I'm submitting a ...
Current behavior:
The latest versions of AngularJS, 1.7.3 and 1.7.4, are unavailable on Google and CDNJS CDN.
Expected / new behavior:
The latest versions of AngularJS, 1.7.3 and 1.7.4, should be available on CDN.
Minimal reproduction of the problem with instructions:
Visiting these URLs results in a 404:
https://ajax.googleapis.com/ajax/libs/angularjs/1.7.3/angular.min.js
https://ajax.googleapis.com/ajax/libs/angularjs/1.7.4/angular.min.js
The listing on CDNJS also does not have the latest versions available when visiting this page:
https://cdnjs.com/libraries/angular.js/
AngularJS version: 1.7.3 - 1.7.4
Browser: all
We'll try to get the latest versions to Google CDN as soon as possible but CDN JS is outside our control. I'm not sure how they get updated.
CdnJs issue. https://github.com/cdnjs/cdnjs/issues/12937
We have Googlers working on getting the releases onto the Google CDN.
Copies in Google CDN seem to be live already.
https://ajax.googleapis.com/ajax/libs/angularjs/1.7.3/angular.min.js
https://ajax.googleapis.com/ajax/libs/angularjs/1.7.4/angular.min.js
Btw why is angular.min.js pretty printed on 1.7.3 and 1.7.4?
hmm, the versions here are correct:
Ouch, that's not good. Having the same version differ between CDNs kills security features like Subresource Integrity. :/ Do we send different files to the Google CDN than what's put on https://code.angularjs.org?
Given that Google CDN uses 1y cache-control headers maybe it is better to release 1.7.5 as a bugfix to the now SRI-broken 1.7.3 and 1.7.4 releases?
$ lynx -head -source https://ajax.googleapis.com/ajax/libs/angularjs/1.7.4/angular.min.js | grep Cache-Control
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
You are probably right, but we need to find out what went wrong with the CDN push before we do that.
I've just looked into this and I see that the code got reformatted via an automatic pre-submit hook in the internal code repo. We'll need a new patch version that we can publish without the auto-formatting to fix this. Sorry about the confusion.
1.7.5 is now on Google CDN, properly minified