From 406c0cded572d264a990dd91ad37e94c6aeed5a5 Mon Sep 17 00:00:00 2001 From: Alan Agius <17563226+alan-agius4@users.noreply.github.com> Date: Wed, 2 Apr 2025 09:14:53 +0000 Subject: [PATCH] fix(@angular-devkit/build-angular): update vite to 5.4.16 due to a security issues Addresses GHSA-4r4m-qw57-chr8 Closes #29996 --- package.json | 5 +++-- packages/angular_devkit/build_angular/package.json | 2 +- yarn.lock | 8 ++++---- 3 files changed, 8 insertions(+), 7 deletions(-) diff --git a/package.json b/package.json index 3d975ba81b15..ec5c1dc102a2 100644 --- a/package.json +++ b/package.json @@ -210,7 +210,7 @@ "undici": "6.11.1", "verdaccio": "5.29.2", "verdaccio-auth-memory": "^10.0.0", - "vite": "5.4.15", + "vite": "5.4.16", "watchpack": "2.4.0", "webpack": "5.94.0", "webpack-dev-middleware": "6.1.2", @@ -220,5 +220,6 @@ "yargs": "17.7.2", "yargs-parser": "21.1.1", "zone.js": "^0.14.0" - } + }, + "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e" } diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json index 16cccc6ffe7a..cf2241622de1 100644 --- a/packages/angular_devkit/build_angular/package.json +++ b/packages/angular_devkit/build_angular/package.json @@ -62,7 +62,7 @@ "tree-kill": "1.2.2", "tslib": "2.6.2", "undici": "6.11.1", - "vite": "5.4.15", + "vite": "5.4.16", "watchpack": "2.4.0", "webpack": "5.94.0", "webpack-dev-middleware": "6.1.2", diff --git a/yarn.lock b/yarn.lock index 4e888eda0044..2cbd979ac1e9 100644 --- a/yarn.lock +++ b/yarn.lock @@ -14782,10 +14782,10 @@ vite@5.0.12: optionalDependencies: fsevents "~2.3.3" -vite@5.4.15: - version "5.4.15" - resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.15.tgz#2941547f10ebb4bf9b0fa0da863c06711eb7e5e5" - integrity sha512-6ANcZRivqL/4WtwPGTKNaosuNJr5tWiftOC7liM7G9+rMb8+oeJeyzymDu4rTN93seySBmbjSfsS3Vzr19KNtA== +vite@5.4.16: + version "5.4.16" + resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.16.tgz#471983257a890ef33f2700cbbbc2134f2d08abf1" + integrity sha512-Y5gnfp4NemVfgOTDQAunSD4346fal44L9mszGGY/e+qxsRT5y1sMlS/8tiQ8AFAp+MFgYNSINdfEchJiPm41vQ== dependencies: esbuild "^0.21.3" postcss "^8.4.43"