FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

fix(@angular/build): bump piscina to 5.3.2 by alan-agius4 · Pull Request #34243 · angular/angular-cli · GitHub

  1. angular
  2. angular-cli

Repository navigation

fix(@angular/build): bump piscina to 5.3.2 - #34243

Merged
alan-agius4 merged 1 commit into
angular:21.2.xfrom
alan-agius4:fix/piscina-21.2.x
Oct 2, 2026
ConversationCommits (1)ChecksFiles changed
Merged

fix(@angular/build): bump piscina to 5.3.2#34243
alan-agius4 merged 1 commit into
angular:21.2.xfrom
alan-agius4:fix/piscina-21.2.x

Conversation

alan-agius4 commented Oct 2, 2026

Copy link
Copy Markdown
Collaborator

Bumps piscina to 5.3.2 to address GHSA-67c8-pqhq-4rmx / CVE-2026-102992.

Closes #34241

gemini-code-assist Bot reviewed Oct 2, 2026
View reviewed changes

gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Code Review

This pull request updates the dependency version of piscina from 5.2.0 to 5.3.2 in both packages/angular/build/package.json and packages/angular_devkit/build_angular/package.json. There are no review comments to address, and I have no additional feedback to provide.

alan-agius4 added the target: lts This PR is targeting a version currently in long-term support label Oct 2, 2026
alan-agius4 requested a review from dgp1130 October 2, 2026 08:47
alan-agius4 added the action: review The PR is still awaiting reviews from at least one requested reviewer label Oct 2, 2026
jojohoch mentioned this pull request Oct 2, 2026
Open

mayhmemo commented Oct 2, 2026

Copy link
Copy Markdown

Hello @dgp1130, is there any estimate for this to roll up? Our pipeline currently is stopped because of the critical vulnerability. Sorry to bother

alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Oct 2, 2026
alan-agius4 merged commit 7e6d2da into angular:21.2.x Oct 2, 2026
37 of 38 checks passed

alan-agius4 commented Oct 2, 2026

Copy link
Copy Markdown
Collaborator Author

This PR was merged into the repository. The changes were merged into the following branches:

alan-agius4 deleted the fix/piscina-21.2.x branch October 2, 2026 18:15
alan-agius4 linked an issue Oct 2, 2026 that may be closed by this pull request
@angular/build@^21 depends on piscina@5.2.0 which is vulnerable to CVE-2026-102992 #34241
Closed
1 task

cracksalad commented Oct 5, 2026

Copy link
Copy Markdown

Thank you for fixing this.

(When) Will there be a new release for this?

alan-agius4 commented Oct 5, 2026

Copy link
Copy Markdown
Collaborator Author

@cracksalad, later on during the day.

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

dgp1130 dgp1130 approved these changes
+1 more reviewer
gemini-code-assist[bot] gemini-code-assist[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

action: merge The PR is ready for merge by the caretaker area: @angular/build target: lts This PR is targeting a version currently in long-term support

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

@angular/build@^21 depends on piscina@5.2.0 which is vulnerable to CVE-2026-102992

4 participants

Back | FazBrowse Home | New Git URL