Bump the js-dependencies group across 1 directory with 17 updates by dependabot[bot] · Pull Request #283 · SAP/STARS

dependabot · 2026-05-31T19:35:54Z

Bumps the js-dependencies group with 16 updates in the /frontend directory:

Package	From	To
@angular/animations	`21.2.14`	`21.2.15`
@angular/cdk	`21.2.12`	`21.2.13`
@angular/common	`21.2.14`	`21.2.15`
@angular/compiler	`21.2.14`	`21.2.15`
@angular/core	`21.2.14`	`21.2.15`
@angular/forms	`21.2.14`	`21.2.15`
@angular/material	`21.2.12`	`21.2.13`
@angular/platform-browser	`21.2.14`	`21.2.15`
@angular/platform-browser-dynamic	`21.2.14`	`21.2.15`
@angular/router	`21.2.14`	`21.2.15`
@angular-devkit/build-angular	`21.2.12`	`21.2.13`
@angular/cli	`21.2.12`	`21.2.13`
@angular/compiler-cli	`21.2.14`	`21.2.15`
@typescript-eslint/eslint-plugin	`8.59.4`	`8.60.0`
eslint	`9.39.4`	`10.4.1`
typescript	`5.9.3`	`6.0.3`

Updates @angular/animations from 21.2.14 to 21.2.15

Release notes

Sourced from @angular/animations's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/animations's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

See full diff in compare view

Updates @angular/cdk from 21.2.12 to 21.2.13

Release notes

Sourced from @angular/cdk's releases.

21.2.13

No user facing changes in this release

Changelog

Sourced from @angular/cdk's changelog.

21.2.13 "21-2-13" (2026-05-27)

No user facing changes in this release

22.0.0-rc.1 "metal-monkey" (2026-05-20)

aria

Commit Type Description

ce1d9a7286 fix menu: allow menu item role override (#33264)

196b7064db fix menu: defer menu item focus in case menus in cdk overlay (#33258)

6443b79f9a fix menu: unable to set softDisabled (#33265)

cdk

Commit Type Description

4c298970ed fix scrolling: make it easier to provide custom scrollable (#33269)

material

Commit Type Description

f2f62675e1 fix datepicker: ensure dates don't overflow on a small screen (#33281)

f1a435508a fix sidenav: handle mixed sidenav and drawer (#33274)

a4d92c5fcb fix sidenav: more robust reset logic for inert attribute (#33257)

Commits

7828452 release: cut the v21.2.13 release
See full diff in compare view

Updates @angular/common from 21.2.14 to 21.2.15

Release notes

Sourced from @angular/common's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/common's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

582a417 fix(http): exclude withCredentials requests from transfer cache
5c6d6df fix(http): skip TransferCache for cookie-bearing requests by default
300f61f fix(common): sanitize placeholder
7f4ac78 fix(common): add upper bounds for digitsInfo
See full diff in compare view

Updates @angular/compiler from 21.2.14 to 21.2.15

Release notes

Sourced from @angular/compiler's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/compiler's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped
29ceeff docs: fix typos in source code comments
782e015 fix(compiler): strip namespaced SVG script elements during template compilati...
ff12fe5 fix(core): normalize tag names in runtime i18n attribute security context loo...
0b07f47 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
cc1378d fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
daaf329 fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...
See full diff in compare view

Updates @angular/core from 21.2.14 to 21.2.15

Release notes

Sourced from @angular/core's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/core's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

29ceeff docs: fix typos in source code comments
251c8f2 test(core): remove obsolete SVG script sanitization translation test (#68925)
dada86e fix(core): synchronize core sanitization schema with compiler (#68925)
782e015 fix(compiler): strip namespaced SVG script elements during template compilati...
ff12fe5 fix(core): normalize tag names in runtime i18n attribute security context loo...
0b07f47 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
cc1378d fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
daaf329 fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...
See full diff in compare view

Updates @angular/forms from 21.2.14 to 21.2.15

Release notes

Sourced from @angular/forms's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/forms's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fixDescription has been truncated

