Skip to content

build(deps): Bump the angular group across 1 directory with 12 updates - #161

Open
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/angular-ebb3ed1a4b
Open

dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/angular-ebb3ed1a4b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the angular group with 11 updates in the / directory:

Package From To
@angular/common 21.2.20 21.2.22
@angular/compiler 21.2.20 21.2.22
@angular/core 21.2.20 21.2.22
@angular/elements 21.2.20 21.2.22
@angular/forms 21.2.20 21.2.22
@angular/localize 21.2.20 21.2.22
@angular/platform-browser 21.2.20 21.2.22
@angular/router 21.2.20 21.2.22
@angular/ssr 21.2.21 21.2.23
@angular-devkit/build-angular 21.2.21 21.2.23
@angular/cli 21.2.21 21.2.23

Updates @angular/common from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/common's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/common's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

Updates @angular/compiler from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/compiler's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/compiler's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

Updates @angular/core from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/core's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/core's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

Updates @angular/elements from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/elements's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/elements's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

Updates @angular/forms from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/forms's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/forms's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

Updates @angular/localize from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/localize's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/localize's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits
  • 4c0bc43 release: cut the v21.2.22 release
  • 5aa6d97 fix(platform-server): avoid stripping unicode whitespace during url resolution
  • 73d8bbd fix(platform-server): update domino to latest version
  • 992d627 release: cut the v21.2.21 release
  • c19a36c fix(platform-browser): disallow event handler attributes in Meta
  • See full diff in compare view

Updates @angular/platform-browser from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/platform-browser's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/platform-browser's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits
  • c19a36c fix(platform-browser): disallow event handler attributes in Meta
  • See full diff in compare view

Updates @angular/router from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/router's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/router's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

Updates @angular/ssr from 21.2.21 to 21.2.23

Release notes

Sourced from @​angular/ssr's releases.

21.2.23

@​angular-devkit/build-angular

Commit Description
fix - d3aaa48ef update less to 4.9.0

@​angular/ssr

Commit Description
fix - 645e41a47 ensure public directory containment in CommonEngine

21.2.22

@​angular-devkit/build-angular

Commit Description
fix - b0047b04f5 update webpack-dev-server to 5.2.6
Changelog

Sourced from @​angular/ssr's changelog.

21.2.23 (2026-09-02)

@​angular-devkit/build-angular

Commit Type Description
d3aaa48ef fix update less to 4.9.0

@​angular/ssr

Commit Type Description
645e41a47 fix ensure public directory containment in CommonEngine

20.3.36 (2026-09-02)

@​angular-devkit/build-angular

Commit Type Description
b4059cdc7 fix update less to 4.9.0

@​angular/ssr

Commit Type Description
c3e5982e4 fix ensure public directory containment in CommonEngine

22.2.0-next.5 (2026-08-26)

@​angular/build

Commit Type Description
4d0be683b7 fix ignore side-effect annotations in unit test builds
e4111ae818 fix prevent memory leaks in parallel compilation and caches
62999cabf4 perf batch prerender routes and share in-memory server bundles
0589edd9cd perf consolidate component stylesheet bundling with shared load result cache
a877aa7ebd perf implement SharedArrayBuffer translation dictionaries for zero-copy worker access
f1cc959439 perf implement sliding-window batching and worker translation eviction
f4dad31cce perf unify Oxc linking and optimization AST traversal passes

... (truncated)

Commits
  • e2582bb release: cut the v21.2.23 release
  • 645e41a fix(@​angular/ssr): ensure public directory containment in CommonEngine
  • d3aaa48 fix(@​angular-devkit/build-angular): update less to 4.9.0
  • 60dee48 release: cut the v21.2.22 release
  • b0047b0 fix(@​angular-devkit/build-angular): update webpack-dev-server to 5.2.6
  • See full diff in compare view

Updates @angular-devkit/build-angular from 21.2.21 to 21.2.23

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.23

@​angular-devkit/build-angular

Commit Description
fix - d3aaa48ef update less to 4.9.0

@​angular/ssr

Commit Description
fix - 645e41a47 ensure public directory containment in CommonEngine

21.2.22

@​angular-devkit/build-angular

Commit Description
fix - b0047b04f5 update webpack-dev-server to 5.2.6
Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.23 (2026-09-02)

@​angular-devkit/build-angular

Commit Type Description
d3aaa48ef fix update less to 4.9.0

@​angular/ssr

Commit Type Description
645e41a47 fix ensure public directory containment in CommonEngine

20.3.36 (2026-09-02)

@​angular-devkit/build-angular

Commit Type Description
b4059cdc7 fix update less to 4.9.0

@​angular/ssr

Commit Type Description
c3e5982e4 fix ensure public directory containment in CommonEngine

22.2.0-next.5 (2026-08-26)

@​angular/build

Commit Type Description
4d0be683b7 fix ignore side-effect annotations in unit test builds
e4111ae818 fix prevent memory leaks in parallel compilation and caches
62999cabf4 perf batch prerender routes and share in-memory server bundles
0589edd9cd perf consolidate component stylesheet bundling with shared load result cache
a877aa7ebd perf implement SharedArrayBuffer translation dictionaries for zero-copy worker access
f1cc959439 perf implement sliding-window batching and worker translation eviction
f4dad31cce perf unify Oxc linking and optimization AST traversal passes

... (truncated)

Commits
  • e2582bb release: cut the v21.2.23 release
  • 645e41a fix(@​angular/ssr): ensure public directory containment in CommonEngine
  • d3aaa48 fix(@​angular-devkit/build-angular): update less to 4.9.0
  • 60dee48 release: cut the v21.2.22 release
  • b0047b0 fix(@​angular-devkit/build-angular): update webpack-dev-server to 5.2.6
  • See full diff in compare view

Updates @angular/cli from 21.2.21 to 21.2.23

Release notes

Sourced from @​angular/cli's releases.

21.2.23

@​angular-devkit/build-angular

Commit Description
fix - d3aaa48ef update less to 4.9.0

@​angular/ssr

Commit Description
fix - 645e41a47 ensure public directory containment in CommonEngine

21.2.22

@​angular-devkit/build-angular

Commit Description
fix - b0047b04f5 update webpack-dev-server to 5.2.6
Changelog

Sourced from @​angular/cli's changelog.

21.2.23 (2026-09-02)

@​angular-devkit/build-angular

Commit Type Description
d3aaa48ef fix update less to 4.9.0

@​angular/ssr

Commit Type Description
645e41a47 fix ensure public directory containment in CommonEngine

20.3.36 (2026-09-02)

@​angular-devkit/build-angular

Commit Type Description
b4059cdc7 fix update less to 4.9.0

@​angular/ssr

Commit Type Description
c3e5982e4 fix ensure public directory containment in CommonEngine

22.2.0-next.5 (2026-08-26)

@​angular/build

Commit Type Description
4d0be683b7 fix ignore side-effect annotations in unit test builds
e4111ae818 fix prevent memory leaks in parallel compilation and caches
62999cabf4 perf batch prerender routes and share in-memory server bundles
0589edd9cd perf consolidate component stylesheet bundling with shared load result cache
a877aa7ebd perf implement SharedArrayBuffer translation dictionaries for zero-copy worker access
f1cc959439 perf implement sliding-window batching and worker translation eviction
f4dad31cce perf unify Oxc linking and optimization AST traversal passes

... (truncated)

Commits
  • e2582bb release: cut the v21.2.23 release
  • 645e41a fix(@​angular/ssr): ensure public directory containment in CommonEngine
  • d3aaa48 fix(@​angular-devkit/build-angular): update less to 4.9.0
  • 60dee48 release: cut the v21.2.22 release
  • b0047b0 fix(@​angular-devkit/build-angular): update webpack-dev-server to 5.2.6
  • See full diff in compare view

Updates @angular/compiler-cli from 21.2.20 to 21.2.22

Release notes

Sourced from @​angular/compiler-cli's releases.

21.2.22

platform-server

Commit Description
fix - 5aa6d97deb avoid stripping unicode whitespace during url resolution
fix - 73d8bbd27c update domino to latest version

21.2.21

platform-browser

Commit Description
fix - c19a36c2fb disallow event handler attributes in Meta
Changelog

Sourced from @​angular/compiler-cli's changelog.

21.2.22 (2026-08-26)

platform-server

Commit Type Description
5aa6d97deb fix avoid stripping unicode whitespace during url resolution
73d8bbd27c fix update domino to latest version

21.2.21 (2026-08-19)

platform-browser

Commit Type Description
c19a36c2fb fix disallow event handler attributes in Meta

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
@dependabot dependabot Bot changed the title build(deps): bump the angular group across 1 directory with 12 updates build(deps): Bump the angular group across 1 directory with 12 updates Sep 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-ebb3ed1a4b branch 2 times, most recently from 445e9f0 to d108df9 Compare September 7, 2026 23:19
Bumps the angular group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.20` | `21.2.22` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.20` | `21.2.22` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.20` | `21.2.22` |
| [@angular/elements](https://github.com/angular/angular/tree/HEAD/packages/elements) | `21.2.20` | `21.2.22` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.20` | `21.2.22` |
| [@angular/localize](https://github.com/angular/angular) | `21.2.20` | `21.2.22` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.20` | `21.2.22` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.20` | `21.2.22` |
| [@angular/ssr](https://github.com/angular/angular-cli) | `21.2.21` | `21.2.23` |
| [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `21.2.21` | `21.2.23` |
| [@angular/cli](https://github.com/angular/angular-cli) | `21.2.21` | `21.2.23` |



Updates `@angular/common` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/common)

Updates `@angular/compiler` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/compiler)

Updates `@angular/core` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/core)

Updates `@angular/elements` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/elements)

Updates `@angular/forms` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/forms)

Updates `@angular/localize` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](angular/angular@v21.2.20...v21.2.22)

Updates `@angular/platform-browser` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/platform-browser)

Updates `@angular/router` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/router)

Updates `@angular/ssr` from 21.2.21 to 21.2.23
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.21...v21.2.23)

Updates `@angular-devkit/build-angular` from 21.2.21 to 21.2.23
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.21...v21.2.23)

Updates `@angular/cli` from 21.2.21 to 21.2.23
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.21...v21.2.23)

Updates `@angular/compiler-cli` from 21.2.20 to 21.2.22
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v21.2.22/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.22/packages/compiler-cli)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cli"
  dependency-version: 21.2.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/common"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler-cli"
  dependency-version: 21.2.22
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/core"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/elements"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/forms"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/localize"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/router"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/ssr"
  dependency-version: 21.2.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-ebb3ed1a4b branch from d108df9 to 921e5bc Compare September 10, 2026 18:58
@adamjohnwright
adamjohnwright enabled auto-merge (squash) September 10, 2026 20:22
@adamjohnwright

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@adamjohnwright

Copy link
Copy Markdown
Contributor

This cannot be merged as it stands, and the green checks are misleading.

The group bumps 11 Angular packages from 21.2.20 to 21.2.22 but leaves
@angular/platform-browser-dynamic and @angular/compiler-cli behind. Angular's
packages peer-depend on one another at exact versions, so the resulting set
does not resolve:

Conflicting peer dependency: @angular/core@21.2.23
  peer @angular/core@"21.2.23" from @angular/platform-browser-dynamic@21.2.23
    @angular/platform-browser-dynamic@"^21.2.20" from the root project

The checks pass only because CI installs with --legacy-peer-deps, which
accepts an inconsistent tree. This repo's pre-push check runs npm ci --dry-run
without that flag, and rejects it — that is what caught this.

It is a regression, not a pre-existing state: main resolves strictly today
(added 63 packages).

Fixing it properly means moving the whole framework train together — core,
common, compiler, forms, router, elements, localize, platform-browser,
platform-browser-dynamic and compiler-cli all to the same version — and
regenerating the lockfile, which changes far more than a dependabot patch should.
That deserves its own PR with its own testing rather than being folded into a
batch.

The other five open bumps have been taken in #214. Leaving this one open.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant