javascriptangular/angular-cli #33470Not a task: not reproduced

Backport vite security bump from 7.3.5 to 7.3.6 for esbuild vulnerability 0.27 vulnerability fix.

envgap__angular__angular-cli-33470

Original GitHub issue ↗Dated source checkout ↗Opened 2026-06-26

01 / FAILURE SIGNATURE

As reported upstream

No identifying execution failure has been captured.

Not a benchmark task.

In a clean container the reported failure did not reproduce, or the known fix did not make the project run.

02 / ENVIRONMENT RECIPE

Base commit: 61a810ab615d1a26fc69f9e48be7cc6555a9c430
Manifest: packages/angular/build/package.json
Reproduce: Awaiting issue-specific recipe
Run under trace: Awaiting a meaningful runtime command

03 / ORIGINAL ISSUE TEXT

angular/angular-cli #33470 · read the original issue

### Command

build

### Description

Description
The current vite requirement for Angular 21.2.17 is 7.3.5. It is restricted to esbuild 0.27. Vite 7.3.6 has the fix.
https://github.com/vitejs/vite/blob/v7.3.6/packages/vite/CHANGELOG.md

@angular/build
@angular/security

### Describe the solution you'd like

Upgrade vite from 7.3.5 to 7.3.6

### Describe alternatives you've considered

_No response_

Continue on GitHub ↗

04 / LABELS

Labels from the report text only; not yet run

No supported category has been assigned.

Label rules and the text that matched

[]