Skip to content

chore(deps): bump http-proxy-middleware and @angular-devkit/build-angular - #2471

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-d588b3e710
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-d588b3e710

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps http-proxy-middleware to 3.0.7 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates http-proxy-middleware from 2.0.9 to 3.0.7

Release notes

Sourced from http-proxy-middleware's releases.

v3.0.7

What's Changed

Full Changelog: chimurai/http-proxy-middleware@v3.0.6...v3.0.7

v3.0.6

What's Changed

... (truncated)

Changelog

Sourced from http-proxy-middleware's changelog.

v3.0.7

  • fix(fixRequestBody): harden form-data stringification

v3.0.6

  • fix(types): fix Logger type
  • fix(error-response-plugin): sanitize input
  • fix(router): harden proxy-table matching (exact host for host+path keys, prefix-only path matching) to prevent routing bypass

v3.0.5

  • fix(fixRequestBody): check readableLength (#1096)

v3.0.4

  • fix(fixRequestBody): handle invalid request (#1092)
  • fix(fixRequestBody): prevent multiple .write() calls (#1089)
  • fix(websocket): handle errors in handleUpgrade (#823)
  • ci(package): patch http-proxy (#1084)
  • fix(fixRequestBody): support multipart/form-data (#896)
  • feat(types): export Plugin type (#1071)

v3.0.3

  • fix(pathFilter): handle errors

v3.0.2

  • refactor(dependency): replace is-plain-obj with is-plain-object (#1031)
  • chore(package): upgrade to eslint v9 (#1032)
  • fix(logger-plugin): handle undefined protocol and hostname (#1036)

v3.0.1

  • fix(type): fix RequestHandler return type (#980)
  • refactor(errors): improve pathFilter error message (#987)
  • fix(logger-plugin): fix missing target port (#989)
  • ci(package): npm package provenance (#991)
  • fix(logger-plugin): log target port when router option is used (#1001)
  • refactor: fix circular dependencies (#1010)
  • fix(fix-request-body): support '+json' content-type suffix (#1015)

v3.0.0

This release contains some breaking changes.

Please read the V3 discussion chimurai/http-proxy-middleware#768 or follow the MIGRATION.md guide.

... (truncated)

Commits
  • 8cc4eba chore(package.json): v3.0.7 (#1261)
  • c13a99c fix(fixRequestBody): harden form-data stringification (#1259)
  • ea0bb98 chore(package.json): v3.0.6 (#1256)
  • f377520 fix(router): harden proxy-table matching (#1254)
  • f6be2c6 chore(yarn.lock): bump to follow-redirects 1.16.0
  • a36f009 ci(publish.yml): npm stage publish
  • 3471790 ci(github actions): update publish.yml for 3.x branch
  • bcf1864 build(vscode): use workspace version of TypeScript (#1173)
  • 48ed092 docs(examples): fix websocket example (#1170)
  • 0fe7c24 chore(package.json): bump dev-deps (#1171)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for http-proxy-middleware since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates @angular-devkit/build-angular from 19.2.27 to 21.2.21

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.21

@​angular/cli

Commit Description
fix - ba5d16cac update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular/build

Commit Description
fix - f7f60e69e bump undici to 7.29.0

21.2.20

@​angular-devkit/build-angular

Commit Description
fix - 972f6db7e9 upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - 8de75ada50 upgrade postcss to 8.5.23

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit Description
fix - 61a810ab6 respect release age policy in update bootstrapping logic

@​angular/build

Commit Description
fix - a2b6116ed bump undici to 7.28.0
fix - 2510ee3c9 bump vite to 7.3.6

21.2.17

@​angular/build

Commit Description
fix - 9c366e8be bump @​babel/core to 7.29.7
fix - 6a06ce9e9 bump esbuild to 0.28.1
fix - 637b84877 bump piscina to 5.2.0
fix - e86d58a12 bump vite to 7.3.5

21.2.16

@​angular/cli

Commit Description

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.21 (2026-08-12)

@​angular/cli

Commit Type Description
ba5d16cac fix update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular/build

Commit Type Description
f7f60e69e fix bump undici to 7.29.0

20.3.34 (2026-08-12)

@​angular/cli

Commit Type Description
3962517b9 fix update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular-devkit/build-angular

Commit Type Description
f348efe8b fix bump undici to 7.29.0

22.2.0-next.2 (2026-08-05)

@​angular/build

Commit Type Description
7e5510e464 fix disable linker internal source mapping in OXC linker
bad31421cb fix prevent syntax corruption in linker and oxc transform

22.2.0-next.1 (2026-08-05)

... (truncated)

Commits
  • 90e8059 release: cut the v21.2.21 release
  • f7f60e6 fix(@​angular/build): bump undici to 7.29.0
  • ba5d16c fix(@​angular/cli): update dependency @​modelcontextprotocol/sdk to v1.30.0
  • 928eb73 release: cut the v21.2.20 release
  • 972f6db fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
  • 8de75ad fix(@​angular/build): upgrade postcss to 8.5.23
  • 1a72825 release: cut the v21.2.19 release
  • df54298 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • fe3a606 release: cut the v21.2.18 release
  • 2510ee3 fix(@​angular/build): bump vite to 7.3.6
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot) labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 18:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot) labels Jul 20, 2026
@github-actions
github-actions Bot enabled auto-merge July 20, 2026 18:25
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch 10 times, most recently from 30f8cfb to 9f25459 Compare July 27, 2026 19:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch 11 times, most recently from e43480f to 51d8b37 Compare August 10, 2026 18:50
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch 3 times, most recently from 7b47661 to 4e46ac7 Compare August 17, 2026 19:44
…ular

Bumps [http-proxy-middleware](https://github.com/chimurai/http-proxy-middleware) to 3.0.7 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `http-proxy-middleware` from 2.0.9 to 3.0.7
- [Release notes](https://github.com/chimurai/http-proxy-middleware/releases)
- [Changelog](https://github.com/chimurai/http-proxy-middleware/blob/v3.0.7/CHANGELOG.md)
- [Commits](chimurai/http-proxy-middleware@v2.0.9...v3.0.7)

Updates `@angular-devkit/build-angular` from 19.2.27 to 21.2.21
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v19.2.27...v21.2.21)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.19
  dependency-type: direct:development
- dependency-name: http-proxy-middleware
  dependency-version: 3.0.7
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d588b3e710 branch from 4e46ac7 to 30ac6de Compare August 17, 2026 19:57

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file npm npm package updates (e.g. dependabot)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants