Skip to content

Bump @angular/compiler, @angular/fire, @angular/platform-browser-dynamic, @angular-builders/custom-webpack, @angular-devkit/build-angular, @angular/build and @angular/compiler-cli in /frontend-angular - #2964

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/frontend-angular/multi-cedad1337b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/compiler, @angular/fire, @angular/platform-browser-dynamic, @angular-builders/custom-webpack, @angular-devkit/build-angular, @angular/build and @angular/compiler-cli. These dependencies needed to be updated together.
Updates @angular/compiler from 19.0.0 to 22.1.6

Release notes

Sourced from @​angular/compiler's releases.

22.1.6

compiler

Commit Description
fix - cbb8702143 namespace @property declarations

compiler-cli

Commit Description
fix - aea121e532 do not flag callable objects with zero parameters in uninvoked track function check

core

Commit Description
fix - c19b948ef8 apply SkipSelf to only the starting node in embedded views

platform-server

Commit Description
fix - d20a379583 avoid sourcemap corruption during domino path substitution

router

Commit Description
fix - 95c01e9cde keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit Description
fix - d90698dae7 check uninvoked signal aliases in extended diagnostic

core

Commit Description
fix - 2ceeb27078 cancel stale debounce timers to prevent timer leaks
fix - ed2e401d2d don't fail NgModule checks for a pipe that extends a base class
fix - c65d378bb4 validate SVG animation attributes outside the SVG namespace

forms

Commit Description
fix - 43aaeaec29 avoid writing to name input on ControlValueAccessor

migrations

Commit Description
fix - d85288d75f skip tsconfig files of non-Angular projects

platform-server

Commit Description
fix - 3b8723ce3d resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description
fix - 4340a63c52 avoid view transitions when the user agent provides one

... (truncated)

Commits
  • cbb8702 fix(compiler): namespace @property declarations
  • dfe7be4 refactor(compiler): emit any as type argument for ɵɵInjectableDeclaration
  • c65d378 fix(core): validate SVG animation attributes outside the SVG namespace
  • 60f8a78 refactor(core): defer foreign component rendering to post-update pass
  • 079a846 fix(compiler-cli): Produce correct tcb expression for optional chaining
  • 05c7c72 fix(compiler): scope animations declared in minified nested rules
  • df00ed2 refactor(compiler-cli): add compiler option for enabling source locations
  • 83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
  • eb0d62e Revert "fix(compiler): preserve &ngsp; between sibling control flow blocks"
  • 94f0b9a fix(compiler): preserve &ngsp; between sibling control flow blocks
  • Additional commits viewable in compare view

Updates @angular/fire from 19.0.0 to 20.0.1

Release notes

Sourced from @​angular/fire's releases.

20.0.1

What's Changed

New Contributors

Full Changelog: angular/angularfire@20.0.0...20.0.1

20.0.0

What's Changed

  • Peer on Angular v20
  • Peer on firebase-tools v14

Full Changelog: angular/angularfire@19.2.0...20.0.0

20.0.0-rc.0

What's Changed

  • Peer on Angular v20
  • Peer on firebase-tools v14

Full Changelog: angular/angularfire@19.2.0...20.0.0-rc.0

19.2.0

What's Changed

New Contributors

Full Changelog: angular/angularfire@19.1.0...19.2.0

19.1.0

What's Changed

New Contributors

Full Changelog: angular/angularfire@19.0.0...19.1.0

Commits

Updates @angular/platform-browser-dynamic from 19.0.0 to 20.0.7

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

19.2.25

platform-server

Commit Description
fix - e2fb854d55 throw on suspicious URLs and restrict protocol-relative URLs
fix - 0a8befb493 update domino to latest version

19.2.24

compiler

Commit Description
fix - 6ea6379123 prevent namespaced SVG elements from being stripped

19.2.23

common

Commit Description
fix - 62dd27d6af add upper bounds for digitsInfo
fix - 17326725ba sanitize placeholder

compiler

Commit Description
fix - 932e0728db normalize tag names with custom namespaces in DomElementSchemaRegistry
fix - 2e3d0371ab sanitize dynamic href and xlink:href bindings on SVG a elements
fix - fe1207e8c5 strip namespaced SVG script elements during template compilation

core

Commit Description
fix - c6bb0692e2 reject script element as a dynamic component host
fix - 3960b21558 sanitize meta selectors
fix - 3632fa4b69 support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation
fix - 620230dac4 synchronize core sanitization schema with compiler
fix - d31f84116c wrap i18n dynamic element property updates in active index states

http

Commit Description
fix - 9940ffd781 exclude withCredentials requests from transfer cache
fix - 0f67f0b962 skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description
fix - d187e8aeda normalize path parsing in ServerPlatformLocation
fix - c75f60ef8a secure location and document initialization against SSRF and path hijack

service-worker

Commit Description
fix - 37ee9ffd9e preserve redirect policy on reconstructed asset requests
fix - 97f796203f Preserves explicit 'credentials: omit' in asset requests
fix - 5619120931 Preserves HTTP cache mode in asset group requests

... (truncated)

Changelog

Sourced from @​angular/platform-browser-dynamic's changelog.

20.0.7 (2025-07-09)

compiler-cli

Commit Type Description
2c18043240 fix use proper name for diagnostic type (#62479)

20.0.6 (2025-07-01)

20.0.5 (2025-06-25)

compiler-cli

Commit Type Description
de0d525ad7 fix add suggestion when pipe is missing (#62146)
3eb5a79a83 fix handle initializer APIs wrapped in type casts (#62203)

core

Commit Type Description
a2e6f317a7 fix allow to set a resource in an error state (#62253)
4c00238a69 fix avoid injecting ErrorHandler from a destroyed injector (#61886)
369f03ad7f fix unable to retrieve defer blocks in tests when component injects ViewContainerRef (#62156)

router

Commit Type Description
65c59dd796 fix handle scrollRestoration error in restricted environments (#62186)

upgrade

Commit Type Description
144c429230 fix Make zoneless work with hybrid apps (#61660)

20.0.4 (2025-06-18)

core

Commit Type Description
e343cdfb86 fix Fixes template outlet hydration (#62012)
67f657e4a3 fix inject APP_ID before injector is destroyed (#61885)
ae212b51ee fix Wrap ErrorEvent with no error property (#62081)

migrations

Commit Type Description
82bf9848a1 fix more robust trailing comma removal in unused imports migration (#62118)

... (truncated)

Commits
  • 31e3eb2 build: migrate to use web test runner rules (#62294)
  • f201df9 build: migrate to using new jasmine_test (#62106)
  • 8564cf4 build: replace all ng_package with new rule from rules_angular (#61862)
  • 4fa2762 build: rework benchmarks and examples in modules/ to new optimization rule
  • 968bbe9 build: migrate platform-browser and platform-browser-dynamic package to use r...
  • 88c70eb refactor(platform-browser): replace platform-browser-dynamic with `platfor...
  • 30e0812 fix(core): update min Node.js support to 20.19, 22.12, and 24.0 (#61500)
  • 3433021 build: move private testing helpers outside platform-browser/testing (#61476)
  • bc2cab7 refactor(platform-browser): Deprecate the platform-browser-dynamic package ...
  • 1b4b44e refactor: add explicit types for exports relying on inferred call return type...
  • Additional commits viewable in compare view

Updates @angular-builders/custom-webpack from 19.0.0 to 22.0.1

Changelog

Sourced from @​angular-builders/custom-webpack's changelog.

22.0.1 (2026-06-23)

Note: Version bump only for package @​angular-builders/custom-webpack

22.0.1-beta.0 (2026-06-22)

Note: Version bump only for package @​angular-builders/custom-webpack

22.0.0 (2026-06-10)

Note: Version bump only for package @​angular-builders/custom-webpack

22.0.0-beta.1 (2026-06-09)

Note: Version bump only for package @​angular-builders/custom-webpack

22.0.0-beta.0 (2026-06-09)

⚠ BREAKING CHANGES

  • All packages now require Angular 22.
  • User TypeScript config/plugin modules now load via jiti instead of ts-node. Configs are transpiled rather than type-checked (run tsc --noEmit separately if you relied on build-time type-checking); ts-node and tsconfig-paths are no longer dependencies; and the NODE_OPTIONS='--loader ts-node/esm' workaround for ESM apps is no longer needed.

Features

  • ng add / ng update schematics for jest, custom-esbuild, custom-webpack (#2267) (062f423), closes #22
  • replace ts-node with jiti for loading TypeScript modules (#2287) (0348e06), closes #816
  • upgrade builders + examples to Angular 22 (22.0.0-rc.2) (#2264) (9ed7020)

Miscellaneous Chores

  • graduate Angular 22 from RC to GA (daec882)

21.1.0 (2026-06-08)

Note: Version bump only for package @​angular-builders/custom-webpack

21.1.0-beta.13 (2026-06-05)

Reverts

21.1.0-beta.12 (2026-06-04)

Bug Fixes

  • builders: annotate builder default exports with Builder to avoid TS2742 (#2278) (7db3848)

21.1.0-beta.11 (2026-06-01)

... (truncated)

Commits
  • 0a130ae ci(release): publish
  • 79b145a ci(release): publish
  • 6cdd684 style: format repo with prettier and add CI format gate (#2323)
  • 7cebff9 ci(release): publish
  • 6647e73 ci(release): publish
  • 49f90e4 docs(changelog): clean up v22 breaking-change sections
  • a27c6b0 ci(release): publish
  • daec882 chore!: graduate Angular 22 from RC to GA
  • 2cb9a56 chore(deps): update bazel-example to Angular CLI 22
  • 0348e06 feat!: replace ts-node with jiti for loading TypeScript modules (#2287)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​angular-builders/custom-webpack since your current version.


Updates @angular-devkit/build-angular from 19.2.3 to 21.2.24

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.24

@​angular/build

Commit Description
fix - dbaadc2f6e update undici to 7.29.1

21.2.23

@​angular-devkit/build-angular

Commit Description
fix - d3aaa48ef update less to 4.9.0

@​angular/ssr

Commit Description
fix - 645e41a47 ensure public directory containment in CommonEngine

21.2.22

@​angular-devkit/build-angular

Commit Description
fix - b0047b04f5 update webpack-dev-server to 5.2.6

21.2.21

@​angular/cli

Commit Description
fix - ba5d16cac update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular/build

Commit Description
fix - f7f60e69e bump undici to 7.29.0

21.2.20

@​angular-devkit/build-angular

Commit Description
fix - 972f6db7e9 upgrade postcss to 8.5.23

@​angular/build

Commit Description
fix - 8de75ada50 upgrade postcss to 8.5.23

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.24 (2026-09-10)

@​angular/build

Commit Type Description
dbaadc2f6e fix update undici to 7.29.1

20.3.37 (2026-09-10)

@​angular-devkit/build-angular

Commit Type Description
c37642011e fix update undici to 7.29.1

22.1.8 (2026-09-10)

@​angular/build

Commit Type Description
a6e30fa378 fix disable strictPort when port 0 is used in dev-server
35a5d4aa49 perf avoid full JSON parsing when updating sourcemap ignore list
48cc43cbf2 perf read rendered module length once per module in chunk optimizer (#34045)

22.2.0-next.6 (2026-09-02)

@​angular/cli

Commit Type Description
b37c93329 fix isolate temporary package installations from parent Yarn workspace

@​angular/build

Commit Type Description

... (truncated)

Commits
  • aad747e release: cut the v21.2.24 release
  • c7d3f18 build: replace pnpm -s shorthand with --silent for improved readability
  • 2aa61dc test: update e2e global npm version to 11.19.1
  • dbaadc2 fix(@​angular/build): update undici to 7.29.1
  • e2582bb release: cut the v21.2.23 release
  • 645e41a fix(@​angular/ssr): ensure public directory containment in CommonEngine
  • d3aaa48 fix(@​angular-devkit/build-angular): update less to 4.9.0
  • 60dee48 release: cut the v21.2.22 release
  • b0047b0 fix(@​angular-devkit/build-angular): update webpack-dev-server to 5.2.6
  • 90e8059 release: cut the v21.2.21 release
  • Additional commits viewable in compare view

Updates @angular/build from 19.2.3 to 22.1.8

Release notes

Sourced from @​angular/build's releases.

22.1.8

@​angular/build

Commit Description
fix - a6e30fa378 disable strictPort when port 0 is used in dev-server
perf - 35a5d4aa49 avoid full JSON parsing when updating sourcemap ignore list
perf - 48cc43cbf2 read rendered module length once per module in chunk optimizer (#34045)

22.1.7

@​angular/cli

Commit Description
fix - e9db85c0f isolate temporary package installations from parent Yarn workspace

@​angular/build

Commit Description
fix - 1c9b1af61 add splitting option to unit-test builder
fix - 4b861f458 enable code splitting for vitest browser tests
fix - f1fd82381 fail build and exclude routes when prerendering fails
fix - a84906fe3 keep dev-server Vite cache worktree-local
fix - fcf883ef1 preserve binary values in the SQLite cache store

@​angular/ssr

Commit Description
fix - baf1ca189 decode pathname when constructing server asset path
fix - 70748ca8e ensure public directory containment in CommonEngine

22.1.6

@​angular/build

Commit Description
fix - 3f132eaa97 ignore side-effect annotations in unit test builds
perf - 5b1028936f batch prerender routes and share in-memory server bundles

@​angular/ssr

Commit Description
fix - 76818cb811 abort web request signal when node request is aborted

22.1.5

@​schematics/angular

Commit Description
fix - ba2b0e4c2 transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/cli

Commit Description
fix - e672271f8 enforce MCP roots in get_best_practices tool
fix - a14916cc4 handle errors from isAllowedWorkspacePath in best-practices tool
fix - d6e1cddff throw on out-of-roots workspace in best-practices tool

@​angular/build

... (truncated)

Changelog

Sourced from @​angular/build's changelog.

22.1.8 (2026-09-10)

@​angular/build

Commit Type Description
a6e30fa378 fix disable strictPort when port 0 is used in dev-server
35a5d4aa49 perf avoid full JSON parsing when updating sourcemap ignore list
48cc43cbf2 perf read rendered module length once per module in chunk optimizer (#34045)

22.2.0-next.6 (2026-09-02)

@​angular/cli

Commit Type Description
b37c93329 fix isolate temporary package installations from parent Yarn workspace

@​angular/build

Commit Type Description
4b8c62a8f fix add splitting option to unit-test builder
51565d4bc fix enable code splitting for vitest browser tests
5b850fdfc fix fail build and exclude routes when prerendering fails
dfa7f03a9 fix keep dev-server Vite cache worktree-local
135662d9a fix preserve binary values in the SQLite cache store
701bde481 fix preserve duplicate bundle filenames across output file types
6ee559ca9 perf bypass worker dispatch for files without transform candidates
2b85529e8 perf use iterative post-order AST traversal for OXC transforms
ecbcd87b8 perf use native sass-embedded compiler daemon
ce83ac0e8 perf use size-weighted task heuristics in i18n inliner

@​angular/ssr

Commit Type Description
4fa81d403 fix decode pathname when constructing server asset path
bb72145f9 fix ensure public directory containment in CommonEngine

22.1.7 (2026-09-02)

... (truncated)

Commits
  • f69e446 release: cut the v22.1.8 release
  • 2500e4f build: replace pnpm -s shorthand with --silent for improved readability
  • fa9fc6e build: set verifyDepsBeforeRun to warn in pnpm workspace configuration
  • 61cfc6d test(@​angular/build): prevent flakiness in incremental-watch e2e test
  • ca322ca build: update cross-repo angular dependencies
  • 1bbcd86 build: update pnpm to v11.26.0
  • b496e4a refactor: replace -s flag with --silent in husky prepare-commit-msg script
  • 87a1610 test(@​angular/build): fix flakiness in dev-server rebuild error detection test
  • 57c9a4a test(@​angular-devkit/build-angular): prevent flakiness in live-reload proxies...
  • a6e30fa fix(@​angular/build): disable strictPort when port 0 is used in dev-server
  • Additional commits viewable in compare view

Updates @angular/compiler-cli from 19.0.0 to 22.1.6

Release notes

Sourced from @​angular/compiler-cli's releases.

22.1.6

compiler

Commit Description
fix - cbb8702143 namespace @property declarations

compiler-cli

Commit Description
fix - aea121e532 do not flag callable objects with zero parameters in uninvoked track function check

core

Commit Description
fix - c19b948ef8 apply SkipSelf to only the starting node in embedded views

platform-server

Commit Description
fix - d20a379583 avoid sourcemap corruption during domino path substitution

router

Commit Description
fix - 95c01e9cde keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit Description
fix - d90698dae7 check uninvoked signal aliases in extended diagnostic

core

Commit Description
fix - 2ceeb27078 cancel stale debounce timers to prevent timer leaks
fix - ed2e401d2d don't fail NgModule checks for a pipe that extends a base class
fix - c65d378bb4 validate SVG animation attributes outside the SVG namespace

forms

Commit Description
fix - 43aaeaec29 avoid writing to name input on ControlValueAccessor

migrations

Commit Description
fix - d85288d75f skip tsconfig files of non-Angular projects

platform-server

Commit Description
fix - 3b8723ce3d resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description
fix - 4340a63c52 avoid view transitions when the user agent provides one

... (truncated)

Commits
  • aea121e fix(compiler-cli): do not flag callable objects with zero parameters in uninv...
  • dfe7be4 refactor(compiler): emit any as type argument for ɵɵInjectableDeclaration
  • d90698d fix(compiler-cli): check uninvoked signal aliases in extended diagnostic
  • 60f8a78 refactor(core): defer foreign component rendering to post-update pass
  • afe8499 fix(compiler-cli): default template diagnostic related message source file to...
  • 55eeb46 fix(compiler-cli): retain metadata for strict standalone errors
  • 079a846 fix(compiler-cli): Produce correct tcb expression for optional chaining
  • df00ed2 refactor(compiler-cli): add compiler option for enabling source locations
  • 83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
  • 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…mic, @angular-builders/custom-webpack, @angular-devkit/build-angular, @angular/build and @angular/compiler-cli

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler), [@angular/fire](https://github.com/angular/angularfire), [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic), [@angular-builders/custom-webpack](https://github.com/just-jeb/angular-builders/tree/HEAD/packages/custom-webpack), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [@angular/build](https://github.com/angular/angular-cli) and [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli). These dependencies needed to be updated together.

Updates `@angular/compiler` from 19.0.0 to 22.1.6
- [Release notes](https://github.com/angular/angular/releases)
- [Commits](https://github.com/angular/angular/commits/v22.1.6/packages/compiler)

Updates `@angular/fire` from 19.0.0 to 20.0.1
- [Release notes](https://github.com/angular/angularfire/releases)
- [Commits](angular/angularfire@19.0.0...20.0.1)

Updates `@angular/platform-browser-dynamic` from 19.0.0 to 20.0.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/20.0.7/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/20.0.7/packages/platform-browser-dynamic)

Updates `@angular-builders/custom-webpack` from 19.0.0 to 22.0.1
- [Release notes](https://github.com/just-jeb/angular-builders/releases)
- [Changelog](https://github.com/just-jeb/angular-builders/blob/master/packages/custom-webpack/CHANGELOG.md)
- [Commits](https://github.com/just-jeb/angular-builders/commits/@angular-builders/custom-webpack@22.0.1/packages/custom-webpack)

Updates `@angular-devkit/build-angular` from 19.2.3 to 21.2.24
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@19.2.3...v21.2.24)

Updates `@angular/build` from 19.2.3 to 22.1.8
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@19.2.3...v22.1.8)

Updates `@angular/compiler-cli` from 19.0.0 to 22.1.6
- [Release notes](https://github.com/angular/angular/releases)
- [Commits](https://github.com/angular/angular/commits/v22.1.6/packages/compiler-cli)

---
updated-dependencies:
- dependency-name: "@angular/compiler"
  dependency-version: 22.1.6
  dependency-type: direct:production
- dependency-name: "@angular/fire"
  dependency-version: 20.0.1
  dependency-type: direct:production
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-version: 20.0.7
  dependency-type: direct:production
- dependency-name: "@angular-builders/custom-webpack"
  dependency-version: 22.0.1
  dependency-type: direct:development
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.24
  dependency-type: direct:development
- dependency-name: "@angular/build"
  dependency-version: 22.1.8
  dependency-type: direct:development
- dependency-name: "@angular/compiler-cli"
  dependency-version: 22.1.6
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 12, 2026
@dependabot
dependabot Bot requested a review from ElenaSpb as a code owner September 12, 2026 04:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 12, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants