[dependabot]

Bumps vite to 7.3.7 and updates ancestor dependency @angular/build. These dependencies need to be updated together.

Updates vite from 7.3.6 to 7.3.7

Release notes

Sourced from vite's releases.

v7.3.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.7 (2026-10-06)

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (a0a3339)
• html: filename passed to transformIndexHtml should not include queries (#23653) (8d479f9)
• server: store ids to safeModulePaths rather than URLs (#23656) (f0d76c7)

Commits

• 284f6b5 release: v7.3.7
• f0d76c7 fix(server): store ids to safeModulePaths rather than URLs (#23656)
• a0a3339 fix(deps): update launch-editor to v2.14.2 (#23654)
• 8d479f9 fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Updates @angular/build from 20.3.4 to 22.2.3

Release notes

Sourced from @​angular/build's releases.

22.2.3

@​schematics/angular

Commit	Description
	keep the workspace build version in the use-application-builder migration

@​angular/cli

Commit	Description
	accept multi-digit array indices in ng config
	keep ng version working when the package manager is not installed
	resolve package name in npm workspace members

@​angular-devkit/schematics

Commit	Description
	avoid stack overflow when chaining many rules

@​angular/build

Commit	Description
	add CSP nonce to stylesheet and modulepreload link elements
	always use AOT when extracting i18n messages
	coalesce external watcher directories to avoid macOS FSEvents limit
	disable Vitest fsModuleCache in unit-test builder
	ensure Sass importers return global Promise instances
	keep Vite server file watcher disabled in Vitest watch mode
	sort discovered unit-test files for deterministic builds
	use module.registerHooks() for in-memory ESM loader
	avoid invalidating Angular diagnostic cache on stylesheet change
	resolve asset patterns concurrently with bounded concurrency

@​angular/ssr

Commit	Description
	preserve preload metadata for nested empty-path routes
	preserve query parameters on relative route redirects
	resolve relative redirects against the parent route

22.2.2

@​angular-devkit/build-angular

Commit	Description
	preserve Host header when proxying in ssr-dev-server

@​angular/build

Commit	Description
	keep the order of glob entries in the proxy configuration
	support a string context in array-form proxy configurations

22.2.1

@​angular-devkit/schematics-cli

Commit	Description

... (truncated)

Changelog

Sourced from @​angular/build's changelog.

22.2.3 (2026-10-15)

@​angular/cli

Commit	Type	Description
3158e865f	fix	accept multi-digit array indices in ng config
bcff0e76a	fix	keep ng version working when the package manager is not installed
5570c91d2	fix	resolve package name in npm workspace members

@​schematics/angular

Commit	Type	Description
881865f36	fix	keep the workspace build version in the use-application-builder migration

@​angular-devkit/schematics

Commit	Type	Description
cf1f3b9d4	fix	avoid stack overflow when chaining many rules

@​angular/build

Commit	Type	Description
1d477d6bc	fix	add CSP nonce to stylesheet and modulepreload link elements
fbe208f83	fix	always use AOT when extracting i18n messages
c1c4216a6	fix	coalesce external watcher directories to avoid macOS FSEvents limit
792990bc2	fix	disable Vitest fsModuleCache in unit-test builder
82439399c	fix	ensure Sass importers return global Promise instances
a818de415	fix	keep Vite server file watcher disabled in Vitest watch mode
91bad469e	fix	sort discovered unit-test files for deterministic builds
e84db4af7	fix	use module.registerHooks() for in-memory ESM loader
a428021b7	perf	avoid invalidating Angular diagnostic cache on stylesheet change
b0ac394a0	perf	resolve asset patterns concurrently with bounded concurrency

@​angular/ssr

Commit	Type	Description
bd09b98fc	fix	preserve preload metadata for nested empty-path routes
a92546892	fix	preserve query parameters on relative route redirects
a2b86cc94	fix	resolve relative redirects against the parent route

21.2.27 (2026-10-14)

... (truncated)

Commits

• afa3814 release: cut the v22.2.3 release
• cc05ecf build: update pnpm to v12.11.2
• c1c4216 fix(@​angular/build): coalesce external watcher directories to avoid macOS FSE...
• 116cb93 build: update cross-repo angular dependencies
• e84db4a fix(@​angular/build): use module.registerHooks() for in-memory ESM loader
• cf1f3b9 fix(@​angular-devkit/schematics): avoid stack overflow when chaining many rules
• 91bad46 fix(@​angular/build): sort discovered unit-test files for deterministic builds
• bd09b98 fix(@​angular/ssr): preserve preload metadata for nested empty-path routes
• 9313776 build: lock file maintenance
• c0b6659 build: update dependency zod to v4.6.6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.