Skip to content

fix(@angular-devkit/build-angular): bump undici to 7.29.0 - #33823

Merged
alan-agius4 merged 1 commit into
angular:20.3.xfrom
alan-agius4:security-bump-undici-20.3.x
Aug 10, 2026
Merged

fix(@angular-devkit/build-angular): bump undici to 7.29.0#33823
alan-agius4 merged 1 commit into
angular:20.3.xfrom
alan-agius4:security-bump-undici-20.3.x

Conversation

@alan-agius4

Copy link
Copy Markdown
Collaborator

Bumps undici to version 7.29.0 to resolve a number of CVEs including CVE-2026-13697 (GHSA-4cwx-7wf7-3272) and CVE-2026-16729 (GHSA-v3r7-h72x-cjcm).

Closes #33822

Bumps undici to version 7.29.0 to resolve a number of CVEs including CVE-2026-13697 (GHSA-4cwx-7wf7-3272) and CVE-2026-16729 (GHSA-v3r7-h72x-cjcm).

Closes angular#33822

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the 'undici' dependency from version 7.28.0 to 7.29.0 in both the root package.json and the angular_devkit build_angular package.json. I have no feedback to provide on these changes.

@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Aug 10, 2026
@alan-agius4 alan-agius4 linked an issue Aug 10, 2026 that may be closed by this pull request
1 task
@alan-agius4
alan-agius4 requested a review from clydin August 10, 2026 12:36
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Aug 10, 2026
@alan-agius4
alan-agius4 merged commit f348efe into angular:20.3.x Aug 10, 2026
34 of 35 checks passed
@alan-agius4
alan-agius4 deleted the security-bump-undici-20.3.x branch August 10, 2026 13:21
@alan-agius4

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular-devkit/build-angular target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

update dependency undici to fix vulnerability issue

2 participants