Skip to content

chore(deps): update angular to v21.2.14#1610

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/angular
Open

chore(deps): update angular to v21.2.14#1610
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/angular

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 19, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@angular-devkit/build-angular 21.2.721.2.14 age confidence
@angular/animations (source) 21.2.821.2.16 age confidence
@angular/cli 21.2.721.2.14 age confidence
@angular/common (source) 21.2.821.2.16 age confidence
@angular/compiler (source) 21.2.821.2.16 age confidence
@angular/compiler-cli (source) 21.2.821.2.16 age confidence
@angular/core (source) 21.2.821.2.16 age confidence
@angular/forms (source) 21.2.821.2.16 age confidence
@angular/platform-browser (source) 21.2.821.2.16 age confidence
@angular/platform-browser-dynamic (source) 21.2.821.2.16 age confidence
@angular/platform-server (source) 21.2.821.2.16 age confidence
@angular/router (source) 21.2.821.2.16 age confidence

Release Notes

angular/angular-cli (@​angular-devkit/build-angular)

v21.2.14

Compare Source

@​angular/cli
Commit Type Description
aed448748 fix expand package groups for newly added peer dependencies in update schematic
@​angular/build
Commit Type Description
d46c082fb fix prevent esbuild service child process leakage

v21.2.13

Compare Source

@​angular-devkit/build-angular
Commit Type Description
3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server
@​angular/build
Commit Type Description
2b3e95517 fix assert that asset input paths are within workspace root

v21.2.12

Compare Source

@​angular/build
Commit Type Description
cbad57579 fix ignore virtual esbuild paths with (disabled):

v21.2.11

Compare Source

@​angular/cli
Commit Type Description
bbd63b7a5 fix robustly parse npm manifest from array
@​angular/ssr
Commit Type Description
eafe1a719 fix allow all hosts in common engine rendering options to prevent validation errors
7a116a80d fix remove stateful flag from URL_PARAMETER_REGEXP

v21.2.10

Compare Source

@​angular/cli
Commit Type Description
bb8611913 fix restrict MCP workspace access to allowed client roots during resolution

v21.2.9

Compare Source

@​angular/cli
Commit Type Description
233deef01 fix fix broken img ref in ai-tutor
7cea9885c fix introduce initial package manager workspace awareness
5b1a5b743 fix remove standalone true ref in ai tutor
@​schematics/angular
Commit Type Description
e7abeb5c7 fix add missing imports for focus and skip APIs in refactor-jasmine-vitest
@​angular/ssr
Commit Type Description
94023f62c fix introduce trustProxyHeaders option to safely validate and sanitize proxy headers
5ffe5c309 fix add support for configuring trusted proxy headers via environment variable
930ada9b7 fix decode route segments when building and matching route tree
0dc8a440c fix use router to normalize URLs for comparison

v21.2.8: 21.2.8

Compare Source

@​angular/cli
Commit Description
fix - e91280c05 dynamically resolve project Angular CLI executable inside MCP tools
fix - 01af6741b ignore EBADF file system errors during MCP project scan
fix - f7a3e6ed8 use headless option in MCP test tool
@​angular-devkit/build-angular
Commit Description
fix - 00336c037 ensure route has leading slash in prerender builder
fix - e87d302d6 fix app-shell route format and
@​angular/build
Commit Description
fix - c93140a54 use rootDir for HMR component updates path resolution
fix - 6df2b1488 validate V8 coverage support for browsers in Vitest
angular/angular (@​angular/animations)

v21.2.16

Compare Source

v21.2.15

Compare Source

common
Commit Type Description
7f4ac78994 fix add upper bounds for digitsInfo
300f61feb3 fix sanitize placeholder
compiler
Commit Type Description
0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#​68925)
eb1cbbf2eb fix prevent namespaced SVG <style> elements from being stripped
cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#​68925)
782e01594e fix strip namespaced SVG script elements during template compilation (#​68925)
core
Commit Type Description
ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#​68925)
e6fe77cc97 fix sanitize meta selectors
daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#​68925)
dada86e43d fix synchronize core sanitization schema with compiler (#​68925)
http
Commit Type Description
582a417bd2 fix exclude withCredentials requests from transfer cache
5c6d6df34b fix skip TransferCache for cookie-bearing requests by default
platform-server
Commit Type Description
37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient
72696e244e fix secure location and document initialization against SSRF and path hijack
service-worker
Commit Type Description
b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests
ca32fc1000 fix Preserves HTTP cache mode in asset group requests

v21.2.14

Compare Source

compiler
Commit Type Description
68282dff9f fix strip namespaced SVG script elements during template compilation
core
Commit Type Description
c0f52272ed fix do not insert todo when migrating void @​Output
938a7f3edd fix makes resource URL sanitizer lookup case-insensitive
0fb2724194 fix reject script element as a dynamic component host
49113ac0ef fix visit ICU expressions in signal migration schematics
router
Commit Type Description
099bf577ee fix skip scroll-to-top on initial navigation when hydrating

v21.2.13

Compare Source

core
Commit Type Description
1c6553e97d fix disallow event attribute bindings in host bindings unconditionally
platform-server
Commit Type Description
629905d537 fix add allowedHosts option to renderModule and renderApplication
0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

v21.2.12

Compare Source

core
Commit Type Description
fe13bb669d fix allow explicit read generic with signal input transforms
3430251fef fix i18n flags leaking on errors
1aeebbe304 fix respect ngSkipHydration on components with projectable nodes in LContainers
9e38ed7d57 fix sanitizer typings
7a05a9a71a fix validate security-sensitive attributes in i18n bindings
c37f6ca42f fix visit ng-let expression value in signal migration schematics
forms
Commit Type Description
03ad53863b fix prohibit concurrent submits in signal forms

v21.2.11

Compare Source

common
Commit Type Description
10ad3c0692 fix prevent focus from scrollToAnchor
compiler
Commit Type Description
4f5d8a2c0b fix let declaration span not including end character
core
Commit Type Description
a40e2cebc8 fix fix ordering of view queries metadata in JIT mode
885a1a1d97 fix guard against non-object events and avoid listener wrapper identity mismatch
7a64aff9b5 fix prevent event replay double-invocation when element hydrates before app stability
platform-server
Commit Type Description
be1f80a253 fix ensure origin has a trailing slash when parsing url

v21.2.10

Compare Source

docs
Commit Type Description
0d5ee9ae1b fix link formatting in "Animating your Application with CSS"
migrations
Commit Type Description
5533ab4f56 fix fix NgClass leaving trailing comma after removal
router
Commit Type Description
580212c995 fix restore internal URL on popstate when browserUrl is used

v21.2.9

Compare Source

core
Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing
http
Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context
platform-server
Commit Type Description
e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs
router
Commit Type Description
684e9fd53d fix normalize multiple leading slashes in URL parser
angular/angular (@​angular/common)

v21.2.16

Compare Source

v21.2.15

Compare Source

common
Commit Type Description
7f4ac78994 fix add upper bounds for digitsInfo
300f61feb3 fix sanitize placeholder
compiler
Commit Type Description
0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#​68925)
eb1cbbf2eb fix prevent namespaced SVG <style> elements from being stripped
cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#​68925)
782e01594e fix strip namespaced SVG script elements during template compilation (#​68925)
core
Commit Type Description
ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#​68925)
e6fe77cc97 fix sanitize meta selectors
daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#​68925)
dada86e43d fix synchronize core sanitization schema with compiler (#​68925)
http
Commit Type Description
582a417bd2 fix exclude withCredentials requests from transfer cache
5c6d6df34b fix skip TransferCache for cookie-bearing requests by default
platform-server
Commit Type Description
37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient
72696e244e fix secure location and document initialization against SSRF and path hijack
service-worker
Commit Type Description
b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests
ca32fc1000 fix Preserves HTTP cache mode in asset group requests

v21.2.14

Compare Source

compiler
Commit Type Description
68282dff9f fix strip namespaced SVG script elements during template compilation
core
Commit Type Description
c0f52272ed fix do not insert todo when migrating void @​Output
938a7f3edd fix makes resource URL sanitizer lookup case-insensitive
0fb2724194 fix reject script element as a dynamic component host
49113ac0ef fix visit ICU expressions in signal migration schematics
router
Commit Type Description
099bf577ee fix skip scroll-to-top on initial navigation when hydrating

v21.2.13

Compare Source

core
Commit Type Description
1c6553e97d fix disallow event attribute bindings in host bindings unconditionally
platform-server
Commit Type Description
629905d537 fix add allowedHosts option to renderModule and renderApplication
0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

v21.2.12

Compare Source

core
Commit Type Description
fe13bb669d fix allow explicit read generic with signal input transforms
3430251fef fix i18n flags leaking on errors
1aeebbe304 fix respect ngSkipHydration on components with projectable nodes in LContainers
9e38ed7d57 fix sanitizer typings
7a05a9a71a fix validate security-sensitive attributes in i18n bindings
c37f6ca42f fix visit ng-let expression value in signal migration schematics
forms
Commit Type Description
03ad53863b fix prohibit concurrent submits in signal forms

v21.2.11

Compare Source

common
Commit Type Description
10ad3c0692 fix prevent focus from scrollToAnchor
compiler
Commit Type Description
4f5d8a2c0b fix let declaration span not including end character
core
Commit Type Description
a40e2cebc8 fix fix ordering of view queries metadata in JIT mode
885a1a1d97 fix guard against non-object events and avoid listener wrapper identity mismatch
7a64aff9b5 fix prevent event replay double-invocation when element hydrates before app stability
platform-server
Commit Type Description
be1f80a253 fix ensure origin has a trailing slash when parsing url

v21.2.10

Compare Source

docs
Commit Type Description
0d5ee9ae1b fix link formatting in "Animating your Application with CSS"
migrations
Commit Type Description
5533ab4f56 fix fix NgClass leaving trailing comma after removal
router
Commit Type Description
580212c995 fix restore internal URL on popstate when browserUrl is used

v21.2.9

Compare Source

core
Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing
http
Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context
platform-server

| Commit

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Australia/Brisbane)

  • Branch creation
    • "before 6am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Apr 19, 2026
@renovate renovate Bot force-pushed the renovate/angular branch from f868516 to 291de58 Compare April 22, 2026 13:51
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.9 chore(deps): update angular to v21.2.8 Apr 22, 2026
@renovate renovate Bot force-pushed the renovate/angular branch 2 times, most recently from c99e9ad to 922bd4a Compare April 29, 2026 19:08
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.8 chore(deps): update angular to v21.2.9 Apr 29, 2026
@renovate renovate Bot force-pushed the renovate/angular branch from 922bd4a to 4db9b59 Compare April 29, 2026 23:29
@renovate renovate Bot force-pushed the renovate/angular branch from 4db9b59 to 15698a7 Compare May 7, 2026 01:42
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.9 chore(deps): update angular to v21.2.10 May 7, 2026
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.10 chore(deps): update angular to v21.2.11 May 13, 2026
@renovate renovate Bot force-pushed the renovate/angular branch 2 times, most recently from b57bcf5 to 9ba2b4e Compare May 14, 2026 00:54
@renovate renovate Bot force-pushed the renovate/angular branch from 9ba2b4e to a65c9e7 Compare May 21, 2026 01:15
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.11 chore(deps): update angular to v21.2.12 May 21, 2026
@renovate renovate Bot force-pushed the renovate/angular branch from a65c9e7 to 875f62c Compare May 27, 2026 21:30
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.12 chore(deps): update angular to v21.2.13 May 27, 2026
@renovate renovate Bot force-pushed the renovate/angular branch from 875f62c to 2253e95 Compare May 28, 2026 19:40
@renovate renovate Bot force-pushed the renovate/angular branch from 2253e95 to 7bb19f9 Compare June 3, 2026 16:58
@renovate renovate Bot changed the title chore(deps): update angular to v21.2.13 chore(deps): update angular to v21.2.14 Jun 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant