Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @angular/common from 15.0.0 to 19.0.3 #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-io[bot]
Copy link

@snyk-io snyk-io bot commented Dec 31, 2024

snyk-top-banner

Snyk has created this PR to upgrade @angular/common from 15.0.0 to 19.0.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 216 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
critical severity Incomplete List of Disallowed Inputs
SNYK-JS-BABELTRAVERSE-5962462
218 Proof of Concept
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
218 No Known Exploit
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
218 Proof of Concept
high severity Improper Handling of Extra Parameters
SNYK-JS-FOLLOWREDIRECTS-6141137
218 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-HTTPPROXYMIDDLEWARE-8229906
218 Proof of Concept
high severity Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
218 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-CROSSSPAWN-8303230
218 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-ENGINEIO-3136336
218 No Known Exploit
high severity Uncaught Exception
SNYK-JS-SOCKETIO-7278048
218 No Known Exploit
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
218 No Known Exploit
high severity Uncaught Exception
SNYK-JS-ENGINEIO-5496331
218 No Known Exploit
high severity Denial of Service (DoS)
SNYK-JS-SOCKETIOPARSER-5596892
218 No Known Exploit
high severity Sandbox Bypass
SNYK-JS-WEBPACK-3358798
218 Proof of Concept
high severity Path Traversal
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
218 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
218 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574
218 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
218 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-8482416
218 Proof of Concept
medium severity Improper Input Validation
SNYK-JS-POSTCSS-5926692
218 No Known Exploit
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
218 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HTTPCACHESEMANTICS-3248783
218 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
218 Proof of Concept
medium severity Server-Side Request Forgery (SSRF)
SNYK-JS-IP-7148531
218 Proof of Concept
medium severity Prototype Pollution
SNYK-JS-JSON5-3182856
218 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
218 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
218 No Known Exploit
medium severity Improper Input Validation
SNYK-JS-NANOID-8492085
218 No Known Exploit
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509
218 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
218 No Known Exploit
medium severity Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
218 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-UAPARSERJS-3244450
218 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
218 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
218 No Known Exploit
Release notes
Package name: @angular/common
  • 19.0.3 - 2024-12-04

    19.0.3 (2024-12-04)

  • 19.0.2 - 2024-12-04

    19.0.2 (2024-12-04)

    compiler-cli

    Commit Description
    fix - 9f99196d23 account for multiple generated namespace imports in HMR (#58924)

    core

    Commit Description
    fix - 4792db9a6d Explicitly manage TracingSnapshot lifecycle and dispose of it once it's been used. (#58929)

    migrations

    Commit Description
    fix - 7b5bacc228 class content being deleted in some edge cases (#58959)
    fix - d1cbdd6acb correctly strip away parameters surrounded by comments in inject migration (#58959)
    fix - e17ff71c31 don't migrate classes with parameters that can't be injected (#58959)
    fix - 7c5f990001 inject migration aggressively removing imports (#58959)
    fix - 4392ccedf9 inject migration dropping code if everything except super is removed (#58959)
    fix - 9cbebc6dda preserve type literals and tuples in inject migrations (#58959)

    platform-server

    Commit Description
    fix - f3c388ecda remove peer dependency on animations (#58997)
  • 19.0.1 - 2024-11-26

    19.0.1 (2024-11-26)

    compiler-cli

    Commit Description
    fix - fb1fa8b0fc more accurate diagnostics for host binding parser errors (#58870)

    core

    Commit Description
    fix - 502ee0e722 correctly clear template HMR internal renderer cache (#58724)
    fix - 99715104a1 correctly perform lazy routes migration for components with additional decorators (#58796)
    fix - 118803035f Ensure _tick is always run within the TracingSnapshot. (#58881)
    fix - 08b9452f01 Ensure resource sets an error (#58855)
    fix - 84f45ea3ff make component id generation more stable between client and server builds (#58813)
    fix - d3491c7cee Prevents race condition of cleanup for incremental hydration (#58722)

    forms

    Commit Description
    fix - 4dfe5b6cef work around TypeScript 5.7 issue (#58731)

    language-service

    Commit Description
    fix - a983865bff add fix for individual unused imports (#58719)
    fix - e6e7a4e22b allow fixes to run without template info (#58719)

    migrations

    Commit Description
    fix - 5ce10264a4 fix provide-initializer migration when using useFactory (#58518)
    fix - d4f5c85f60 handle parameters with initializers in inject migration (#58769)
    fix - a6d2d2dc10 Mark hoisted properties as removed in inject migration (#58804)
  • 19.0.0 - 2024-11-19
  • 19.0.0-rc.3 - 2024-11-15
  • 19.0.0-rc.2 - 2024-11-14
  • 19.0.0-rc.1 - 2024-11-06
  • 19.0.0-rc.0 - 2024-10-30
  • 19.0.0-next.11 - 2024-10-23
  • 19.0.0-next.10 - 2024-10-16
  • 19.0.0-next.9 - 2024-10-10
  • 19.0.0-next.8 - 2024-10-02
  • 19.0.0-next.7 - 2024-09-25
  • 19.0.0-next.6 - 2024-09-18
  • 19.0.0-next.5 - 2024-09-11
  • 19.0.0-next.4 - 2024-09-09
  • 19.0.0-next.3 - 2024-09-04
  • 19.0.0-next.2 - 2024-08-28
  • 19.0.0-next.1 - 2024-08-22
  • 19.0.0-next.0 - 2024-08-14
  • 18.2.13 - 2024-11-26
  • 18.2.12 - 2024-11-14
  • 18.2.11 - 2024-11-06
  • 18.2.10 - 2024-10-30
  • 18.2.9 - 2024-10-23
  • 18.2.8 - 2024-10-10
  • 18.2.7 - 2024-10-02
  • 18.2.6 - 2024-09-25
  • 18.2.5 - 2024-09-18
  • 18.2.4 - 2024-09-11
  • 18.2.3 - 2024-09-04
  • 18.2.2 - 2024-08-28
  • 18.2.1 - 2024-08-22
  • 18.2.0 - 2024-08-14
  • 18.2.0-rc.0 - 2024-08-07
  • 18.2.0-next.4 - 2024-08-05
  • 18.2.0-next.3 - 2024-07-31
  • 18.2.0-next.2 - 2024-07-24
  • 18.2.0-next.1 - 2024-07-17
  • 18.2.0-next.0 - 2024-07-10
  • 18.1.5 - 2024-08-14
  • 18.1.4 - 2024-08-07
  • 18.1.3 - 2024-07-31
  • 18.1.2 - 2024-07-24
  • 18.1.1 - 2024-07-17
  • 18.1.0 - 2024-07-10
  • 18.1.0-rc.0 - 2024-07-01
  • 18.1.0-next.4 - 2024-06-27
  • 18.1.0-next.3 - 2024-06-20
  • 18.1.0-next.2 - 2024-06-12
  • 18.1.0-next.1 - 2024-06-05
  • 18.1.0-next.0 - 2024-05-29
  • 18.0.7 - 2024-07-10
  • 18.0.6 - 2024-07-03
  • 18.0.5 - 2024-06-27
  • 18.0.4 - 2024-06-20
  • 18.0.3 - 2024-06-12
  • 18.0.2 - 2024-06-05
  • 18.0.1 - 2024-05-29
  • 18.0.0 - 2024-05-22
  • 18.0.0-rc.3 - 2024-05-21
  • 18.0.0-rc.2 - 2024-05-15
  • 18.0.0-rc.1 - 2024-05-08
  • 18.0.0-rc.0 - 2024-05-01
  • 18.0.0-next.6 - 2024-04-25
  • 18.0.0-next.5 - 2024-04-17
  • 18.0.0-next.4 - 2024-04-10
  • 18.0.0-next.3 - 2024-04-03
  • 18.0.0-next.2 - 2024-03-28
  • 18.0.0-next.1 - 2024-03-20
  • 18.0.0-next.0 - 2024-03-14
  • 17.3.12 - 2024-07-17
  • 17.3.11 - 2024-06-05
  • 17.3.10 - 2024-05-22
  • 17.3.9 - 2024-05-15
  • 17.3.8 - 2024-05-08
  • 17.3.7 - 2024-05-01
  • 17.3.6 - 2024-04-25
  • 17.3.5 - 2024-04-17
  • 17.3.4 - 2024-04-10
  • 17.3.3 - 2024-04-03
  • 17.3.2 - 2024-03-28
  • 17.3.1 - 2024-03-20
  • 17.3.0 - 2024-03-13
  • 17.3.0-rc.0 - 2024-03-06
  • 17.3.0-next.1 - 2024-02-28
  • 17.3.0-next.0 - 2024-02-22
  • 17.2.4 - 2024-03-06
  • 17.2.3 - 2024-02-28
  • 17.2.2 - 2024-02-22
  • 17.2.1 - 2024-02-14
  • 17.2.0 - 2024-02-14
  • 17.2.0-rc.1 - 2024-02-09
  • 17.2.0-rc.0 - 2024-02-08
  • 17.2.0-next.1 - 2024-01-31
  • 17.2.0-next.0 - 2024-01-24
  • 17.1.3 - 2024-02-08
  • 17.1.2 - 2024-01-31
  • 17.1.1 - 2024-01-24
  • 17.1.0 - 2024-01-17
  • 17.1.0-rc.0 - 2024-01-10
  • 17.1.0-next.5 - 2023-12-21
  • 17.1.0-next.4 - 2023-12-14
  • 17.1.0-next.3 - 2023-12-06
  • 17.1.0-next.2 - 2023-11-29
  • 17.1.0-next.1 - 2023-11-20
  • 17.1.0-next.0 - 2023-11-15
  • 17.0.9 - 2024-01-10
  • 17.0.8 - 2023-12-21
  • 17.0.7 - 2023-12-14
  • 17.0.6 - 2023-12-06
  • 17.0.5 - 2023-11-29
  • 17.0.4 - 2023-11-20
  • 17.0.3 - 2023-11-15
  • 17.0.2 - 2023-11-09
  • 17.0.1 - 2023-11-08
  • 17.0.0 - 2023-11-08
  • 17.0.0-rc.3 - 2023-11-07
  • 17.0.0-rc.2 - 2023-11-02
  • 17.0.0-rc.1 - 2023-10-25
  • 17.0.0-rc.0 - 2023-10-18
  • 17.0.0-next.8 - 2023-10-11
  • 17.0.0-next.7 - 2023-10-04
  • 17.0.0-next.6 - 2023-09-27
  • 17.0.0-next.5 - 2023-09-20
  • 17.0.0-next.4 - 2023-09-13
  • 17.0.0-next.3 - 2023-09-06
  • 17.0.0-next.2 - 2023-08-30
  • 17.0.0-next.1 - 2023-08-23
  • 17.0.0-next.0 - 2023-08-16
  • 16.2.12 - 2023-11-02
  • 16.2.11 - 2023-10-25
  • 16.2.10 - 2023-10-18
  • 16.2.9 - 2023-10-11
  • 16.2.8 - 2023-10-04
  • 16.2.7 - 2023-09-27
  • 16.2.6 - 2023-09-20
  • 16.2.5 - 2023-09-13
  • 16.2.4 - 2023-09-06
  • 16.2.3 - 2023-08-30
  • 16.2.2 - 2023-08-23
  • 16.2.1 - 2023-08-16
  • 16.2.0 - 2023-08-09
  • 16.2.0-rc.0 - 2023-08-02
  • 16.2.0-next.4 - 2023-07-26
  • 16.2.0-next.3 - 2023-07-19
  • 16.2.0-next.2 - 2023-07-13
  • 16.2.0-next.1 - 2023-06-28
  • 16.2.0-next.0 - 2023-06-21
  • 16.1.9 - 2023-08-09
  • 16.1.8 - 2023-08-02
  • 16.1.7 - 2023-07-26
  • 16.1.6 - 2023-07-19
  • 16.1.5 - 2023-07-13
  • 16.1.4 - 2023-07-06
  • 16.1.3 - 2023-06-28
  • 16.1.2 - 2023-06-21
  • 16.1.1 - 2023-06-14
  • 16.1.0 - 2023-06-13
  • 16.1.0-rc.0 - 2023-06-08
  • 16.1.0-next.3 - 2023-06-01
  • 16.1.0-next.2 - 2023-05-24
  • 16.1.0-next.1 - 2023-05-17
  • 16.1.0-next.0 - 2023-05-10
  • 16.0.6 - 2023-06-13
  • 16.0.5 - 2023-06-08
  • 16.0.4 - 2023-06-01
  • 16.0.3 - 2023-05-24
  • 16.0.2 - 2023-05-17
  • 16.0.1 - 2023-05-10
  • 16.0.0 - 2023-05-03
  • 16.0.0-rc.4 - 2023-05-01
  • 16.0.0-rc.3 - 2023-04-27
  • 16.0.0-rc.2 - 2023-04-19
  • 16.0.0-rc.1 - 2023-04-14
  • 16.0.0-rc.0 - 2023-04-12
  • 16.0.0-next.7 - 2023-04-06
  • 16.0.0-next.6 - 2023-04-03
  • 16.0.0-next.5 - 2023-03-29
  • 16.0.0-next.4 - 2023-03-22
  • 16.0.0-next.3 - 2023-03-16
  • 16.0.0-next.2 - 2023-03-08
  • 16.0.0-next.1 - 2023-03-01
  • 16.0.0-next.0 - 2023-02-22
  • 15.2.10 - 2023-10-04
  • 15.2.9 - 2023-05-03
  • 15.2.8 - 2023-04-19
  • 15.2.7 - 2023-04-12
  • 15.2.6 - 2023-04-06
  • 15.2.5 - 2023-03-29
  • 15.2.4 - 2023-03-22
  • 15.2.3 - 2023-03-16
  • 15.2.2 - 2023-03-08
  • 15.2.1 - 2023-03-01
  • 15.2.0 - 2023-02-22
  • 15.2.0-rc.0 - 2023-02-15
  • 15.2.0-next.4 - 2023-02-08
  • 15.2.0-next.3 - 2023-02-02
  • 15.2.0-next.2 - 2023-01-25
  • 15.2.0-next.1 - 2023-01-18
  • 15.2.0-next.0 - 2023-01-11
  • 15.1.5 - 2023-02-15
  • 15.1.4 - 2023-02-08
  • 15.1.3 - 2023-02-02
  • 15.1.2 - 2023-01-25
  • 15.1.1 - 2023-01-18
  • 15.1.0 - 2023-01-10
  • 15.1.0-rc.0 - 2023-01-05
  • 15.1.0-next.3 - 2022-12-14
  • 15.1.0-next.2 - 2022-12-07
  • 15.1.0-next.1 - 2022-11-30
  • 15.1.0-next.0 - 2022-11-23
  • 15.0.4 - 2022-12-14
  • 15.0.3 - 2022-12-07
  • 15.0.2 - 2022-11-30
  • 15.0.1 - 2022-11-23
  • 15.0.0 - 2022-11-16
from @angular/common GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @angular/common from 15.0.0 to 19.0.3.

See this package in npm:
@angular/common

See this project in Snyk:
https://app.snyk.io/org/hashim21223445/project/e2271224-e88d-42f3-9b41-57a888547e24?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants