Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Bumps @angular/common, @angular/forms, @angular/platform-browser, @angular/platform-browser-dynamic and @angular/router. These dependencies needed to be updated together.
Updates @angular/common from 18.2.9 to 21.0.8

Release notes

Sourced from @​angular/common's releases.

21.0.8

core

Commit Description
fix - a6a2621bf9 fix memory leak with event replay
fix - 5239e471a1 handle cancelled traversals in fake navigation

21.0.7

compiler

Commit Description
fix - 8e808740c9 better types for a few expression AST nodes
fix - 63b1cdcf70 produce accurate span for typeof and void expressions
fix - 3c3ae0cb64 provide location information for literal map keys
fix - 523dbaf1c3 stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Description
fix - 4d9c4567ed ensure component import diagnostics are reported within the imports expression
fix - cd405685af fix up spelling of diagnostic
fix - 778460fcca support qualified names in typeof type references

core

Commit Description
fix - 7c74674eb0 avoid leaking view data in animations
fix - 0edbee4550 explicitly cast signal node value to String
fix - f9c29572d2 sanitize sensitive attributes on SVG script elements

forms

Commit Description
feat - e3fba182f9 add [formField] directive
fix - 561772b152 allow custom controls to require dirty input
fix - f0fb1d8581 allow custom controls to require hidden input
fix - ec110f170b allow custom controls to require pending input
fix - ae1dc16bb0 clean up abort listener after timeout
fix - 9748b0d5da support custom controls with non signal-based models
fix - 6bd22df987 Support readonly arrays in signal forms

router

Commit Description
fix - 41cd4a6af8 Fix RouterLink href not updating with queryParamsHandling
fix - 5e9e09aee0 handle errors from view transition updateCallbackDone promise

21.0.6

core

Commit Description
fix - 4c8fb3631d throw better errors for potential circular references
fix - 48492524ea use mutable ResponseInit type for RESPONSE_INIT token

forms

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.0.8 (2026-01-08)

core

Commit Type Description
a6a2621bf9 fix fix memory leak with event replay
5239e471a1 fix handle cancelled traversals in fake navigation

20.3.16 (2026-01-07)

core

Commit Type Description
c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description
26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description
8e808740c9 fix better types for a few expression AST nodes
63b1cdcf70 fix produce accurate span for typeof and void expressions
3c3ae0cb64 fix provide location information for literal map keys
523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description
4d9c4567ed fix ensure component import diagnostics are reported within the imports expression
cd405685af fix fix up spelling of diagnostic
778460fcca fix support qualified names in typeof type references

core

Commit Type Description
7c74674eb0 fix avoid leaking view data in animations
0edbee4550 fix explicitly cast signal node value to String
f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

| Commit | Type | Description |

... (truncated)

Commits
  • d699eef docs: add docs for transform property in built-in loaders
  • feed89e ci: reformat files
  • 6d9d2b8 refactor(common): remove redundant providedIn: 'root' from injection tokens
  • 288238a refactor(core): correct all typeof ngDevMode comparison patterns introduced...
  • 56418b1 docs: add documentation for HTTP_TRANSFER_CACHE_ORIGIN_MAP
  • 20474d3 fix(http): enable XSRF protection for same-origin absolute URLs
  • 3240d85 fix(http): prevent XSRF token leakage to protocol-relative URLs
  • 6de8926 refactor(core): add debug name to resource (#64172)
  • 00ffe91 refactor(common): removes unused NgModuleFactory config in NgComponentOutlet
  • 8765b66 docs: add reference to Built-in Pipes in multiple pipe files
  • Additional commits viewable in compare view

Updates @angular/forms from 18.2.9 to 21.0.8

Release notes

Sourced from @​angular/forms's releases.

