[Snyk] Upgrade @angular-devkit/build-angular from 13.0.4 to 13.3.11 #69

vinit-aikido · 2024-10-19T06:04:53Z

Snyk has created this PR to upgrade @angular-devkit/build-angular from 13.0.4 to 13.3.11.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 34 versions ahead of your current version.
The recommended version was released 2 years ago, on 2023-03-16.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430339	365/1000 Why? CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	365/1000 Why? CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-LOADERUTILS-3043105	365/1000 Why? CVSS 7.3	No Known Exploit
Sandbox Bypass SNYK-JS-WEBPACK-3358798	365/1000 Why? CVSS 7.3	Proof of Concept
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430341	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	365/1000 Why? CVSS 7.3	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	365/1000 Why? CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	365/1000 Why? CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	365/1000 Why? CVSS 7.3	No Known Exploit
Open Redirect SNYK-JS-NODEFORGE-2330875	365/1000 Why? CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-NODEFORGE-2331908	365/1000 Why? CVSS 7.3	No Known Exploit
Improper Verification of Cryptographic Signature SNYK-JS-NODEFORGE-2430337	365/1000 Why? CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @angular-devkit/build-angular

13.3.11 - 2023-03-16
13.3.10 - 2022-11-17
13.3.9 - 2022-07-20
13.3.8 - 2022-06-15
13.3.7 - 2022-05-25
13.3.6 - 2022-05-18
13.3.5 - 2022-05-04
13.3.4 - 2022-04-27
13.3.3 - 2022-04-13
13.3.2 - 2022-04-06
13.3.1 - 2022-03-30
13.3.0 - 2022-03-16
13.2.6 - 2022-03-09
13.2.5 - 2022-02-23
13.2.4 - 2022-02-17
13.2.3 - 2022-02-09
13.2.2 - 2022-02-02
13.2.1 - 2022-01-31
13.2.0 - 2022-01-26
13.2.0-rc.1 - 2022-01-25
13.2.0-rc.0 - 2022-01-19
13.2.0-next.2 - 2022-01-12
13.2.0-next.1 - 2021-12-15
13.2.0-next.0 - 2021-12-09
13.1.4 - 2022-01-19
13.1.3 - 2022-01-12
13.1.2 - 2021-12-15
13.1.1 - 2021-12-10
13.1.0 - 2021-12-09
13.1.0-rc.0 - 2021-12-09
13.1.0-next.3 - 2021-12-02
13.1.0-next.2 - 2021-11-18
13.1.0-next.1 - 2021-11-11
13.1.0-next.0 - 2021-11-03
13.0.4 - 2021-12-01

from @angular-devkit/build-angular GitHub release notes

Commit messages

Package name: @angular-devkit/build-angular

e8dc49a release: cut the v13.3.11 release
50fa930 fix(@ angular-devkit/build-angular): update `webpack` dependency to `5.76.1`
d8ba154 ci: update to latest version of dev-infra orb
bc78fcd release: cut the v13.3.10 release
7eac5a4 test(@ angular/cli): fix version specifier test
e8824b0 test(@ angular/cli): update the update test to address node.js incompatability failures
2fbeb04 ci: replace scheduled jobs with scheduled pipelines
f298ebb fix(@ angular-devkit/build-angular): update `loader-utils` to `3.2.1`
d091bb0 release: cut the v13.3.9 release
0d62716 fix(@ angular-devkit/build-angular): update terser to address CVE-2022-25858
0bb875d build: mark external only bazel rules
62f46c8 release: cut the v13.3.8 release
d27fc7e test: always install a compatible version of `@ angular/material-moment-adapter`
c7f994f fix(@ angular/pwa): add peer dependency on Angular CLI
8f5a20a release: cut the v13.3.7 release
3168ab6 build: update `CaretakerConfig` import patch
209a49e ci: add nightly CI configuration for version 13
588b742 build: add caretaker configuration to ng-dev config
6e7ad3e build: update saucelabs key
a54018d fix(@ angular-devkit/build-angular): add debugging and timing information in JavaScript and CSS optimization plugins
7ffa2f2 release: cut the v13.3.6 release
16fec8d fix(@ angular-devkit/build-angular): update `babel-loader` to 8.2.5
e20964c fix(@ angular/cli): resolve relative schematic from `angular.json` instead of current working directory
b9a8e91 test: allow Artistic-2.0 license