Skip to content

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular#2778

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-2b71f79767
Jul 25, 2026
Merged

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular#2778
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-2b71f79767

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps http-proxy-middleware to 3.0.7 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates http-proxy-middleware from 3.0.5 to 3.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.7

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v3.0.6...v3.0.7

v3.0.6

What's Changed

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.7

  • fix(fixRequestBody): harden form-data stringification

v3.0.6

  • fix(types): fix Logger type
  • fix(error-response-plugin): sanitize input
  • fix(router): harden proxy-table matching (exact host for host+path keys, prefix-only path matching) to prevent routing bypass
Commits
  • 8cc4eba chore(package.json): v3.0.7 (#1261)
  • c13a99c fix(fixRequestBody): harden form-data stringification (#1259)
  • ea0bb98 chore(package.json): v3.0.6 (#1256)
  • f377520 fix(router): harden proxy-table matching (#1254)
  • f6be2c6 chore(yarn.lock): bump to follow-redirects 1.16.0
  • a36f009 ci(publish.yml): npm stage publish
  • 3471790 ci(github actions): update publish.yml for 3.x branch
  • bcf1864 build(vscode): use workspace version of TypeScript (#1173)
  • 48ed092 docs(examples): fix websocket example (#1170)
  • 0fe7c24 chore(package.json): bump dev-deps (#1171)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.


Updates @angular-devkit/build-angular from 22.0.6 to 22.0.8

Release notes

Sourced from @​angular-devkit/build-angular's releases.

22.0.8

@​angular/cli

Commit Description
fix - 41c356256 batch Prettier invocations during migration formatting
fix - bc87c85c3 update MCP devserver tool names to conform to spec regex

@​angular/build

Commit Description
fix - 5724bf632 canonicalize drive letter casing for workspace root on Windows
fix - b8bdbaa1e ensure import map integrity keys are valid URL-like specifiers
fix - 212a7bb21 favor istanbul coverage provider when browser testing is enabled
fix - bc760b005 preserve custom config options in runnerConfig for vitest
fix - 19cda7415 remap metafile paths when workspace root is a symlink or junction
perf - fdcc98c79 skip semantic affected-file walk when type checking is disabled

22.0.7

@​angular/cli

Commit Description
fix - e85c10ccb copy packageManager field and yarn config for temp installs
fix - b87cafec0 support resolving subproject dependencies in pnpm workspaces
Changelog

Sourced from @​angular-devkit/build-angular's changelog.

22.0.8 (2026-07-23)

@​angular/cli

Commit Type Description
41c356256 fix batch Prettier invocations during migration formatting
bc87c85c3 fix update MCP devserver tool names to conform to spec regex

@​angular/build

Commit Type Description
5724bf632 fix canonicalize drive letter casing for workspace root on Windows
b8bdbaa1e fix ensure import map integrity keys are valid URL-like specifiers
212a7bb21 fix favor istanbul coverage provider when browser testing is enabled
bc760b005 fix preserve custom config options in runnerConfig for vitest
19cda7415 fix remap metafile paths when workspace root is a symlink or junction
fdcc98c79 perf skip semantic affected-file walk when type checking is disabled

22.1.0-next.4 (2026-07-15)

@​angular/cli

Commit Type Description
3789ceee1 fix copy packageManager field and yarn config for temp installs
b0b3a47ae fix support resolving subproject dependencies in pnpm workspaces

@​schematics/angular

Commit Type Description
b345bb54d fix remove unused spec tsconfig outDir

@​angular/build

Commit Type Description
0c18dc0f6 feat emit debug ids for stable subresource integrity hashes
291caab61 fix prevent stripping nested sourceMappingURL comments

... (truncated)

Commits
  • beac493 release: cut the v22.0.8 release
  • 1bb2cc5 build: update devinfra digest to 8819f0b
  • 83eede6 build: update all github actions
  • 15b8616 build: update dependency aspect_rules_ts to v3.9.2
  • bc87c85 fix(@​angular/cli): update MCP devserver tool names to conform to spec regex
  • 212a7bb fix(@​angular/build): favor istanbul coverage provider when browser testing is...
  • 0c69328 Revert "perf(@​angular/build): skip semantic affected-file walk when type chec...
  • ecc7aba build: update cross-repo angular dependencies
  • ce5e5d0 build: lock file maintenance
  • fdcc98c perf(@​angular/build): skip semantic affected-file walk when type checking is ...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ular

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) to 3.0.7 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `http-proxy-middleware` from 3.0.5 to 3.0.7
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v3.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v3.0.5...v3.0.7)

Updates `@angular-devkit/build-angular` from 22.0.6 to 22.0.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v22.0.6...v22.0.8)

---
updated-dependencies:
- dependency-name: http-proxy-middleware
  dependency-version: 3.0.7
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 22.0.8
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026
@github-actions
github-actions Bot merged commit f76c620 into main Jul 25, 2026
2 of 3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-2b71f79767 branch July 25, 2026 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants