Skip to content

Commit 4ea787c

Browse files
committed
fix(@angular-devkit/build-angular): bump undici to 7.28.0
Bumps undici to version 7.28.0 to resolve the GHSA-vxpw-j846-p89q security vulnerability. Also mentions GHSA-fx2h-pf6j-xcff. Fixes #33449
1 parent 41d34b5 commit 4ea787c

3 files changed

Lines changed: 9 additions & 9 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,7 @@
141141
"ts-node": "^10.9.1",
142142
"tslib": "2.8.1",
143143
"typescript": "5.9.2",
144-
"undici": "7.13.0",
144+
"undici": "7.28.0",
145145
"unenv": "^1.10.0",
146146
"verdaccio": "6.1.6",
147147
"verdaccio-auth-memory": "^10.0.0",

packages/angular_devkit/build_angular/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@
6969
"@web/test-runner": "0.20.2",
7070
"browser-sync": "3.0.4",
7171
"ng-packagr": "20.3.0",
72-
"undici": "7.13.0"
72+
"undici": "7.28.0"
7373
},
7474
"peerDependencies": {
7575
"@angular/core": "0.0.0-ANGULAR-FW-PEER-DEP",

pnpm-lock.yaml

Lines changed: 7 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)