Skip to content

fix(@angular/build): bump vite to 7.3.5#33408

Merged
alan-agius4 merged 1 commit into
angular:21.2.xfrom
alan-agius4:fix-vite-21.2.x
Jun 18, 2026
Merged

fix(@angular/build): bump vite to 7.3.5#33408
alan-agius4 merged 1 commit into
angular:21.2.xfrom
alan-agius4:fix-vite-21.2.x

Conversation

@alan-agius4

Copy link
Copy Markdown
Collaborator

Bumps vite to version 7.3.5 to resolve a security vulnerability.

Fixes #33407
GHSA-fx2h-pf6j-xcff

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the vite dependency in packages/angular/build/package.json from version 7.3.2 to 7.3.5. There are no review comments, and I have no additional feedback to provide.

Bumps vite to version 7.3.5 to resolve the GHSA-fx2h-pf6j-xcff security vulnerability.

Fixes angular#33407
@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Jun 18, 2026
@alan-agius4 alan-agius4 linked an issue Jun 18, 2026 that may be closed by this pull request
1 task
@alan-agius4 alan-agius4 requested a review from clydin June 18, 2026 09:09
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Jun 18, 2026
@alan-agius4 alan-agius4 merged commit e86d58a into angular:21.2.x Jun 18, 2026
36 of 37 checks passed
@alan-agius4 alan-agius4 deleted the fix-vite-21.2.x branch June 18, 2026 12:07
@alan-agius4

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Vite security issue CVE-2026-53571

2 participants