Bump vite and @angular-devkit/build-angular in /nav-app

[dependabot[bot]]

trafficstars

Bumps vite to 5.4.18 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates vite from 5.1.7 to 5.4.18

Release notes

Sourced from vite's releases.

v5.4.18

Please refer to CHANGELOG.md for details.

v5.4.17

Please refer to CHANGELOG.md for details.

v5.4.16

Please refer to CHANGELOG.md for details.

v5.4.15

Please refer to CHANGELOG.md for details.

v5.4.14

Please refer to CHANGELOG.md for details.

v5.4.13

Please refer to CHANGELOG.md for details.

v5.4.12

This version contains a breaking change due to security fixes. See https://github.com/vitejs/vite/security/advisories/GHSA-vg6x-rcgg-rjx6 for more details.

Please refer to CHANGELOG.md for details.

v5.4.11

Please refer to CHANGELOG.md for details.

v5.4.10

Please refer to CHANGELOG.md for details.

v5.4.9

Please refer to CHANGELOG.md for details.

v5.4.8

Please refer to CHANGELOG.md for details.

v5.4.7

Please refer to CHANGELOG.md for details.

v5.4.6

Please refer to CHANGELOG.md for details.

v5.4.5

Please refer to CHANGELOG.md for details.

v5.4.4

Please refer to CHANGELOG.md for details.

v5.4.3

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

5.4.18 (2025-04-10)

• fix: backport #19830, reject requests with # in request-target (#19831) (823675b), closes #19830 #19831

5.4.17 (2025-04-03)

• fix: backport #19782, fs check with svg and relative paths (#19784) (84b2b46), closes #19782 #19784

5.4.16 (2025-03-31)

• fix: backport #19761, fs check in transform middleware (#19762) (b627c50), closes #19761 #19762

5.4.15 (2025-03-24)

• fix: backport #19702, fs raw query with query separators (#19703) (807d7f0), closes #19702 #19703

5.4.14 (2025-01-21)

• fix: preview.allowedHosts with specific values was not respected (#19246) (9df6e6b), closes #19246
• fix: allow CORS from loopback addresses by default (#19249) (7d1699c), closes #19249

5.4.13 (2025-01-20)

• fix: try parse server.origin URL (#19241) (5946215), closes #19241

5.4.12 (2025-01-20)

• fix!: check host header to prevent DNS rebinding attacks and introduce server.allowedHosts (9da4abc)
• fix!: default server.cors: false to disallow fetching from untrusted origins (dfea38f)
• fix: verify token for HMR WebSocket connection (b71a5c8)
• chore: add deps update changelog (ecd2375)

5.4.11 (2024-11-11)

• fix(deps): update dependencies of postcss-modules (ceb15db), closes #18617

... (truncated)

Commits

• 731b77d release: v5.4.18
• 823675b fix: backport #19830, reject requests with # in request-target (#19831)
• 0a2518a release: v5.4.17
• 84b2b46 fix: backport #19782, fs check with svg and relative paths (#19784)
• 712cb71 release: v5.4.16
• b627c50 fix: backport #19761, fs check in transform middleware (#19762)
• 9b0f4c8 release: v5.4.15
• 807d7f0 fix: backport #19702, fs raw query with query separators (#19703)
• e7eb3c5 release: v5.4.14
• 7d1699c fix: allow CORS from loopback addresses by default (#19249)
• Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 17.3.8 to 17.3.16

Release notes

Sourced from @​angular-devkit/build-angular's releases.

17.3.16

@​angular-devkit/build-angular

Commit	Description
	remove undici from dependencies
	update vite to 5.4.17

17.3.15

@​angular-devkit/build-angular

Commit	Description
	update vite to 5.4.16 due to a security issues

17.3.14

@​angular-devkit/build-angular

Commit	Description
	update vite to 5.4.15

v17.3.13

17.3.13 (2025-03-13)

@​angular-devkit/build-angular

Commit	Description
	update babel packages

v17.3.12

17.3.12 (2025-02-12)

@​angular-devkit/build-angular

Commit	Description
	update vite to version 5.4.14

v17.3.11

17.3.11 (2024-10-23)

@​angular-devkit/build-angular

Commit	Description
	update http-proxy-middleware to 2.0.7

v17.3.10

17.3.10 (2024-09-25)

@​angular-devkit/build-angular

Commit	Description
	update vite to 5.1.8

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

17.3.16 (2025-04-09)

@​angular-devkit/build-angular

Commit	Type	Description
5aa53b40c	fix	remove undici from dependencies
fce61564d	fix	update vite to 5.4.17

20.0.0-next.4 (2025-04-02)

@​schematics/angular

Commit	Type	Description
1e137ca84	feat	add migration to update moduleResolution to bundler

@​angular-devkit/schematics

Commit	Type	Description
4955ee0aa	fix	properly resolve relative schematics when executed from a nested directory

@​angular/build

Commit	Type	Description
d067cedf0	feat	support custom resolution conditions with applications
8a89438be	fix	correctly handle false value in server option
52fbffcd7	fix	warn and remove jsdom launcher when used with karma

19.2.6 (2025-04-02)

@​angular-devkit/schematics

Commit	Type	Description
e5aec562f	fix	properly resolve relative schematics when executed from a nested directory

@​angular/build

| Commit | Type | Description |

... (truncated)

Commits

• 1fc7a99 release: cut the v17.3.16 release
• 5aa53b4 fix(@​angular-devkit/build-angular): remove undici from dependencies
• b0935e0 ci: update angular dev-infra packages
• fce6156 fix(@​angular-devkit/build-angular): update vite to 5.4.17
• 05ebe68 release: cut the v17.3.15 release
• 0525fec fix(@​angular-devkit/build-angular): update vite to 5.4.16 due to a security i...
• c52d751 release: cut the v17.3.14 release
• cb8f859 fix(@​angular-devkit/build-angular): update vite to 5.4.15
• a4d473e release: cut the v17.3.13 release
• c8e0041 build: configure Bazel to ignore packages/angular/build/node_modules
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.