life on 2023-09-11. Angular will stop supporting Node.js v16 in Angular v17. For Node.js release schedule details, please see: https://github.com/nodejs/release#release-schedule

common
  • the NgSwitch directive now defaults to the === equality operator,
    migrating from the previously used ==. NgSwitch expressions and / or
    individual condition values need adjusting to this stricter equality
    check. The added warning message should help pinpointing NgSwitch
    usages where adjustements are needed.
core

  • Angular now required zone.js version ~0.14.0

  • Versions of TypeScript older than 5.2 are no longer supported.

  • The mutate method was removed from the WritableSignal interface and completely
    dropped from the public API surface. As an alternative please use the update method and
    make immutable changes to the object.

    Example before:

    items.mutate(itemsArray => itemsArray.push(newItem));

    Example after:

    items.update(itemsArray => [itemsArray, …newItem]);

  • The mutate method was removed from the WritableSignal interface and completely
    dropped from the public API surface. As an alternative please use the update method and
    make immutable changes to the object.

    Example before:

    items.mutate(itemsArray => itemsArray.push(newItem));

    Example after:

    items.update(itemsArray => [itemsArray, …newItem]);

  • OnPush components that are created dynamically now
    only have their host bindings refreshed and ngDoCheck run during change
    detection if they are dirty.
    Previously, a bug in the change detection would result in the OnPush
    configuration of dynamically created components to be ignored when
    executing host bindings and the ngDoCheck function. This is
    rarely encountered but can happen if code has a handle on the
    ComponentRef instance and updates values read in the OnPush
    component template without then calling either markForCheck or
    detectChanges on that component's ChangeDetectorRef.

platform-browser

  • REMOVE_STYLES_ON_COMPONENT_DESTROY default value is now true. This causes CSS of components to be removed from the DOM when destroyed. You retain the previous behaviour by providing the REMOVE_STYLES_ON_COMPONENT_DESTROY injection token.

    import {REMOVE_STYLES_ON_COMPONENT_DESTROY} from '@​angular/platform-browser';
...
providers: [{
  provide: REMOVE_STYLES_ON_COMPONENT_DESTROY,
  useValue: false,
}]

  • The withNoDomReuse() function was removed from the public API. If you need to disable hydration, you can exclude the provideClientHydration() call from provider list in your application (which would disable hydration features for the entire application) or use ngSkipHydration attribute to disable hydration for particular components. See this guide for additional information: https://angular.io/guide/hydration#how-to-skip-hydration-for-particular-components.

router

  • Absolute redirects no longer prevent further redirects.
    Route configurations may need to be adjusted to prevent infinite
    redirects where additional redirects were previously ignored after an
    absolute redirect occurred.

  • Routes with loadComponent would incorrectly cause
    child routes to inherit their data by default. The default
    paramsInheritanceStrategy is emptyOnly. If parent data should be
    inherited in child routes, this should be manually set to always.

  • urlHandlingStrategy has been removed from the Router public API.
    This should instead be configured through the provideRouter or RouterModule.forRoot APIs.

  • The following Router properties have been removed from
    the public API:

    • canceledNavigationResolution
    • paramsInheritanceStrategy
    • titleStrategy
    • urlUpdateStrategy
    • malformedUriErrorHandler

    These should instead be configured through the provideRouter or
    RouterModule.forRoot APIs.

  • The setupTestingRouter function has been removed. Use
    RouterModule.forRoot or provideRouter to setup the Router for
    tests instead.

  • malformedUriErrorHandler is no longer available in
    the RouterModule.forRoot options. URL parsing errors should instead be
    handled in the UrlSerializer.parse method.

zone.js

  • Deep and legacy dist/ imports like zone.js/bundles/zone-testing.js and zone.js/dist/zone are no longer allowed. zone-testing-bundle and zone-testing-node-bundle are also no longer part of the package.

    The proper way to import zone.js and zone.js/testing is:

    import 'zone.js';
import 'zone.js/testing';

Deprecations

animations
  • The AnimationDriver.NOOP symbol is deprecated, use NoopAnimationDriver instead.
core

  • ChangeDetectorRef.checkNoChanges is deprecated.

    Test code should use ComponentFixture instead of ChangeDetectorRef.
    Application code should not call ChangeDetectorRef.checkNoChanges directly.

  • Swapping out the context object for EmbeddedViewRef
    is no longer supported. Support for this was introduced with v12.0.0, but
    this pattern is rarely used. There is no replacement, but you can use
    simple assignments in most cases, or Object.assign , or alternatively still replace the full object by using a Proxy(seeNgTemplateOutlet`
    as an example).

    Also adds a warning if the deprecated

  • NgProbeToken

    The NgProbeToken is not used internally since the transition from View Engine to Ivy. The token has no utility and can be removed from applications and libraries.

Commit Type Description
59aa0634f4 build remove support for Node.js v16 (#​51755)
animations
Commit Type Description
e753278faa feat Add the possibility of lazy loading animations code. (#​50738)
698c058e1c fix remove code duplication between entry-points (#​51500)
0598613950 refactor deprecation of AnimationDriver.NOOP (#​51843)
benchpress
Commit Type Description
2da3551a70 feat report gc and render time spent in script (#​50771)
common
Commit Type Description
fe2fd7e1a8 feat make the warning for lazy-loaded lcp image an error (#​51748)
dde3fdabbd feat upgrade warning to logged error for lazy-loaded LCP images using NgOptimizedImage (#​52004)
da056a1fe2 fix add missing types field for @​angular/common/locales of exports in package.json (#​52080)
85843e8212 fix allow to specify only some properties of DatePipeConfig (#​51287)
3bd85fb7b0 fix apply fixed_srcset_width value only to fixed srcsets (#​52459)
65b460448e fix missing space in ngSwitch equality warning (#​52180)
86c5e34601 fix remove code duplication between entry-points (#​51500)
28a5925f53 fix use === operator to match NgSwitch cases (#​51504)
compiler
Commit Type Description
1934524a0c feat add docs extraction for type aliases (#​52118)
7f6d9a73ab feat expand class api doc extraction (#​51733)
a7fa25306f feat extract api docs for interfaces (#​52006)
7bfe20707f feat extract api for fn overloads and abtract classes (#​52040)
c7daf7ea16 feat extract directive docs info (#​51733)
e0b1bb33d7 feat extract doc info for JsDoc (#​51733)
b9c70158ab feat extract docs for accessors, rest params, and types (#​51733)
a24ae994a0 feat extract docs for top level functions and consts (#​51733)
2e41488296 feat extract docs info for enums, pipes, and NgModules (#​51733)
34495b3533 feat extract docs via exports (#​51828)
7e82df45c5 feat initial skeleton for API doc extraction (#​51733)
6795cccbbb fix account for type-only imports in defer blocks (#​52343)
23bfa10ac8 fix add diagnostic for inaccessible deferred trigger (#​51922)
31295a3cf9 fix allocating unnecessary slots in conditional instruction (#​51913)
2aaddd3f64 fix allow comments between switch cases (#​52449)
ddd9df68bb fix allow decimals in defer block time values (#​52433)
7dbd47fb30 fix allow newlines in track and let expressions (#​52137)
0eae992c4e fix allow nullable values in for loop block (#​51997)
073ebfe09e fix apply style on :host attributes in prod builds. (#​49118)
81a287a79a fix avoid error in template parser for tag names that can occur in object prototype (#​52225)
6c58252521 fix compilation error when for loop block expression contains new line (#​52447)
9d19c8e317 fix don't allocate variable to for loop expression (#​52158)
9acd2ac98b fix enable block syntax in the linker (#​51979)
1d871c03a5 fix forward referenced dependencies not identified as deferrable (#​52017)
16ff08ec70 fix narrow the type of expressions in event listeners inside if blocks (#​52069)
ac0d5dcfd6 fix narrow the type of expressions in event listeners inside switch blocks (#​52069)
02edb43067 fix narrow the type of the aliased if block expression (#​51952)
83067b3ef2 fix ng-template directive invoke twice at the root of control flow (#​52515)
17078a3fe1 fix pipes used inside defer triggers not being picked up (#​52071)
861ce3a7c5 fix pipes using DI not working in blocks (#​52112)
1f5039bbd6 fix project control flow root elements into correct slot (#​52414)
81c315ec6e fix template type checking not reporting diagnostics for incompatible type comparisons (#​52322)
1beef49d80 fix update the minVersion if component uses block syntax (#​51979)
386e1e9500 fix work around TypeScript bug when narrowing switch statements (#​52110)
e5bca43224 perf further reduce bundle size using arrow functions (#​52010)
compiler-cli
Commit Type Description
5b66330329 fix allow non-array imports for standalone component in local compilation mode (#​51819)
377a7abfda fix bypass static resolving of the component's changeDetection field in local compilation mode (#​51848)
19c3dc18d3 fix fix NgModule injector def in local compilation mode when imports/exports are non-array expressions (#​51819)
11bb19cafc fix handle nested qualified names in ctor injection in local compilation mode (#​51947)
f91f222b55 fix resolve component encapsulation enum in local compilation mode (#​51848)
core
Commit Type Description
59b6ec6be8 docs Deprecate ChangeDetectorRef.checkNoChanges (#​52431)
4f04d1cdab feat add new list reconcilation algorithm (#​51980)
c7127b98b5 feat add schematic to escape block syntax characters (#​51905)
50275e58b8 feat Add schematic to migrate control flow syntax (#​52035)
81b67aa987 feat add support for zone.js 0.14.0 (#​51774)
048f400efc feat add warnings for oversized images and lazy-lcp (#​51846)
93675dc797 feat conditional built-in control flow (#​51346)
4427e1ebc2 feat create function to assert not running inside reactive context (#​52049)
e23aaa7d75 feat drop support for older TypeScript versions (#​51792)
43e6fb0606 feat enable block syntax (#​51994)
3cbb2a8ecf feat implement deferred block interaction triggers (#​51830)
8be2c48b7c feat implement new block syntax (#​51891)
a54713c831 feat implement ɵgetInjectorMetadata debug API (#​51900)
5b88d136af feat mark core signal APIs as stable (#​51821)
8eef694def feat Provide a diagnostic for missing Signal invocation in template interpolation. (#​49660)
40113f653c feat Remove deprecated CompilerOptions.useJit andCompilerOptions.missingTranslation. (#​49672)
68ba798ae3 feat revamp the runtime error message for orphan components to include full component info (#​51919)
1a4aee7e49 feat show runtime error for orphan component rendering (#​52061)
687b96186c feat support deferred hover triggers (#​51874)
e2e3d69a27 feat support deferred triggers with implicit triggers (#​51922)
16f5fc40a4 feat support deferred viewport triggers (#​51874)
59387ee476 feat support styles and styleUrl as strings (#​51715)
9cc52b9b85 feat support TypeScript 5.2 (#​51334)
7d42dc3c02 feat the new list reconciliation algorithm for built-in for (#​51980)
935c1816fd fix add rejectErrors option to toSignal (#​52474)
5411864c2e fix adjust toSignal types to handle more common cases (#​51991)
dcf18dc74c fix allow toSignal calls in reactive context (#​51831)
dbffdc09c2 fix avoid duplicated code between entry-points (primary, testing, rxjs-interop) (#​51500)
4f69d620d9 fix deferred blocks not removing content immediately when animations are enabled (#​51971)
df58c0b714 fix disallow afterRender in reactive contexts (#​52138)
5d61221ed7 fix disallow using effect inside reactive contexts (#​52138)
99e7629159 fix do not remove used ng-template nodes in control flow migration (#​52186)
c7ff9dff2c fix drop mutate function from the signals public API (#​51821)
00128e3853 fix drop mutate function from the signals public API (#​51821) (#​51986)
ddef3ac9a4 fix effects wait for ngOnInit for their first run (#​52473)
5ead7d412d fix ensure a consumer drops all its stale producers (#​51722)
1dd8558f82 fix Ensure backwards-referenced transplanted views are refreshed (#​51854)
50ad074505 fix framework debug APIs getDependenciesForTokenInInjector and getInjectorMetadata (#​51719)
80e7a0f8fa fix guard usages of performance.mark (#​52505)
b9ea2d6900 fix handle aliased index with no space in control flow migration (#​52444)
ffe9b1fcc2 fix handle for alias with as in control flow migration (#​52183)
e5720edb46 fix handle if alias in control flow migration (#​52181)
4461cefa4f fix handle trackBy and aliased index in control flow migration (#​52423)
7368b8aaeb fix host directive validation not picking up duplicate directives on component node (#​52073)
696f003553 fix mutation bug in getDependenciesFromInjectable (#​52450)
d487014785 fix Remove no longer needed build rule related to removed migration (#​52143)
4da08dc2ef fix remove unnecessary migration (#​52141)
384d7aacd0 fix replace assertion with more intentional error (#​52427)
40bb45f329 fix Respect OnPush change detection strategy for dynamically created components (#​51356)
3a19d6b743 fix run afterRender callbacks outside of the Angular zone (#​51385)
a2ba5482c3 fix use TNode instead of LView for mapping injector providers (#​52436)
d5dad3eb4c fix viewport trigger deregistering callbacks multiple times (#​52115)
8e4a7ab52b perf avoid repeated access to LContainer and trackBy calculation (#​52227)
1dc14d9853 perf avoid unnecessary callbacks in after render hooks (#​52292)
e90694259e perf build-in for should update indexes only when views were added / removed (#​52051)
1032c1e1a5 perf cache LiveCollectionLContainerImpl (#​52227)
685d01e106 perf chain template instructions (#​51546)
88a0af64fd perf generate arrow functions for pure function calls (#​51668)
37d627dbd4 perf minimze trackBy calculations (#​52227)
3861a73135 perf Update LView consumer to only mark component for check (#​52302)
9b9e11fcaf refactor deprecate allowing full context object to be replaced in EmbeddedViewRef (#​51887)
ba9fc2419e refactor deprecate the NgProbeToken (#​51396)
http
Commit Type Description
7dde42a5df feat allow customization of the HttpTransferCache. (#​52029)
8156b3d4ec fix Don't override the backend when using the InMemoryWebAPI (#​52425)
bd9e91ecf7 perf reduce data transfer when using HTTP caching (#​52347)
language-service
Commit Type Description
449830f24e feat Complete inside @​switch (#​52153)
e2416a284f feat Enable go to definition of styleUrl (#​51746)
023a181ba5 feat Implement outlining spans for control flow blocks (#​52062)
7c052bb6ef feat Support autocompletion for blocks (#​52121)
9d565cd6d6 fix Autocomplete block keywords in more cases (#​52198)
localize
Commit Type Description
5a20a44c64 fix ng-add schematics for application builder (#​51777)
migrations
Commit Type Description
f0da7c2e44 feat schematic to remove deprecated CompilerOptions properties (#​49672)
965ce5a8c5 feat Schematics for TransferState, StateKey and makeStateKey migration. (#​49594)
09e905ad67 fix account for separator characters inside strings (#​52525)
4c878f90d2 fix Add support for nested structures inside a switch statement (#​52358)
d7397fb29b fix Ensure control flow migration ignores new block syntax (#​52402)
6a01d62b9d fix fix broken migration when no control flow is present (#​52399)
9c2be715a3 fix Fixes a bug in the ngFor pre-v5 alias translation (#​52531)
54fed68bbf fix Fixes the root level template offset in control flow migration (#​52355)
57404d4723 fix handle comma-separated syntax in ngFor (#​52525)
54bc384661 fix handle nested classes in block entities migration (#​52309)
c9b1ddff4d fix handle nested classes in control flow migration (#​52309)
6988a0070e fix handle ngIf else condition with no whitespaces (#​52504)
e40e55d902 fix Remove unhelpful parsing errors from the log (#​52401)
c267f54bc3 fix Update regex to better match ng-templates (#​52529)
platform-browser
Commit Type Description
c340d6e044 feat enable removal of styles on component destroy by default (#​51571)
c5daa6ce77 feat expose EventManagerPlugin in the public API. (#​49969)
5b375d106f fix Fire Animations events when using async animations. (#​52087)
65786b2b96 fix prevent duplicate stylesheets from being created (#​52019)
75d610d420 fix set animation properties when using async animations. (#​52087)
3c0577f991 perf disable styles of removed components instead of removing (#​51808)
c9cde3ab10 perf only append style element on creation (#​52237)
dbc14eb41d refactor remove withNoDomReuse function (#​52057)
platform-server
Commit Type Description
0c66e2424c fix resolve relative requests URL (#​52326)
router
Commit Type Description
1da28f4825 feat Add callback to execute when a view transition is created (#​52002)
73e4bf2ed2 feat Add feature to support the View Transitions API (#​51314)
86e91463af feat Add option to skip the first view transition (#​51825)
ce1b915868 fix Allow redirects after an absolute redirect (#​51731)
37df395be0 fix children of routes with loadComponent should not inherit parent data by default (#​52114)
4dce8766f8 fix Ensure newly resolved data is inherited by child routes (#​52167)
f464e39364 fix Ensure title observable gets latest values (#​51561)
b2aff43621 fix Remove urlHandlingStrategy from public Router properties (#​51631)
c62e680098 fix Remove deprecated Router properties (#​51502)
3c6258c85b fix Remove deprecated setupTestingRouter function (#​51826)
0b3e6a41d0 fix Remove malformedUriErrorHandler from ExtraOptions (#​51745)
c03baed854 fix use DOCUMENT token instead of document directly in view transitions (#​51814)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate Renovate
Copy link
Contributor Author

renovate bot commented Sep 25, 2024

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: ngx-vis@4.0.0
npm error Found: zone.js@0.13.3
npm error node_modules/zone.js
npm error   dev zone.js@"~0.13.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer zone.js@"~0.14.0" from @angular/core@17.3.12
npm error node_modules/@angular/core
npm error   dev @angular/core@"^17.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2024-09-25T13_05_52_656Z-eresolve-report.txt
npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-09-25T13_05_52_656Z-debug-0.log

@renovate renovate bot changed the title chore(deps): update dependency @angular/core to v17 [security] chore(deps): update dependency @angular/core to v17 [security] - autoclosed Sep 25, 2024
@renovate renovate bot closed this Sep 25, 2024
@renovate renovate bot deleted the renovate/npm-angular-core-vulnerability branch September 25, 2024 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants