Skip to content

fix(@angular/build): bump vite to 7.3.5#33408

Open
alan-agius4 wants to merge 1 commit into
angular:21.2.xfrom
alan-agius4:fix-vite-21.2.x
Open

fix(@angular/build): bump vite to 7.3.5#33408
alan-agius4 wants to merge 1 commit into
angular:21.2.xfrom
alan-agius4:fix-vite-21.2.x

Conversation

@alan-agius4

Copy link
Copy Markdown
Collaborator

Bumps vite to version 7.3.5 to resolve a security vulnerability.

Fixes #33407
GHSA-fx2h-pf6j-xcff

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the vite dependency in packages/angular/build/package.json from version 7.3.2 to 7.3.5. There are no review comments, and I have no additional feedback to provide.

Bumps vite to version 7.3.5 to resolve the GHSA-fx2h-pf6j-xcff security vulnerability.

Fixes angular#33407
@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Jun 18, 2026
@alan-agius4 alan-agius4 linked an issue Jun 18, 2026 that may be closed by this pull request
1 task
@alan-agius4 alan-agius4 requested a review from clydin June 18, 2026 09:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: review The PR is still awaiting reviews from at least one requested reviewer area: @angular/build target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Vite security issue CVE-2026-53571

1 participant