From 43bf73858f935b8c3ac65bf9f0b936a69b66914b Mon Sep 17 00:00:00 2001 From: Florimond Collette Date: Tue, 20 Oct 2026 21:47:58 +0200 Subject: [PATCH] fix(@angular/build): bump vite to 7.3.7 Bumps vite to 7.3.7 to address GHSA-698v-4r3x-3vcv / CVE-2026-112943. Refs #34452 --- packages/angular/build/package.json | 2 +- pnpm-lock.yaml | 82 +++++------------------------ 2 files changed, 13 insertions(+), 71 deletions(-) diff --git a/packages/angular/build/package.json b/packages/angular/build/package.json index 8ee107965c0f..1a7df0929f3b 100644 --- a/packages/angular/build/package.json +++ b/packages/angular/build/package.json @@ -43,7 +43,7 @@ "source-map-support": "0.5.21", "tinyglobby": "0.2.15", "undici": "7.29.1", - "vite": "7.3.6", + "vite": "7.3.7", "watchpack": "2.5.1" }, "optionalDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 044b959453ec..8a645e6388fe 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -358,7 +358,7 @@ importers: version: 5.1.21(@types/node@24.12.2) '@vitejs/plugin-basic-ssl': specifier: 2.1.4 - version: 2.1.4(vite@7.3.6(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4)) + version: 2.1.4(vite@7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4)) beasties: specifier: 0.4.1 version: 0.4.1 @@ -414,8 +414,8 @@ importers: specifier: 7.29.1 version: 7.29.1 vite: - specifier: 7.3.6 - version: 7.3.6(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) + specifier: 7.3.7 + version: 7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) watchpack: specifier: 2.5.1 version: 2.5.1 @@ -9398,48 +9398,8 @@ packages: resolution: {integrity: sha512-ZZKSmDAEFOijERBLkmYfJ+vmk3w+7hOLYDNkRCuRuMJGEmqYNCNLyBBFwWKVMhfwaEF3WOd0Zlw86U/WC/+nYw==} engines: {'0': node >=0.6.0} - vite@7.3.2: - resolution: {integrity: sha512-Bby3NOsna2jsjfLVOHKes8sGwgl4TT0E6vvpYgnAYDIF/tie7MRaFthmKuHx1NSXjiTueXH3do80FMQgvEktRg==} - engines: {node: ^20.19.0 || >=22.12.0} - hasBin: true - peerDependencies: - '@types/node': ^20.19.0 || >=22.12.0 - jiti: '>=1.21.0' - less: ^4.0.0 - lightningcss: ^1.21.0 - sass: ^1.70.0 - sass-embedded: ^1.70.0 - stylus: '>=0.54.8' - sugarss: ^5.0.0 - terser: ^5.16.0 - tsx: ^4.8.1 - yaml: ^2.4.2 - peerDependenciesMeta: - '@types/node': - optional: true - jiti: - optional: true - less: - optional: true - lightningcss: - optional: true - sass: - optional: true - sass-embedded: - optional: true - stylus: - optional: true - sugarss: - optional: true - terser: - optional: true - tsx: - optional: true - yaml: - optional: true - - vite@7.3.6: - resolution: {integrity: sha512-4XP60spRGjSZFf1qYH+dJIkK2znL3zQfl9KkOV9MkkRR/3Dls0dxaBsQPTloEc5BLXWPL9vsOxopxyKoMmDueg==} + vite@7.3.7: + resolution: {integrity: sha512-AHEzTORMbi7/7aXp7w7KZ5+DCUdSeLsJz0grY8xHpc9DHdYb0vQu6DqJfm2tOw3gDExNgPgnJTXxM6syYFHaCA==} engines: {node: ^20.19.0 || >=22.12.0} hasBin: true peerDependencies: @@ -13666,9 +13626,9 @@ snapshots: lodash: 4.17.21 minimatch: 7.4.6 - '@vitejs/plugin-basic-ssl@2.1.4(vite@7.3.6(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4))': + '@vitejs/plugin-basic-ssl@2.1.4(vite@7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4))': dependencies: - vite: 7.3.6(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) + vite: 7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) '@vitest/coverage-v8@4.0.18(vitest@4.0.18(@opentelemetry/api@1.9.1)(@types/node@24.12.2)(jiti@2.6.1)(jsdom@28.1.0)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4))': dependencies: @@ -13693,13 +13653,13 @@ snapshots: chai: 6.2.2 tinyrainbow: 3.1.0 - '@vitest/mocker@4.0.18(vite@7.3.2(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4))': + '@vitest/mocker@4.0.18(vite@7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4))': dependencies: '@vitest/spy': 4.0.18 estree-walker: 3.0.3 magic-string: 0.30.21 optionalDependencies: - vite: 7.3.2(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) + vite: 7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) '@vitest/pretty-format@4.0.18': dependencies: @@ -19766,25 +19726,7 @@ snapshots: core-util-is: 1.0.2 extsprintf: 1.3.0 - vite@7.3.2(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4): - dependencies: - esbuild: 0.27.3 - fdir: 6.5.0(picomatch@4.0.4) - picomatch: 4.0.4 - postcss: 8.5.23 - rollup: 4.57.1 - tinyglobby: 0.2.15 - optionalDependencies: - '@types/node': 24.12.2 - fsevents: 2.3.3 - jiti: 2.6.1 - less: 4.9.0 - sass: 1.97.3 - terser: 5.51.2 - tsx: 4.21.0 - yaml: 2.8.4 - - vite@7.3.6(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4): + vite@7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4): dependencies: esbuild: 0.28.1 fdir: 6.5.0(picomatch@4.0.4) @@ -19805,7 +19747,7 @@ snapshots: vitest@4.0.18(@opentelemetry/api@1.9.1)(@types/node@24.12.2)(jiti@2.6.1)(jsdom@28.1.0)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4): dependencies: '@vitest/expect': 4.0.18 - '@vitest/mocker': 4.0.18(vite@7.3.2(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4)) + '@vitest/mocker': 4.0.18(vite@7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4)) '@vitest/pretty-format': 4.0.18 '@vitest/runner': 4.0.18 '@vitest/snapshot': 4.0.18 @@ -19822,7 +19764,7 @@ snapshots: tinyexec: 1.1.2 tinyglobby: 0.2.15 tinyrainbow: 3.1.0 - vite: 7.3.2(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) + vite: 7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) why-is-node-running: 2.3.0 optionalDependencies: '@opentelemetry/api': 1.9.1