Skip to content

fix(deps): update angular monorepo#178

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/angular-monorepo
Open

fix(deps): update angular monorepo#178
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/angular-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jan 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@angular/animations (source) 20.3.16 → 20.3.26 age confidence
@angular/compiler-cli (source) 20.3.16 → 20.3.26 age confidence
@angular/forms (source) 20.3.16 → 20.3.26 age confidence
@angular/platform-browser (source) 20.3.16 → 20.3.26 age confidence
@angular/platform-browser-dynamic (source) 20.3.16 → 20.3.26 age confidence
@angular/router (source) 20.3.16 → 20.3.26 age confidence
zone.js (source, changelog) ~0.15.0 → ~0.16.0 age confidence

Release Notes

angular/angular (@​angular/animations)

v20.3.26

Compare Source

compiler-cli
Commit Type Description
406aaa31e6 fix update babel dependencies to latest v7
core
Commit Type Description
26831d0cbd fix avoid caching missing locale data
8eb7aea08b fix reject dynamic script host elements
http
Commit Type Description
b963f61028 fix prevent caching of responses with Set-Cookie headers
service-worker
Commit Type Description
1fdf234168 fix preserve referrer in asset requests
baa093ba68 fix preserve referrer policy in asset requests

v20.3.25

Compare Source

Deprecations

platform-server
  • XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.
common
Commit Type Description
9f443bc24c fix Limits date format string length
566ad05f20 fix skip transfer cache for uncacheable HTTP traffic
1a62130a6b fix use cryptographically secure SHA-256 for transfer cache key generation
compiler
Commit Type Description
a68ec702a0 fix sanitize two-way properties
core
Commit Type Description
768a349e6e fix harden TransferState restoration against DOM clobbering
ca48b4728d fix validate lowercase SVG animation attribute names (#​69270)
http
Commit Type Description
06be298267 fix preserve empty referrer option in HttpRequest
fa940e1f4d fix Rejects non-HTTP(S) URLs in JSONP requests
e2ef1ce72a fix skip transfer cache for fetch credentialed requests
platform-server
Commit Type Description
49368c1859 fix harden platform location origin validation during SSR
d55c94ad81 refactor deprecate ServerXhr (#​69256)
service-worker
Commit Type Description
d65a5f457b fix Strips sensitive headers on cross-origin redirects

v20.3.24

Compare Source

platform-server
Commit Type Description
6ca433e56b fix throw on suspicious URLs and restrict protocol-relative URLs
8680b5152f fix update domino to latest version

v20.3.23

Compare Source

compiler
Commit Type Description
d40acc6431 fix prevent namespaced SVG <style> elements from being stripped

v20.3.22

Compare Source

common
Commit Type Description
3d135ce59b fix add upper bounds for digitsInfo
39a4b4cc8e fix sanitize placeholder
compiler
Commit Type Description
8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#​68926)
64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#​68926)
6404edfe0a fix strip namespaced SVG script elements during template compilation (#​68926)
core
Commit Type Description
e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#​68926)
d86e4e7b2a fix reject script element as a dynamic component host (#​68926)
af04936045 fix sanitize meta selectors
dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#​68926)
909ef047b3 fix synchronize core sanitization schema with compiler (#​68926)
http
Commit Type Description
de7b2a62e7 fix exclude withCredentials requests from transfer cache
4233188d8e fix skip TransferCache for cookie-bearing requests by default
platform-server
Commit Type Description
49a60f6045 fix secure location and document initialization against SSRF and path hijack
service-worker
Commit Type Description
5fdfd8a998 fix preserve redirect policy on reconstructed asset requests
83b022f2d0 fix Preserves explicit 'credentials: omit' in asset requests
e617fa06eb fix Preserves HTTP cache mode in asset group requests

v20.3.21

Compare Source

platform-server
Commit Type Description
f584840e2e fix add allowedHosts option to renderModule and renderApplication

v20.3.20

Compare Source

core
Commit Type Description
a9bcffdbc7 fix disallow event attribute bindings in host bindings unconditionally (#​68468)
97eeb45cfa fix validate security-sensitive attributes in i18n bindings (#​68468)
platform-server
Commit Type Description
25e4e07238 fix ensure origin has a trailing slash when parsing url (#​68468)

v20.3.19

Compare Source

platform-server
Commit Type Description
303d4cd580 fix prevent SSRF bypasses via protocol-relative and backslash URLs

v20.3.18

Compare Source

compiler
Commit Type Description
02fbf08890 fix disallow translations of iframe src
core
Commit Type Description
72126f9a08 fix sanitize translated attribute bindings with interpolations
626bc8bc20 fix sanitize translated form attributes

v20.3.17

Compare Source

Breaking Changes

core

  • Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

    (cherry picked from commit 03da204)

core
Commit Type Description
7f9de3c118 fix block creation of sensitive URI attributes from ICU messages
angular/angular (zone.js)

v0.16.2

Compare Source

v0.16.1

Compare Source

v0.16.0

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Jan 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: visualization/package-lock.json
npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: visualization@0.0.0
npm error Found: @angular/core@20.3.16
npm error node_modules/@angular/core
npm error   @angular/core@"^20.3.16" from the root project
npm error   peerOptional @angular/core@"^20.0.0" from @angular-devkit/build-angular@20.3.16
npm error   node_modules/@angular-devkit/build-angular
npm error     dev @angular-devkit/build-angular@"^20.3.13" from the root project
npm error   4 more (@angular/build, @angular/cdk, @angular/common, @angular/material)
npm error
npm error Could not resolve dependency:
npm error @angular/animations@"^20.3.16" from the root project
npm error
npm error Conflicting peer dependency: @angular/core@20.3.26
npm error node_modules/@angular/core
npm error   peer @angular/core@"20.3.26" from @angular/animations@20.3.26
npm error   node_modules/@angular/animations
npm error     @angular/animations@"^20.3.16" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-07-24T16_32_08_368Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-07-24T16_32_08_368Z-debug-0.log

@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch 9 times, most recently from d8c0cd3 to ad494b8 Compare February 19, 2026 13:28
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch from ad494b8 to b23e492 Compare February 20, 2026 21:59
@renovate renovate Bot changed the title fix(deps): update dependency zone.js to ~0.16.0 fix(deps): update angular monorepo Feb 25, 2026
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch 4 times, most recently from 9248781 to 4588ba9 Compare March 5, 2026 15:27
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch 3 times, most recently from 9500a67 to 892e603 Compare March 23, 2026 18:45
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch from 892e603 to 4324e3e Compare March 24, 2026 09:10
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch 2 times, most recently from 224e3d5 to fe3930d Compare March 31, 2026 14:29
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch 2 times, most recently from cf87399 to ce3808f Compare April 17, 2026 13:11
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch 4 times, most recently from 418b374 to e4473ba Compare May 4, 2026 13:13
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch from e4473ba to 4baae55 Compare June 26, 2026 14:14
@renovate
renovate Bot force-pushed the renovate/angular-monorepo branch from 4baae55 to 9d1963e Compare June 28, 2026 18:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants