Skip to content

Conversation

jkrems
Copy link
Contributor

@jkrems jkrems commented Sep 24, 2024

Contains fix for CVE-2024-47068.

See: GHSA-gcx4-mw62-g8wm

PR Checklist

Please check to confirm your PR fulfills the following requirements:

PR Type

What kind of change does this PR introduce?

  • Bugfix
  • Feature
  • Code style update (formatting, local variables)
  • Refactoring (no functional changes, no api changes)
  • Build related changes
  • CI related changes
  • Documentation content changes
  • Other... Please describe:

What is the current behavior?

Rollup version is affected by a CVE.

Issue Number: #28478

What is the new behavior?

Does this PR introduce a breaking change?

  • Yes
  • No

Other information

@alan-agius4 alan-agius4 added target: patch This PR is targeted for the next patch release action: merge The PR is ready for merge by the caretaker labels Sep 24, 2024
@alan-agius4 alan-agius4 removed the request for review from clydin September 24, 2024 19:10
@alan-agius4 alan-agius4 linked an issue Sep 24, 2024 that may be closed by this pull request
1 task
@clydin clydin merged commit 5fea635 into angular:18.2.x Sep 24, 2024
33 checks passed
@jkrems jkrems deleted the jk-bump-rollout branch September 26, 2024 16:23
@angular-automatic-lock-bot
Copy link

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot bot locked and limited conversation to collaborators Oct 27, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build target: patch This PR is targeted for the next patch release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

@angular-devkit/build-angular Depends on vulnerable versions of rollup

3 participants