Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 3, 2025

Bumps @angular/platform-server and @angular-devkit/build-angular. These dependencies needed to be updated together.
Updates @angular/platform-server from 17.3.1 to 21.0.2

Release notes

Sourced from @​angular/platform-server's releases.

21.0.2

compiler

Commit Description
fix - 78fd159b78 prevent XSS via SVG animation attributeName and MathML/SVG URLs

21.0.1

compiler-cli

Commit Description
fix - 39c577bc36 do not type check native controls with ControlValueAccessor
fix - 8d3a89a477 escape angular control flow in jsdoc
fix - bc34083d34 ignore non-existent files

core

Commit Description
fix - 0ea1e07174 apply bootstrap-options migration to platformBrowserDynamic
fix - 70507b8c1c debug data causing memory leak for root effects
fix - a55482fca3 notify profiler events in case of errors
fix - 49ad7c6508 use injected DOCUMENT for CSP_NONCE
perf - cc1ec09931 avoid repeat searches for field directive

forms

Commit Description
feat - 7d5c7cf99a add DI option for classes on Field directive
fix - 8acf5d2756 allow dynamic type bindings on signal form controls
fix - de5fca94c5 run reset as untracked

http

Commit Description
fix - 3240d856d9 prevent XSRF token leakage to protocol-relative URLs

migrations

Commit Description
fix - f394215b14 detect structural ngTemplateOutlet and ngComponentOutlet

VSCode Extension: 21.0.0

  • fix(language-service): address potential memory leak during project creation (89095946cf)
  • fix(language-server): fix directory renaming on Windows (3f7111a9c3)

21.0.0

common

Commit Description
feat - c795960ada Add experimental support for the Navigation API (#63406)
feat - 9eac43cf46 Support of optional keys for the KeyValue pipe (#48814)
feat - a1868c9d13 update to cldr 47 (#64032)
fix - 196fa500a3 properly type ngComponentOutlet (#64561)

... (truncated)

Changelog

Sourced from @​angular/platform-server's changelog.

21.0.2 (2025-12-01)

compiler

Commit Type Description
78fd159b78 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

... (truncated)

Commits
  • 908b5a4 refactor: replace getDocument() with inject(DOCUMENT)
  • 8ab0847 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 3bed9f0 build: format md files
  • 1b5e2c8 refactor(platform-server): remove redundant providedIn: 'root' from injecti...
  • 062a696 refactor(platform-server): use URL constructor for robust parsing (#64494)
  • dd2f53b refactor(core): warning when hydration trigger is used without hydration b...
  • ad23764 feat(core): support IntersectionObserver options in viewport triggers (#64130)
  • f5b50ec refactor: clean up explicit standalone flags from tests (#63963)
  • f008045 fix(core): do not rename ARIA property bindings to attributes (#63925)
  • 0d028e0 refactor(platform-browser): Remove zonejs compatibility detector (#63847)
  • Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 17.3.17 to 21.0.1

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.0.1

@​schematics/angular

Commit Description
fix - 2f58705cb add missing imports for lifecycle hooks in jasmine-vitest migration
fix - c973bb9ca add mock names to createSpyObj transformation
fix - 4534c9848 do not set esModuleInterop and moduleResolution when module is preserve
fix - 16d898e75 fix migration of jasmine.clock().mockDate()
fix - 21c3eac72 handle createSpyObj without base name on refactor-jasmine-vitest
fix - b8c99aa4c improve safety of done callback transformation
fix - 4a71e06fc silently skip when the build target already uses one of the new builders
fix - 2ffdae421 support testRunner option in library schematic
fix - 145de4a58 warn about loose matching in arrayWithExactContents

@​angular/cli

Commit Description
fix - 363496ae0 ensure dependencies are resolved correctly for node modules directory check

@​angular/build

Commit Description
fix - d097df2d7 correct Vitest coverage path resolution for JSDOM on Windows
fix - cdb607ada correctly configure per-browser headless mode in Vitest runner
fix - 244931ece correctly invoke isTTY as a function
fix - 54d542738 ensure correct URL joining for prerender routes
fix - a28b38bbe force dev-server to use HTTP/1.1 when using SSR with SSL
fix - 59ff867f0 normalize --include paths to posix

@​angular/ssr

Commit Description
fix - 03e231216 handle X-Forwarded-Prefix and APP_BASE_HREF in redirects
fix - 3cac01882 prevent redirect loop with encoded query parameters

21.0.0

@​angular/cli

Commit Description
feat - 58d101d5e add --json output to ng version
feat - d014630fa add advanced filtering to MCP example search
feat - 6d3a3c579 add ai-tutor mcp tool
feat - 1c06b16a9 add builder info to list_projects MCP tool
feat - 301b50da4 add fallback support for packages without direct ng add functionality
feat - 3040b777e add style language detection to list_projects tool
feat - 45024e836 add unit test framework detection to list_projects tool
feat - 104c90768 enhance ng version output with more details
feat - 286b6204c make documentation search tool version-aware
feat - 406315d09 make find_examples tool version-aware
feat - 68e711307 make get_best_practices tool version-aware
feat - 50453fdee overhaul ng version command output
feat - 1ee9ce3c9 promote MCP find_examples tool to a stable tool
feat - 0d53e82d5 provide detailed peer dependency conflict errors in ng add

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.0.1 (2025-11-26)

@​angular/cli

Commit Type Description
363496ae0 fix ensure dependencies are resolved correctly for node modules directory check

@​schematics/angular

Commit Type Description
2f58705cb fix add missing imports for lifecycle hooks in jasmine-vitest migration
c973bb9ca fix add mock names to createSpyObj transformation
4534c9848 fix do not set esModuleInterop and moduleResolution when module is preserve
16d898e75 fix fix migration of jasmine.clock().mockDate()
21c3eac72 fix handle createSpyObj without base name on refactor-jasmine-vitest
b8c99aa4c fix improve safety of done callback transformation
4a71e06fc fix silently skip when the build target already uses one of the new builders
2ffdae421 fix support testRunner option in library schematic
145de4a58 fix warn about loose matching in arrayWithExactContents

@​angular/build

Commit Type Description
d097df2d7 fix correct Vitest coverage path resolution for JSDOM on Windows
cdb607ada fix correctly configure per-browser headless mode in Vitest runner
244931ece fix correctly invoke isTTY as a function
54d542738 fix ensure correct URL joining for prerender routes
a28b38bbe fix force dev-server to use HTTP/1.1 when using SSR with SSL
59ff867f0 fix normalize --include paths to posix

@​angular/ssr

Commit Type Description
03e231216 fix handle X-Forwarded-Prefix and APP_BASE_HREF in redirects
3cac01882 fix prevent redirect loop with encoded query parameters

20.3.12 (2025-11-25)

@​angular/build

Commit Type Description

... (truncated)

Commits
  • e09d9a5 release: cut the v21.0.1 release
  • 53092c1 build: update cross-repo angular dependencies
  • 4aa1f7e build: update pnpm to v10.23.0
  • 3261be6 build: lock file maintenance
  • 2bfcbc3 build: update all github actions
  • 3a4da66 refactor(@​angular/build): adjust compiler-cli namespace import
  • 39ab18c build: update cross-repo angular dependencies to v21.0.1
  • 30b96bd build: update dependency zone.js to ~0.16.0
  • 21c3eac fix(@​schematics/angular): handle createSpyObj without base name on refactor-j...
  • 7222b54 docs: mention Vitest instead of Karma in README template of workspace files
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@angular/platform-server](https://github.com/angular/angular/tree/HEAD/packages/platform-server) and [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies needed to be updated together.

Updates `@angular/platform-server` from 17.3.1 to 21.0.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/21.0.2/packages/platform-server)

Updates `@angular-devkit/build-angular` from 17.3.17 to 21.0.1
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@17.3.17...21.0.1)

---
updated-dependencies:
- dependency-name: "@angular/platform-server"
  dependency-version: 21.0.2
  dependency-type: direct:production
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 3, 2025
@codesandbox
Copy link

codesandbox bot commented Dec 3, 2025

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

@snyk-io
Copy link

snyk-io bot commented Dec 3, 2025

Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant