Update dependency ng-packagr to v10 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ng-packagr	5.6.1 -> 10.1.1

GitHub Vulnerability Alerts

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

---

Release Notes

ng-packagr/ng-packagr (ng-packagr)

v10.1.1

Compare Source

v10.1.0

Compare Source

v10.0.4

Compare Source

v10.0.3

Compare Source

v10.0.2

Compare Source

v10.0.1

Compare Source

v10.0.0

Compare Source

v9.1.5

Compare Source

Bug Fixes

• remove tslib from peerDependencies when adding it to dependencies (593f861)

v9.1.4

Compare Source

Bug Fixes

• auto add tslib as direct dependency (298fbc4)

9.1.3 (2020-05-06)

v9.1.3

Compare Source

Bug Fixes

• update browserslist and autoprefixer (8293497), closes #​1611
• update rollup-plugin-sourcemaps to version ^0.6.0 (f8c3459)

v9.1.2

Compare Source

v9.1.1

Compare Source

v9.1.0

Compare Source

v9.0.3

Compare Source

v9.0.2

Compare Source

v9.0.1

Compare Source

v9.0.0

Compare Source

⚠ BREAKING CHANGES

• Remove usage of deprecated less-plugin-npm-import. In less v3 is supports node_modules resolutions by default.

Before

@​import '~module/less/linenumbers';

After

@​import 'module/less/linenumbers';

• TypeScript versions prior to 3.6.4 are no longer supported.no longer supported.
• tslib will be longer be added as a dependencies, but rather it will be added as a peerDependencies.

This is to be inline with the Angular framework.

Bug Fixes

• downlevel constructor parameters transformer with tsickle (51d5498), closes #​1517
• add assets option to schema (a5efd1c), closes #​1092
• add link to Angular guide when showing ivy publish warning (6bee029), closes #​1453
• add more package json sections to remove (57cc4d1)
• analyse only non done entry points (e8db885)
• analyse should cater for module name being the primary entry point (7b8e491)
• circular dependency on itself error (702c3f2), closes #​1508
• ignore .gitkeep, Thumbs.db and .DS_Store when copying files (a5b10e2)
• ignore JSON files in tsickle processing (#​1489) (ec44059), closes #​325
• incorrect detection of potential dependent entry-points (932bf48), closes #​1510
• lock rollup version (75ac180), closes #​1431
• remove redundant section in package.json (5efad3a)
• reset glob cache on file add (0306d59)
• skip NGCC when file system is read only (0e44793)
• switch to a more accurate module analyse (92ca053), closes #​1523
• update commander to version ^4.0.0 (ee41977)
• update rollup to version 1.31.0 (f8704fd)
• update update-notifier to version ^4.0.0 (f05cbbf)

Features

• add support for TypeScript 3.7 (9e05fb3)
• add support for TypeScript 3.6 (342b799)
• add tslib as peerDepedency (5077f87)
• update peerDependencies (7ff60f5)

Performance

• re-populate glob cache (3323b2a)
• remove less-plugin-npm-import (6a5ae37)

v5.7.1

Compare Source

v5.7.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

No /opt/buildpack/tools/npm/6.14.18/bin defined - aborting