fix(@angular-devkit/build-angular): remove undici from dependencies

This fixes CVE-2025-22150

Closes #30066

Author: alan-agius4

packages/angular_devkit/build_angular/package.json

@@ -61,7 +61,6 @@
     "terser": "5.29.1",
     "tree-kill": "1.2.2",
     "tslib": "2.6.2",
-    "undici": "6.11.1",
     "vite": "~5.4.17",
     "watchpack": "2.4.0",
     "webpack": "5.94.0",

packages/angular_devkit/build_angular/src/builders/dev-server/specs/ssl_spec.ts

@@ -9,6 +9,7 @@
 import { Architect, BuilderRun } from '@angular-devkit/architect';
 import { DevServerBuilderOutput } from '@angular-devkit/build-angular';
 import { tags } from '@angular-devkit/core';
+// eslint-disable-next-line import/no-extraneous-dependencies
 import { Agent, getGlobalDispatcher, setGlobalDispatcher } from 'undici';
 import { createArchitect, host } from '../../../testing/test-utils';
 

packages/angular_devkit/build_angular/src/builders/ssr-dev-server/specs/ssl_spec.ts

@@ -9,6 +9,7 @@
 import { Architect } from '@angular-devkit/architect';
 // eslint-disable-next-line import/no-extraneous-dependencies
 import * as browserSync from 'browser-sync';
+// eslint-disable-next-line import/no-extraneous-dependencies
 import { Agent, getGlobalDispatcher, setGlobalDispatcher } from 'undici';
 import { createArchitect, host } from '../../../testing/test-utils';
 import { SSRDevServerBuilderOutput } from '../index';

packages/angular_devkit/build_angular/src/utils/server-rendering/fetch-patch.ts

@@ -10,7 +10,6 @@ import { lookup as lookupMimeType } from 'mrmime';
 import { readFile } from 'node:fs/promises';
 import { extname } from 'node:path';
 import { workerData } from 'node:worker_threads';
-import { Response, fetch } from 'undici';
 
 /**
  * This is passed as workerData when setting up the worker via the `piscina` package.

yarn.lock

@@ -14782,10 +14782,10 @@ vite@5.0.12:
   optionalDependencies:
     fsevents "~2.3.3"
 
-vite@5.4.16:
-  version "5.4.16"
-  resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.16.tgz#471983257a890ef33f2700cbbbc2134f2d08abf1"
-  integrity sha512-Y5gnfp4NemVfgOTDQAunSD4346fal44L9mszGGY/e+qxsRT5y1sMlS/8tiQ8AFAp+MFgYNSINdfEchJiPm41vQ==
+vite@~5.4.17:
+  version "5.4.17"
+  resolved "https://registry.yarnpkg.com/vite/-/vite-5.4.17.tgz#4bf61dd4cdbf64b0d6661f5dba76954cc81d5082"
+  integrity sha512-5+VqZryDj4wgCs55o9Lp+p8GE78TLVg0lasCH5xFZ4jacZjtqZa6JUw9/p0WeAojaOfncSM6v77InkFPGnvPvg==
   dependencies:
     esbuild "^0.21.3"
     postcss "^8.4.43"