fix: CXSPA-12985 bump Angular to 21.2.9 to address platform-server SSRF vulnerability#21392
Draft
fix: CXSPA-12985 bump Angular to 21.2.9 to address platform-server SSRF vulnerability#21392
Conversation
…RF vulnerability Bump all @angular/* packages from 21.2.4 to 21.2.9 to fix GHSA-45q2-gjvg-7973 (SSRF in @angular/platform-server during SSR). Angular 21.2.9 changed `setDomTypes()` in platform-server to import domino's bundled ESM module (`bundled-domino.mjs`) and access `domino.impl`. Jest's CJS transform does not properly unwrap the ESM default export for `.mjs` files, causing `domino.impl` to be undefined and all 21 setup test suites to fail. Fix: add a `moduleNameMapper` entry (similar to the existing beasties workaround) that redirects `bundled-domino.mjs` to a CJS wrapper which reads the original file, replaces the ESM export with `module.exports`, and compiles it so the default export is correctly resolved.
Contributor
|
🚨 PeerDependencies Change Detected 🚨 Your pull request includes modifications to ❌ Invalid peerDependencies change in core-libs/setup/package.json
- "@angular/core": "^21.2.4",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/asm/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/cart/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/checkout/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/customer-ticketing/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/estimated-delivery-date/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/order/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/organization/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/pdf-invoices/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/pickup-in-store/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product-configurator/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product-multi-dimensional/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/qualtrics/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/quote/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/requested-delivery-date/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/smartedit/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/storefinder/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/subscription-billing/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/tracking/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/user/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cdc/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cdp/package.json
- "@angular/core": "^21.2.4",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cds/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cpq-quote/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/digital-payments/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/epd-visualization/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/omf/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/opf/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/opps/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/punchout/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/s4-service/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/s4om/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/segment-refs/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in projects/core/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in projects/schematics/package.json
- "@angular/compiler": "^21.2.4",
+ "@angular/compiler": "^21.2.9",
❌ Invalid peerDependencies change in projects/storefrontlib/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
- "@angular/service-worker": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
+ "@angular/service-worker": "^21.2.9",Please note: Changes to peerDependencies are restricted and only permitted during framework update releases, as they may introduce breaking changes for customer's applications. |
Contributor
|
🚨 PeerDependencies Change Detected 🚨 Your pull request includes modifications to ❌ Invalid peerDependencies change in core-libs/setup/package.json
- "@angular/core": "^21.2.4",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/asm/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/cart/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/checkout/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/customer-ticketing/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/estimated-delivery-date/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/order/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/organization/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/pdf-invoices/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/pickup-in-store/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product-configurator/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product-multi-dimensional/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/qualtrics/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/quote/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/requested-delivery-date/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/smartedit/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/storefinder/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/subscription-billing/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/tracking/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/user/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cdc/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cdp/package.json
- "@angular/core": "^21.2.4",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cds/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cpq-quote/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/digital-payments/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/epd-visualization/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/omf/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/opf/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/opps/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/punchout/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/s4-service/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/s4om/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/segment-refs/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in projects/core/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in projects/schematics/package.json
- "@angular/compiler": "^21.2.4",
+ "@angular/compiler": "^21.2.9",
❌ Invalid peerDependencies change in projects/storefrontlib/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
- "@angular/service-worker": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
+ "@angular/service-worker": "^21.2.9",Please note: Changes to peerDependencies are restricted and only permitted during framework update releases, as they may introduce breaking changes for customer's applications. |
Contributor
Merge Checks Failed |
spartacus
 |
||||||||||||||||||||||||||||||||||||||||
| Project |
spartacus
|
| Branch Review |
fix/CXSPA-12985
|
| Run status |
|
| Run duration | 06m 09s |
| Commit |
|
| Committer | Paweł Fraś |
| View all properties for this run ↗︎ | |
| Test results | |
|---|---|
 |
3
|
 |
0
|
 |
0
|
 |
0
|
 |
98
|
| View all changes introduced in this branch ↗︎ | |
Tests for review
| Test | Artifacts | |
|---|---|---|
| SSR > should render homepage |
Test Replay
Video
|
|
| SSR > should render PLP |
Test Replay
Video
|
|
| SSR > should render PDP |
Test Replay
Video
|
|
Angular 21.2.9's SSRF fix (e0b5078cf2) changed `parseUrl()` in
`ServerPlatformLocation` from `new URL(urlStr, origin)` (two-arg) to a
conditional that only prepends origin when the URL starts with `/`.
URLs without a leading `/` are now assumed to be absolute and passed
directly to `new URL()`, which throws `TypeError: Invalid URL`.
In Spartacus, `SiteContextUrlSerializer.serialize()` produced URLs like
`electronics-spa/en/USD/` (no leading `/`). Combined with
`APP_BASE_HREF` being empty string (from `req.baseUrl` on root-mounted
Express apps), `joinWithSlash('', ...)` passed the URL through without
adding a `/` prefix. This caused `ServerPlatformLocation.replaceState()`
to throw, preventing the app from stabilizing during SSR and falling
back to the CSR shell — breaking all SSR-rendered content including
SEO meta tags.
The fix ensures `urlIncludeContextParameters()` always returns a
leading-slash URL when context parameters are present, which aligns
with Angular's `DefaultUrlSerializer.serialize()` contract.
Contributor
|
🚨 PeerDependencies Change Detected 🚨 Your pull request includes modifications to ❌ Invalid peerDependencies change in core-libs/setup/package.json
- "@angular/core": "^21.2.4",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/asm/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/cart/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/checkout/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/customer-ticketing/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/estimated-delivery-date/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/order/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/organization/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/pdf-invoices/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/pickup-in-store/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product-configurator/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product-multi-dimensional/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/product/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/qualtrics/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/quote/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/requested-delivery-date/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/smartedit/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/storefinder/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/subscription-billing/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/tracking/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in feature-libs/user/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cdc/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cdp/package.json
- "@angular/core": "^21.2.4",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cds/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/cpq-quote/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/digital-payments/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/epd-visualization/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/omf/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/opf/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/opps/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/punchout/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/s4-service/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/s4om/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in integration-libs/segment-refs/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
❌ Invalid peerDependencies change in projects/core/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
❌ Invalid peerDependencies change in projects/schematics/package.json
- "@angular/compiler": "^21.2.4",
+ "@angular/compiler": "^21.2.9",
❌ Invalid peerDependencies change in projects/storefrontlib/package.json
- "@angular/common": "^21.2.4",
- "@angular/core": "^21.2.4",
- "@angular/forms": "^21.2.4",
- "@angular/platform-browser": "^21.2.4",
- "@angular/router": "^21.2.4",
- "@angular/service-worker": "^21.2.4",
+ "@angular/common": "^21.2.9",
+ "@angular/core": "^21.2.9",
+ "@angular/forms": "^21.2.9",
+ "@angular/platform-browser": "^21.2.9",
+ "@angular/router": "^21.2.9",
+ "@angular/service-worker": "^21.2.9",Please note: Changes to peerDependencies are restricted and only permitted during framework update releases, as they may introduce breaking changes for customer's applications. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bump all @angular/* packages from 21.2.4 to 21.2.9 to fix GHSA-45q2-gjvg-7973 (SSRF in @angular/platform-server during SSR).
Angular 21.2.9 changed
setDomTypes()in platform-server to import domino's bundled ESM module (bundled-domino.mjs) and accessdomino.impl. Jest's CJS transform does not properly unwrap the ESM default export for.mjsfiles, causingdomino.implto be undefined and all 21 setup test suites to fail.Fix: add a
moduleNameMapperentry (similar to the existing beasties workaround) that redirectsbundled-domino.mjsto a CJS wrapper which reads the original file, replaces the ESM export withmodule.exports, and compiles it so the default export is correctly resolved.closes CXSPA-12985