v17.0.1

Full Changelog: v17.0.0...v17.0.1

v17.0.0

What's Changed

• feat: upgrade to Angular 17 by @kyubisation in #85
• feat: rename browserTarget to buildTarget and add migration by @kyubisation in #86

Full Changelog: v16.0.0...v17.0.0

v17.0.0-next.1

What's Changed

• feat: upgrade to Angular 17 by @kyubisation in #85
• feat: rename browserTarget to buildTarget and add migration by @kyubisation in #86

Full Changelog: v16.0.0...v17.0.0-next.1

v16.0.0

⚠ BREAKING CHANGES

• In order to improve security (and apply Secure by default), the default for searchPattern has been changed to {sourceRoot}/**/environments/environment*.ts (from {sourceRoot}/**/!(*server*).ts). If your project uses environment variables in other files, update the searchPattern entry in your ngsscbuild block in your angular.json.
• Update to Angular 16

Features

• change default search pattern to only include environment files (#82) (f0aef80)
• upgrade to Angular 16 (#81) (c1f4d02)

Full Changelog: v15.1.0...v16.0.0

v15.1.0

Features

• add searchPattern as an option and restrict default search pattern (#75) (d701f51)

Bug Fixes

• use correct path for environment files in ng-add (421b3ff)

Security Notice

With the change in version 15 to search all files for environment variables, a potential information disclosure vulnerability was introduced, as unintended environment variables might be exposed.

You might be affected, if you use environment variables in your angular.json workspace that expose application internals (like used services/tools) or secrets that are also available on the deployed environment (e.g. a monorepo that also contains a Node.js backend, which is deployed in the same system/container/pod as the frontend bundle).

This should have little to no impact, if you only have a simple angular.json workspace without a backend component.

With 15.1 this risk is mitigated, as the lookup path is restricted by adding an option searchPattern which defaults to {sourceRoot}/**/!(server).ts (only search sourceRoot of the related angular.json project and exclude files with server in the name).

Full Changelog: v15.0.2...v15.1.0

v15.0.2

Bug Fixes

• ensure correct build (#73) (075880b)

v15.0.1

Bug Fixes

• aggregate detected variables correctly (#72) (b8ed332)

v15.0.0

⚠ BREAKING CHANGES

• Angular 15 is now required. With version 15 of the Angular CLI, environment files are no longer generated by default. In order to adapt, using ng add angular-server-side-configuration will try to add the import in either app.module.ts, app.components.ts or main.ts depending on availability. The ngssc builder will also now search all files for environment variable usages instead of just the defined environment file.

Features

• update to Angular 15 (#70) (7ec00eb)

v14.0.1

Bug Fixes

• update peer dependencies version range (04d6f55)

Full Changelog: v14.0.0...v14.0.1

v14.0.0

⚠ BREAKING CHANGES

• update to Angular 14 (875ce64)

Full Changelog: v13.2.1...v14.0.0