From 988300674d335d5a63e13550448a51dd135fe200 Mon Sep 17 00:00:00 2001 From: Florimond Collette Date: Sun, 25 Oct 2026 02:07:34 +0200 Subject: [PATCH] fix(@angular/build): bump undici to 7.30.1 Bumps undici to 7.30.1 to address GHSA-xjj6-f33q-929c / CVE-2026-109869, GHSA-4qv8-2p9j-2685 / CVE-2026-109924 and GHSA-f72v-6w45-q472 / CVE-2026-109841. Closes #34518 --- package.json | 2 +- packages/angular/build/package.json | 2 +- .../angular_devkit/build_angular/package.json | 2 +- pnpm-lock.yaml | 18 +++++++++--------- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/package.json b/package.json index 2944d8d04374..f4ebe39bb04f 100644 --- a/package.json +++ b/package.json @@ -133,7 +133,7 @@ "source-map-support": "0.5.21", "ts-node": "^10.9.1", "tslib": "2.8.1", - "undici": "7.29.1", + "undici": "7.30.1", "unenv": "^1.10.0", "verdaccio": "6.2.9", "verdaccio-auth-memory": "^10.0.0", diff --git a/packages/angular/build/package.json b/packages/angular/build/package.json index 1a7df0929f3b..f10abb61235d 100644 --- a/packages/angular/build/package.json +++ b/packages/angular/build/package.json @@ -42,7 +42,7 @@ "semver": "7.7.4", "source-map-support": "0.5.21", "tinyglobby": "0.2.15", - "undici": "7.29.1", + "undici": "7.30.1", "vite": "7.3.7", "watchpack": "2.5.1" }, diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json index 50e2046e4460..7838513d03f1 100644 --- a/packages/angular_devkit/build_angular/package.json +++ b/packages/angular_devkit/build_angular/package.json @@ -69,7 +69,7 @@ "@web/test-runner": "0.20.2", "browser-sync": "3.0.4", "ng-packagr": "21.2.3", - "undici": "7.29.1" + "undici": "7.30.1" }, "peerDependencies": { "@angular/core": "0.0.0-ANGULAR-FW-PEER-DEP", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 91e97aceac18..a40ab25d1183 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -288,8 +288,8 @@ importers: specifier: 2.8.1 version: 2.8.1 undici: - specifier: 7.29.1 - version: 7.29.1 + specifier: 7.30.1 + version: 7.30.1 unenv: specifier: ^1.10.0 version: 1.10.0 @@ -411,8 +411,8 @@ importers: specifier: 0.2.15 version: 0.2.15 undici: - specifier: 7.29.1 - version: 7.29.1 + specifier: 7.30.1 + version: 7.30.1 vite: specifier: 7.3.7 version: 7.3.7(@types/node@24.12.2)(jiti@2.6.1)(less@4.9.0)(sass@1.97.3)(terser@5.51.2)(tsx@4.21.0)(yaml@2.8.4) @@ -745,8 +745,8 @@ importers: specifier: 21.2.3 version: 21.2.3(@angular/compiler-cli@21.2.12(@angular/compiler@21.2.12)(typescript@6.0.3))(tslib@2.8.1)(typescript@6.0.3) undici: - specifier: 7.29.1 - version: 7.29.1 + specifier: 7.30.1 + version: 7.30.1 optionalDependencies: esbuild: specifier: 0.28.1 @@ -9279,8 +9279,8 @@ packages: resolution: {integrity: sha512-BM/JzwwaRXxrLdElV2Uo6cTLEjhSb3WXboncJamZ15NgUURmvlXvxa6xkwIOILIjPNo9i8ku136ZvWV0Uly8+w==} engines: {node: '>=20.18.1'} - undici@7.29.1: - resolution: {integrity: sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==} + undici@7.30.1: + resolution: {integrity: sha512-03KrMbjIFDWQR5RNPrSw3bd1r12JpyFQl9/yxjUbJtqkjmllqC5lFjZh6ujeuJCKr8EOQvRW872Oy/az+nLYxg==} engines: {node: '>=20.18.1'} unenv@1.10.0: @@ -19573,7 +19573,7 @@ snapshots: undici@7.24.4: {} - undici@7.29.1: {} + undici@7.30.1: {} unenv@1.10.0: dependencies: