From 30ed17b52559e0c56499ad2d9f8d9a0ecb7528df Mon Sep 17 00:00:00 2001 From: Alan Agius <17563226+alan-agius4@users.noreply.github.com> Date: Thu, 26 Mar 2026 12:54:14 +0000 Subject: [PATCH 1/4] fix(@angular/cli): update picomatch to 4.0.4 Update picomatch to address GHSA-c2c7-rcm5-vvqj --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 85a42ca0835c..c52455ac5cf2 100644 --- a/package.json +++ b/package.json @@ -168,7 +168,7 @@ "ora": "5.4.1", "pacote": "20.0.0", "parse5-html-rewriting-stream": "7.0.0", - "picomatch": "4.0.2", + "picomatch": "4.0.4", "piscina": "4.8.0", "postcss": "8.5.2", "postcss-loader": "8.1.1", From 0bdb81caa34a7fcbad80d29f5ad034b8ae8ad8da Mon Sep 17 00:00:00 2001 From: Alan Agius <17563226+alan-agius4@users.noreply.github.com> Date: Thu, 26 Mar 2026 12:54:19 +0000 Subject: [PATCH 2/4] fix(@angular/build): update picomatch to 4.0.4 Update picomatch to address GHSA-c2c7-rcm5-vvqj --- packages/angular/build/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/angular/build/package.json b/packages/angular/build/package.json index beebdecda7da..b56a24affa61 100644 --- a/packages/angular/build/package.json +++ b/packages/angular/build/package.json @@ -36,7 +36,7 @@ "magic-string": "0.30.17", "mrmime": "2.0.1", "parse5-html-rewriting-stream": "7.0.0", - "picomatch": "4.0.2", + "picomatch": "4.0.4", "piscina": "4.8.0", "rollup": "4.59.0", "sass": "1.85.0", From f654dca6e2f60ecc86154fd15124e37a5160273c Mon Sep 17 00:00:00 2001 From: Alan Agius <17563226+alan-agius4@users.noreply.github.com> Date: Thu, 26 Mar 2026 12:56:13 +0000 Subject: [PATCH 3/4] fix(@angular-devkit/build-angular): update picomatch to 4.0.4 Update picomatch to address GHSA-c2c7-rcm5-vvqj --- packages/angular_devkit/build_angular/package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/angular_devkit/build_angular/package.json b/packages/angular_devkit/build_angular/package.json index bcfe666d5015..e4110e1a3fd5 100644 --- a/packages/angular_devkit/build_angular/package.json +++ b/packages/angular_devkit/build_angular/package.json @@ -42,7 +42,7 @@ "mini-css-extract-plugin": "2.9.2", "open": "10.1.0", "ora": "5.4.1", - "picomatch": "4.0.2", + "picomatch": "4.0.4", "piscina": "4.8.0", "postcss": "8.5.2", "postcss-loader": "8.1.1", From bcc400043aa73d9bc9c5696a5371d2799db56bb9 Mon Sep 17 00:00:00 2001 From: Alan Agius <17563226+alan-agius4@users.noreply.github.com> Date: Thu, 26 Mar 2026 12:56:29 +0000 Subject: [PATCH 4/4] fix(@angular-devkit/core): update picomatch to 4.0.4 Update picomatch to address GHSA-c2c7-rcm5-vvqj --- packages/angular_devkit/core/package.json | 2 +- pnpm-lock.yaml | 58 ++++++++++------------- 2 files changed, 27 insertions(+), 33 deletions(-) diff --git a/packages/angular_devkit/core/package.json b/packages/angular_devkit/core/package.json index 86a003e2e094..bf399aca06ff 100644 --- a/packages/angular_devkit/core/package.json +++ b/packages/angular_devkit/core/package.json @@ -28,7 +28,7 @@ "ajv": "8.18.0", "ajv-formats": "3.0.1", "jsonc-parser": "3.3.1", - "picomatch": "4.0.2", + "picomatch": "4.0.4", "rxjs": "7.8.1", "source-map": "0.7.4" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ab50bcc84cca..5e067a572d03 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -386,8 +386,8 @@ importers: specifier: 7.0.0 version: 7.0.0 picomatch: - specifier: 4.0.2 - version: 4.0.2 + specifier: 4.0.4 + version: 4.0.4 piscina: specifier: 4.8.0 version: 4.8.0 @@ -587,8 +587,8 @@ importers: specifier: 7.0.0 version: 7.0.0 picomatch: - specifier: 4.0.2 - version: 4.0.2 + specifier: 4.0.4 + version: 4.0.4 piscina: specifier: 4.8.0 version: 4.8.0 @@ -864,8 +864,8 @@ importers: specifier: 5.4.1 version: 5.4.1 picomatch: - specifier: 4.0.2 - version: 4.0.2 + specifier: 4.0.4 + version: 4.0.4 piscina: specifier: 4.8.0 version: 4.8.0 @@ -963,8 +963,8 @@ importers: specifier: 3.3.1 version: 3.3.1 picomatch: - specifier: 4.0.2 - version: 4.0.2 + specifier: 4.0.4 + version: 4.0.4 rxjs: specifier: 7.8.1 version: 7.8.1 @@ -6802,12 +6802,8 @@ packages: resolution: {integrity: sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==} engines: {node: '>=8.6'} - picomatch@4.0.2: - resolution: {integrity: sha512-M7BAV6Rlcy5u+m6oPhAPFgJTzAioX/6B0DxyvDlo9l8+T3nLKbrczg2WLUyzd45L8RqfUMyGPzekbMvX2Ldkwg==} - engines: {node: '>=12'} - - picomatch@4.0.3: - resolution: {integrity: sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==} + picomatch@4.0.4: + resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==} engines: {node: '>=12'} pify@2.3.0: @@ -10461,10 +10457,10 @@ snapshots: '@rollup/pluginutils': 5.3.0(rollup@4.59.0) commondir: 1.0.1 estree-walker: 2.0.2 - fdir: 6.4.3(picomatch@4.0.2) + fdir: 6.4.3(picomatch@4.0.4) is-reference: 1.2.1 magic-string: 0.30.17 - picomatch: 4.0.2 + picomatch: 4.0.4 optionalDependencies: rollup: 4.59.0 @@ -10505,7 +10501,7 @@ snapshots: dependencies: '@types/estree': 1.0.8 estree-walker: 2.0.2 - picomatch: 4.0.2 + picomatch: 4.0.4 optionalDependencies: rollup: 4.59.0 @@ -10513,7 +10509,7 @@ snapshots: dependencies: '@types/estree': 1.0.8 estree-walker: 2.0.2 - picomatch: 4.0.3 + picomatch: 4.0.4 optionalDependencies: rollup: 4.59.0 @@ -10677,7 +10673,7 @@ snapshots: eslint-visitor-keys: 4.2.0 espree: 10.3.0 estraverse: 5.3.0 - picomatch: 4.0.2 + picomatch: 4.0.4 transitivePeerDependencies: - supports-color - typescript @@ -13260,13 +13256,13 @@ snapshots: dependencies: pend: 1.2.0 - fdir@6.4.3(picomatch@4.0.2): + fdir@6.4.3(picomatch@4.0.4): optionalDependencies: - picomatch: 4.0.2 + picomatch: 4.0.4 - fdir@6.5.0(picomatch@4.0.3): + fdir@6.5.0(picomatch@4.0.4): optionalDependencies: - picomatch: 4.0.3 + picomatch: 4.0.4 fetch-blob@3.2.0: dependencies: @@ -15286,9 +15282,7 @@ snapshots: picomatch@2.3.1: {} - picomatch@4.0.2: {} - - picomatch@4.0.3: {} + picomatch@4.0.4: {} pify@2.3.0: {} @@ -16631,8 +16625,8 @@ snapshots: tinyglobby@0.2.15: dependencies: - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 tldts-core@6.1.83: {} @@ -16996,8 +16990,8 @@ snapshots: vite@6.4.1(@types/node@18.19.76)(jiti@1.21.7)(less@4.2.2)(sass@1.85.0)(terser@5.39.0)(yaml@2.7.0): dependencies: esbuild: 0.25.4 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.3 rollup: 4.59.0 tinyglobby: 0.2.15 @@ -17013,8 +17007,8 @@ snapshots: vite@6.4.1(@types/node@22.13.10)(jiti@1.21.7)(less@4.2.2)(sass@1.85.0)(terser@5.39.0)(yaml@2.7.0): dependencies: esbuild: 0.25.4 - fdir: 6.5.0(picomatch@4.0.3) - picomatch: 4.0.3 + fdir: 6.5.0(picomatch@4.0.4) + picomatch: 4.0.4 postcss: 8.5.3 rollup: 4.59.0 tinyglobby: 0.2.15