Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(@angular-devkit/build-angular): update webpack-dev-middleware to 6.1.2 #27335

Merged
merged 1 commit into from
Mar 22, 2024

Conversation

alan-agius4
Copy link
Collaborator

Addressed in this commit is an update to webpack-dev-middleware to version 6.1.2, resolving a security concern identified at GHSA-wr3j-pwj9-hqq6.

Closes #27334

…o `6.1.2`

Addressed in this commit is an update to `webpack-dev-middleware` to version `6.1.2`, resolving a security concern identified at GHSA-wr3j-pwj9-hqq6.

Closes angular#27334
@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: patch This PR is targeted for the next patch release labels Mar 22, 2024
@alan-agius4 alan-agius4 requested a review from clydin March 22, 2024 08:00
@clydin clydin added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Mar 22, 2024
@clydin clydin merged commit c12907d into angular:17.3.x Mar 22, 2024
35 checks passed
@alan-agius4 alan-agius4 deleted the webpack-middleware-fix branch March 22, 2024 13:35
@angular-automatic-lock-bot
Copy link

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot bot locked and limited conversation to collaborators Apr 22, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
action: merge The PR is ready for merge by the caretaker target: patch This PR is targeted for the next patch release
Projects
None yet
Development

Successfully merging this pull request may close these issues.

@angular-devkit/build-angular depends on vulnerable version of webpack-dev-middleware
2 participants