Yicong-Huang opened a new issue, #6154: URL: https://github.com/apache/texera/issues/6154
### Task Summary `@angular-devkit/build-angular` / `@angular/cli` 21.2.8 pin exact versions of several build-time dependencies that have open security advisories: | Pinned dep | 21.2.8 | 21.2.18 | Advisories | | --- | --- | --- | --- | | undici | 7.24.4 | 7.28.0 | GHSA-hm92-r4w5-c3mj (high), GHSA-vmh5-mc38-953g (high), +3 | | vite | 7.3.2 | 7.3.6 | GHSA-fx2h-pf6j-xcff (high), GHSA-v6wh-96g9-6wx3 | | piscina | 5.1.4 | 5.2.0 | GHSA-x9g3-xrwr-cwfg (high) | | webpack-dev-server | 5.2.3 | 5.2.5 | GHSA-mx8g-39q3-5c79, GHSA-79cf-xcqc-c78w | | esbuild | 0.27.3 | 0.28.1 | GHSA-g7r4-m6w7-qqqr | | postcss | 8.5.6 | 8.5.12 | GHSA-qx2v-qp2m-jg93 | A plain lockfile refresh cannot fix these (exact pins); bumping the CLI toolchain to the 21.2.18 patch release clears them all. Same-minor patch upgrade, no config changes expected. ### Task Type - [x] Refactor / Cleanup - [ ] DevOps / Deployment / CI - [ ] Testing / QA - [ ] Documentation - [ ] Performance - [ ] Other -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
