Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 11, 2025

Bumps @angular/platform-browser-dynamic from 20.3.15 to 21.0.4.

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

21.0.4

compiler

Commit Description
perf - f901cc9eb32 chain query creation instructions

compiler-cli

Commit Description
fix - 65297c62011 expand type for native controls with a dynamic type

forms

Commit Description
feat - f254ff4f2e0 expose element on signal forms Field directive
feat - 5880fbc73c6 redo the signal forms metadata API
fix - 55fc677cef4 add signals for dirty, hidden, and pending states in custom controls
fix - cbb10179c80 allow resetting with empty string
fix - bf1c12cd932 memoize reads of child fields in signal forms (#65802)
fix - 6d7475582f9 Reuse key in parent in compat structure

21.0.3

compiler-cli

Commit Description
fix - 5a80a48e96 avoid allocating an object for signals in production mode
fix - 1f1856e897 check that field radio button values are strings

core

Commit Description
fix - 8c3304c766 run animation queue in environment injector context
fix - 4bb085311e unable to inject viewProviders when host directive with providers is present
perf - 609699ae17 tree shake unused dynamic [field] binding instructions (#65599)

forms

Commit Description
feat - 6b4ab876e8 Allows transforms on FormUiControl signals
fix - a5dbd4b382 support dynamic [field] bindings (#65599)

http

Commit Description
fix - 20474d3f0f enable XSRF protection for same-origin absolute URLs

router

Commit Description
fix - 48b89f9fbe handle errors from view transition finished promise

21.0.2

compiler

Commit Description
fix - 78fd159b78 prevent XSS via SVG animation attributeName and MathML/SVG URLs

... (truncated)

Changelog

Sourced from @​angular/platform-browser-dynamic's changelog.

21.0.4 (2025-12-10)

compiler

Commit Type Description
f901cc9eb32 perf chain query creation instructions

compiler-cli

Commit Type Description
65297c62011 fix expand type for native controls with a dynamic type

forms

Commit Type Description
f254ff4f2e0 feat expose element on signal forms Field directive
5880fbc73c6 feat redo the signal forms metadata API
55fc677cef4 fix add signals for dirty, hidden, and pending states in custom controls
cbb10179c80 fix allow resetting with empty string
bf1c12cd932 fix memoize reads of child fields in signal forms (#65802)
6d7475582f9 fix Reuse key in parent in compat structure

21.1.0-next.1 (2025-12-03)

compiler

Commit Type Description
1c6b0704fb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

compiler-cli

Commit Type Description
e30e61b789 fix avoid allocating an object for signals in production mode
6773d3b97d fix check that field radio button values are strings

core

Commit Type Description
d8ab83ca82 fix run animation queue in environment injector context
886cf6c452 fix unable to inject viewProviders when host directive with providers is present

... (truncated)

Commits
  • 8ab0847 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 3bed9f0 build: format md files
  • c357650 refactor(core): Update tests for zoneless by default (#63668)
  • 2fcafb6 build: rename defaults2.bzl to defaults.bzl (#63383)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) from 20.3.15 to 21.0.4.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.0.4/packages/platform-browser-dynamic)

---
updated-dependencies:
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-version: 21.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant