Skip to content

build(deps): bump http-proxy-middleware and @angular-devkit/build-angular#950

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-d588b3e710
Closed

build(deps): bump http-proxy-middleware and @angular-devkit/build-angular#950
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-d588b3e710

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps http-proxy-middleware to 3.0.7 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates http-proxy-middleware from 3.0.5 to 3.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.7

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v3.0.6...v3.0.7

v3.0.6

What's Changed

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.7

  • fix(fixRequestBody): harden form-data stringification

v3.0.6

  • fix(types): fix Logger type
  • fix(error-response-plugin): sanitize input
  • fix(router): harden proxy-table matching (exact host for host+path keys, prefix-only path matching) to prevent routing bypass
Commits
  • 8cc4eba chore(package.json): v3.0.7 (#1261)
  • c13a99c fix(fixRequestBody): harden form-data stringification (#1259)
  • ea0bb98 chore(package.json): v3.0.6 (#1256)
  • f377520 fix(router): harden proxy-table matching (#1254)
  • f6be2c6 chore(yarn.lock): bump to follow-redirects 1.16.0
  • a36f009 ci(publish.yml): npm stage publish
  • 3471790 ci(github actions): update publish.yml for 3.x branch
  • bcf1864 build(vscode): use workspace version of TypeScript (#1173)
  • 48ed092 docs(examples): fix websocket example (#1170)
  • 0fe7c24 chore(package.json): bump dev-deps (#1171)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.


Updates @angular-devkit/build-angular from 19.2.27 to 21.2.19

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit Description
fix - 61a810ab6 respect release age policy in update bootstrapping logic

@​angular/build

Commit Description
fix - a2b6116ed bump undici to 7.28.0
fix - 2510ee3c9 bump vite to 7.3.6

21.2.17

@​angular/build

Commit Description
fix - 9c366e8be bump @​babel/core to 7.29.7
fix - 6a06ce9e9 bump esbuild to 0.28.1
fix - 637b84877 bump piscina to 5.2.0
fix - e86d58a12 bump vite to 7.3.5

21.2.16

@​angular/cli

Commit Description
fix - 77c9047ac update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - d052e97da prioritize options over environment variables in AngularNodeAppEngine

21.2.15

@​angular/cli

Commit Description
fix - 42ac0ed0f remove forceAuth and unscoped credential parsing
fix - c7a7f1955 support registry metadata fetching under bun package manager

21.2.14

@​angular/cli

Commit Description
fix - aed448748 expand package groups for newly added peer dependencies in update schematic

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

@​angular/ssr

Commit Type Description
0bd22dae0 fix replace all route parameters when resolving relative redirects

22.0.6 (2026-07-08)

... (truncated)

Commits
  • 1a72825 release: cut the v21.2.19 release
  • df54298 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • fe3a606 release: cut the v21.2.18 release
  • 2510ee3 fix(@​angular/build): bump vite to 7.3.6
  • 61a810a fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • a2b6116 fix(@​angular/build): bump undici to 7.28.0
  • 9c1edbc release: cut the v21.2.17 release
  • 637b848 fix(@​angular/build): bump piscina to 5.2.0
  • 9c366e8 fix(@​angular/build): bump @​babel/core to 7.29.7
  • 6a06ce9 fix(@​angular/build): bump esbuild to 0.28.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ular

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) to 3.0.7 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `http-proxy-middleware` from 3.0.5 to 3.0.7
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v3.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v3.0.5...v3.0.7)

Updates `@angular-devkit/build-angular` from 19.2.27 to 21.2.19
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v19.2.27...v21.2.19)

---
updated-dependencies:
- dependency-name: http-proxy-middleware
  dependency-version: 3.0.7
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.19
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies One or more dependencies are being bumped javascript Pull requests that update Javascript code labels Jul 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 17, 2026 07:50
@dependabot dependabot Bot added dependencies One or more dependencies are being bumped javascript Pull requests that update Javascript code labels Jul 17, 2026
@yogeshchoudhary147

Copy link
Copy Markdown
Contributor

Closing in favour of #953 which does a full Angular 19 → 20 migration. These partial tooling-only bumps would fail with ERESOLVE anyway since they don't update the Angular framework packages alongside the build tooling. Once #953 merges, Dependabot will regenerate any still-needed transitive bumps against the v20 baseline.

@dependabot @github

dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-d588b3e710 branch July 17, 2026 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies One or more dependencies are being bumped javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant