Skip to content

build(deps): bump @angular/core from 21.2.17 to 21.2.19 in /web - #863

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/angular/core-21.2.19
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/angular/core-21.2.19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/core from 21.2.17 to 21.2.19.

Release notes

Sourced from @​angular/core's releases.

21.2.19

compiler

Commit Description
fix - e2660c3dee disallow i18n event attributes
fix - 7b884f585a restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - 948a8d6831 distinguish repeated transfer cache params
fix - 9949dccce1 enable xsrf for root-provided HttpClient

platform-server

Commit Description
fix - f34a93c946 update domino to latest version

21.2.18

compiler-cli

Commit Description
fix - 8d22cc953b update babel dependencies to latest v7

core

Commit Description
fix - 6bcce117fb avoid caching missing locale data
fix - 5a693bafcd reject dynamic script host elements

http

Commit Description
fix - 91df739b80 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1804f73bec preserve referrer in asset requests
fix - e86c31bf26 preserve referrer policy in asset requests
Changelog

Sourced from @​angular/core's changelog.

21.2.19 (2026-07-29)

compiler

Commit Type Description
e2660c3dee fix disallow i18n event attributes
7b884f585a fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
948a8d6831 fix distinguish repeated transfer cache params
9949dccce1 fix enable xsrf for root-provided HttpClient

platform-server

Commit Type Description
f34a93c946 fix update domino to latest version

21.2.18 (2026-07-08)

compiler-cli

Commit Type Description
8d22cc953b fix update babel dependencies to latest v7

core

Commit Type Description
6bcce117fb fix avoid caching missing locale data
5a693bafcd fix reject dynamic script host elements

http

Commit Type Description
91df739b80 fix prevent caching of responses with Set-Cookie headers

service-worker

Commit Type Description
1804f73bec fix preserve referrer in asset requests
e86c31bf26 fix preserve referrer policy in asset requests

Commits
  • 7b884f5 fix(compiler): restrict possible event handler check to property names longer...
  • e2660c3 fix(compiler): disallow i18n event attributes
  • 5a693ba fix(core): reject dynamic script host elements
  • 6bcce11 fix(core): avoid caching missing locale data
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Aug 3, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript labels Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/angular/core-21.2.19 branch from 8360718 to d6131b0 Compare August 6, 2026 13:17
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/angular/core-21.2.19 branch from d6131b0 to 5035ff3 Compare August 19, 2026 09:16
Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 21.2.17 to 21.2.19.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.19/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.19/packages/core)

---
updated-dependencies:
- dependency-name: "@angular/core"
  dependency-version: 21.2.19
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/angular/core-21.2.19 branch from 5035ff3 to 79814d2 Compare August 20, 2026 05:42
kyasbal added a commit to kyasbal/khi that referenced this pull request Sep 5, 2026
Update web/ dependencies within semver ranges to consolidate and supersede
the 10 open Dependabot PRs on GitHub:
- GoogleCloudPlatform#948: fast-uri (3.1.2 -> 3.1.7, fixing security advisories)
- GoogleCloudPlatform#942: browserslist (4.28.4 -> 4.28.9)
- GoogleCloudPlatform#883: @hono/node-server (1.19.14 -> 2.1.1)
- GoogleCloudPlatform#877: hono (4.12.27 -> 4.13.7)
- GoogleCloudPlatform#875: postcss (8.5.25 -> 8.5.28)
- GoogleCloudPlatform#868: socket.io-parser (4.2.6 -> 4.2.7)
- GoogleCloudPlatform#864: ip-address (10.2.0 -> 10.7.0)
- GoogleCloudPlatform#863: @angular/core (21.2.17 -> 21.2.22)
- GoogleCloudPlatform#862: @angular/compiler (21.2.17 -> 21.2.22)
- GoogleCloudPlatform#861: @angular/common (21.2.17 -> 21.2.22)

Also update allowScripts in web/package.json to cover @parcel/watcher@2.6.0.

fix(web): use public npmjs registry in package-lock.json
kyasbal added a commit that referenced this pull request Sep 5, 2026
Update web/ dependencies within semver ranges to consolidate and supersede
the 10 open Dependabot PRs on GitHub:
- #948: fast-uri (3.1.2 -> 3.1.7, fixing security advisories)
- #942: browserslist (4.28.4 -> 4.28.9)
- #883: @hono/node-server (1.19.14 -> 2.1.1)
- #877: hono (4.12.27 -> 4.13.7)
- #875: postcss (8.5.25 -> 8.5.28)
- #868: socket.io-parser (4.2.6 -> 4.2.7)
- #864: ip-address (10.2.0 -> 10.7.0)
- #863: @angular/core (21.2.17 -> 21.2.22)
- #862: @angular/compiler (21.2.17 -> 21.2.22)
- #861: @angular/common (21.2.17 -> 21.2.22)

Also update allowScripts in web/package.json to cover @parcel/watcher@2.6.0.

fix(web): use public npmjs registry in package-lock.json
@kyasbal kyasbal closed this in #959 Sep 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/angular/core-21.2.19 branch September 5, 2026 03:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants