Skip to content

Bump vite and @angular-devkit/build-angular in /ui#251

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/ui/multi-ef5ca39ae0
Open

Bump vite and @angular-devkit/build-angular in /ui#251
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/ui/multi-ef5ca39ae0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jan 3, 2026

Bumps vite to 6.4.1 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates vite from 6.0.11 to 6.4.1

Release notes

Sourced from vite's releases.

create-vite@6.4.1

Please refer to CHANGELOG.md for details.

v6.4.1

Please refer to CHANGELOG.md for details.

create-vite@6.4.0

Please refer to CHANGELOG.md for details.

v6.4.0

Please refer to CHANGELOG.md for details.

v6.3.7

Please refer to CHANGELOG.md for details.

v6.3.6

Please refer to CHANGELOG.md for details.

v6.3.5

Please refer to CHANGELOG.md for details.

v6.3.4

Please refer to CHANGELOG.md for details.

v6.3.3

Please refer to CHANGELOG.md for details.

v6.3.2

Please refer to CHANGELOG.md for details.

v6.3.1

Please refer to CHANGELOG.md for details.

v6.3.0

Please refer to CHANGELOG.md for details.

v6.3.0-beta.2

Please refer to CHANGELOG.md for details.

v6.3.0-beta.1

Please refer to CHANGELOG.md for details.

v6.2.7

Please refer to CHANGELOG.md for details.

v6.2.6

Please refer to CHANGELOG.md for details.

v6.2.5

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.0-beta.5 (2025-12-25)

Features

Bug Fixes

  • worker: handle new Worker(..., new URL(import.meta.url)) with trailing comma (#21325) (4a47241)

Code Refactoring

8.0.0-beta.4 (2025-12-22)

Features

Bug Fixes

  • detect import.meta.resolve when formatted across multiple lines (#21312) (130e718)

8.0.0-beta.3 (2025-12-18)

Features

  • introduce v2 native plugins and enable it by default (#21268) (42f2ab3)
  • ssr: avoid errors when rewriting already rewritten stacktrace (#21269) (98d9a33)
  • update rolldown to 1.0.0-beta.55 (#21300) (2c8db85)

Bug Fixes

  • allow no-cors requests for non-script tag requests (#21299) (ef3d596)
  • deps: update all non-major dependencies (#21285) (4635b2e)
  • unreachable error when building with experimental.bundledDev is enabled (#21296) (e81c183)

8.0.0-beta.2 (2025-12-12)

Features

Bug Fixes

Documentation

... (truncated)

Commits
  • a7349ef release: v6.3.1
  • a152b7c fix: backward compat for internal plugin transform calls (#19878)
  • 35c7f35 fix: avoid using Promise.allSettled in preload function (#19805)
  • 5fdcfe7 release: v6.3.0
  • d4ee5e8 fix(hmr): avoid infinite loop happening with hot.invalidate in circular dep...
  • 5003434 fix(preview): use host url to open browser (#19836)
  • bf9728e release: v6.3.0-beta.2
  • 380c10e fix(hmr): run HMR handler sequentially (#19793)
  • 8bed1de fix: addWatchFile doesn't work if base is specified (fixes #19792) (#19794)
  • 0a0c50a refactor: simplify pluginFilter implementation (#19828)
  • Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 19.1.7 to 19.2.19

Release notes

Sourced from @​angular-devkit/build-angular's releases.

19.2.19

@​angular/build

Commit Description
fix - 4d8ea27a1 update vite to v6.4.1

19.2.18

@​angular/ssr

Commit Description
fix - 9136a5d13 prevent malicious URL from overriding host

19.2.17

@​angular/build

Commit Description
fix - 365d525b5 update vite to 6.3.6

19.2.16

@​angular-devkit/build-angular

Commit Description
fix - b0f4330a9 avoid extra tick in SSR builds

@​angular/build

Commit Description
fix - ee5c5f823 avoid extra tick in SSR dev-server builds

@​angular/ssr

Commit Description
feat - 32980f7e7 introduce BootstrapContext for isolated server-side rendering

Breaking Changes

@​angular/ssr

  • The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

    Before:

    const bootstrap = () => bootstrapApplication(AppComponent, config);

    After:

    const bootstrap = (context: BootstrapContext) =>
  bootstrapApplication(AppComponent, config, context);

For more information please see: GHSA-68x2-mx4q-78m7

19.2.15

@​angular-devkit/build-angular

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

19.2.19 (2025-10-29)

@​angular/build

Commit Type Description
4d8ea27a1 fix update vite to v6.4.1

20.3.7 (2025-10-22)

@​angular-devkit/schematics

Commit Type Description
a31533cf4 fix respect --force option when schematic contains host.create

@​angular/build

Commit Type Description
8cdda111c fix resolve Angular locale data namespace in esbuild
5847ccc54 fix update vite to 7.11.1

@​angular/ssr

Commit Type Description
3a28fb6a1 fix correctly handle routes with matrix parameters
5db6d6487 fix ensure server-side navigation triggers a redirect

20.3.6 (2025-10-15)

@​angular/ssr

Commit Type Description
5271547c8 fix prevent malicious URL from overriding host

... (truncated)

Commits
  • 399c3ec release: cut the v19.2.19 release
  • 4d8ea27 fix(@​angular/build): update vite to v6.4.1
  • 8590f19 release: cut the v19.2.18 release
  • 9136a5d fix(@​angular/ssr): prevent malicious URL from overriding host
  • 12b0a1f release: cut the v19.2.17 release
  • 365d525 fix(@​angular/build): update vite to 6.3.6
  • 3ea403a ci: several CI fixes
  • fe9ea0d release: cut the v19.2.16 release
  • c4278aa build: update Angular FW packages to latest patch
  • ee5c5f8 fix(@​angular/build): avoid extra tick in SSR dev-server builds
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump vite and @angular-devkit/build-angular in /ui
4d9c613 
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) to 6.4.1 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `vite` from 6.0.11 to 6.4.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@6.4.1/packages/vite)

Updates `@angular-devkit/build-angular` from 19.1.7 to 19.2.19
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@19.1.7...19.2.19)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.1
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 19.2.19
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants