Skip to content

build(@angular/cli): update pacote to 21.5.1#33380

Merged
alan-agius4 merged 1 commit into
angular:21.2.xfrom
alan-agius4:21.2.x
Jun 17, 2026
Merged

build(@angular/cli): update pacote to 21.5.1#33380
alan-agius4 merged 1 commit into
angular:21.2.xfrom
alan-agius4:21.2.x

Conversation

@alan-agius4

@alan-agius4 alan-agius4 commented Jun 16, 2026

Copy link
Copy Markdown
Collaborator

Update pacote to 21.5.1 to address GHSA-w4pp-8pjf-rmxw

Fixes #33376

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the dependency version of pacote from 21.3.1 to 21.5.1 in packages/angular/cli/package.json. There are no review comments, and I have no feedback to provide.

@angular-robot angular-robot Bot added area: build & ci Related the build and CI infrastructure of the project area: @angular/cli labels Jun 16, 2026
@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Jun 16, 2026
@alan-agius4
alan-agius4 requested a review from clydin June 16, 2026 07:57
@alan-agius4
alan-agius4 force-pushed the 21.2.x branch 2 times, most recently from d28c455 to 0bbc87c Compare June 16, 2026 08:44
@alan-agius4 alan-agius4 linked an issue Jun 16, 2026 that may be closed by this pull request
1 task
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Jun 17, 2026
@alan-agius4
alan-agius4 merged commit 77c9047 into angular:21.2.x Jun 17, 2026
34 of 35 checks passed
@alan-agius4

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

@alan-agius4
alan-agius4 deleted the 21.2.x branch June 17, 2026 06:50
@angular-automatic-lock-bot

Copy link
Copy Markdown

This pull request has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

This action has been performed automatically by a bot.

@angular-automatic-lock-bot angular-automatic-lock-bot Bot locked and limited conversation to collaborators Jul 18, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/cli area: build & ci Related the build and CI infrastructure of the project target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

pacote has a CVE out for the version in @angular/cli (20 and 22)

2 participants