[DEP0190] DeprecationWarning in @angular-devkit/build-angular ssr-dev-server #32369
Description
Command
run
Is this a regression?
- Yes, this behavior used to work in the previous version
The previous version in which this bug was not present was
No response
Description
Running ng run app:serve-ssr on Node 24 triggers DEP0190 deprecation warning.
The previous fix in #30933 addressed @angular/cli package-manager.js, but the same issue exists in ssr-dev-server/utils.js line 34.
Minimal Reproduction
ng run app:serve-ssr
Exception or Error
(node:26856) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
at normalizeSpawnArguments (node:child_process:644:15)
at spawn (node:child_process:789:13)
at Observable._subscribe (...\node_modules\@angular-devkit\build-angular\src\builders\ssr-dev-server\utils.js:34:53)
Your Environment
Angular CLI: 21.1.1
@angular-devkit/build-angular: 21.1.0
Node: 24.13.0
Package Manager: npm 11.8.0
OS: Windows
Anything else relevant?
Thank you for your great efforts!