Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2025

Bumps @angular/compiler, @angular/common, @angular/core, @angular/forms, @angular/localize and @angular/platform-browser-dynamic. These dependencies needed to be updated together.
Updates @angular/compiler from 20.3.12 to 20.3.15

Release notes

Sourced from @​angular/compiler's releases.

20.3.15

compiler

Commit Description
fix - d1ca8ae043 prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.14

http

Commit Description
fix - 0276479e7d prevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

Changelog

Sourced from @​angular/compiler's changelog.

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
a03c82564d feat Add scroll behavior controls on router navigation

... (truncated)

Commits
  • d1ca8ae fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
  • See full diff in compare view

Updates @angular/common from 20.3.12 to 20.3.15

Release notes

Sourced from @​angular/common's releases.

20.3.15

compiler

Commit Description
fix - d1ca8ae043 prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.14

http

Commit Description
fix - 0276479e7d prevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

Changelog

Sourced from @​angular/common's changelog.

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
a03c82564d feat Add scroll behavior controls on router navigation

... (truncated)

Commits
  • 0276479 fix(http): prevent XSRF token leakage to protocol-relative URLs
  • See full diff in compare view

Updates @angular/core from 20.3.12 to 20.3.15

Release notes

Sourced from @​angular/core's releases.

20.3.15

compiler

Commit Description
fix - d1ca8ae043 prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.14

http

Commit Description
fix - 0276479e7d prevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

Changelog

Sourced from @​angular/core's changelog.

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
a03c82564d feat Add scroll behavior controls on router navigation

... (truncated)

Commits
  • d1ca8ae fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
  • 820bb39 Revert "refactor(core): let the profiler handle asymmetric events leniently"
  • 2dccdcd Revert "fix(core): notify profiler events in case of errors"
  • a966ff1 refactor(core): let the profiler handle asymmetric events leniently
  • 52cf658 fix(core): notify profiler events in case of errors
  • daae263 docs: Adds links to relevant guides for APIs in core package
  • d10f110 docs: add documentation for HostAttributeToken
  • 2c3691d docs: add documentation for DOCUMENT injection token usage in SSR
  • See full diff in compare view

Updates @angular/forms from 20.3.12 to 20.3.15

Release notes

Sourced from @​angular/forms's releases.

20.3.15

compiler

Commit Description
fix - d1ca8ae043 prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.14

http

Commit Description
fix - 0276479e7d prevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

Changelog

Sourced from @​angular/forms's changelog.

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
a03c82564d feat Add scroll behavior controls on router navigation

... (truncated)

Commits

Updates @angular/localize from 20.3.12 to 20.3.15

Release notes

Sourced from @​angular/localize's releases.

20.3.15

compiler

Commit Description
fix - d1ca8ae043 prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.14

http

Commit Description
fix - 0276479e7d prevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

Changelog

Sourced from @​angular/localize's changelog.

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
a03c82564d feat Add scroll behavior controls on router navigation

... (truncated)

Commits
  • 4755bbd release: cut the v20.3.15 release
  • d1ca8ae fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
  • 136e923 release: cut the v20.3.14 release
  • 0276479 fix(http): prevent XSRF token leakage to protocol-relative URLs
  • edcbe22 release: cut the v20.3.13 release
  • 24c999a fix(docs-infra): add moduleResolution to TypeScript compiler options for play...
  • 96a8d58 fix(docs-infra): add install in pnpm
  • 330e046 docs: fix docs heading alignment
  • 5aea52a docs: format examples with replacing <docs-code> typescript examples with fen...
  • 3686987 docs: simplify docs-code header by removing paths and keeping only file name ...
  • Additional commits viewable in compare view

Updates @angular/platform-browser-dynamic from 20.3.12 to 20.3.15

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

20.3.15

compiler

Commit Description
fix - d1ca8ae043 prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.14

http

Commit Description
fix - 0276479e7d prevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

Changelog

Sourced from @​angular/platform-browser-dynamic's changelog.

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

Commit Type Description
ec9dc94cee feat add context to createApplication
ab67988d2e feat resolve JIT resources in createApplication

router

Commit Type Description
a03c82564d feat Add scroll behavior controls on router navigation

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…@angular/forms, @angular/localize and @angular/platform-browser-dynamic

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler), [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core), [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms), [@angular/localize](https://github.com/angular/angular) and [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic). These dependencies needed to be updated together.

Updates `@angular/compiler` from 20.3.12 to 20.3.15
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/20.3.15/packages/compiler)

Updates `@angular/common` from 20.3.12 to 20.3.15
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/20.3.15/packages/common)

Updates `@angular/core` from 20.3.12 to 20.3.15
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/20.3.15/packages/core)

Updates `@angular/forms` from 20.3.12 to 20.3.15
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/20.3.15/packages/forms)

Updates `@angular/localize` from 20.3.12 to 20.3.15
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](angular/angular@20.3.12...20.3.15)

Updates `@angular/platform-browser-dynamic` from 20.3.12 to 20.3.15
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/20.3.15/packages/platform-browser-dynamic)

---
updated-dependencies:
- dependency-name: "@angular/compiler"
  dependency-version: 20.3.15
  dependency-type: indirect
- dependency-name: "@angular/common"
  dependency-version: 20.3.15
  dependency-type: indirect
- dependency-name: "@angular/core"
  dependency-version: 20.3.15
  dependency-type: indirect
- dependency-name: "@angular/forms"
  dependency-version: 20.3.15
  dependency-type: indirect
- dependency-name: "@angular/localize"
  dependency-version: 20.3.15
  dependency-type: indirect
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-version: 20.3.15
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 5, 2025
@dependabot dependabot bot requested a review from jmacura as a code owner December 5, 2025 06:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant