chore(deps): bump the angular group across 1 directory with 11 updates by dependabot[bot] · Pull Request #1242 · morganstanley/ComposeUI

dependabot · 2026-03-01T12:14:52Z

Bumps the angular group with 11 updates in the / directory:

Package	From	To
@angular/animations	`20.3.16`	`20.3.21`
@angular/common	`20.3.16`	`20.3.21`
@angular/compiler	`20.3.16`	`20.3.21`
@angular/core	`20.3.16`	`20.3.21`
@angular/forms	`20.3.16`	`20.3.21`
@angular/platform-browser	`20.3.16`	`20.3.21`
@angular/platform-browser-dynamic	`20.3.16`	`20.3.21`
@angular/router	`20.3.16`	`20.3.21`
@angular/build	`20.3.16`	`20.3.26`
@angular/cli	`20.3.16`	`20.3.26`
@angular/compiler-cli	`20.3.16`	`20.3.21`

Updates @angular/animations from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/animations's releases.

Changelog

Sourced from @angular/animations's changelog.

... (truncated)

Commits

See full diff in compare view

Updates @angular/common from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/common's releases.

Changelog

Sourced from @angular/common's changelog.

... (truncated)

Commits

See full diff in compare view

Updates @angular/compiler from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/compiler's releases.

Changelog

Sourced from @angular/compiler's changelog.

... (truncated)

Commits

a9bcffd fix(core): disallow event attribute bindings in host bindings unconditionally...
02fbf08 fix(compiler): disallow translations of iframe src
See full diff in compare view

Updates @angular/core from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/core's releases.

Changelog

Sourced from @angular/core's changelog.

... (truncated)

Commits

a9bcffd fix(core): disallow event attribute bindings in host bindings unconditionally...
97eeb45 fix(core): validate security-sensitive attributes in i18n bindings (#68468)
626bc8b fix(core): sanitize translated form attributes
72126f9 fix(core): sanitize translated attribute bindings with interpolations
7f9de3c fix(core): block creation of sensitive URI attributes from ICU messages
See full diff in compare view

Updates @angular/forms from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/forms's releases.

Changelog

Sourced from @angular/forms's changelog.

... (truncated)

Commits

See full diff in compare view

Updates @angular/platform-browser from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/platform-browser's releases.

Changelog

Sourced from @angular/platform-browser's changelog.

... (truncated)

Commits

See full diff in compare view

Updates @angular/platform-browser-dynamic from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/platform-browser-dynamic's releases.

Changelog

Sourced from @angular/platform-browser-dynamic's changelog.

... (truncated)

Commits

See full diff in compare view

Updates @angular/router from 20.3.16 to 20.3.21

Release notes

Sourced from @angular/router's releases.

psmulovics · 2026-03-17T15:38:30Z

@dependabot recreate

psmulovics · 2026-04-06T14:38:39Z

@dependabot recreate

psmulovics · 2026-05-18T14:33:09Z

@dependabot recreate

Bumps the angular group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `20.3.16` | `20.3.21` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `20.3.16` | `20.3.21` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `20.3.16` | `20.3.21` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.16` | `20.3.21` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `20.3.16` | `20.3.21` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `20.3.16` | `20.3.21` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `20.3.16` | `20.3.21` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `20.3.16` | `20.3.21` | | [@angular/build](https://github.com/angular/angular-cli) | `20.3.16` | `20.3.26` | | [@angular/cli](https://github.com/angular/angular-cli) | `20.3.16` | `20.3.26` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `20.3.16` | `20.3.21` | Updates `@angular/animations` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/animations) Updates `@angular/common` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/common) Updates `@angular/compiler` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/compiler) Updates `@angular/core` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/core) Updates `@angular/forms` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/forms) Updates `@angular/platform-browser` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/platform-browser-dynamic) Updates `@angular/router` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/router) Updates `@angular/build` from 20.3.16 to 20.3.26 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v20.3.16...v20.3.26) Updates `@angular/cli` from 20.3.16 to 20.3.26 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v20.3.16...v20.3.26) Updates `@angular/compiler-cli` from 20.3.16 to 20.3.21 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.21/packages/compiler-cli) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/build" dependency-version: 20.3.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/cli" dependency-version: 20.3.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/common" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler-cli" dependency-version: 20.3.17 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/core" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/forms" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/router" dependency-version: 20.3.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 1, 2026

dependabot Bot requested a review from a team as a code owner March 1, 2026 12:14

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-6a2a979a9b branch from 26b58b4 to f87e053 Compare March 17, 2026 15:43

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-6a2a979a9b branch 2 times, most recently from 3a5406d to 0392f9a Compare April 6, 2026 14:32

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-6a2a979a9b branch from 0392f9a to 8c99615 Compare April 6, 2026 14:43

psmulovics previously approved these changes Apr 6, 2026

View reviewed changes

dependabot Bot changed the title ~~chore(deps): bump the angular group with 11 updates~~ chore(deps): bump the angular group across 1 directory with 11 updates May 1, 2026

dependabot Bot dismissed psmulovics’s stale review via 3798d0c May 1, 2026 14:12

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-6a2a979a9b branch from 8c99615 to 3798d0c Compare May 1, 2026 14:12

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular-6a2a979a9b branch from 3798d0c to 71f77f8 Compare May 18, 2026 14:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the angular group across 1 directory with 11 updates#1242

chore(deps): bump the angular group across 1 directory with 11 updates#1242
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular-6a2a979a9b

dependabot Bot commented on behalf of github Mar 1, 2026 •

edited

Loading

Uh oh!

psmulovics commented Mar 17, 2026

Uh oh!

psmulovics commented Apr 6, 2026

Uh oh!

psmulovics commented May 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	disallow event attribute bindings in host bindings unconditionally (#68468)
	validate security-sensitive attributes in i18n bindings (#68468)

Commit	Description
	sanitize translated attribute bindings with interpolations
	sanitize translated form attributes

Commit	Type	Description
8ebae1de33	fix	allow service with factory on abstract classes
6f525245cd	fix	disallow event attribute bindings in host bindings unconditionally

Commit	Type	Description
b8d3f36ed9	feat	add support for Node.js 26.0.0
2eae497a04	feat	support external TCBs with copied content in specific mode

Commit	Type	Description
3b0ae5fef0	feat	add `provideWebMcpTools`
5a7c1e62dc	feat	add ability to cache resources for SSR
ef1810197b	feat	export experimental `declareWebMcpTool` support

Conversation

dependabot Bot commented on behalf of github Mar 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

20.3.21

platform-server

20.3.20

core

platform-server

20.3.19

platform-server

20.3.18

compiler

core

20.3.17

core

Breaking Changes

core

20.3.21 (2026-05-12)

platform-server

22.0.0-next.12 (2026-05-08)

core

migrations

platform-server

22.0.0-next.11 (2026-05-06)

Breaking Changes

forms

Deprecations

http

compiler

compiler-cli

core

20.3.21

platform-server

20.3.20

core

platform-server

20.3.19

platform-server

20.3.18

compiler

core

20.3.17

core

Breaking Changes

core

20.3.21 (2026-05-12)

platform-server

22.0.0-next.12 (2026-05-08)

core

migrations

platform-server

22.0.0-next.11 (2026-05-06)

Breaking Changes

forms

Deprecations

http

compiler

compiler-cli

core

20.3.21

platform-server

20.3.20

core

platform-server

20.3.19

platform-server

20.3.18

compiler

core

20.3.17

core

Breaking Changes

core

20.3.21 (2026-05-12)

platform-server

22.0.0-next.12 (2026-05-08)

core

migrations

platform-server

22.0.0-next.11 (2026-05-06)

dependabot Bot commented on behalf of github Mar 1, 2026 •

edited

Loading