Skip to content

fix(@angular/build): bump vite to 7.3.7 - #34453

Merged
clydin merged 1 commit into
angular:21.2.xfrom
florimond-collette:fix/vite-21.2.x
Oct 21, 2026
Merged

clydin merged 1 commit into
angular:21.2.xfrom
florimond-collette:fix/vite-21.2.x

Conversation

@florimond-collette

@florimond-collette florimond-collette commented Oct 20, 2026 •

Copy link
Copy Markdown

Bumps vite to 7.3.7 to address GHSA-698v-4r3x-3vcv / CVE-2026-112943.

Closes: #34452

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the dependency version of vite from 7.3.6 to 7.3.7 in packages/angular/build/package.json. There are no review comments, and I have no feedback to provide.

@alan-agius4 alan-agius4 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@alan-agius4 alan-agius4 added target: patch This PR is targeted for the next patch release target: lts This PR is targeting a version currently in long-term support action: merge The PR is ready for merge by the caretaker and removed target: patch This PR is targeted for the next patch release labels Oct 21, 2026
@clydin
clydin merged commit a081d8b into angular:21.2.x Oct 21, 2026
33 of 34 checks passed
@clydin

clydin commented Oct 21, 2026

Copy link
Copy Markdown
Member

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

@angular/build 22.2.x, 21.2.x and 20.3.x depend on vite@8.3.0 / vite@7.3.6 which are vulnerable to CVE-2026-112943

3 participants