Skip to content

Fix Angular dependency security alerts - #18

Merged
erenken merged 2 commits into
mainfrom
security/dependabot-alerts
Oct 21, 2026
Merged

erenken merged 2 commits into
mainfrom
security/dependabot-alerts

Conversation

@erenken

@erenken erenken commented Oct 21, 2026

Copy link
Copy Markdown
Owner

Summary

  • Update Angular 22.2 packages to 22.2.3, bringing the CLI's MCP server dependency to 2.3.1.
  • Pin Vite to the patched 8.3.x line, resolving the three launch-editor alerts.
  • Update Vitest to 5.0.5 to clear the additional npm audit finding.

Verification

  • npm audit: 0 vulnerabilities.
  • npm ci --dry-run: passed.
  • Tests and build were not run.

@erenken
erenken merged commit fe9a8cd into main Oct 21, 2026
7 checks passed
@erenken
erenken deleted the security/dependabot-alerts branch October 21, 2026 22:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant