build(deps): bump the angular group across 1 directory with 18 updates by dependabot[bot] · Pull Request #415 · radix-ng/primitives

dependabot · 2026-06-11T13:15:01Z

Bumps the angular group with 18 updates in the / directory:

Package	From	To
@angular/common	`21.2.9`	`21.2.17`
@angular/compiler	`21.2.9`	`21.2.17`
@angular/core	`21.2.9`	`21.2.17`
@angular/forms	`21.2.9`	`21.2.17`
@angular/platform-browser	`21.2.9`	`21.2.17`
@angular/platform-browser-dynamic	`21.2.9`	`21.2.17`
@angular/platform-server	`21.2.9`	`21.2.17`
@angular/router	`21.2.9`	`21.2.17`
@angular/ssr	`21.2.9`	`21.2.16`
@angular-devkit/build-angular	`21.2.9`	`21.2.16`
@angular-devkit/core	`21.2.9`	`21.2.16`
@angular-devkit/schematics	`21.2.9`	`21.2.16`
@angular/build	`21.2.9`	`21.2.16`
@angular/cli	`21.2.12`	`21.2.16`
@angular/compiler-cli	`21.2.9`	`21.2.17`
@angular/language-service	`21.2.9`	`21.2.17`
@schematics/angular	`21.2.9`	`21.2.16`
ng-packagr	`21.2.3`	`21.2.5`

Updates @angular/common from 21.2.9 to 21.2.17

Release notes

Sourced from @angular/common's releases.

... (truncated)

Changelog

Sourced from @angular/common's changelog.

... (truncated)

Commits

86a56dc fix(common): Limits date format string length
bcb1b7e fix(http): preserve empty referrer option in HttpRequest
a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
d846326 fix(common): skip transfer cache for uncacheable HTTP traffic
e245d40 fix(http): skip transfer cache for fetch credentialed requests
f6d8e64 fix(common): only strip a literal /index.html suffix from URLs
582a417 fix(http): exclude withCredentials requests from transfer cache
5c6d6df fix(http): skip TransferCache for cookie-bearing requests by default
300f61f fix(common): sanitize placeholder
Additional commits viewable in compare view

Updates @angular/compiler from 21.2.9 to 21.2.17

Release notes

Sourced from @angular/compiler's releases.

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

... (truncated)

Commits

dc9c996 fix(compiler): sanitize two-way properties
ae1c8a1 fix(compiler): move projection attributes into constants
eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped
29ceeff docs: fix typos in source code comments
782e015 fix(compiler): strip namespaced SVG script elements during template compilati...
ff12fe5 fix(core): normalize tag names in runtime i18n attribute security context loo...
0b07f47 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
cc1378d fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
daaf329 fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...
68282df fix(compiler): strip namespaced SVG script elements during template compilation
Additional commits viewable in compare view

Updates @angular/core from 21.2.9 to 21.2.17

Release notes

Sourced from @angular/core's releases.

... (truncated)

Changelog

Sourced from @angular/core's changelog.

... (truncated)

Commits

88832c8 fix(core): validate lowercase SVG animation attribute names (#69269)
3551074 fix(platform-server): harden platform location origin validation during SSR
bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
d846326 fix(common): skip transfer cache for uncacheable HTTP traffic
e245d40 fix(http): skip transfer cache for fetch credentialed requests
1523061 fix(core): harden TransferState restoration against DOM clobbering
736c4ab refactor(core): fix broken unit test.
3fd6897 fix(core): harden inherit definition feature against polluted prototypes
7e38336 fix(core): use Object.create(null) for LOCALE_DATA as a hardening measure
29ceeff docs: fix typos in source code comments
Additional commits viewable in compare view

Updates @angular/forms from 21.2.9 to 21.2.17

Release notes

Sourced from @angular/forms's releases.

... (truncated)

Changelog

Sourced from @angular/forms's changelog.

... (truncated)

Commits

a7b9ff5 docs: document FormBuilder.group() controlsConfig value shapes
03ad538 fix(forms): prohibit concurrent submits in signal forms
ce7a43a refactor(forms): improve clarity in SelectMultipleControlValueAccessor.writeV...
600da64 docs(forms): add NG01902 error reference and link to docs
See full diff in compare view

Updates @angular/platform-browser from 21.2.9 to 21.2.17

Release notes

Sourced from @angular/platform-browser's releases.

... (truncated)

Changelog

Sourced from @angular/platform-browser's changelog.

... (truncated)

Commits

29ceeff docs: fix typos in source code comments
e6fe77c fix(core): sanitize meta selectors
See full diff in compare view

Updates @angular/platform-browser-dynamic from 21.2.9 to 21.2.17

Release notes

Sourced from @angular/platform-browser-dynamic's releases.

vercel · 2026-06-11T13:15:05Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
primitives-storybook	Error		Jun 17, 2026 7:50pm
radix-astro-doc	Error		Jun 17, 2026 7:50pm

github-actions · 2026-06-12T12:35:01Z

⚡ Performance

No benchmark report was produced for this run.

Bumps the angular group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.9` | `21.2.17` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.9` | `21.2.17` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.9` | `21.2.17` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.9` | `21.2.17` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.9` | `21.2.17` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.9` | `21.2.17` | | [@angular/platform-server](https://github.com/angular/angular/tree/HEAD/packages/platform-server) | `21.2.9` | `21.2.17` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.9` | `21.2.17` | | [@angular/ssr](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.16` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.16` | | [@angular-devkit/core](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.16` | | [@angular-devkit/schematics](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.16` | | [@angular/build](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.16` | | [@angular/cli](https://github.com/angular/angular-cli) | `21.2.12` | `21.2.16` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.9` | `21.2.17` | | [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) | `21.2.9` | `21.2.17` | | [@schematics/angular](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.16` | | [ng-packagr](https://github.com/ng-packagr/ng-packagr) | `21.2.3` | `21.2.5` | Updates `@angular/common` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/common) Updates `@angular/compiler` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/compiler) Updates `@angular/core` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/core) Updates `@angular/forms` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/forms) Updates `@angular/platform-browser` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/platform-browser-dynamic) Updates `@angular/platform-server` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/platform-server) Updates `@angular/router` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/router) Updates `@angular/ssr` from 21.2.9 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.16) Updates `@angular-devkit/build-angular` from 21.2.9 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.16) Updates `@angular-devkit/core` from 21.2.9 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.16) Updates `@angular-devkit/schematics` from 21.2.9 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.16) Updates `@angular/build` from 21.2.9 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.16) Updates `@angular/cli` from 21.2.12 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.12...v21.2.16) Updates `@angular/compiler-cli` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/compiler-cli) Updates `@angular/language-service` from 21.2.9 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.17/packages/language-service) Updates `@schematics/angular` from 21.2.9 to 21.2.16 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.16) Updates `ng-packagr` from 21.2.3 to 21.2.5 - [Release notes](https://github.com/ng-packagr/ng-packagr/releases) - [Changelog](https://github.com/ng-packagr/ng-packagr/blob/21.2.5/CHANGELOG.md) - [Commits](ng-packagr/ng-packagr@21.2.3...21.2.5) --- updated-dependencies: - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular-devkit/core" dependency-version: 21.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular-devkit/schematics" dependency-version: 21.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/build" dependency-version: 21.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/cli" dependency-version: 21.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/common" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler-cli" dependency-version: 21.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/core" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/forms" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/language-service" dependency-version: 21.2.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-server" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/router" dependency-version: 21.2.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/ssr" dependency-version: 21.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@schematics/angular" dependency-version: 21.2.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: ng-packagr dependency-version: 21.2.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-19T08:30:19Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 11, 2026

dependabot Bot requested a review from pimenovoleg as a code owner June 11, 2026 13:15

dependabot Bot added the javascript Pull requests that update javascript code label Jun 11, 2026

dependabot Bot requested a review from artembelik as a code owner June 11, 2026 13:15

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 11, 2026

vercel Bot had a problem deploying to Preview – radix-astro-doc June 11, 2026 13:15 Failure

vercel Bot deployed to Preview – primitives-storybook June 11, 2026 13:16 View deployment

dependabot Bot changed the title ~~chore(deps): bump the angular group across 1 directory with 18 updates~~ build(deps): bump the angular group across 1 directory with 18 updates Jun 12, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-338eeb3ccf branch from 971d450 to 13bcef0 Compare June 12, 2026 09:40

vercel Bot had a problem deploying to Preview – radix-astro-doc June 12, 2026 09:40 Failure

vercel Bot deployed to Preview – primitives-storybook June 12, 2026 09:41 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-338eeb3ccf branch from 13bcef0 to cd93e26 Compare June 12, 2026 12:34

vercel Bot had a problem deploying to Preview – radix-astro-doc June 12, 2026 12:35 Failure

vercel Bot deployed to Preview – primitives-storybook June 12, 2026 12:35 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-338eeb3ccf branch from cd93e26 to e882490 Compare June 16, 2026 12:20

vercel Bot had a problem deploying to Preview – radix-astro-doc June 16, 2026 12:21 Failure

vercel Bot deployed to Preview – primitives-storybook June 16, 2026 12:21 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-338eeb3ccf branch from e882490 to a915f85 Compare June 17, 2026 19:49

vercel Bot had a problem deploying to Preview June 17, 2026 19:50 Failure

dependabot Bot closed this Jun 19, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/angular-338eeb3ccf branch June 19, 2026 08:30

Navigation Menu

Uh oh!

build(deps): bump the angular group across 1 directory with 18 updates - #415

build(deps): bump the angular group across 1 directory with 18 updates#415
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular-338eeb3ccf

dependabot Bot commented on behalf of github Jun 11, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jun 11, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

Commit	Description
	harden TransferState restoration against DOM clobbering
	validate lowercase SVG animation attribute names (#69269)

Commit	Description
	preserve empty referrer option in HttpRequest
	Rejects non-HTTP(S) URLs in JSONP requests
	skip transfer cache for fetch credentialed requests

Commit	Description
	harden platform location origin validation during SSR
	deprecate ServerXhr (#69255)

Commit	Description
	harden inherit definition feature against polluted prototypes
	use Object.create(null) for LOCALE_DATA as a hardening measure

Commit	Type	Description
86a56dc279	fix	Limits date format string length
d846326b07	fix	skip transfer cache for uncacheable HTTP traffic
bc55749698	fix	use cryptographically secure SHA-256 for transfer cache key generation

Commit	Type	Description
1523061137	fix	harden TransferState restoration against DOM clobbering
88832c84f8	fix	validate lowercase SVG animation attribute names (#69269)

Commit	Type	Description
bcb1b7ea25	fix	preserve empty referrer option in HttpRequest
a810a319d1	fix	Rejects non-HTTP(S) URLs in JSONP requests
e245d40c4d	fix	skip transfer cache for fetch credentialed requests

Commit	Type	Description
35510746b7	fix	harden platform location origin validation during SSR
13fb0afe93	refactor	deprecate ServerXhr (#69255)

Commit	Type	Description
9f443bc24c	fix	Limits date format string length
566ad05f20	fix	skip transfer cache for uncacheable HTTP traffic
1a62130a6b	fix	use cryptographically secure SHA-256 for transfer cache key generation

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

21.2.17

common

compiler

core

http

platform-server

service-worker

Deprecations

platform-server

21.2.16

common

compiler

core

platform-server

21.2.17 (2026-06-10)

Deprecations

platform-server

common

compiler

core

http

platform-server

service-worker

20.3.25 (2026-06-10)

Deprecations

platform-server

common

compiler

21.2.17

common

compiler

core

http

platform-server

service-worker

Deprecations

platform-server

21.2.16

common

compiler

core

platform-server

21.2.17 (2026-06-10)

Deprecations

platform-server

common

compiler

core

http

platform-server

service-worker

20.3.25 (2026-06-10)

Deprecations

platform-server

common

compiler

21.2.17

common

compiler

core

http

platform-server

service-worker

Deprecations

platform-server

21.2.16

common

compiler

core

platform-server

21.2.17 (2026-06-10)

Deprecations

platform-server

common

compiler

core

dependabot Bot commented on behalf of github Jun 11, 2026 •

edited

Loading