Skip to content

fix(@angular/build): update esbuild to 0.28.0#33003

Merged
dgp1130 merged 1 commit intoangular:19.2.xfrom
dgp1130:esbuild-bump-v19
Apr 14, 2026
Merged

fix(@angular/build): update esbuild to 0.28.0#33003
dgp1130 merged 1 commit intoangular:19.2.xfrom
dgp1130:esbuild-bump-v19

Conversation

@dgp1130
Copy link
Copy Markdown
Collaborator

@dgp1130 dgp1130 commented Apr 14, 2026

This addresses some security vulnerabilities.

Refs #32975

@dgp1130 dgp1130 requested a review from clydin April 14, 2026 21:25
@dgp1130 dgp1130 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support area: @angular/build labels Apr 14, 2026
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the esbuild and esbuild-wasm dependencies from version 0.25.4 to 0.28.0 across the monorepo's package.json files and the pnpm-lock.yaml lockfile. I have no feedback to provide.

@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Apr 14, 2026
This addresses some security vulnerabilities.
@angular-robot angular-robot bot requested a review from clydin April 14, 2026 21:58
@dgp1130 dgp1130 requested review from clydin and removed request for clydin April 14, 2026 22:24
@dgp1130 dgp1130 merged commit 2d53fec into angular:19.2.x Apr 14, 2026
29 of 30 checks passed
@dgp1130
Copy link
Copy Markdown
Collaborator Author

dgp1130 commented Apr 14, 2026

This PR was merged into the repository. The changes were merged into the following branches:

@dgp1130 dgp1130 deleted the esbuild-bump-v19 branch April 14, 2026 22:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE-2025-68121 @angular/build@20 uses a vulnerable version of "esbuild" - "0.25.9"

3 participants