dc/dc
5
1 Fork 0
Code Issues 12 Pull Requests 2 Actions Packages Projects 1 Releases 102 Wiki Activity

chore(deps): @angular/* 20.3.34
Lighthouse Checks / lighthouse (pull_request) Successful in 20m25s
Details
Build / Build-and-ng-test (pull_request) Successful in 4m57s
Details
Build / Build-and-test-development (pull_request) Successful in 30m35s
Details

Browse Source 
GHSA-jfgx-762w-99vr (XSRF token leakage in the HTTP client, an incomplete fix
for CVE-2025-66035) covers @angular/common 20.0.0 - 20.3.33, and the 'Check
audit' step fails on any vulnerability, so every branch is red until this
lands.

The nine packages are pinned exactly and must move together - Angular pins its
siblings at the same patch level - so package.json and the lock are updated as
a set.  The local tarball for @sheet/crypto is only present in encrypted form,
so npm cannot run here; the client build and unit tests in CI are the proof.
This commit is contained in:
dc committed 2026-10-20 23:00:07 +00:00
1 parent 5af8e6fc35
commit 9f70c56b58
2 files changed
+62 -62
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

client/package-lock.json
Generated
+53 -53
View File
@@ -7,15 +7,15 @@
"name": "data_controller-client",
"hasInstallScript": true,
"dependencies": {
"@angular/animations": "20.3.33",
"@angular/animations": "20.3.34",
"@angular/cdk": "^20.2.14",
"@angular/common": "20.3.33",
"@angular/compiler": "20.3.33",
"@angular/core": "20.3.33",
"@angular/forms": "20.3.33",
"@angular/platform-browser": "20.3.33",
"@angular/platform-browser-dynamic": "20.3.33",
"@angular/router": "20.3.33",
"@angular/common": "20.3.34",
"@angular/compiler": "20.3.34",
"@angular/core": "20.3.34",
"@angular/forms": "20.3.34",
"@angular/platform-browser": "20.3.34",
"@angular/platform-browser-dynamic": "20.3.34",
"@angular/router": "20.3.34",
"@cds/core": "^6.15.1",
"@clr/angular": "file:libraries/clr-angular-17.9.0.tgz",
"@clr/icons": "^13.0.2",
@@ -65,7 +65,7 @@
"@angular-eslint/schematics": "19.8.1",
"@angular-eslint/template-parser": "19.8.1",
"@angular/cli": "20.3.37",
"@angular/compiler-cli": "20.3.33",
"@angular/compiler-cli": "20.3.34",
"@babel/plugin-proposal-private-methods": "^7.18.6",
"@compodoc/compodoc": "^2.0.0",
"@cypress/webpack-preprocessor": "^5.17.1",
@@ -1439,9 +1439,9 @@
}
},
"node_modules/@angular/animations": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/animations/-/animations-20.3.33.tgz",
"integrity": "sha512-z9gPYm1byXYE0tMGzjjDXE4OprxvjUhV4jOXVfLLlU0Sk5ChM3GwR0m2Vh+hDWDrJ2f7nfKKTeoGlLriP7NPZA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/animations/-/animations-20.3.34.tgz",
"integrity": "sha512-HdDfbLwpxzx49wAWz4oOUQKSkZcFNRpWEGsDEgufZ3ExwxRk1/2QPJuvZ2CbhKeEcLPrLKUorQ8XlGrNsJmNiQ==",
"deprecated": "@angular/animations is deprecated. Use `animate.enter` and `animate.leave` instead. For more information see: https://v22.angular.dev/guide/animations.",
"license": "MIT",
"dependencies": {
@@ -1451,7 +1451,7 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/core": "20.3.33"
"@angular/core": "20.3.34"
}
},
"node_modules/@angular/cdk": {
@@ -1987,9 +1987,9 @@
}
},
"node_modules/@angular/common": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/common/-/common-20.3.33.tgz",
"integrity": "sha512-PMfSF2j/C3gGHPp6O6c/BL+32msNzhmkzavrxtmBSxIGAOB5Q4KNktnIuolVrvVvu/0UrZj1/zwT91r/GKRaeA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/common/-/common-20.3.34.tgz",
