Skip to content

chore(deps-dev): bump @angular/compiler from 21.2.17 to 21.2.20 - #23

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/compiler-21.2.20
Open

chore(deps-dev): bump @angular/compiler from 21.2.17 to 21.2.20#23
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/compiler-21.2.20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown

Bumps @angular/compiler from 21.2.17 to 21.2.20.

Release notes

Sourced from @​angular/compiler's releases.

21.2.20

core

Commit Description
fix - 6afe6fa781 sanitize host bindings on concrete hosts

http

Commit Description
fix - fec5977df4 match header values exactly when deleting
fix - e33d69a71c preserve immutability of materialized clones
fix - caf616670f run root interceptors in the terminal request chain

21.2.19

compiler

Commit Description
fix - e2660c3dee disallow i18n event attributes
fix - 7b884f585a restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - 948a8d6831 distinguish repeated transfer cache params
fix - 9949dccce1 enable xsrf for root-provided HttpClient

platform-server

Commit Description
fix - f34a93c946 update domino to latest version

21.2.18

compiler-cli

Commit Description
fix - 8d22cc953b update babel dependencies to latest v7

core

Commit Description
fix - 6bcce117fb avoid caching missing locale data
fix - 5a693bafcd reject dynamic script host elements

http

Commit Description
fix - 91df739b80 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1804f73bec preserve referrer in asset requests
fix - e86c31bf26 preserve referrer policy in asset requests
Changelog

Sourced from @​angular/compiler's changelog.

21.2.20 (2026-08-12)

core

Commit Type Description
6afe6fa781 fix sanitize host bindings on concrete hosts

http

Commit Type Description
fec5977df4 fix match header values exactly when deleting
e33d69a71c fix preserve immutability of materialized clones
caf616670f fix run root interceptors in the terminal request chain

21.2.19 (2026-07-29)

compiler

Commit Type Description
e2660c3dee fix disallow i18n event attributes
7b884f585a fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
948a8d6831 fix distinguish repeated transfer cache params
9949dccce1 fix enable xsrf for root-provided HttpClient

platform-server

Commit Type Description
f34a93c946 fix update domino to latest version

21.2.18 (2026-07-08)

compiler-cli

Commit Type Description
8d22cc953b fix update babel dependencies to latest v7

core

Commit Type Description
6bcce117fb fix avoid caching missing locale data
5a693bafcd fix reject dynamic script host elements

http

Commit Type Description
91df739b80 fix prevent caching of responses with Set-Cookie headers

service-worker

| Commit | Type | Description |

... (truncated)

Commits
  • 6afe6fa fix(core): sanitize host bindings on concrete hosts
  • 7b884f5 fix(compiler): restrict possible event handler check to property names longer...
  • e2660c3 fix(compiler): disallow i18n event attributes
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 21.2.17 to 21.2.20.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.20/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.20/packages/compiler)

---
updated-dependencies:
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.20
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 11, 2026
@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: b452b563-14ad-4987-aa4e-56e42ef4905b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants