Skip to content

fix(@angular/build): bump esbuild to 0.28.1, @babel/core to 7.29.7, and piscina to 5.2.0#33422

Merged
alan-agius4 merged 3 commits into
angular:20.3.xfrom
alan-agius4:bump-deps-20.3.x
Jun 22, 2026
Merged

fix(@angular/build): bump esbuild to 0.28.1, @babel/core to 7.29.7, and piscina to 5.2.0#33422
alan-agius4 merged 3 commits into
angular:20.3.xfrom
alan-agius4:bump-deps-20.3.x

Conversation

@alan-agius4

Copy link
Copy Markdown
Collaborator

This PR bumps esbuild to 0.28.1 and @babel/core to 7.29.7 to address GHSA-fx2h-pf6j-xcff.

Fixes #33420.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the dependency versions of esbuild and esbuild-wasm from 0.28.0 to 0.28.1, and @babel/core from 7.28.3 to 7.29.7 across multiple package.json files. There are no review comments, and I have no feedback to provide.

@alan-agius4 alan-agius4 linked an issue Jun 19, 2026 that may be closed by this pull request
1 task
@alan-agius4 alan-agius4 requested a review from clydin June 19, 2026 09:43
@alan-agius4 alan-agius4 added action: review The PR is still awaiting reviews from at least one requested reviewer target: lts This PR is targeting a version currently in long-term support labels Jun 19, 2026
@alan-agius4 alan-agius4 changed the title fix(@angular/build): bump esbuild to 0.28.1 and @babel/core to 7.29.7 fix(@angular/build): bump esbuild to 0.28.1, @babel/core to 7.29.7, and piscina to 5.2.0 Jun 19, 2026
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Jun 22, 2026
@alan-agius4 alan-agius4 merged commit 94fb3c1 into angular:20.3.x Jun 22, 2026
31 of 32 checks passed
@alan-agius4

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

@alan-agius4 alan-agius4 deleted the bump-deps-20.3.x branch June 22, 2026 14:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Backport esbuild and @babel/core security bumps to the 21.2.x LTS branch

2 participants