"integrity": "sha512-OhB/l0cNldOvQeICqbWqRUzK5fF6zNYy44Q4cIGJZql8HXL/invGiqWLE9f+kU8z4jRisofHIGTBtyJQYYOudg==",
"license": "MIT",
"dependencies": {
"tslib": "^2.3.0"
@@ -1998,14 +1998,14 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/core": "20.3.33",
"@angular/core": "20.3.34",
"rxjs": "^6.5.3 || ^7.4.0"
}
},
"node_modules/@angular/compiler": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/compiler/-/compiler-20.3.33.tgz",
"integrity": "sha512-tqKZaapDV05r2SXA6bOzTSpiNhSoqZR9Usuacs5myMpbpt4gwNMAZkgaIoIcPutnhbd3qT+Og54VCVvCOXF8pg==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/compiler/-/compiler-20.3.34.tgz",
"integrity": "sha512-8agPW384c/JER1ersPTmJJfcCOnlYcBbdj0MYRxNdiYe+7gtnspF3ORuJmxqCEpMS17AljSmk2skwUcYnHB6xA==",
"license": "MIT",
"dependencies": {
"tslib": "^2.3.0"
@@ -2015,9 +2015,9 @@
}
},
"node_modules/@angular/compiler-cli": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/compiler-cli/-/compiler-cli-20.3.33.tgz",
"integrity": "sha512-NKE4N4ssXysHLJQ7xVqvAv/yf3JfJxaFz5H+Ue+EnYToAmTxXe7uyt2MPRIydef/H63n7O9uphVp5P5GkRxVuA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/compiler-cli/-/compiler-cli-20.3.34.tgz",
"integrity": "sha512-PKHzhSOyDUFh64Ull3fUwgFlxnsQNEAuRyz4KqQ8FsTGZ4pOpUaZntO+2Xn1nX/gT2whSyGBJhD3H37zA8ZGEQ==",
"dev": true,
"license": "MIT",
"dependencies": {
@@ -2038,7 +2038,7 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/compiler": "20.3.33",
"@angular/compiler": "20.3.34",
"typescript": ">=5.8 <6.0"
},
"peerDependenciesMeta": {
@@ -2048,9 +2048,9 @@
}
},
"node_modules/@angular/core": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/core/-/core-20.3.33.tgz",
"integrity": "sha512-Ld/AhODjPf8c14xUOWUnJygaZb2TsRy99ZhwFkEsRJOzqauzEFovb8Hb2MEaB1e4RolADN+HWxPvE4n+u3HFmA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/core/-/core-20.3.34.tgz",
"integrity": "sha512-xOvSmGoao3SVPz//R7zTrq7+WdrIGi+WNpAdxJEvJJXuSpLGS3kSUqukjY4kOMochg2v0NCEPIdCyH+yPs8JSw==",
"license": "MIT",
"dependencies": {
"tslib": "^2.3.0"
@@ -2059,7 +2059,7 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/compiler": "20.3.33",
"@angular/compiler": "20.3.34",
"rxjs": "^6.5.3 || ^7.4.0",
"zone.js": "~0.15.0"
},
@@ -2073,9 +2073,9 @@
}
},
"node_modules/@angular/forms": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/forms/-/forms-20.3.33.tgz",
"integrity": "sha512-UmwKS9toyYhgq8LEbvFxNBfD9dUXr+B6Y5OTwBGwIRy8RhUrOiLwrXTRr+2y/yREGgDtGAWl8zQRVMVk2BNybw==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/forms/-/forms-20.3.34.tgz",
"integrity": "sha512-DndQJEoORsdthFFVRvT9WHn8YcA85jkjMxCLtXyf+TDVk0zbqObbFDfrloRnJwsINqfDNsJrz23ko3YU6sjnTw==",
"license": "MIT",
"dependencies": {
"tslib": "^2.3.0"
@@ -2084,16 +2084,16 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/common": "20.3.33",
"@angular/core": "20.3.33",
"@angular/platform-browser": "20.3.33",
"@angular/common": "20.3.34",
"@angular/core": "20.3.34",
"@angular/platform-browser": "20.3.34",
"rxjs": "^6.5.3 || ^7.4.0"
}
},
"node_modules/@angular/platform-browser": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-20.3.33.tgz",
"integrity": "sha512-od2uw6ee68r5TczjoYDsJuIDWoH4op3/req3sdeFtVHWdQgzf/AhM0B5ZBVRya8THon/b/SDHdhxOrUTgcszTA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-20.3.34.tgz",
"integrity": "sha512-0bd2Bj05WPoBTFM0A13IwbzxKVQPstx/N+7X0ZWKCifliyydIc7DBHu+r37ybJpl8ZsCVBe7DoR9Gon4lZ+zlw==",
"license": "MIT",
"dependencies": {
"tslib": "^2.3.0"
@@ -2102,9 +2102,9 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/animations": "20.3.33",
"@angular/common": "20.3.33",
"@angular/core": "20.3.33"
"@angular/animations": "20.3.34",
"@angular/common": "20.3.34",
"@angular/core": "20.3.34"
},
"peerDependenciesMeta": {
"@angular/animations": {
@@ -2113,9 +2113,9 @@
}
},
"node_modules/@angular/platform-browser-dynamic": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-20.3.33.tgz",
"integrity": "sha512-IwElnTCUW1ZZRr/pw6IRb9dRyNF8KBOh9QoGcmTk6uRAWynenYAe5yICFvgOKozqOHBarFNv8h4jXXJ/W8TcfA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/platform-browser-dynamic/-/platform-browser-dynamic-20.3.34.tgz",
"integrity": "sha512-vqKzExmUDf5jpIlNZRuICsLzaLWY5yTvuXsJhe97KTbC29BD71LhRGhEu7fjmR5uYy+LForpWYm5IsYlJcJAGQ==",
"deprecated": "@angular/platform-browser-dynamic is deprecated. Use `@angular/platform-browser` instead.",
"license": "MIT",
"dependencies": {
@@ -2125,16 +2125,16 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/common": "20.3.33",
"@angular/compiler": "20.3.33",
"@angular/core": "20.3.33",
"@angular/platform-browser": "20.3.33"
"@angular/common": "20.3.34",
"@angular/compiler": "20.3.34",
"@angular/core": "20.3.34",
"@angular/platform-browser": "20.3.34"
}
},
"node_modules/@angular/router": {
"version": "20.3.33",
"resolved": "https://registry.npmjs.org/@angular/router/-/router-20.3.33.tgz",
"integrity": "sha512-M55ibvrJSWGP7sGf+uZFvC66cxRkFlS4TjtI4Owus4gDCqW69/jhUo8pNGXf0T3QpO3iorbHScZfGwVmLATLLA==",
"version": "20.3.34",
"resolved": "https://registry.npmjs.org/@angular/router/-/router-20.3.34.tgz",
"integrity": "sha512-vQo2f/94nUoNMZaxGY0+fK1t9Oe7zJuxHhoMVYhDbCqKxINVmxMX/9uEHlHeu9UIE7JMazepQjRzBLo7bf9xCw==",
"license": "MIT",
"dependencies": {
"tslib": "^2.3.0"
@@ -2143,9 +2143,9 @@
"node": "^20.19.0 || ^22.12.0 || >=24.0.0"
},
"peerDependencies": {
"@angular/common": "20.3.33",
"@angular/core": "20.3.33",
"@angular/platform-browser": "20.3.33",
"@angular/common": "20.3.34",
"@angular/core": "20.3.34",
"@angular/platform-browser": "20.3.34",
"rxjs": "^6.5.3 || ^7.4.0"
}
},
client/package.json
+9 -9
View File
@@ -41,15 +41,15 @@
},
"private": true,
"dependencies": {
"@angular/animations": "20.3.33",
"@angular/animations": "20.3.34",
"@angular/cdk": "^20.2.14",
"@angular/common": "20.3.33",
"@angular/compiler": "20.3.33",
"@angular/core": "20.3.33",
"@angular/forms": "20.3.33",
"@angular/platform-browser": "20.3.33",
"@angular/platform-browser-dynamic": "20.3.33",
"@angular/router": "20.3.33",
"@angular/common": "20.3.34",
"@angular/compiler": "20.3.34",
"@angular/core": "20.3.34",
"@angular/forms": "20.3.34",
"@angular/platform-browser": "20.3.34",
"@angular/platform-browser-dynamic": "20.3.34",
"@angular/router": "20.3.34",
"@cds/core": "^6.15.1",
"@clr/angular": "file:libraries/clr-angular-17.9.0.tgz",
"@clr/icons": "^13.0.2",
@@ -99,7 +99,7 @@
"@angular-eslint/schematics": "19.8.1",
"@angular-eslint/template-parser": "19.8.1",
"@angular/cli": "20.3.37",
"@angular/compiler-cli": "20.3.33",
"@angular/compiler-cli": "20.3.34",
"@babel/plugin-proposal-private-methods": "^7.18.6",
"@compodoc/compodoc": "^2.0.0",
"@cypress/webpack-preprocessor": "^5.17.1",