Skip to content

Bump @angular/compiler from 21.2.1 to 21.2.19 in /openalprwebhookprocessor.client - #367

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/openalprwebhookprocessor.client/angular/compiler-21.2.19
Open

Bump @angular/compiler from 21.2.1 to 21.2.19 in /openalprwebhookprocessor.client#367
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/openalprwebhookprocessor.client/angular/compiler-21.2.19

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/compiler from 21.2.1 to 21.2.19.

Release notes

Sourced from @​angular/compiler's releases.

21.2.19

compiler

Commit Description
fix - e2660c3dee disallow i18n event attributes
fix - 7b884f585a restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - 948a8d6831 distinguish repeated transfer cache params
fix - 9949dccce1 enable xsrf for root-provided HttpClient

platform-server

Commit Description
fix - f34a93c946 update domino to latest version

21.2.18

compiler-cli

Commit Description
fix - 8d22cc953b update babel dependencies to latest v7

core

Commit Description
fix - 6bcce117fb avoid caching missing locale data
fix - 5a693bafcd reject dynamic script host elements

http

Commit Description
fix - 91df739b80 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1804f73bec preserve referrer in asset requests
fix - e86c31bf26 preserve referrer policy in asset requests

21.2.17

common

Commit Description
fix - 86a56dc279 Limits date format string length
fix - d846326b07 skip transfer cache for uncacheable HTTP traffic
fix - bc55749698 use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description
fix - dc9c99636d sanitize two-way properties

core

Commit Description

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

Commits
  • 7b884f5 fix(compiler): restrict possible event handler check to property names longer...
  • e2660c3 fix(compiler): disallow i18n event attributes
  • dc9c996 fix(compiler): sanitize two-way properties
  • ae1c8a1 fix(compiler): move projection attributes into constants
  • eb1cbbf fix(compiler): prevent namespaced SVG <style> elements from being stripped
  • 29ceeff docs: fix typos in source code comments
  • 782e015 fix(compiler): strip namespaced SVG script elements during template compilati...
  • ff12fe5 fix(core): normalize tag names in runtime i18n attribute security context loo...
  • 0b07f47 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
  • cc1378d fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 21.2.1 to 21.2.19.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.19/packages/compiler)

---
updated-dependencies:
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.19
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant