[ChiragAgg5k]

Fixes the open Dependabot alerts raised today for undici, plus the matching body-parser advisory.

Changes

• Bump @angular/build, @angular/cli and @angular/ssr to ^21.2.29. That release pins undici 7.30.1, which closes GHSA-2m5v-pch6-74hx, GHSA-4w7w-5xrc-9h26, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm and GHSA-xjj6-f33q-929c.
• body-parser 1.20.8 → 1.20.9 under Karma (GHSA-27r3-jxmh-p828).

Verification

npm ci and npm run build pass with npm 11 / Node 22, and npm audit reports no vulnerabilities.

[hansi-codes]

🟢 Tier S · Ready to merge

The locked install and production build succeed, and npm audit reports no vulnerabilities; the test target has no spec inputs in this repository.

Updates Angular CLI/build tooling to 21.2.29 and refreshes the lockfile’s vulnerable undici and body-parser versions, along with related transitive packages. The Karma-nested body-parser dependency is also updated to 1.20.9.

Verdict	New comments	Fixed	Still open
✅ Approved	0	0	0

📂 Walkthrough · 2

File	Change
package.json	Raises the Angular build and CLI development dependency ranges to 21.2.29.
package-lock.json	Locks the updated Angular packages and patched undici/body-parser versions, plus their refreshed transitive dependencies.

---

_{Reviewed cdc3529 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟢 Tier S · Looks good to merge. Summary