Bump micromatch, @angular-devkit/build-ng-packagr, @angular/compiler-cli and fuse-box

[dependabot]

Bumps micromatch to 4.0.8 and updates ancestor dependencies micromatch, @angular-devkit/build-ng-packagr, @angular/compiler-cli and fuse-box. These dependencies need to be updated together.

Updates micromatch from 4.0.5 to 4.0.8

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

• backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

• this is basically v4.0.5, with some README updates
• it is vulnerable to CVE-2024-4067
• Updated braces to v3.0.3 to avoid CVE-2024-4068
• does NOT break API compatibility

[4.0.6] - 2024-05-21

• Added hasBraces to check if a pattern contains braces.
• Fixes CVE-2024-4067
• BREAKS API COMPATIBILITY
• Should be labeled as a major release, but it's not.

Commits

• 8bd704e 4.0.8
• a0e6841 run verb to generate README documentation
• 4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
• 03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
• 814f5f7 lint
• 67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
• 113f2e3 fix: CVE numbers in CHANGELOG
• d9dbd9a feat: updated CHANGELOG
• 2ab1315 fix: use actions/setup-node@v4
• 1406ea3 feat: rework test to work on macos with node 10,12 and 14
• Additional commits viewable in compare view

Updates @angular-devkit/build-ng-packagr from 0.6.8 to 0.1002.0

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular-devkit/build-ng-packagr since your current version.

Updates @angular/compiler-cli from 6.1.6 to 18.2.1

Release notes

Sourced from @​angular/compiler-cli's releases.

v18.2.1

18.2.1 (2024-08-22)

core

Commit	Description
	Allow zoneless scheduler to run inside fakeAsync (#56932)
	handle hydration of components that project content conditionally (#57383)

migrations

Commit	Description
	account for members with doc strings and no modifiers (#57389)
	avoid migrating route component in tests (#57317)
	preserve type when using inject decorator (#57389)

v18.2.0

18.2.0 (2024-08-14)

compiler

Commit	Description
	Add extended diagnostic to warn when there are uncalled functions in event bindings (#56295) (#56295)

compiler-cli

Commit	Description
	run JIT transform on classes with jit: true opt-out (#56892)
	add warning for unused let declarations (#57033)
	emitting references to ngtypecheck files (#57138)
	extended diagnostic visitor not visiting template attributes (#57033)
	run JIT transforms on @NgModule classes with jit: true (#57212)

core

Commit	Description
	Add 'flush' parameter option to fakeAsync to flush after the test (#57239)
	add ng generate schematic to convert to inject (#57056)
	Add whenStable helper on ApplicationRef (#57190)
	bootstrapModule can configure NgZone in providers (#57060)
	Allow hybrid CD scheduling to support multiple "Angular zones" (#57267)
	Deprecate ignoreChangesOutsideZone option (#57029)
	Do not run image performance warning checks on server (#57234)
	handle shorthand assignment in the inject migration (#57134)
	rename the equality function option in toSignal (#56769)
	warnings for oversized images and lazy-lcp present with bootstrapModule (#57060)

language-service

Commit	Description
	support writing code refactorings (#56895)
	quick exit if no code fixes can exist (#57000)

migrations

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/compiler-cli's changelog.

18.2.1 (2024-08-22)

core

Commit	Type	Description
9de30a7b1c	fix	Allow zoneless scheduler to run inside fakeAsync (#56932)
286012fb89	fix	handle hydration of components that project content conditionally (#57383)

migrations

Commit	Type	Description
0bb649b8fa	fix	account for members with doc strings and no modifiers (#57389)
3b63082384	fix	avoid migrating route component in tests (#57317)
6b4357fae4	fix	preserve type when using inject decorator (#57389)

19.0.0-next.1 (2024-08-22)

Breaking Changes

core

• The autoDetect feature of ComponentFixture will now attach the fixture to the ApplicationRef. As a result, errors during automatic change detection of the fixture be reported to the ErrorHandler. This change may cause custom error handlers to observe new failures that were previously unreported.

compiler-cli

Commit	Type	Description
9e87593055	feat	ensure template style elements are preprocessed as inline styles (#57429)

core

Commit	Type	Description
b063468027	feat	support TypeScript 5.6 (#57424)
3b0dca75d6	fix	Allow zoneless scheduler to run inside fakeAsync (#56932)
f03d274e87	fix	ComponentFixture autoDetect feature works like production (#55228)
d4449fce21	fix	handle hydration of components that project content conditionally (#57383)

migrations

Commit	Type	Description
4ae66f25d0	fix	account for members with doc strings and no modifiers (#57389)
ac93839d69	fix	avoid migrating route component in tests (#57317)
58a79b6e43	fix	preserve type when using inject decorator (#57389)

19.0.0-next.0 (2024-08-14)

Breaking Changes

core

• Errors that are thrown during ApplicationRef.tick will now be rethrown when using TestBed. These errors should be resolved by ensuring the test environment is set up correctly to

... (truncated)

Commits

• b1ed7e2 docs(docs-infra): Add support for function/method overloads (#57379)
• 1828d11 build: update dependency @​babel/core to v7.25.2 (#57191)
• b16dd6d fix(compiler-cli): generate valid TS 5.6 type checking code (#57303)
• d9d68e7 fix(compiler): reduce chance of conflicts between generated factory and local...
• 0b1dd39 perf(compiler-cli): improve performance of interpolatedSignalNotInvoked ext...
• e2259c7 fix(compiler-cli): support JIT transforms before other transforms modifying c...
• d73a374 Revert "fix(compiler): reduce chance of conflicts between generated factory a...
• e11c0c4 fix(compiler-cli): run JIT transforms on @NgModule classes with jit: true...
• 67e0940 fix(compiler): reduce chance of conflicts between generated factory and local...
• 56816bb refactor(compiler-cli): typo in compilePoisonedComponents option name (#57126)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by google-wombot, a new releaser for @​angular/compiler-cli since your current version.

Updates fuse-box from 3.6.0 to 4.0.0

Release notes

Sourced from fuse-box's releases.

4.0.0 is out with a lot of changes and improvements: https://fuse-box.org/docs/getting-started/setup

3.7.1

Addresses a few fixes to the release;

• HOTFIX: automatic path aliases on windows
• fix: Browser fields in package.json with false values now are skipped and replaced with a dummy package that exports undefined

3.7.0

Bug Fixes

• Added target es2018 and set it as a default target if non specified (6c6c562)
• adds stream-browserify as stream polyfill for browser (d6d5bc4)
• dev-imports should contain es5 only. (#1439) (090ed3e)
• Domain polyfill syntax error (#1438) (5456c49)
• Export Babel7Plugin (#1462) (4ee707f)
• get script language level as number always (4ee2a7d)
• Sparky: correct target type of SparkyContext (resolve #1464) (5f31611)
• Hmr does not reload separate css-file changes in a Vue project (#1423) (78339d2)
• Ignored patterns to watcher (1bc00ca)
• Sparky: Exit code should equal to 1 in case of an error (e9ca87d), closes #828
• improve defaults and handling of config files (da8e706)
• Language level check for required modules (b0acc1e)
• move CSS insertion from top of head tag to the bottom (#1482) (1a2656b)
• resolve autoimport when target is server (474e953)
• Restrict file removal on modules containing computed properties (d5f8cdf), closes #1471
• specify languageLevel and forcedLnguageLevel explicitly as number (ee02e59)
• tsconfig baseURL and automatic alias (3d7e228)
• Watcher should ignore dist folder when homeDir points to './' (1cc41f3)

Features

• Add ability to pass optional cli Args to FuseProcess (552df36)
• Add StyledComponentsPlugin #1366 (#1449) (785cd8f)
• Add Terser support for minification (#1428) (1a04c70)
• add tests checking config files loaded correctly (ca96306)
• Babel7Plugin implementation (#1453) (123a516)
• Handle resolve urls including protocol (54f3828)
• improve docs for babel7 plugin with all options and more example (a42055f)
• Quantum Source Maps (134292c)
• report diagnostic errors on compilerOptions - #1457 (#1470) (7c9b7bd)
• resolve injected imports from preset-env on babel7 (7de0ca1)
• $devServer: Use fusebox logger for HTTPServer logging (46b4bfe)
• WebIndexPlugin: cssPath property to customise public paths for CSS (c8239d9), closes #1432

Commits

• 9dcc5a6 chore: publish 4.0.0
• 62a031d chore: rename to gitkeep
• 81e8950 chore: update footer links to docs and replace gitter with slack
• 1bc9a8c chore: remove .md extension in links
• 89989b7 chore: add folder I need for it to work...
• 73552ba chore: remove old "docs" folder- these are added under website
• 6d70c8d chore: remove old "old_docs" folder
• fb00f4d chore: add v 4.0.0 to doc website
• 89cfc9b fix: type issues
• c46aad3 chore: try node v. buster
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.