Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(@angular-devkit/build-angular): update vite to version 5.4.14 #29602

Merged
merged 2 commits into from
Feb 12, 2025

Conversation

clydin
Copy link
Member

@clydin clydin commented Feb 10, 2025

Version update from 5.1.8 to address advisory GHSA-vg6x-rcgg-rjx6

Vite version 5.4.12+, which is now used by the Angular CLI with the application/browser-esbuild builders, contains a potentially breaking change for some development setups. Examples of such setups include those that use reverse proxies or custom host names during development. The change within a patch release was made by Vite to address a security vulnerability. For projects that directly access the development server via localhost, no changes should be needed. However, some development setups may now need to adjust the allowedHosts development server option. This option can include an array of host names that are allowed to communicate with the development server. The option sets the corresponding Vite option within the Angular CLI. For more information on the option and its specific behavior, please see the Vite documentation located here:
https://vite.dev/config/server-options.html#server-allowedhosts

The following is an example of the configuration option allowing example.com:

"serve": {
      "builder": "@angular-devkit/build-angular:dev-server",
      "options": {
        "allowedHosts": ["example.com"]
      },

@clydin clydin added the target: lts This PR is targeting a version currently in long-term support label Feb 10, 2025
@clydin clydin force-pushed the vite-allowed-hosts-17.3.x branch 2 times, most recently from ff47713 to 92fd484 Compare February 11, 2025 16:13
Version update from 5.1.8 to address advisory GHSA-vg6x-rcgg-rjx6

Vite version 5.4.12+, which is now used by the Angular CLI with the `application`/`browser-esbuild`
builders, contains a potentially breaking change for some development setups. Examples of such
setups include those that use reverse proxies or custom host names during development.
The change within a patch release was made by Vite to address a security vulnerability.
For projects that directly access the development server via `localhost`, no changes should
be needed. However, some development setups may now need to adjust the
`allowedHosts` development server option. This option can include an array
of host names that are allowed to communicate with the development server. The option
sets the corresponding Vite option within the Angular CLI.
For more information on the option and its specific behavior, please see the Vite
documentation located here:
https://vite.dev/config/server-options.html#server-allowedhosts

The following is an example of the configuration option allowing `example.com`:
```
"serve": {
      "builder": "@angular-devkit/build-angular:dev-server",
      "options": {
        "allowedHosts": ["example.com"]
      },
```
@clydin clydin force-pushed the vite-allowed-hosts-17.3.x branch from 92fd484 to d44bee2 Compare February 11, 2025 16:14
…wn error: Chrome failed to start: crashed`

This fixes an issue where protractor integration tests are failing with

```
[07:38:37] I/direct - Using ChromeDriver directly...
[07:38:39] E/launcher - unknown error: Chrome failed to start: crashed.
  (unknown error: DevToolsActivePort file doesn't exist)
```

(cherry picked from commit 0718e1b)
@clydin clydin marked this pull request as ready for review February 11, 2025 23:25
@clydin clydin requested a review from alan-agius4 February 11, 2025 23:31
@clydin clydin added the action: review The PR is still awaiting reviews from at least one requested reviewer label Feb 11, 2025
@alan-agius4 alan-agius4 added action: merge The PR is ready for merge by the caretaker and removed action: review The PR is still awaiting reviews from at least one requested reviewer labels Feb 12, 2025
@clydin clydin added action: merge The PR is ready for merge by the caretaker and removed action: merge The PR is ready for merge by the caretaker labels Feb 12, 2025
@clydin clydin merged commit 69477fa into angular:17.3.x Feb 12, 2025
34 of 35 checks passed
@clydin clydin deleted the vite-allowed-hosts-17.3.x branch February 12, 2025 16:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
action: merge The PR is ready for merge by the caretaker area: @angular-devkit/build-angular target: lts This PR is targeting a version currently in long-term support
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants