From c76d5f9731ab35531ee2498b0184fbfa1e3b53cb Mon Sep 17 00:00:00 2001 From: Alex Sorafumo Date: Mon, 12 Oct 2026 16:10:59 +1100 Subject: [PATCH] fix(mobile): update Capacitor to 8.5.3 Capacitor 8.0.0 to 8.3.4 lets a link inside the app load remote content at the app origin through the internal HTTP proxy path (GHSA-rvm3-566m-v7fv). That range has no patch release. Update @capacitor/core, cli, android and ios to 8.5.3, and the core version in the generated native workspace. --- bun.lock | 18 ++++++++---------- package.json | 8 ++++---- tools/capacitor/prepare.mjs | 2 +- 3 files changed, 13 insertions(+), 15 deletions(-) diff --git a/bun.lock b/bun.lock index 23afd71b89b..eb37819948b 100644 --- a/bun.lock +++ b/bun.lock @@ -17,7 +17,7 @@ "@angular/router": "22.1.5", "@angular/service-worker": "22.1.5", "@azure/msal-browser": "^5.23.0", - "@capacitor/core": "8.2.0", + "@capacitor/core": "8.5.3", "@microsoft/teams-js": "^2.57.0", "@nx/angular": "23.3.0", "@sentry/cli": "^2.28.6", @@ -36,12 +36,12 @@ "@angular/compiler-cli": "22.1.5", "@angular/language-service": "22.1.5", "@angular/pwa": "22.1.7", - "@capacitor/android": "8.2.0", + "@capacitor/android": "8.5.3", "@capacitor/app": "8.1.0", "@capacitor/assets": "3.0.5", "@capacitor/browser": "8.0.3", - "@capacitor/cli": "8.2.0", - "@capacitor/ios": "8.2.0", + "@capacitor/cli": "8.5.3", + "@capacitor/ios": "8.5.3", "@capacitor/status-bar": "8.0.2", "@capawesome/capacitor-managed-configurations": "8.0.1", "@capgo/capacitor-intune": "8.1.2", @@ -418,7 +418,7 @@ "@bufbuild/protobuf": ["@bufbuild/protobuf@2.12.0", "", {}, "sha512-B/XlCaFIP8LOwzo+bz5uFzATYokcwCKQcghqnlfwSmM5eX/qTkvDBnDPs+gXtX/RyjxJ4DRikECcPJbyALA8FA=="], - "@capacitor/android": ["@capacitor/android@8.2.0", "", { "peerDependencies": { "@capacitor/core": "^8.2.0" } }, "sha512-XLm5OsWLPfXQxDxzFS7SOdMEgGvW+2c7TGLXkTR2cSKdkWK5Abns4imlT5qghKYhjM9r74IrDkBWg/9ALUGNKQ=="], + "@capacitor/android": ["@capacitor/android@8.5.3", "", { "peerDependencies": { "@capacitor/core": "^8.5.0" } }, "sha512-ilH4gSSz3DrketMkzDVAvY9JsWJ//rCQnECLTdcFRO7xXDogwAbUvQAnIAbiqefwV/D1xfjEL4Gw1MJXEcaA9g=="], "@capacitor/app": ["@capacitor/app@8.1.0", "", { "peerDependencies": { "@capacitor/core": ">=8.0.0" } }, "sha512-MlmttTOWHDedr/G4SrhNRxsXMqY+R75S4MM4eIgzsgCzOYhb/MpCkA5Q3nuOCfL1oHm26xjUzqZ5aupbOwdfYg=="], @@ -426,11 +426,11 @@ "@capacitor/browser": ["@capacitor/browser@8.0.3", "", { "peerDependencies": { "@capacitor/core": ">=8.0.0" } }, "sha512-WJWPHEPbweiFoHYmVlCbZf5yrqJ2Rchx2Xvbmd+3Lf+Zkpq3nXBThThY2CF69lYEg1NINGF9BcHThIOEU1gZlQ=="], - "@capacitor/cli": ["@capacitor/cli@8.2.0", "", { "dependencies": { "@ionic/cli-framework-output": "^2.2.8", "@ionic/utils-subprocess": "^3.0.1", "@ionic/utils-terminal": "^2.3.5", "commander": "^12.1.0", "debug": "^4.4.0", "env-paths": "^2.2.0", "fs-extra": "^11.2.0", "kleur": "^4.1.5", "native-run": "^2.0.3", "open": "^8.4.0", "plist": "^3.1.0", "prompts": "^2.4.2", "rimraf": "^6.0.1", "semver": "^7.6.3", "tar": "^7.5.3", "tslib": "^2.8.1", "xml2js": "^0.6.2" }, "bin": { "cap": "bin/capacitor", "capacitor": "bin/capacitor" } }, "sha512-1cMEk0d/I6tl1U+v/lnJR5Oylpx8ZBIHrvQxD5zK0MkjYOUyQAAGJgh97rkhGJqjAUvrGpa8H4BmyhNQN9a17A=="], + "@capacitor/cli": ["@capacitor/cli@8.5.3", "", { "dependencies": { "@ionic/cli-framework-output": "^2.2.8", "@ionic/utils-subprocess": "^3.0.1", "@ionic/utils-terminal": "^2.3.5", "commander": "^12.1.0", "debug": "^4.4.0", "env-paths": "^2.2.0", "fs-extra": "^11.2.0", "kleur": "^4.1.5", "native-run": "^2.0.3", "open": "^8.4.0", "plist": "^3.1.0", "prompts": "^2.4.2", "rimraf": "^6.0.1", "semver": "^7.6.3", "tar": "^7.5.3", "tslib": "^2.8.1", "xcode": "^3.0.1", "xml2js": "^0.6.2" }, "bin": { "cap": "bin/capacitor", "capacitor": "bin/capacitor" } }, "sha512-/G6xwna+p4GS3lthSdWN3OThCH2F85O0Ukdy8rv3oAXvgEMeyFgPEIA3PMAS++IkHwUuBYBAKOQJnZfcrh1n0w=="], - "@capacitor/core": ["@capacitor/core@8.2.0", "", { "dependencies": { "tslib": "^2.1.0" } }, "sha512-oKaoNeNtH2iIZMDFVrb1atoyRECDGHcfLMunJ5KWN8DtvpVBeeA4c41e20NTuhMxw1cSYbpq2PV2hb+/9CJxlQ=="], + "@capacitor/core": ["@capacitor/core@8.5.3", "", { "dependencies": { "tslib": "^2.1.0" } }, "sha512-oBE1oGuYE4ZzYYrulC75OuHdSsD6zLUy7d5o1tFwDLG4govGoubY15cxpiI5l0+q87Lm5p0bhbehMdzJg4aFag=="], - "@capacitor/ios": ["@capacitor/ios@8.2.0", "", { "peerDependencies": { "@capacitor/core": "^8.2.0" } }, "sha512-X2/VtM4qP/R1SM0VQ5W/VotEc6PS/KTooD33EijsfAHWBdee+xmBapW8SeNLnu16wJ+tsfWlvtipaJEyfKbRKQ=="], + "@capacitor/ios": ["@capacitor/ios@8.5.3", "", { "peerDependencies": { "@capacitor/core": "^8.5.0" } }, "sha512-HnnV92Jl8+3x0JUloXUMjFcUsQI8wHFVsKwkLn72DfRZXYGZW11tQbmNOWOnRTljaU18FdI1b9ipT09SzzPDNw=="], "@capacitor/status-bar": ["@capacitor/status-bar@8.0.2", "", { "peerDependencies": { "@capacitor/core": ">=8.0.0" } }, "sha512-WXs8YB8B9eEaPZz+bcdY6t2nForF1FLoj/JU0Dl9RRgQnddnS98FEEyDooQhaY7wivr000j4+SC1FyeJkrFO7A=="], @@ -3404,8 +3404,6 @@ "@capacitor/cli/fs-extra": ["fs-extra@11.3.4", "", { "dependencies": { "graceful-fs": "^4.2.0", "jsonfile": "^6.0.1", "universalify": "^2.0.0" } }, "sha512-CTXd6rk/M3/ULNQj8FBqBWHYBVYybQ3VPBw0xGKFe3tuH7ytT6ACnvzpIQ3UZtB8yvUKC2cXn1a+x+5EVQLovA=="], - "@capacitor/cli/semver": ["semver@7.7.4", "", { "bin": "bin/semver.js" }, "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA=="], - "@clack/core/fast-wrap-ansi": ["fast-wrap-ansi@0.2.2", "", { "dependencies": { "fast-string-width": "^3.0.2" } }, "sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q=="], "@clack/prompts/fast-wrap-ansi": ["fast-wrap-ansi@0.2.2", "", { "dependencies": { "fast-string-width": "^3.0.2" } }, "sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q=="], diff --git a/package.json b/package.json index 4891cf98c20..028130e8c90 100644 --- a/package.json +++ b/package.json @@ -70,7 +70,7 @@ "@angular/router": "22.1.5", "@angular/service-worker": "22.1.5", "@azure/msal-browser": "^5.23.0", - "@capacitor/core": "8.2.0", + "@capacitor/core": "8.5.3", "@microsoft/teams-js": "^2.57.0", "@nx/angular": "23.3.0", "@sentry/cli": "^2.28.6", @@ -89,12 +89,12 @@ "@angular/compiler-cli": "22.1.5", "@angular/language-service": "22.1.5", "@angular/pwa": "22.1.7", - "@capacitor/android": "8.2.0", + "@capacitor/android": "8.5.3", "@capacitor/app": "8.1.0", "@capacitor/assets": "3.0.5", "@capacitor/browser": "8.0.3", - "@capacitor/cli": "8.2.0", - "@capacitor/ios": "8.2.0", + "@capacitor/cli": "8.5.3", + "@capacitor/ios": "8.5.3", "@capacitor/status-bar": "8.0.2", "@capawesome/capacitor-managed-configurations": "8.0.1", "@capgo/capacitor-intune": "8.1.2", diff --git a/tools/capacitor/prepare.mjs b/tools/capacitor/prepare.mjs index 6eb43ea1b3b..815c0c91aca 100644 --- a/tools/capacitor/prepare.mjs +++ b/tools/capacitor/prepare.mjs @@ -51,7 +51,7 @@ export async function ensureWorkspace(app_name) { private: true, type: 'module', dependencies: { - '@capacitor/core': '8.2.0', + '@capacitor/core': '8.5.3', '@capacitor/app': '8.1.0', '@capacitor/browser': '8.0.3', '@capacitor/status-bar': '8.0.2',