Skip to content

chore(deps): update angular monorepo#133

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/angular-monorepo
Open

chore(deps): update angular monorepo#133
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/angular-monorepo

Conversation

@renovate

@renovate renovate Bot commented Nov 14, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@angular/platform-browser-dynamic (source) ^20.3.11 → ^20.3.25 age confidence

Release Notes

angular/angular (@​angular/platform-browser-dynamic)

v20.3.25

Compare Source

Deprecations

platform-server
  • XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.
common
Commit Type Description
9f443bc24c fix Limits date format string length
566ad05f20 fix skip transfer cache for uncacheable HTTP traffic
1a62130a6b fix use cryptographically secure SHA-256 for transfer cache key generation
compiler
Commit Type Description
a68ec702a0 fix sanitize two-way properties
core
Commit Type Description
768a349e6e fix harden TransferState restoration against DOM clobbering
ca48b4728d fix validate lowercase SVG animation attribute names (#​69270)
http
Commit Type Description
06be298267 fix preserve empty referrer option in HttpRequest
fa940e1f4d fix Rejects non-HTTP(S) URLs in JSONP requests
e2ef1ce72a fix skip transfer cache for fetch credentialed requests
platform-server
Commit Type Description
49368c1859 fix harden platform location origin validation during SSR
d55c94ad81 refactor deprecate ServerXhr (#​69256)
service-worker
Commit Type Description
d65a5f457b fix Strips sensitive headers on cross-origin redirects

v20.3.24

Compare Source

platform-server
Commit Type Description
6ca433e56b fix throw on suspicious URLs and restrict protocol-relative URLs
8680b5152f fix update domino to latest version

v20.3.23

Compare Source

compiler
Commit Type Description
d40acc6431 fix prevent namespaced SVG <style> elements from being stripped

v20.3.22

Compare Source

common
Commit Type Description
3d135ce59b fix add upper bounds for digitsInfo
39a4b4cc8e fix sanitize placeholder
compiler
Commit Type Description
8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#​68926)
64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#​68926)
6404edfe0a fix strip namespaced SVG script elements during template compilation (#​68926)
core
Commit Type Description
e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#​68926)
d86e4e7b2a fix reject script element as a dynamic component host (#​68926)
af04936045 fix sanitize meta selectors
dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#​68926)
909ef047b3 fix synchronize core sanitization schema with compiler (#​68926)
http
Commit Type Description
de7b2a62e7 fix exclude withCredentials requests from transfer cache
4233188d8e fix skip TransferCache for cookie-bearing requests by default
platform-server
Commit Type Description
49a60f6045 fix secure location and document initialization against SSRF and path hijack
service-worker
Commit Type Description
5fdfd8a998 fix preserve redirect policy on reconstructed asset requests
83b022f2d0 fix Preserves explicit 'credentials: omit' in asset requests
e617fa06eb fix Preserves HTTP cache mode in asset group requests

v20.3.21

Compare Source

platform-server
Commit Type Description
f584840e2e fix add allowedHosts option to renderModule and renderApplication

v20.3.20

Compare Source

core
Commit Type Description
a9bcffdbc7 fix disallow event attribute bindings in host bindings unconditionally (#​68468)
97eeb45cfa fix validate security-sensitive attributes in i18n bindings (#​68468)
platform-server
Commit Type Description
25e4e07238 fix ensure origin has a trailing slash when parsing url (#​68468)

v20.3.19

Compare Source

platform-server
Commit Type Description
303d4cd580 fix prevent SSRF bypasses via protocol-relative and backslash URLs

v20.3.18

Compare Source

compiler
Commit Type Description
02fbf08890 fix disallow translations of iframe src
core
Commit Type Description
72126f9a08 fix sanitize translated attribute bindings with interpolations
626bc8bc20 fix sanitize translated form attributes

v20.3.17

Compare Source

Breaking Changes

core

  • Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

    (cherry picked from commit 03da204)

core
Commit Type Description
7f9de3c118 fix block creation of sensitive URI attributes from ICU messages

v20.3.16

Compare Source

core
Commit Type Description
c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

v20.3.15

Compare Source

compiler
Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

v20.3.14

Compare Source

http
Commit Type Description
0276479e7d fix prevent XSRF token leakage to protocol-relative URLs

v20.3.13

Compare Source

v20.3.12

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 1d6f2d6 to 748a9ef Compare November 19, 2025 21:00
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.12 chore(deps): update angular monorepo to ^20.3.13 Nov 19, 2025
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch 2 times, most recently from 976949b to 21e40ed Compare November 25, 2025 20:35
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.13 chore(deps): update angular monorepo to ^20.3.14 Nov 25, 2025
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 21e40ed to 337402d Compare December 1, 2025 13:03
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.14 chore(deps): update angular monorepo to ^20.3.15 Dec 1, 2025
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 337402d to 62ff3b7 Compare December 2, 2025 03:26
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 62ff3b7 to fb7a4b3 Compare January 8, 2026 01:28
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.15 chore(deps): update angular monorepo to ^20.3.16 Jan 8, 2026
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.16 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.16 Jan 9, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from fb7a4b3 to b1a2a0c Compare January 9, 2026 21:40
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from b1a2a0c to ee25fad Compare January 19, 2026 16:12
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch 3 times, most recently from bd54086 to 14391a3 Compare January 30, 2026 21:00
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 14391a3 to 18f0609 Compare February 12, 2026 10:10
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch 3 times, most recently from 85ba059 to bff2184 Compare February 25, 2026 21:23
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.16 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.17 Feb 25, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from bff2184 to 8ad5408 Compare March 12, 2026 22:06
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.17 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.18 Mar 12, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 8ad5408 to e0494a4 Compare March 27, 2026 00:57
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.18 chore(deps): update angular monorepo to ^20.3.18 Mar 27, 2026
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.18 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.18 Mar 30, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from e0494a4 to ecd0c6c Compare March 30, 2026 18:17
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.18 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.19 Apr 16, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from ecd0c6c to aceb301 Compare April 16, 2026 11:53
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from aceb301 to 8ae4465 Compare April 27, 2026 18:50
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.19 chore(deps): update angular monorepo to ^20.3.19 Apr 27, 2026
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.19 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.19 Apr 27, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 8ae4465 to 161d0a6 Compare April 27, 2026 22:42
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from 161d0a6 to f47893a Compare May 7, 2026 01:50
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.19 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.20 May 7, 2026
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.20 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.21 May 12, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from f47893a to d4bee5c Compare May 12, 2026 19:13
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.21 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.22 May 28, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from d4bee5c to 6710b42 Compare May 28, 2026 01:05
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.22 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.23 May 30, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch 2 times, most recently from 165d0ba to c65ea39 Compare June 2, 2026 14:35
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.23 chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.24 Jun 2, 2026
@renovate renovate Bot changed the title chore(deps): update dependency @angular/platform-browser-dynamic to ^20.3.24 chore(deps): update angular monorepo to ^20.3.24 Jun 2, 2026
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.24 chore(deps): update angular monorepo to ^20.3.25 Jun 10, 2026
@renovate renovate Bot force-pushed the renovate/angular-monorepo branch from c65ea39 to 3408f8c Compare June 10, 2026 22:45
@renovate renovate Bot changed the title chore(deps): update angular monorepo to ^20.3.25 chore(deps): update angular monorepo Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants