From 92bcd85274aeaa5f78e368657ec56d299a74e252 Mon Sep 17 00:00:00 2001 From: MeAkib Date: Tue, 27 Oct 2026 21:41:30 +0600 Subject: [PATCH] fix(@angular-devkit/build-angular): update `webpack-dev-middleware` to `7.4.6` Update `webpack-dev-middleware` to 7.4.6 to address GHSA-g84c-rxfj-3j2c / CVE-2026-76844. The advisory lists versions below 7.4.5 as affected but names 7.4.6 as the first patched release, which contains the fix, so 7.4.5 is updated as well. --- .../angular_devkit/build_angular/package.json | 2 +- pnpm-lock.yaml | 20 +++++++++---------- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json index 7838513d03f1..7ca8dac08242 100644 --- a/packages/angular_devkit/build_angular/package.json +++ b/packages/angular_devkit/build_angular/package.json @@ -56,7 +56,7 @@ "tree-kill": "1.2.2", "tslib": "2.8.1", "webpack": "5.112.0", - "webpack-dev-middleware": "7.4.5", + "webpack-dev-middleware": "7.4.6", "webpack-dev-server": "5.2.6", "webpack-merge": "6.0.1", "webpack-subresource-integrity": "5.1.0" diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index a40ab25d1183..1f4507ef4a63 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -720,8 +720,8 @@ importers: specifier: 5.112.0 version: 5.112.0(esbuild@0.28.1)(postcss@8.5.23) webpack-dev-middleware: - specifier: 7.4.5 - version: 7.4.5(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)) + specifier: 7.4.6 + version: 7.4.6(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)) webpack-dev-server: specifier: 5.2.6 version: 5.2.6(bufferutil@4.1.0)(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)) @@ -9524,8 +9524,8 @@ packages: resolution: {integrity: sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ==} engines: {node: '>=20'} - webpack-dev-middleware@7.4.5: - resolution: {integrity: sha512-uxQ6YqGdE4hgDKNf7hUiPXOdtkXvBJXrfEGYSx7P7LC8hnUYGK70X6xQXUvXeNyBDDcsiQXpG2m3G9vxowaEuA==} + webpack-dev-middleware@7.4.6: + resolution: {integrity: sha512-yBWCMvIfUmuhAE8vdqUKzH0vg9kuWN0KeG4vBnqRplUFHRU7lMQjkiJWxVQzvo2BTewqhPhDlMB41rAt2jVA9A==} engines: {node: '>= 18.12.0'} peerDependencies: webpack: ^5.0.0 @@ -19836,27 +19836,27 @@ snapshots: webidl-conversions@8.0.1: {} - webpack-dev-middleware@7.4.5(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)): + webpack-dev-middleware@7.4.6(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)): dependencies: colorette: 2.0.20 memfs: 4.57.2(tslib@2.8.1) mime-types: 3.0.2 on-finished: 2.4.1 range-parser: 1.2.1 - schema-utils: 4.3.3 + schema-utils: 4.8.1(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)) optionalDependencies: webpack: 5.112.0(esbuild@0.28.1)(postcss@8.5.23) transitivePeerDependencies: - tslib - webpack-dev-middleware@7.4.5(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)): + webpack-dev-middleware@7.4.6(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)): dependencies: colorette: 2.0.20 memfs: 4.57.2(tslib@2.8.1) mime-types: 3.0.2 on-finished: 2.4.1 range-parser: 1.2.1 - schema-utils: 4.3.3 + schema-utils: 4.8.1(webpack@5.112.0(esbuild@0.28.1)) optionalDependencies: webpack: 5.112.0(esbuild@0.28.1) transitivePeerDependencies: @@ -19890,7 +19890,7 @@ snapshots: serve-index: 1.9.2 sockjs: 0.3.24 spdy: 4.0.2 - webpack-dev-middleware: 7.4.5(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)) + webpack-dev-middleware: 7.4.6(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)) ws: 8.20.0(bufferutil@4.1.0)(utf-8-validate@6.0.6) optionalDependencies: webpack: 5.112.0(esbuild@0.28.1) @@ -19929,7 +19929,7 @@ snapshots: serve-index: 1.9.2 sockjs: 0.3.24 spdy: 4.0.2 - webpack-dev-middleware: 7.4.5(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)) + webpack-dev-middleware: 7.4.6(tslib@2.8.1)(webpack@5.112.0(esbuild@0.28.1)(postcss@8.5.23)) ws: 8.20.0(bufferutil@4.1.0)(utf-8-validate@6.0.6) optionalDependencies: webpack: 5.112.0(esbuild@0.28.1)(postcss@8.5.23)