Skip to content

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular - #2471

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-d588b3e710
Open

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular#2471
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-d588b3e710

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps http-proxy-middleware to 3.0.7 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates http-proxy-middleware from 2.0.9 to 3.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.7

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v3.0.6...v3.0.7

v3.0.6

What's Changed

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.7

  • fix(fixRequestBody): harden form-data stringification

v3.0.6

  • fix(types): fix Logger type
  • fix(error-response-plugin): sanitize input
  • fix(router): harden proxy-table matching (exact host for host+path keys, prefix-only path matching) to prevent routing bypass

v3.0.5

  • fix(fixRequestBody): check readableLength (#1096)

v3.0.4

  • fix(fixRequestBody): handle invalid request (#1092)
  • fix(fixRequestBody): prevent multiple .write() calls (#1089)
  • fix(websocket): handle errors in handleUpgrade (#823)
  • ci(package): patch http-proxy (#1084)
  • fix(fixRequestBody): support multipart/form-data (#896)
  • feat(types): export Plugin type (#1071)

v3.0.3

  • fix(pathFilter): handle errors

v3.0.2

  • refactor(dependency): replace is-plain-obj with is-plain-object (#1031)
  • chore(package): upgrade to eslint v9 (#1032)
  • fix(logger-plugin): handle undefined protocol and hostname (#1036)

v3.0.1

  • fix(type): fix RequestHandler return type (#980)
  • refactor(errors): improve pathFilter error message (#987)
  • fix(logger-plugin): fix missing target port (#989)
  • ci(package): npm package provenance (#991)
  • fix(logger-plugin): log target port when router option is used (#1001)
  • refactor: fix circular dependencies (#1010)
  • fix(fix-request-body): support '+json' content-type suffix (#1015)

v3.0.0

This release contains some breaking changes.

Please read the V3 discussion chimurai/http-proxy-middleware#768 or follow the MIGRATION.md guide.

... (truncated)

Commits
  • 8cc4eba chore(package.json): v3.0.7 (#1261)
  • c13a99c fix(fixRequestBody): harden form-data stringification (#1259)
  • ea0bb98 chore(package.json): v3.0.6 (#1256)
  • f377520 fix(router): harden proxy-table matching (#1254)
  • f6be2c6 chore(yarn.lock): bump to follow-redirects 1.16.0
  • a36f009 ci(publish.yml): npm stage publish
  • 3471790 ci(github actions): update publish.yml for 3.x branch
  • bcf1864 build(vscode): use workspace version of TypeScript (#1173)
  • 48ed092 docs(examples): fix websocket example (#1170)
  • 0fe7c24 chore(package.json): bump dev-deps (#1171)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @angular-devkit/build-angular from 19.2.27 to 21.2.20

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.20

@​angular-devkit/build-angular

Commit Description
fix - 972f6db7e9 upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - 8de75ada50 upgrade postcss to 8.5.23

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit Description
fix - 61a810ab6 respect release age policy in update bootstrapping logic

@​angular/build

Commit Description
fix - a2b6116ed bump undici to 7.28.0
fix - 2510ee3c9 bump vite to 7.3.6

21.2.17

@​angular/build

Commit Description
fix - 9c366e8be bump @​babel/core to 7.29.7
fix - 6a06ce9e9 bump esbuild to 0.28.1
fix - 637b84877 bump piscina to 5.2.0
fix - e86d58a12 bump vite to 7.3.5

21.2.16

@​angular/cli

Commit Description
fix - 77c9047ac update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - d052e97da prioritize options over environment variables in AngularNodeAppEngine

21.2.15

@​angular/cli

Commit Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.20 (2026-08-05)

@​angular-devkit/build-angular

Commit Type Description
972f6db7e9 fix upgrade postcss to 8.5.23

@​angular/build

Commit Type Description
8de75ada50 fix upgrade postcss to 8.5.23

20.3.33 (2026-08-05)

@​angular-devkit/build-angular

Commit Type Description
0b4008f17d fix upgrade postcss to 8.5.23

@​angular/build

Commit Type Description
fc861affcd fix upgrade postcss to 8.5.23

22.1.2 (2026-07-30)

@​angular/cli

Commit Type Description
57db27ea91 fix add packages with built-in schematics to devDependencies only

@​angular/build

Commit Type Description
baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

... (truncated)

Commits
  • 928eb73 release: cut the v21.2.20 release
  • 972f6db fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
  • 8de75ad fix(@​angular/build): upgrade postcss to 8.5.23
  • 1a72825 release: cut the v21.2.19 release
  • df54298 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • fe3a606 release: cut the v21.2.18 release
  • 2510ee3 fix(@​angular/build): bump vite to 7.3.6
  • 61a810a fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • a2b6116 fix(@​angular/build): bump undici to 7.28.0
  • 9c1edbc release: cut the v21.2.17 release
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot) labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 18:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot) labels Jul 20, 2026
@github-actions
github-actions Bot enabled auto-merge July 20, 2026 18:25
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch 10 times, most recently from 30f8cfb to 9f25459 Compare July 27, 2026 19:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch 10 times, most recently from 26d4405 to e43480f Compare August 10, 2026 18:38
…ular

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) to 3.0.7 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `http-proxy-middleware` from 2.0.9 to 3.0.7
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v3.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.9...v3.0.7)

Updates `@angular-devkit/build-angular` from 19.2.27 to 21.2.20
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v19.2.27...v21.2.20)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.19
  dependency-type: direct:development
- dependency-name: http-proxy-middleware
  dependency-version: 3.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch from e43480f to 51d8b37 Compare August 10, 2026 18:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants