Update dependency ng-packagr to v10 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ng-packagr	^9.0.0 → ^10.0.0

---

OS Command Injection in ng-packagr

CVE-2020-7735 / GHSA-qm28-7hqv-wg5j

More information

Details

The package ng-packagr before 10.1.1 are vulnerable to Command Injection via the styleIncludePaths option.

Severity

• CVSS Score: 6.6 / 10 (Medium)
• Vector String: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-7735
• https://github.com/ng-packagr/ng-packagr/commit/bda0fff3443301f252930a73fdc8fb9502de596d
• https://snyk.io/vuln/SNYK-JS-NGPACKAGR-1012427
• https://github.com/advisories/GHSA-qm28-7hqv-wg5j

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

ng-packagr/ng-packagr (ng-packagr)

v10.1.1

Compare Source

v10.1.0

Compare Source

v10.0.4

Compare Source

v10.0.3

Compare Source

v10.0.2

Compare Source

v10.0.1

Compare Source

v10.0.0

Compare Source

Features

• improve progress reporting (3a9827f)

Bug Fixes

• update @​rollup/plugin-commonjs to version ^16.0.0 (75e5d51)
• update @​rollup/plugin-node-resolve to version ^10.0.0 (e76b97b)

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.