Skip to content

Bump the angular group across 1 directory with 7 updates - #1441

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular-06de723ecd
Open

Bump the angular group across 1 directory with 7 updates#1441
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular-06de723ecd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the angular group with 7 updates in the / directory:

Package From To
@angular/core 20.3.16 20.3.27
@angular/forms 20.3.16 20.3.27
@angular/platform-browser 20.3.16 20.3.27
@angular/router 20.3.16 20.3.27
@angular/build 20.3.16 20.3.33
@angular/cli 20.3.16 20.3.33
@angular/compiler-cli 20.3.16 20.3.27

Updates @angular/core from 20.3.16 to 20.3.27

Release notes

Sourced from @​angular/core's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description
c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description
8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description
d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description
9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description
388daea2fc fix correctly migrate ngClass with mixed space-separated keys
bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description
91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits
  • db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
  • 5dbcd0e fix(compiler): disallow i18n event attributes
  • 8eb7aea fix(core): reject dynamic script host elements
  • 26831d0 fix(core): avoid caching missing locale data
  • ca48b47 fix(core): validate lowercase SVG animation attribute names (#69270)
  • 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
  • 49368c1 fix(platform-server): harden platform location origin validation during SSR
  • 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
  • 768a349 fix(core): harden TransferState restoration against DOM clobbering
  • 7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
  • Additional commits viewable in compare view

Updates @angular/forms from 20.3.16 to 20.3.27

Release notes

Sourced from @​angular/forms's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/forms's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description
c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description
8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description
d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description
9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description
388daea2fc fix correctly migrate ngClass with mixed space-separated keys
bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description
91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

Updates @angular/platform-browser from 20.3.16 to 20.3.27

Release notes

Sourced from @​angular/platform-browser's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/platform-browser's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description
c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description
8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description
d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description
9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description
388daea2fc fix correctly migrate ngClass with mixed space-separated keys
bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description
91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

Updates @angular/router from 20.3.16 to 20.3.27

Release notes

Sourced from @​angular/router's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/router's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description
c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description
8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description
d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description
9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description
388daea2fc fix correctly migrate ngClass with mixed space-separated keys
bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description
91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

Updates @angular/build from 20.3.16 to 20.3.33

Release notes

Sourced from @​angular/build's releases.

20.3.33

@​angular-devkit/build-angular

Commit Description
fix - 0b4008f17d upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - fc861affcd upgrade postcss to 8.5.23

20.3.32

@​angular-devkit/build-angular

Commit Description
fix - d4e07cb3e update http-proxy-middleware to 3.0.7

20.3.31

@​angular-devkit/build-angular

Commit Description
fix - 4ea787cd0 bump undici to 7.28.0

@​angular/build

Commit Description
fix - df5a2cc2b bump vite to 7.3.6

20.3.30

@​angular/build

Commit Description
fix - 36adca99c bump @​babel/core to 7.29.7
fix - 7f236cfea bump esbuild to 0.28.1
fix - 94fb3c122 bump piscina to 5.2.0
fix - 1f283a41c bump vite to 7.3.5

20.3.29

@​angular/cli

Commit Description
fix - 5f7c0328c update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - a75d78e68 prioritize options over environment variables in AngularNodeAppEngine

20.3.28

@​angular/cli

Commit Description
fix - e3d564667 fallback to deprecated versions when resolving ranges if no non-deprecated version is found

... (truncated)

Changelog

Sourced from @​angular/build's changelog.

20.3.33 (2026-08-05)

@​angular-devkit/build-angular

Commit Type Description
0b4008f17d fix upgrade postcss to 8.5.23

@​angular/build

Commit Type Description
fc861affcd fix upgrade postcss to 8.5.23

22.1.2 (2026-07-30)

@​angular/cli

Commit Type Description
57db27ea91 fix add packages with built-in schematics to devDependencies only

@​angular/build

Commit Type Description
baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1 (2026-07-30)

@​angular/cli

Commit Type Description
ab971a8543 fix support npm 12 metadata array and error formats

@​angular/build

Commit Type Description
db24220fb8 fix rewrite paths from sandboxed execroots when running under Bazel

... (truncated)

Commits
  • 1bd120b release: cut the v20.3.33 release
  • 0b4008f fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
  • fc861af fix(@​angular/build): upgrade postcss to 8.5.23
  • ed8f6ff release: cut the v20.3.32 release
  • d4e07cb fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • 85fe7ea release: cut the v20.3.31 release
  • df5a2cc fix(@​angular/build): bump vite to 7.3.6
  • 4ea787c fix(@​angular-devkit/build-angular): bump undici to 7.28.0
  • 41d34b5 release: cut the v20.3.30 release
  • 94fb3c1 fix(@​angular/build): bump piscina to 5.2.0
  • Additional commits viewable in compare view

Updates @angular/cli from 20.3.16 to 20.3.33

Release notes

Sourced from @​angular/cli's releases.

20.3.33

@​angular-devkit/build-angular

Commit Description
fix - 0b4008f17d upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - fc861affcd upgrade postcss to 8.5.23

20.3.32

@​angular-devkit/build-angular

Commit Description
fix - d4e07cb3e update http-proxy-middleware to 3.0.7

20.3.31

@​angular-devkit/build-angular

Commit Description
fix - 4ea787cd0 bump undici to 7.28.0

@​angular/build

Commit Description
fix - df5a2cc2b bump vite to 7.3.6

20.3.30

@​angular/build

Commit Description
fix - 36adca99c bump @​babel/core to 7.29.7
fix - 7f236cfea bump esbuild to 0.28.1
fix - 94fb3c122 bump piscina to 5.2.0
fix - 1f283a41c bump vite to 7.3.5

20.3.29

@​angular/cli

Commit Description
fix - 5f7c0328c update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - a75d78e68 prioritize options over environment variables in AngularNodeAppEngine

20.3.28

@​angular/cli

Commit Description
fix - e3d564667 fallback to deprecated versions when resolving ranges if no non-deprecated version is found

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

20.3.33 (2026-08-05)

@​angular-devkit/build-angular

Commit Type Description
0b4008f17d fix upgrade postcss to 8.5.23

@​angular/build

Commit Type Description
fc861affcd fix upgrade postcss to 8.5.23

22.1.2 (2026-07-30)

@​angular/cli

Commit Type Description
57db27ea91 fix add packages with built-in schematics to devDependencies only

@​angular/build

Commit Type Description
baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1 (2026-07-30)

@​angular/cli

Commit Type Description
ab971a8543 fix support npm 12 metadata array and error formats

@​angular/build

Commit Type Description
db24220fb8 fix rewrite paths from sandboxed execroots when running under Bazel

... (truncated)

Commits
  • 1bd120b release: cut the v20.3.33 release
  • 0b4008f fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
  • fc861af fix(@​angular/build): upgrade postcss to 8.5.23
  • ed8f6ff release: cut the v20.3.32 release
  • d4e07cb fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • 85fe7ea release: cut the v20.3.31 release
  • df5a2cc fix(@​angular/build): bump vite to 7.3.6
  • 4ea787c fix(@​angular-devkit/build-angular): bump undici to 7.28.0
  • 41d34b5 release: cut the v20.3.30 release
  • 94fb3c1 fix(@​angular/build): bump piscina to 5.2.0
  • Additional commits viewable in compare view

Updates @angular/compiler-cli from 20.3.16 to 20.3.27

Release notes

Sourced from @​angular/compiler-cli's releases.

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

Commit Description
fix - 9f443bc24c Limits date format string length
fix - 566ad05f20 skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6b use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - a68ec702a0 sanitize two-way properties

core

Commit Description
fix - 768a349e6e harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/compiler-cli's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

@dependabot
Bump the angular group across 1 directory with 7 updates
e3dea94 
Bumps the angular group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.16` | `20.3.27` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `20.3.16` | `20.3.27` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `20.3.16` | `20.3.27` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `20.3.16` | `20.3.27` |
| [@angular/build](https://github.com/angular/angular-cli) | `20.3.16` | `20.3.33` |
| [@angular/cli](https://github.com/angular/angular-cli) | `20.3.16` | `20.3.33` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `20.3.16` | `20.3.27` |



Updates `@angular/core` from 20.3.16 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/core)

Updates `@angular/forms` from 20.3.16 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/forms)

Updates `@angular/platform-browser` from 20.3.16 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/platform-browser)

Updates `@angular/router` from 20.3.16 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/router)

Updates `@angular/build` from 20.3.16 to 20.3.33
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v20.3.16...v20.3.33)

Updates `@angular/cli` from 20.3.16 to 20.3.33
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v20.3.16...v20.3.33)

Updates `@angular/compiler-cli` from 20.3.16 to 20.3.27
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler-cli)

---
updated-dependencies:
- dependency-name: "@angular/core"
  dependency-version: 20.3.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/forms"
  dependency-version: 20.3.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser"
  dependency-version: 20.3.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/router"
  dependency-version: 20.3.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/build"
  dependency-version: 20.3.33
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cli"
  dependency-version: 20.3.33
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler-cli"
  dependency-version: 20.3.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 12, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 12, 2026 13:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants