Skip to content

Bump @angular/common from 21.1.3 to 21.2.20 - #97

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/common-21.2.20
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/common-21.2.20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @angular/common from 21.1.3 to 21.2.20.

Release notes

Sourced from @​angular/common's releases.

21.2.20

core

Commit Description
fix - 6afe6fa781 sanitize host bindings on concrete hosts

http

Commit Description
fix - fec5977df4 match header values exactly when deleting
fix - e33d69a71c preserve immutability of materialized clones
fix - caf616670f run root interceptors in the terminal request chain

21.2.19

compiler

Commit Description
fix - e2660c3dee disallow i18n event attributes
fix - 7b884f585a restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - 948a8d6831 distinguish repeated transfer cache params
fix - 9949dccce1 enable xsrf for root-provided HttpClient

platform-server

Commit Description
fix - f34a93c946 update domino to latest version

21.2.18

compiler-cli

Commit Description
fix - 8d22cc953b update babel dependencies to latest v7

core

Commit Description
fix - 6bcce117fb avoid caching missing locale data
fix - 5a693bafcd reject dynamic script host elements

http

Commit Description
fix - 91df739b80 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1804f73bec preserve referrer in asset requests
fix - e86c31bf26 preserve referrer policy in asset requests

21.2.17

common

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.20 (2026-08-12)

core

Commit Type Description
6afe6fa781 fix sanitize host bindings on concrete hosts

http

Commit Type Description
fec5977df4 fix match header values exactly when deleting
e33d69a71c fix preserve immutability of materialized clones
caf616670f fix run root interceptors in the terminal request chain

21.2.19 (2026-07-29)

compiler

Commit Type Description
e2660c3dee fix disallow i18n event attributes
7b884f585a fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
948a8d6831 fix distinguish repeated transfer cache params
9949dccce1 fix enable xsrf for root-provided HttpClient

platform-server

Commit Type Description
f34a93c946 fix update domino to latest version

21.2.18 (2026-07-08)

compiler-cli

Commit Type Description
8d22cc953b fix update babel dependencies to latest v7

core

Commit Type Description
6bcce117fb fix avoid caching missing locale data
5a693bafcd fix reject dynamic script host elements

http

Commit Type Description
91df739b80 fix prevent caching of responses with Set-Cookie headers

service-worker

| Commit | Type | Description |

... (truncated)

Commits
  • caf6166 fix(http): run root interceptors in the terminal request chain
  • fec5977 fix(http): match header values exactly when deleting
  • e33d69a fix(http): preserve immutability of materialized clones
  • 948a8d6 fix(http): distinguish repeated transfer cache params
  • 9949dcc fix(http): enable xsrf for root-provided HttpClient
  • 91df739 fix(http): prevent caching of responses with Set-Cookie headers
  • 86a56dc fix(common): Limits date format string length
  • bcb1b7e fix(http): preserve empty referrer option in HttpRequest
  • a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
  • bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/common-21.2.20 branch from bd7ad15 to 43bc719 Compare September 12, 2026 06:02
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/common-21.2.20 branch 3 times, most recently from bc73e25 to 1d494ee Compare October 2, 2026 11:31
Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) from 21.1.3 to 21.2.20.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.20/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.20/packages/common)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.2.20
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/common-21.2.20 branch from 1d494ee to aa0b137 Compare October 5, 2026 13:41
@sonarqubecloud

sonarqubecloud Bot commented Oct 5, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants