Skip to content

build(@angular/cli): update pacote to 21.5.1#33381

Merged
alan-agius4 merged 1 commit into
angular:20.3.xfrom
alan-agius4:20.3.x
Jun 17, 2026
Merged

build(@angular/cli): update pacote to 21.5.1#33381
alan-agius4 merged 1 commit into
angular:20.3.xfrom
alan-agius4:20.3.x

Conversation

@alan-agius4

@alan-agius4 alan-agius4 commented Jun 16, 2026

Copy link
Copy Markdown
Collaborator

Update pacote to 21.5.1 to address GHSA-w4pp-8pjf-rmxw

Fixes #33376

@angular-robot angular-robot Bot added area: build & ci Related the build and CI infrastructure of the project area: @angular/cli labels Jun 16, 2026

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the pacote dependency in packages/angular/cli/package.json from version 21.0.4 to 21.5.1. There are no review comments, and I have no feedback to provide.

@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Jun 16, 2026
@alan-agius4 alan-agius4 requested a review from clydin June 16, 2026 07:57
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Jun 17, 2026
@alan-agius4 alan-agius4 merged commit 5f7c032 into angular:20.3.x Jun 17, 2026
31 of 32 checks passed
@alan-agius4 alan-agius4 deleted the 20.3.x branch June 17, 2026 06:50
@alan-agius4

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/cli area: build & ci Related the build and CI infrastructure of the project target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

pacote has a CVE out for the version in @angular/cli (20 and 22)

2 participants