chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular by dependabot[bot] · Pull Request #101 · contentstack/kickstart-angular

dependabot · 2026-07-30T08:43:58Z

Bumps http-proxy-middleware to 3.0.7 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates http-proxy-middleware from 2.0.10 to 3.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.7

What's Changed

fix(fixRequestBody): harden form-data stringification by @chimurai in chimurai/http-proxy-middleware#1259

chore(package.json): v3.0.7 by @chimurai in chimurai/http-proxy-middleware#1261

Full Changelog: chimurai/http-proxy-middleware@v3.0.6...v3.0.7

v3.0.6

What's Changed

fix(types): fix Logger type by @chimurai in chimurai/http-proxy-middleware#1104

fix(fixRequestBody): support text/plain by @knudtty in chimurai/http-proxy-middleware#1103

chore(examples): bump deps by @chimurai in chimurai/http-proxy-middleware#1105

build(prettier): improve prettier setup by @chimurai in chimurai/http-proxy-middleware#1108

chore(deps): fix punycode node deprecation warning by @chimurai in chimurai/http-proxy-middleware#1109

chore(examples): bump deps by @chimurai in chimurai/http-proxy-middleware#1110

build(codespaces): add devcontainer.json by @chimurai in chimurai/http-proxy-middleware#1112

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1116

ci(github-action): ci.yml add node v24 by @chimurai in chimurai/http-proxy-middleware#1117

chore(package): bump dev dependencies by @chimurai in chimurai/http-proxy-middleware#1118

chore(package): upgrade to jest v30 by @chimurai in chimurai/http-proxy-middleware#1122

chore(examples): upgrade deps by @chimurai in chimurai/http-proxy-middleware#1124

chore(package): update dev deps by @chimurai in chimurai/http-proxy-middleware#1125

test(websocket): fix ws import by @chimurai in chimurai/http-proxy-middleware#1126

chore(refactor): use node: protocol imports by @chimurai in chimurai/http-proxy-middleware#1127

ci(node24): pin node24 due to TLS issue with mockttp by @chimurai in chimurai/http-proxy-middleware#1137

docs(recipes/pathRewrite.md): fix comment by @DEBargha2004 in chimurai/http-proxy-middleware#1135

chore(package): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1138

chore(deps): update actions/checkout action to v5 by @chimurai in chimurai/http-proxy-middleware#1140

fix(error-response-plugin): sanitize input by @chimurai in chimurai/http-proxy-middleware#1141

chore(package.json): update dev deps by @chimurai in chimurai/http-proxy-middleware#1143

chore: add context7.json by @chimurai in chimurai/http-proxy-middleware#1144

build(eslint): update eslint.config.mjs by @chimurai in chimurai/http-proxy-middleware#1145

ci(github workflow): harden github workflows by @chimurai in chimurai/http-proxy-middleware#1146

chore(package): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1147

ci(ci.yml): unpin node 24 by @chimurai in chimurai/http-proxy-middleware#1148

docs(recipes): fix servers.md http.createServer example by @hacklschorsch in chimurai/http-proxy-middleware#1150

ci: publish with oidc by @chimurai in chimurai/http-proxy-middleware#1152

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1153

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1155

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1158

test(types.spec.ts): add type check when req or res are 'any' by @chimurai in chimurai/http-proxy-middleware#1161

chore(package.json): bump deps by @chimurai in chimurai/http-proxy-middleware#1164

chore(package.json): eslint v10 by @chimurai in chimurai/http-proxy-middleware#1165

chore(package.json): bump dev deps by @chimurai in chimurai/http-proxy-middleware#1166

chore(package.json): bump dev-deps by @chimurai in chimurai/http-proxy-middleware#1171

docs(examples): fix websocket example by @chimurai in chimurai/http-proxy-middleware#1170

build(vscode): use workspace version of TypeScript by @chimurai in chimurai/http-proxy-middleware#1173

fix(router): harden proxy-table matching by @chimurai in chimurai/http-proxy-middleware#1254

chore(package.json): v3.0.6 by @chimurai in chimurai/http-proxy-middleware#1256

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.7

fix(fixRequestBody): harden form-data stringification

v3.0.6

fix(types): fix Logger type

fix(error-response-plugin): sanitize input

fix(router): harden proxy-table matching (exact host for host+path keys, prefix-only path matching) to prevent routing bypass

v3.0.5

fix(fixRequestBody): check readableLength (#1096)

v3.0.4

fix(fixRequestBody): handle invalid request (#1092)

fix(fixRequestBody): prevent multiple .write() calls (#1089)

fix(websocket): handle errors in handleUpgrade (#823)

ci(package): patch http-proxy (#1084)

fix(fixRequestBody): support multipart/form-data (#896)

feat(types): export Plugin type (#1071)

v3.0.3

fix(pathFilter): handle errors

v3.0.2

refactor(dependency): replace is-plain-obj with is-plain-object (#1031)

chore(package): upgrade to eslint v9 (#1032)

fix(logger-plugin): handle undefined protocol and hostname (#1036)

v3.0.1

fix(type): fix RequestHandler return type (#980)

refactor(errors): improve pathFilter error message (#987)

fix(logger-plugin): fix missing target port (#989)

ci(package): npm package provenance (#991)

fix(logger-plugin): log target port when router option is used (#1001)

refactor: fix circular dependencies (#1010)

fix(fix-request-body): support '+json' content-type suffix (#1015)

v3.0.0

This release contains some breaking changes.

Please read the V3 discussion chimurai/http-proxy-middleware#768 or follow the MIGRATION.md guide.

... (truncated)

Commits

8cc4eba chore(package.json): v3.0.7 (#1261)
c13a99c fix(fixRequestBody): harden form-data stringification (#1259)
ea0bb98 chore(package.json): v3.0.6 (#1256)
f377520 fix(router): harden proxy-table matching (#1254)
f6be2c6 chore(yarn.lock): bump to follow-redirects 1.16.0
a36f009 ci(publish.yml): npm stage publish
3471790 ci(github actions): update publish.yml for 3.x branch
bcf1864 build(vscode): use workspace version of TypeScript (#1173)
48ed092 docs(examples): fix websocket example (#1170)
0fe7c24 chore(package.json): bump dev-deps (#1171)
Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates @angular-devkit/build-angular from 21.2.15 to 21.2.20

Release notes

Sourced from @angular-devkit/build-angular's releases.

21.2.20

@angular-devkit/build-angular

Commit Description

upgrade postcss to 8.5.23

@angular/build

Commit Description

upgrade postcss to 8.5.23

21.2.19

@angular-devkit/build-angular

Commit Description

update http-proxy-middleware to 3.0.7

21.2.18

@angular/cli

Commit Description

respect release age policy in update bootstrapping logic

@angular/build

Commit Description

bump undici to 7.28.0

bump vite to 7.3.6

21.2.17

@angular/build

Commit Description

bump @babel/core to 7.29.7

bump esbuild to 0.28.1

bump piscina to 5.2.0

bump vite to 7.3.5

21.2.16

@angular/cli

Commit Description

update pacote to 21.5.1

@angular/ssr

Commit Description

prioritize options over environment variables in AngularNodeAppEngine

Changelog

Sourced from @angular-devkit/build-angular's changelog.

21.2.20 (2026-08-05)

@angular-devkit/build-angular

Commit Type Description

972f6db7e9 fix upgrade postcss to 8.5.23

@angular/build

Commit Type Description

8de75ada50 fix upgrade postcss to 8.5.23

20.3.33 (2026-08-05)

@angular-devkit/build-angular

Commit Type Description

0b4008f17d fix upgrade postcss to 8.5.23

@angular/build

Commit Type Description

fc861affcd fix upgrade postcss to 8.5.23

22.1.2 (2026-07-30)

@angular/cli

Commit Type Description

57db27ea91 fix add packages with built-in schematics to devDependencies only

@angular/build

Commit Type Description

baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

... (truncated)

Commits

928eb73 release: cut the v21.2.20 release
972f6db fix(@angular-devkit/build-angular): upgrade postcss to 8.5.23
8de75ad fix(@angular/build): upgrade postcss to 8.5.23
1a72825 release: cut the v21.2.19 release
df54298 fix(@angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
fe3a606 release: cut the v21.2.18 release
2510ee3 fix(@angular/build): bump vite to 7.3.6
61a810a fix(@angular/cli): respect release age policy in update bootstrapping logic
a2b6116 fix(@angular/build): bump undici to 7.28.0
9c1edbc release: cut the v21.2.17 release
Additional commits viewable in compare view

bump version to 0.0.2 and update dependencies

feat: refactor home component to use signals for state management fix: improve error handling in content loading style: update TypeScript target and library to ES2023 refactor: make stack property readonly in ContentstackService

…stack

…properties

… configuration

chore: update dependencies and Angular version to 20.1.6

add codeowners

…er-file remove-duplicate-codeowner-file

move CODEOWNERS to .github folder

package lock fixed and ignores adapted

Update package dependencies and version bump to 0.0.5

…and process.env for production

updated angular version

changed region from us to NA

Add @rollup/rollup-linux-x64-gnu, @rollup/rollup-linux-x64-musl, lightningcss-linux-x64-gnu, and lightningcss-linux-x64-musl as optionalDependencies and regenerate lockfile so Linux CI environments can resolve native platform binaries without hitting the npm optional dependency bug.

chore: add Linux optional dependencies for Rollup and LightningCSS

fix: resolve Snyk security and license issues

fix: resolve Snyk security issues

…ular Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) to 3.0.7 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together. Updates `http-proxy-middleware` from 2.0.10 to 3.0.7 - [Release notes](https://github.com/chimurai/http-proxy-middleware/releases) - [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v3.0.7/CHANGELOG.md) - [Commits](chimurai/http-proxy-middleware@v2.0.10...v3.0.7) Updates `@angular-devkit/build-angular` from 21.2.15 to 21.2.20 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.15...v21.2.20) --- updated-dependencies: - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.19 dependency-type: direct:development - dependency-name: http-proxy-middleware dependency-version: 3.0.7 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

snyk-io · 2026-08-05T12:12:17Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-05T12:12:45Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	0	✅ Passed
🔵 Low Severity	0	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

dependabot · 2026-08-07T11:02:44Z

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

nandeesh-gajula and others added 30 commits June 26, 2025 18:50

Initial commit

7952573

feat: initial commit

6003f6c

sca-scan.yml

fedc0e5

policy-scan.yml

9eee049

issues-jira.yml

7b45b0b

secrets-scan.yml

43c6580

Updated codeowners

cb3ba94

bump version to 0.0.2 and update dependencies

8ff5144

Merge pull request #8 from contentstack/feat/deps

b3999c0

bump version to 0.0.2 and update dependencies

chore: update dependencies and Angular version to 20.1.6

469091e

feat: refactor home component to use signals for state management fix: improve error handling in content loading style: update TypeScript target and library to ES2023 refactor: make stack property readonly in ContentstackService

feat: add environment configuration and generation script for Content…

c85d31d

…stack

chore: remove unused environment configuration files

43b22b1

feat: enhance environment configuration with additional Contentstack …

24562e6

…properties

feat: add checksums for generate-env.js and vite-env.d.ts in Talisman…

0f0edd2

… configuration

Merge pull request #14 from contentstack/chore/angular-20

345e1a4

chore: update dependencies and Angular version to 20.1.6

add codeowners

e360b85

Merge pull request #18 from contentstack/fix/add-code0wner

ef4ca40

add codeowners

remove-duplicate-codeowner-file

ed185ca

Merge pull request #19 from contentstack/fix/remove-duplicate-codeown…

55f0f13

…er-file remove-duplicate-codeowner-file

move CODEOWNERS to .github folder

f2df159

Merge pull request #21 from contentstack/fix/move-codeowners

5cb7fb6

move CODEOWNERS to .github folder

package lock fixed and ignores adapted

2b6148a

talisman fix

3edd1cc

Merge pull request #22 from contentstack/chore/fix-pkg-lock

7e4c877

package lock fixed and ignores adapted

Delete secrets-scan.yml

a19aa9f

Updated codeowners

6542dcf

Update package dependencies and version bump to 0.0.5

0c5f05e

Merge pull request #30 from contentstack/chore/update-deps-02-10-2025

d62204f

Update package dependencies and version bump to 0.0.5

Enhance environment variable loading: read from .env for development …

2842eca

…and process.env for production

deps

b2d14f3

cs-raj and others added 14 commits June 17, 2026 15:18

updated angular version

28f200b

Merge branch 'main' into enhc/DX-8580

f9de4f1

Merge pull request #82 from contentstack/enhc/DX-8580

6ff6fb8

updated angular version

issues-jira.yml

97a8900

changed region from us to NA

233b878

Merge branch 'main' into enhc/DX-8580

2f293e2

Merge pull request #83 from contentstack/enhc/DX-8580

f4a2b9a

changed region from us to NA

Merge branch 'main' into enhc/DX-8580

aac61c1

Merge pull request #84 from contentstack/enhc/DX-8580

64d9236

chore: add Linux optional dependencies for Rollup and LightningCSS

Delete issues-jira.yml

e26798c

fix snyk issues

38086a7

snyk fixes

25ae2bc

Merge pull request #98 from contentstack/fix/snyk-issues

fd7302a

fix: resolve Snyk security and license issues

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026

dependabot Bot requested a review from a team July 30, 2026 08:43

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 30, 2026

Aravind-Kumar-cstk and others added 4 commits August 2, 2026 17:40

sca-scan.yml

e7bdd25

fix: resolve Snyk security issues

0d53a42

Merge pull request #105 from contentstack/fix/snyk-issues-10-8

0d94ace

fix: resolve Snyk security issues

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch from 88088ed to e6430ef Compare August 5, 2026 12:12

harshitha07d closed this Aug 7, 2026

harshitha07d force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch from e6430ef to f648a9e Compare August 7, 2026 11:02

dependabot Bot deleted the dependabot/npm_and_yarn/multi-d588b3e710 branch August 7, 2026 11:02

Navigation Menu

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular - #101

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular#101
dependabot[bot] wants to merge 74 commits into
mainfrom
dependabot/npm_and_yarn/multi-d588b3e710

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading

Uh oh!

snyk-io Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Commit	Description
	bump `@babel/core` to 7.29.7
	bump esbuild to 0.28.1
	bump piscina to 5.2.0
	bump vite to 7.3.5

Conversation

dependabot Bot commented on behalf of github Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.0.7

What's Changed

v3.0.6

What's Changed

21.2.20

@​angular-devkit/build-angular

@​angular/build

21.2.19

@​angular-devkit/build-angular

21.2.18

@​angular/cli

@​angular/build

21.2.17

@​angular/build

21.2.16

@​angular/cli

@​angular/ssr

21.2.20 (2026-08-05)

@​angular-devkit/build-angular

@​angular/build

20.3.33 (2026-08-05)

@​angular-devkit/build-angular

@​angular/build

22.1.2 (2026-07-30)

@​angular/cli

@​angular/build

Uh oh!

snyk-io Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

dependabot Bot commented on behalf of github Jul 30, 2026 •

edited

Loading

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/cli`

`@angular/build`

`@angular/build`

`@angular/cli`

`@angular/ssr`

`@angular-devkit/build-angular`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular/build`

snyk-io Bot commented Aug 5, 2026 •

edited

Loading