Skip to content

Commit f348efe

Browse files
committed
fix(@angular-devkit/build-angular): bump undici to 7.29.0
Bumps undici to version 7.29.0 to resolve a number of CVEs including CVE-2026-13697 (GHSA-4cwx-7wf7-3272) and CVE-2026-16729 (GHSA-v3r7-h72x-cjcm). Closes #33822
1 parent 3962517 commit f348efe

3 files changed

Lines changed: 9 additions & 9 deletions

File tree

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,7 @@
141141
"ts-node": "^10.9.1",
142142
"tslib": "2.8.1",
143143
"typescript": "5.9.2",
144-
"undici": "7.28.0",
144+
"undici": "7.29.0",
145145
"unenv": "^1.10.0",
146146
"verdaccio": "6.1.6",
147147
"verdaccio-auth-memory": "^10.0.0",

packages/angular_devkit/build_angular/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,7 @@
6969
"@web/test-runner": "0.20.2",
7070
"browser-sync": "3.0.4",
7171
"ng-packagr": "20.3.0",
72-
"undici": "7.28.0"
72+
"undici": "7.29.0"
7373
},
7474
"peerDependencies": {
7575
"@angular/core": "0.0.0-ANGULAR-FW-PEER-DEP",

pnpm-lock.yaml

Lines changed: 7 additions & 7 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)