Skip to content

Bump @angular/common, @angular/cdk, @angular/forms, @angular/material, @angular/platform-browser, @angular/platform-browser-dynamic and @angular/router in /angular#48

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/angular/multi-5354a162e9
Open

Bump @angular/common, @angular/cdk, @angular/forms, @angular/material, @angular/platform-browser, @angular/platform-browser-dynamic and @angular/router in /angular#48
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/angular/multi-5354a162e9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Bumps @angular/common, @angular/cdk, @angular/forms, @angular/material, @angular/platform-browser, @angular/platform-browser-dynamic and @angular/router. These dependencies needed to be updated together.
Updates @angular/common from 17.3.12 to 21.0.2

Release notes

Sourced from @​angular/common's releases.

21.0.2

compiler

Commit Description
fix - 78fd159b78 prevent XSS via SVG animation attributeName and MathML/SVG URLs

21.0.1

compiler-cli

Commit Description
fix - 39c577bc36 do not type check native controls with ControlValueAccessor
fix - 8d3a89a477 escape angular control flow in jsdoc
fix - bc34083d34 ignore non-existent files

core

Commit Description
fix - 0ea1e07174 apply bootstrap-options migration to platformBrowserDynamic
fix - 70507b8c1c debug data causing memory leak for root effects
fix - a55482fca3 notify profiler events in case of errors
fix - 49ad7c6508 use injected DOCUMENT for CSP_NONCE
perf - cc1ec09931 avoid repeat searches for field directive

forms

Commit Description
feat - 7d5c7cf99a add DI option for classes on Field directive
fix - 8acf5d2756 allow dynamic type bindings on signal form controls
fix - de5fca94c5 run reset as untracked

http

Commit Description
fix - 3240d856d9 prevent XSRF token leakage to protocol-relative URLs

migrations

Commit Description
fix - f394215b14 detect structural ngTemplateOutlet and ngComponentOutlet

VSCode Extension: 21.0.0

  • fix(language-service): address potential memory leak during project creation (89095946cf)
  • fix(language-server): fix directory renaming on Windows (3f7111a9c3)

21.0.0

common

Commit Description
feat - c795960ada Add experimental support for the Navigation API (#63406)
feat - 9eac43cf46 Support of optional keys for the KeyValue pipe (#48814)
feat - a1868c9d13 update to cldr 47 (#64032)
fix - 196fa500a3 properly type ngComponentOutlet (#64561)

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.0.2 (2025-12-01)

compiler

Commit Type Description
78fd159b78 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

... (truncated)

Commits
  • 3240d85 fix(http): prevent XSRF token leakage to protocol-relative URLs
  • 6de8926 refactor(core): add debug name to resource (#64172)
  • 00ffe91 refactor(common): removes unused NgModuleFactory config in NgComponentOutlet
  • 8765b66 docs: add reference to Built-in Pipes in multiple pipe files
  • ab98e71 fix(common): remove placeholder image listeners once view is removed
  • 8ab0847 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 650af71 refactor(http): migrate XSRF classes to use inject() function
  • 3bed9f0 build: format md files
  • a3c2fe8 Revert "refactor(common): Removes unused imports to clean up dependencies"
  • 6d3e0f1 refactor(common): Removes unused imports to clean up dependencies
  • Additional commits viewable in compare view

Updates @angular/cdk from 17.3.10 to 21.0.1

Release notes

Sourced from @​angular/cdk's releases.

21.0.1

material

Commit Description
fix - 043d9cacc select: render panel next to trigger (#32363)

cdk

Commit Description
fix - ccc12c387 testing: errors in harnesses when using Vitest (#32399)

multiple

Commit Description
fix - 02965bb0e resolve forward ref errors (#32413)

21.0.0

aria

Commit Description
feat - a821a3ef0 grid: create the aria grid (#32092)
feat - f9d3cde14 menu: create the aria menu (#32080)
feat - a0b580027 toolbar: adds skip disabled toolbar example to dev-app (#32127)
feat - 5396c4347 toolbar: adds toolbar basic vertical example to dev-app (#32126)
feat - ba9f79be5 toolbar: adds toolbar-basic-horizontal-example to dev-app (#32106)
fix - ec6045b27 accordion: rename value to panelId for trigger and panel (#32295)
fix - 0b03c6e96 combobox: add missing apis (#32124)
fix - 25223a2f8 combobox: dialog popup support (#32279)
fix - a47ebeb96 combobox: disabled state (#32308)
fix - 127d3dba5 combobox: escape key behavior (#32364)
fix - c3279ca4b combobox: highlighting edge cases (#32136)
fix - 1232805db combobox: readonly behavior (#32169)
fix - 6c46f950d combobox: several small fixes (#32202)
fix - 8beb22f8c combobox: use click instead of pointerup (#32324)
fix - 92d933421 grid: fix navigation bugs and add grid behavior unit tests (#32140)
fix - e3babf3fc grid: rtl navigation (#32170)
fix - fe79e982c menu: add expansion delay (#32293)
fix - 3d1cafbdd menu: add selectable to inputs (#32131)
fix - 56631cb85 menu: deferred content import
fix - 95e648ad8 menu: disabled state (#32301)
fix - ce20dbe1a menu: lazy render trigger (#32203)
fix - 19095030a menu: public api cleanup (#32189)
fix - 4b5db1328 menu: rtl text direction (#32254)
fix - bac171d8b toolbar: allow developers to wrap widgets (#32341)
fix - d8acd69f5 tree: adds rtl keyboard functionality for tree (#32305)
fix - 86558d2aa tree: internal conformance check (#32337)
fix - 09e31e716 tree: only reset selected values if used in combobox (#32329)
fix - 05f936ae1 tree: tree item visibility issue (#32156)
fix - afe4d063d ui-patterns: internal conformance fixes (#32102)

cdk

Commit Description

... (truncated)

Changelog

Sourced from @​angular/cdk's changelog.

21.0.1 "sulfur-snack" (2025-11-26)

cdk

Commit Type Description
ccc12c387 fix testing: errors in harnesses when using Vitest (#32399)

material

Commit Type Description
043d9cacc fix select: render panel next to trigger (#32363)

multiple

Commit Type Description
02965bb0e fix resolve forward ref errors (#32413)

21.0.0 "damask-dachshund" (2025-11-19)

Breaking Changes

cdk

    • LIVE_ANNOUNCER_ELEMENT_TOKEN_FACTORY has been removed.
    • TREE_KEY_MANAGER_FACTORY has been removed.
    • TREE_KEY_MANAGER_FACTORY_PROVIDER has been removed.
    • $z-index-overlay-container has been removed. Use $overlay-container-z-index instead.
    • $z-index-overlay has been removed. Use $overlay-z-index instead.
    • $dark-backdrop-background has been removed. Use $overlay-backdrop-color instead.
    • $z-index-overlay-backdrop has been removed. Use $overlay-backdrop-z-index instead.
    • TemplatePortalDirective has been removed. Use CdkPortal instead.
    • PortalHostDirective has been removed. Use CdkPortalOutlet instead.
    • TestElement implementations need to provide a setContenteditableValue.

material

    • MAT_AUTOCOMPLETE_DEFAULT_OPTIONS_FACTORY has been removed.
    • MAT_AUTOCOMPLETE_SCROLL_STRATEGY_FACTORY has been removed.
    • MAT_AUTOCOMPLETE_SCROLL_STRATEGY_FACTORY_PROVIDER has been removed.
    • matBottomSheet animations symbol has been removed.
    • MAT_BUTTON_TOGGLE_GROUP_DEFAULT_OPTIONS_FACTORY has been removed.
    • MAT_FAB_DEFAULT_OPTIONS_FACTORY has been removed.
    • MAT_CHECKBOX_DEFAULT_OPTIONS_FACTORY has been removed.
    • AnimationCurves has been removed.
    • AnimationDurations has been removed.
    • NativeDateAdapter.useUtcForDisplay has been removed.
    • MAT_DATE_LOCAL_FACTORY has been removed.
    • MatCommonModule has been removed.
    • GranularSanityChecks has been removed.
    • MATERIAL_SANITY_CHECKS has been removed.
    • SanityChecks has been removed.
    • matDatepickerAnimations symbol has been removed.
    • MAT_DATEPICKER_SCROLL_STRATEGY_FACTORY has been removed.
    • MAT_DATEPICKER_SCROLL_STRATEGY_FACTORY_PROVIDER has been removed.
    • MAT_RANGE_DATE_SELECTION_MODEL_FACTORY has been removed.

... (truncated)

Commits

Updates @angular/forms from 17.3.12 to 21.0.2

Release notes

Sourced from @​angular/forms's releases.

21.0.2

compiler

Commit Description
fix - 78fd159b78 prevent XSS via SVG animation attributeName and MathML/SVG URLs

21.0.1

compiler-cli

Commit Description
fix - 39c577bc36 do not type check native controls with ControlValueAccessor
fix - 8d3a89a477 escape angular control flow in jsdoc
fix - bc34083d34 ignore non-existent files

core

Commit Description
fix - 0ea1e07174 apply bootstrap-options migration to platformBrowserDynamic
fix - 70507b8c1c debug data causing memory leak for root effects
fix - a55482fca3 notify profiler events in case of errors
fix - 49ad7c6508 use injected DOCUMENT for CSP_NONCE
perf - cc1ec09931 avoid repeat searches for field directive

forms

Commit Description
feat - 7d5c7cf99a add DI option for classes on Field directive
fix - 8acf5d2756 allow dynamic type bindings on signal form controls
fix - de5fca94c5 run reset as untracked

http

Commit Description
fix - 3240d856d9 prevent XSRF token leakage to protocol-relative URLs

migrations

Commit Description
fix - f394215b14 detect structural ngTemplateOutlet and ngComponentOutlet

VSCode Extension: 21.0.0

  • fix(language-service): address potential memory leak during project creation (89095946cf)
  • fix(language-server): fix directory renaming on Windows (3f7111a9c3)

21.0.0

common

Commit Description
feat - c795960ada Add experimental support for the Navigation API (#63406)
feat - 9eac43cf46 Support of optional keys for the KeyValue pipe (#48814)
feat - a1868c9d13 update to cldr 47 (#64032)
fix - 196fa500a3 properly type ngComponentOutlet (#64561)

... (truncated)

Changelog

Sourced from @​angular/forms's changelog.

21.0.2 (2025-12-01)

compiler

Commit Type Description
78fd159b78 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.15 (2025-12-01)

compiler

Commit Type Description
d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description
7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description
05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

... (truncated)

Commits
  • e3f5f34 refactor(forms): Make reset take value
  • 7d5c7cf feat(forms): add DI option for classes on Field directive
  • 8acf5d2 fix(forms): allow dynamic type bindings on signal form controls
  • 4845a33 refactor(forms): support custom control directives
  • de5fca9 fix(forms): run reset as untracked
  • 91d8d55 fix(forms): Set error message of a schema error.
  • e682f00 refactor(forms): reduce boilerplate needed to define custom controls
  • d89e522 fix(forms): debounce updates from interop controls
  • e1a7c35 refactor(forms): improve typing on min & max (#65212)
  • ff4633d refactor(forms): allow passing number|string|null paths to min & max (#65212)
  • Additional commits viewable in compare view

Updates @angular/material from 17.3.10 to 21.0.1

Release notes

Sourced from @​angular/material's releases.

21.0.1

material

Commit Description
fix - 043d9cacc select: render panel next to trigger (#32363)

cdk

Commit Description
fix - ccc12c387 testing: errors in harnesses when using Vitest (#32399)

multiple

Commit Description
fix - 02965bb0e resolve forward ref errors (#32413)

21.0.0

aria

Commit Description
feat - a821a3ef0 grid: create the aria grid (#32092)
feat - f9d3cde14 menu: create the aria menu (#32080)
feat - a0b580027 toolbar: adds skip disabled toolbar example to dev-app (#32127)
feat - 5396c4347 toolbar: adds toolbar basic vertical example to dev-app (#32126)
feat - ba9f79be5 toolbar: adds toolbar-basic-horizontal-example to dev-app (#32106)
fix - ec6045b27 accordion: rename value to panelId for trigger and panel (#32295)
fix - 0b03c6e96 combobox: add missing apis (#32124)
fix - 25223a2f8 combobox: dialog popup support (#32279)
fix - a47ebeb96 combobox: disabled state (#32308)
fix - 127d3dba5 combobox: escape key behavior (#32364)
fix - c3279ca4b combobox: highlighting edge cases (#32136)
fix - 1232805db combobox: readonly behavior (#32169)
fix - 6c46f950d combobox: several small fixes (#32202)
fix - 8beb22f8c combobox: use click instead of pointerup (#32324)
fix - 92d933421 grid: fix navigation bugs and add grid behavior unit tests (#32140)
fix - e3babf3fc grid: rtl navigation (#32170)
fix - fe79e982c menu: add expansion delay (#32293)
fix - 3d1cafbdd menu: add selectable to inputs (#32131)
fix - 56631cb85 menu: deferred content import
fix - 95e648ad8 menu: disabled state (#32301)
fix - ce20dbe1a menu: lazy render trigger (#32203)
fix - 19095030a menu: public api cleanup (#32189)
fix - 4b5db1328 menu: rtl text direction (#32254)
fix - bac171d8b toolbar: allow developers to wrap widgets (#32341)
fix - d8acd69f5 tree: adds rtl keyboard functionality for tree (#32305)
fix - 86558d2aa tree: internal conformance check (#32337)
fix - 09e31e716 tree: only reset selected values if used in combobox (#32329)
fix - 05f936ae1 tree: tree item visibility issue (#32156)
fix - afe4d063d ui-patterns: internal conformance fixes (#32102)

cdk

Commit Description

... (truncated)

Changelog

Sourced from @​angular/material's changelog.

21.0.1 "sulfur-snack" (2025-11-26)

cdk

Commit Type Description
ccc12c387 fix testing: errors in harnesses when using Vitest (#32399)

material

Commit Type Description
043d9cacc fix select: render panel next to trigger (#32363)

multiple

Commit Type Description
02965bb0e fix resolve forward ref errors (#32413)

21.0.0 "damask-dachshund" (2025-11-19)

Breaking Changes

cdk

    • LIVE_ANNOUNCER_ELEMENT_TOKEN_FACTORY has been removed.
    • TREE_KEY_MANAGER_FACTORY has been removed.
    • TREE_KEY_MANAGER_FACTORY_PROVIDER has been removed.
    • $z-index-overlay-container has been removed. Use $overlay-container-z-index instead.
    • $z-index-overlay has been removed. Use $overlay-z-index instead.
    • $dark-backdrop-background has been removed. Use $overlay-backdrop-color instead.
    • $z-index-overlay-backdrop has been removed. Use $overlay-backdrop-z-index instead.
    • TemplatePortalDirective has been removed. Use CdkPortal instead.
    • PortalHostDirective has been removed. Use CdkPortalOutlet instead.
    • TestElement implementations need to provide a setContenteditableValue.

material

    • MAT_AUTOCOMPLETE_DEFAULT_OPTIONS_FACTORY has been removed.
    • MAT_AUTOCOMPLETE_SCROLL_STRATEGY_FACTORY has been removed.
    • MAT_AUTOCOMPLETE_SCROLL_STRATEGY_FACTORY_PROVIDER has been removed.
    • matBottomSheet animations symbol has been removed.
    • MAT_BUTTON_TOGGLE_GROUP_DEFAULT_OPTIONS_FACTORY has been removed.
    • MAT_FAB_DEFAULT_OPTIONS_FACTORY has been removed.
    • MAT_CHECKBOX_DEFAULT_OPTIONS_FACTORY has been removed.
    • AnimationCurves has been removed.
    • AnimationDurations has been removed.
    • NativeDateAdapter.useUtcForDisplay has been removed.
    • MAT_DATE_LOCAL_FACTORY has been removed.
    • MatCommonModule has been removed.
    • GranularSanityChecks has been removed.
    • MATERIAL_SANITY_CHECKS has been removed.
    • SanityChecks has been removed.
    • matDatepickerAnimations symbol has been removed.
    • MAT_DATEPICKER_SCROLL_STRATEGY_FACTORY has been removed.
    • MAT_DATEPICKER_SCROLL_STRATEGY_FACTORY_PROVIDER has been removed.
    • MAT_RANGE_DATE_SELECTION_MODEL_FACTORY has been removed.

... (truncated)

Commits

Updates @angular/platform-browser from 17.3.12 to 21.0.2

Release notes

Sourced from @​angular/platform-browser's releases.

21.0.2

compiler

Commit Description
fix - 78fd159b78 prevent XSS via SVG animation attributeName and MathML/SVG URLs

21.0.1

compiler-cli

Commit Description
fix - 39c577bc36 do not type check native controls with ControlValueAccessor
fix - 8d3a89a477 escape angular control flow in jsdoc
fix - bc34083d34 ignore non-existent files

core

Commit Description
fix - 0ea1e07174 apply bootstrap-options migration to platformBrowserDynamic
fix - 70507b8c1c debug data causing memory leak for root effects
fix - a55482fca3 notify profiler events in case of errors
fix - 49ad7c6508 use injected DOCUMENT for CSP_NONCE
perf - cc1ec09931 avoid repeat searches for field directive

forms

Commit Description
feat - 7d5c7cf99a add DI option for classes on Field directive
fix - 8acf5d2756 allow dynamic type bindings on signal form controls
fix - de5fca94c5 run reset as untracked

http

Commit Description
fix - 3240d856d9 prevent XSRF token leakage to protocol-relative URLs

migrations

Commit Description
fix - f394215b14 detect structural ngTemplateOutlet and ngComponentOutlet

VSCode Extension: 21.0.0

  • fix(language-service): address potential memory leak during project creation (89095946cf)
  • fix(language-server): fix directory renaming on Windows (3f7111a9c3)

21.0.0

common

Commit Description
feat - c795960ada Add experimental support for the Navigation API (

…, @angular/platform-browser, @angular/platform-browser-dynamic and @angular/router

Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/cdk](https://github.com/angular/components), [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms), [@angular/material](https://github.com/angular/components), [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser), [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) and [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router). These dependencies needed to be updated together.

Updates `@angular/common` from 17.3.12 to 21.0.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/21.0.2/packages/common)

Updates `@angular/cdk` from 17.3.10 to 21.0.1
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](angular/components@17.3.10...21.0.1)

Updates `@angular/forms` from 17.3.12 to 21.0.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/21.0.2/packages/forms)

Updates `@angular/material` from 17.3.10 to 21.0.1
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](angular/components@17.3.10...21.0.1)

Updates `@angular/platform-browser` from 17.3.12 to 21.0.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/21.0.2/packages/platform-browser)

Updates `@angular/platform-browser-dynamic` from 17.3.12 to 21.0.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/21.0.2/packages/platform-browser-dynamic)

Updates `@angular/router` from 17.3.12 to 21.0.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/21.0.2/packages/router)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.0.2
  dependency-type: direct:production
- dependency-name: "@angular/cdk"
  dependency-version: 21.0.1
  dependency-type: direct:production
- dependency-name: "@angular/forms"
  dependency-version: 21.0.2
  dependency-type: direct:production
- dependency-name: "@angular/material"
  dependency-version: 21.0.1
  dependency-type: direct:production
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.0.2
  dependency-type: direct:production
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-version: 21.0.2
  dependency-type: direct:production
- dependency-name: "@angular/router"
  dependency-version: 21.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants