chore(deps): update dependency ng-packagr to v10 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ng-packagr	5.5.0 -> 10.1.1

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2020-7735

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

---

Release Notes

ng-packagr/ng-packagr

v10.1.1

Compare Source

v10.1.0

Compare Source

v10.0.4

Compare Source

v10.0.3

Compare Source

v10.0.2

Compare Source

v10.0.1

Compare Source

v10.0.0

Compare Source

v9.1.5

Compare Source

Bug Fixes

• remove tslib from peerDependencies when adding it to dependencies (593f861)

v9.1.4

Compare Source

Bug Fixes

• auto add tslib as direct dependency (298fbc4)

9.1.3 (2020-05-06)

v9.1.3

Compare Source

Bug Fixes

• update browserslist and autoprefixer (8293497), closes #​1611
• update rollup-plugin-sourcemaps to version ^0.6.0 (f8c3459)

v9.1.2

Compare Source

v9.1.1

Compare Source

v9.1.0

Compare Source

v9.0.3

Compare Source

v9.0.2

Compare Source

v9.0.1

Compare Source

v9.0.0

Compare Source

⚠ BREAKING CHANGES

• Remove usage of deprecated less-plugin-npm-import. In less v3 is supports node_modules resolutions by default.

Before

@​import '~module/less/linenumbers';

After

@​import 'module/less/linenumbers';

• TypeScript versions prior to 3.6.4 are no longer supported.no longer supported.
• tslib will be longer be added as a dependencies, but rather it will be added as a peerDependencies.

This is to be inline with the Angular framework.

Bug Fixes

• downlevel constructor parameters transformer with tsickle (51d5498), closes #​1517
• add assets option to schema (a5efd1c), closes #​1092
• add link to Angular guide when showing ivy publish warning (6bee029), closes #​1453
• add more package json sections to remove (57cc4d1)
• analyse only non done entry points (e8db885)
• analyse should cater for module name being the primary entry point (7b8e491)
• circular dependency on itself error (702c3f2), closes #​1508
• ignore .gitkeep, Thumbs.db and .DS_Store when copying files (a5b10e2)
• ignore JSON files in tsickle processing (#​1489) (ec44059), closes #​325
• incorrect detection of potential dependent entry-points (932bf48), closes #​1510
• lock rollup version (75ac180), closes #​1431
• remove redundant section in package.json (5efad3a)
• reset glob cache on file add (0306d59)
• skip NGCC when file system is read only (0e44793)
• switch to a more accurate module analyse (92ca053), closes #​1523
• update commander to version ^4.0.0 (ee41977)
• update rollup to version 1.31.0 (f8704fd)
• update update-notifier to version ^4.0.0 (f05cbbf)

Features

• add support for TypeScript 3.7 (9e05fb3)
• add support for TypeScript 3.6 (342b799)
• add tslib as peerDepedency (5077f87)
• update peerDependencies (7ff60f5)

Performance

• re-populate glob cache (3323b2a)
• remove less-plugin-npm-import (6a5ae37)

v5.7.1

Compare Source

v5.7.0

Compare Source

v5.6.1

Compare Source

v5.6.0

Compare Source

v5.5.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.