Bumps the js-dependencies group with 16 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `21.2.14` | `21.2.15` | | [@angular/cdk](https://github.com/angular/components) | `21.2.12` | `21.2.13` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.14` | `21.2.15` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.14` | `21.2.15` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.14` | `21.2.15` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.14` | `21.2.15` | | [@angular/material](https://github.com/angular/components) | `21.2.12` | `21.2.13` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.14` | `21.2.15` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.14` | `21.2.15` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.14` | `21.2.15` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.12` | `21.2.13` | | [@angular/cli](https://github.com/angular/angular-cli) | `21.2.12` | `21.2.13` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.14` | `21.2.15` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.59.4` | `8.60.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.4.1` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | Updates `@angular/animations` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/animations) Updates `@angular/cdk` from 21.2.12 to 21.2.13 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.12...v21.2.13) Updates `@angular/common` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/common) Updates `@angular/compiler` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/compiler) Updates `@angular/core` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/core) Updates `@angular/forms` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/forms) Updates `@angular/material` from 21.2.12 to 21.2.13 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.12...v21.2.13) Updates `@angular/platform-browser` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/platform-browser-dynamic) Updates `@angular/router` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/router) Updates `@angular-devkit/build-angular` from 21.2.12 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.12...v21.2.13) Updates `@angular/cli` from 21.2.12 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.12...v21.2.13) Updates `@angular/compiler-cli` from 21.2.14 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/compiler-cli) Updates `@typescript-eslint/eslint-plugin` from 8.59.4 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.59.4 to 8.60.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/parser) Updates `eslint` from 9.39.4 to 10.4.1 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.4.1) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/cdk" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/common" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/compiler" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/core" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/forms" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/material" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/platform-browser" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/router" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular-devkit/build-angular" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/cli" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@angular/compiler-cli" dependency-version: 21.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: js-dependencies - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: js-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: js-dependencies - dependency-name: eslint dependency-version: 10.4.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: js-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: js-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file frontend Related to angular frontend labels May 31, 2026

dependabot Bot requested a review from a team as a code owner May 31, 2026 19:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the js-dependencies group across 1 directory with 17 updates#283

Bump the js-dependencies group across 1 directory with 17 updates#283
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/frontend/develop/js-dependencies-662350fedc

dependabot Bot commented on behalf of github May 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)
	prevent namespaced SVG elements from being stripped
	sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)
	strip namespaced SVG script elements during template compilation (#68925)

Commit	Description
	normalize tag names in runtime i18n attribute security context lookup (#68925)
	sanitize meta selectors
	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)
	synchronize core sanitization schema with compiler (#68925)

Commit	Description
	exclude withCredentials requests from transfer cache
	skip TransferCache for cookie-bearing requests by default

Commit	Description
	prevent SSRF bypasses via backslash URLs in HttpClient
	secure location and document initialization against SSRF and path hijack

Commit	Description
	Preserves explicit 'credentials: omit' in asset requests
	Preserves HTTP cache mode in asset group requests

Commit	Type	Description
7f4ac78994	fix	add upper bounds for digitsInfo
300f61feb3	fix	sanitize placeholder

Commit	Type	Description
0b07f47bd6	fix	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)
eb1cbbf2eb	fix	prevent namespaced SVG elements from being stripped
cc1378d54b	fix	sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)
782e01594e	fix	strip namespaced SVG script elements during template compilation (#68925)

Commit	Type	Description
ff12fe55ac	fix	normalize tag names in runtime i18n attribute security context lookup (#68925)
e6fe77cc97	fix	sanitize meta selectors
daaf32937f	fix	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)
dada86e43d	fix	synchronize core sanitization schema with compiler (#68925)

Commit	Type	Description
582a417bd2	fix	exclude withCredentials requests from transfer cache
5c6d6df34b	fix	skip TransferCache for cookie-bearing requests by default

Commit	Type	Description
37e8aadf87	fix	prevent SSRF bypasses via backslash URLs in HttpClient
72696e244e	fix	secure location and document initialization against SSRF and path hijack

Commit	Type	Description
b8bd49341d	fix	Preserves explicit 'credentials: omit' in asset requests
ca32fc1000	fix	Preserves HTTP cache mode in asset group requests

Commit	Type	Description
ce1d9a7286	fix	menu: allow menu item role override (#33264)
196b7064db	fix	menu: defer menu item focus in case menus in cdk overlay (#33258)
6443b79f9a	fix	menu: unable to set softDisabled (#33265)

Commit	Type	Description
f2f62675e1	fix	datepicker: ensure dates don't overflow on a small screen (#33281)
f1a435508a	fix	sidenav: handle mixed sidenav and drawer (#33274)
a4d92c5fcb	fix	sidenav: more robust reset logic for inert attribute (#33257)

Conversation

dependabot Bot commented on behalf of github May 31, 2026

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

compiler

21.2.13

21.2.13 "21-2-13" (2026-05-27)

22.0.0-rc.1 "metal-monkey" (2026-05-20)

aria

cdk

material

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

compiler

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

compiler

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

compiler