Skip to content

[PRODSEC-11289] Fix Angular i18n vulnerable to CSS#11710

Merged
nikita-web-ua merged 1 commit intodevelopfrom
dev-mmaliarchuk/PRODSEC-11289-fix-angular-i18n-vulnerable-to-css
Mar 2, 2026
Merged

[PRODSEC-11289] Fix Angular i18n vulnerable to CSS#11710
nikita-web-ua merged 1 commit intodevelopfrom
dev-mmaliarchuk/PRODSEC-11289-fix-angular-i18n-vulnerable-to-css

Conversation

@nikita-web-ua
Copy link
Contributor

Please check if the PR fulfills these requirements

  • The commit message follows our guidelines
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)

What kind of change does this PR introduce? (check one with "x")

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Build related changes
  • Documentation
  • Other... Please describe:

What is the current behaviour? (You can also link to an open issue here)

https://github.com/Alfresco/alfresco-ng2-components/security/dependabot/364
Screenshot 2026-03-02 at 09 46 49

What is the new behaviour?

Screenshot 2026-03-02 at 09 40 42

Does this PR introduce a breaking change? (check one with "x")

  • Yes
  • No

If this PR contains a breaking change, please describe the impact and migration path for existing applications: ...

Other information:

Copilot AI review requested due to automatic review settings March 2, 2026 08:48
@nikita-web-ua nikita-web-ua added dependencies Pull requests that update a dependency file A/N BDU security labels Mar 2, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 2, 2026

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Angular patch versions to address a reported i18n-related security vulnerability (CSS injection) flagged by Dependabot, keeping the workspace on a consistent Angular 19.2.19 patch level.

Changes:

  • Bump Angular runtime dependencies from 19.2.18 to 19.2.19 (animations/common/compiler/core/forms/platform-browser/platform-browser-dynamic/router).
  • Bump @angular/compiler-cli from 19.2.18 to 19.2.19.
  • Regenerate package-lock.json to reflect the updated Angular package tarballs, peer deps, and integrity hashes.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates Angular package versions to 19.2.19 to address the security alert.
package-lock.json Syncs lockfile entries (versions/resolved/integrity/peer deps) with the Angular 19.2.19 update.

@nikita-web-ua nikita-web-ua merged commit dc8e6a9 into develop Mar 2, 2026
30 of 32 checks passed
@nikita-web-ua nikita-web-ua deleted the dev-mmaliarchuk/PRODSEC-11289-fix-angular-i18n-vulnerable-to-css branch March 2, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

A/N BDU dependencies Pull requests that update a dependency file security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants