Skip to content

Commit 5aa53b4

Browse files
committed
fix(@angular-devkit/build-angular): remove undici from dependencies
This fixes CVE-2025-22150 Closes #30066
1 parent b0935e0 commit 5aa53b4

File tree

5 files changed

+6
-6
lines changed

5 files changed

+6
-6
lines changed

Diff for: packages/angular_devkit/build_angular/package.json

-1
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,6 @@
6161
"terser": "5.29.1",
6262
"tree-kill": "1.2.2",
6363
"tslib": "2.6.2",
64-
"undici": "6.11.1",
6564
"vite": "~5.4.17",
6665
"watchpack": "2.4.0",
6766
"webpack": "5.94.0",

Diff for: packages/angular_devkit/build_angular/src/builders/dev-server/specs/ssl_spec.ts

+1
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
import { Architect, BuilderRun } from '@angular-devkit/architect';
1010
import { DevServerBuilderOutput } from '@angular-devkit/build-angular';
1111
import { tags } from '@angular-devkit/core';
12+
// eslint-disable-next-line import/no-extraneous-dependencies
1213
import { Agent, getGlobalDispatcher, setGlobalDispatcher } from 'undici';
1314
import { createArchitect, host } from '../../../testing/test-utils';
1415

Diff for: packages/angular_devkit/build_angular/src/builders/ssr-dev-server/specs/ssl_spec.ts

+1
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@
99
import { Architect } from '@angular-devkit/architect';
1010
// eslint-disable-next-line import/no-extraneous-dependencies
1111
import * as browserSync from 'browser-sync';
12+
// eslint-disable-next-line import/no-extraneous-dependencies
1213
import { Agent, getGlobalDispatcher, setGlobalDispatcher } from 'undici';
1314
import { createArchitect, host } from '../../../testing/test-utils';
1415
import { SSRDevServerBuilderOutput } from '../index';

Diff for: packages/angular_devkit/build_angular/src/utils/server-rendering/fetch-patch.ts

-1
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,6 @@ import { lookup as lookupMimeType } from 'mrmime';
1010
import { readFile } from 'node:fs/promises';
1111
import { extname } from 'node:path';
1212
import { workerData } from 'node:worker_threads';
13-
import { Response, fetch } from 'undici';
1413

1514
/**
1615
* This is passed as workerData when setting up the worker via the `piscina` package.

Diff for: yarn.lock

+4-4
Original file line numberDiff line numberDiff line change
@@ -14782,10 +14782,10 @@ [email protected]:
1478214782
optionalDependencies:
1478314783
fsevents "~2.3.3"
1478414784

14785-
14786-
version "5.4.16"
14787-
resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.16.tgz#471983257a890ef33f2700cbbbc2134f2d08abf1"
14788-
integrity sha512-Y5gnfp4NemVfgOTDQAunSD4346fal44L9mszGGY/e+qxsRT5y1sMlS/8tiQ8AFAp+MFgYNSINdfEchJiPm41vQ==
14785+
vite@~5.4.17:
14786+
version "5.4.17"
14787+
resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.17.tgz#4bf61dd4cdbf64b0d6661f5dba76954cc81d5082"
14788+
integrity sha512-5+VqZryDj4wgCs55o9Lp+p8GE78TLVg0lasCH5xFZ4jacZjtqZa6JUw9/p0WeAojaOfncSM6v77InkFPGnvPvg==
1478914789
dependencies:
1479014790
esbuild "^0.21.3"
1479114791
postcss "^8.4.43"

0 commit comments

Comments
 (0)