21.0.8

core

Commit Description
fix - a6a2621bf9 fix memory leak with event replay
fix - 5239e471a1 handle cancelled traversals in fake navigation

21.0.7

compiler

Commit Description
fix - 8e808740c9 better types for a few expression AST nodes
fix - 63b1cdcf70 produce accurate span for typeof and void expressions
fix - 3c3ae0cb64 provide location information for literal map keys
fix - 523dbaf1c3 stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Description
fix - 4d9c4567ed ensure component import diagnostics are reported within the imports expression
fix - cd405685af fix up spelling of diagnostic
fix - 778460fcca support qualified names in typeof type references

core

Commit Description
fix - 7c74674eb0 avoid leaking view data in animations
fix - 0edbee4550 explicitly cast signal node value to String
fix - f9c29572d2 sanitize sensitive attributes on SVG script elements

forms

Commit Description
feat - e3fba182f9 add [formField] directive
fix - 561772b152 allow custom controls to require dirty input
fix - f0fb1d8581 allow custom controls to require hidden input
fix - ec110f170b allow custom controls to require pending input
fix - ae1dc16bb0 clean up abort listener after timeout
fix - 9748b0d5da support custom controls with non signal-based models
fix - 6bd22df987 Support readonly arrays in signal forms

router

Commit Description
fix - 41cd4a6af8 Fix RouterLink href not updating with queryParamsHandling
fix - 5e9e09aee0 handle errors from view transition updateCallbackDone promise

21.0.6

core

Commit Description
fix - 4c8fb3631d throw better errors for potential circular references
fix - 48492524ea use mutable ResponseInit type for RESPONSE_INIT token

forms

... (truncated)

Changelog

Sourced from @​angular/forms's changelog.

21.0.8 (2026-01-08)

core

Commit Type Description
a6a2621bf9 fix fix memory leak with event replay
5239e471a1 fix handle cancelled traversals in fake navigation

20.3.16 (2026-01-07)

core

Commit Type Description
c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description
26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description
8e808740c9 fix better types for a few expression AST nodes
63b1cdcf70 fix produce accurate span for typeof and void expressions
3c3ae0cb64 fix provide location information for literal map keys
523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description
4d9c4567ed fix ensure component import diagnostics are reported within the imports expression
cd405685af fix fix up spelling of diagnostic
778460fcca fix support qualified names in typeof type references

core

Commit Type Description
7c74674eb0 fix avoid leaking view data in animations
0edbee4550 fix explicitly cast signal node value to String
f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

| Commit | Type | Description |

... (truncated)

Commits
  • ff53175 refactor(forms): remove customError()
  • 8aa7755 docs: update angular.io links to angular.dev in comments, TSDoc, and warnings
  • ae1dc16 fix(forms): clean up abort listener after timeout
  • e3fba18 feat(forms): add [formField] directive
  • af1d4ac refactor(forms): bind native properties on interop controls
  • 0e8b9d8 refactor(forms): bind field properties to all directives on interop controls
  • ff37a13 refactor(forms): bind field properties to all directives on custom controls
  • a4ba820 refactor(forms): bind field properties to all directives on native controls
  • 45bfd82 docs(forms): add documentation links to Signal Forms API
  • e21076d docs(forms): fix duplicate validator reference titles in AbstractControl
  • Additional commits viewable in compare view

Updates @angular/platform-browser from 18.2.9 to 21.0.8

Release notes

Sourced from @​angular/platform-browser's releases.

21.0.8

core

Commit Description
fix - a6a2621bf9 fix memory leak with event replay
fix - 5239e471a1 handle cancelled traversals in fake navigation

21.0.7

compiler

Commit Description
fix - 8e808740c9 better types for a few expression AST nodes
fix - 63b1cdcf70 produce accurate span for typeof and void expressions
fix - 3c3ae0cb64 provide location information for literal map keys
fix - 523dbaf1c3 stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Description
fix - 4d9c4567ed ensure component import diagnostics are reported within the imports expression
fix - cd405685af fix up spelling of diagnostic
fix - 778460fcca support qualified names in typeof type references

core

Commit Description
fix - 7c74674eb0 avoid leaking view data in animations
fix - 0edbee4550 explicitly cast signal node value to String
fix - f9c29572d2 sanitize sensitive attributes on SVG script elements

forms

Commit Description
feat - e3fba182f9 add [formField] directive
fix - 561772b152 allow custom controls to require dirty input
fix - f0fb1d8581 allow custom controls to require hidden input
fix - ec110f170b allow custom controls to require pending input
fix - ae1dc16bb0 clean up abort listener after timeout
fix - 9748b0d5da support custom controls with non signal-based models
fix - 6bd22df987 Support readonly arrays in signal forms

router

Commit Description
fix - 41cd4a6af8 Fix RouterLink href not updating with queryParamsHandling
fix - 5e9e09aee0 handle errors from view transition updateCallbackDone promise

21.0.6

core

Commit Description
fix - 4c8fb3631d throw better errors for potential circular references
fix - 48492524ea use mutable ResponseInit type for RESPONSE_INIT token

forms

... (truncated)

Changelog

Sourced from @​angular/platform-browser's changelog.

21.0.8 (2026-01-08)

core

Commit Type Description
a6a2621bf9 fix fix memory leak with event replay
5239e471a1 fix handle cancelled traversals in fake navigation

20.3.16 (2026-01-07)

core

Commit Type Description
c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description
26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description
8e808740c9 fix better types for a few expression AST nodes
63b1cdcf70 fix produce accurate span for typeof and void expressions
3c3ae0cb64 fix provide location information for literal map keys
523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description
4d9c4567ed fix ensure component import diagnostics are reported within the imports expression
cd405685af fix fix up spelling of diagnostic
778460fcca fix support qualified names in typeof type references

core

Commit Type Description
7c74674eb0 fix avoid leaking view data in animations
0edbee4550 fix explicitly cast signal node value to String
f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

| Commit | Type | Description |

... (truncated)

Commits
  • feed89e ci: reformat files
  • 8d92f05 refactor(platform-browser): remove unused platformIsServer flag from renderer
  • 288238a refactor(core): correct all typeof ngDevMode comparison patterns introduced...
  • f550f4a docs: ExperimentalIsolatedShadowDom mentions
  • 6213cbf refactor(core): rename ExperimentalIsolatedShadowDom to IsolatedShadowDom
  • 8ab0847 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 593f902 refactor(platform-browser): remove unused Platform ID dependency from DomRend...
  • 3bed9f0 build: format md files
  • 33f8339 refactor(platform-browser): remove redundant providedIn: 'root' from inject...
  • a4fe078 refactor(common): remove unused import (#64699)
  • Additional commits viewable in compare view

Updates @angular/platform-browser-dynamic from 18.2.9 to 21.0.8

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

21.0.8

core

Commit Description
fix - a6a2621bf9 fix memory leak with event replay
fix - 5239e471a1 handle cancelled traversals in fake navigation

21.0.7

compiler

Commit Description
fix - 8e808740c9 better types for a few expression AST nodes
fix - 63b1cdcf70 produce accurate span for typeof and void expressions
fix - 3c3ae0cb64 provide location information for literal map keys
fix - 523dbaf1c3 stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Description
fix - 4d9c4567ed ensure component import diagnostics are reported within the imports expression
fix - cd405685af fix up spelling of diagnostic
fix - 778460fcca support qualified names in typeof type references

core

Commit Description
fix - 7c74674eb0 avoid leaking view data in animations
fix - 0edbee4550 explicitly cast signal node value to String
fix - f9c29572d2 sanitize sensitive attributes on SVG script elements

forms

Commit Description
feat - e3fba182f9 add [formField] directive
fix - 561772b152 allow custom controls to require dirty input
fix - f0fb1d8581 allow custom controls to require hidden input
fix - ec110f170b allow custom controls to require pending input
fix - ae1dc16bb0 clean up abort listener after timeout
fix - 9748b0d5da support custom controls with non signal-based models
fix - 6bd22df987 Support readonly arrays in signal forms

router

Commit Description
fix - 41cd4a6af8 Fix RouterLink href not updating with queryParamsHandling
fix - 5e9e09aee0 handle errors from view transition updateCallbackDone promise

21.0.6

core

Commit Description
fix - 4c8fb3631d throw better errors for potential circular references
fix - 48492524ea use mutable ResponseInit type for RESPONSE_INIT token

forms

... (truncated)

Changelog

Sourced from @​angular/platform-browser-dynamic's changelog.

21.0.8 (2026-01-08)

core

Commit Type Description
a6a2621bf9 fix fix memory leak with event replay
5239e471a1 fix handle cancelled traversals in fake navigation

20.3.16 (2026-01-07)

core

Commit Type Description
c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description
26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description
8e808740c9 fix better types for a few expression AST nodes
63b1cdcf70 fix produce accurate span for typeof and void expressions
3c3ae0cb64 fix provide location information for literal map keys
523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description
4d9c4567ed fix ensure component import diagnostics are reported within the imports expression
cd405685af fix fix up spelling of diagnostic
778460fcca fix support qualified names in typeof type references

core

Commit Type Description
7c74674eb0 fix avoid leaking view data in animations
0edbee4550 fix explicitly cast signal node value to String
f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

| Commit | Type | Description |

... (truncated)

Commits
  • 8ab0847 refactor(core): mark VERSION as @__PURE__ for better tree-shaking
  • 3bed9f0 build: format md files
  • c357650 refactor(core): Update tests for zoneless by default (#63668)
  • 2fcafb6 build: rename defaults2.bzl to defaults.bzl (#63383)
  • fa8d8b8 build: migrate all npm packages to use new rules_js based npm_package rule (#...
  • cbc258e build: remove ts_project_interop infrastructure (#62908)
  • 793ff35 build: move http_server and generate_api_docs into defaults2.bzl (#62878)
  • 8bf97d1 build: remove all usages of the interop_deps attr for ts_project and ng_proje...
  • 23d5877 build: migrate to new toolchain usage for api goldens (#62688)
  • b848590 build: migrate to use web test runner rules (#62292)
  • Additional commits viewable in compare view

Updates @angular/router from 18.2.9 to 21.0.8

Release notes

Sourced from @​angular/router's releases.

21.0.8

core

Commit Description
fix - a6a2621bf9 fix memory leak with event replay
fix - 5239e471a1 handle cancelled traversals in fake navigation

21.0.7

compiler

Commit Description
fix - 8e808740c9 better types for a few expression AST nodes
fix - 63b1cdcf70 produce accurate span for typeof and void expressions
fix - 3c3ae0cb64 provide location information for literal map keys
fix - 523dbaf1c3 stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Description
fix - 4d9c4567ed ensure component import diagnostics are reported within the imports expression
fix - cd405685af fix up spelling of diagnostic
fix - 778460fcca support qualified names in typeof type references

core

Commit Description
fix - 7c74674eb0 avoid leaking view data in animations
fix - 0edbee4550 explicitly cast signal node value to String
fix - f9c29572d2 sanitize sensitive attributes on SVG script elements

forms

Commit Description
feat - e3fba182f9 add [formField] directive
fix - 561772b152 allow custom controls to require dirty input
fix - f0fb1d8581 allow custom controls to require hidden input
fix - ec110f170b allow custom controls to require pending input
fix - ae1dc16bb0 clean up abort listener after timeout
fix - 9748b0d5da support custom controls with non signal-based models
fix - 6bd22df987 Support readonly arrays in signal forms

router

Commit Description
fix - 41cd4a6af8 Fix RouterLink href not updating with queryParamsHandling
fix - 5e9e09aee0 handle errors from view transition updateCallbackDone promise

21.0.6

core

Commit Description
fix - 4c8fb3631d throw better errors for potential circular references
fix - 48492524ea use mutable ResponseInit type for RESPONSE_INIT token

forms

... (truncated)

Changelog

Sourced from @​angular/router's changelog.

21.0.8 (2026-01-08)

core

Commit Type Description
a6a2621bf9 fix fix memory leak with event replay
5239e471a1 fix handle cancelled traversals in fake navigation

20.3.16 (2026-01-07)

core

Commit Type Description
c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description
26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description
8e808740c9 fix better types for a few expression AST nodes

…ular/platform-browser-dynamic and @angular/router

Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms), [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser), [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) and [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router). These dependencies needed to be updated together.

Updates `@angular/common` from 18.2.9 to 21.0.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.0.8/packages/common)

Updates `@angular/forms` from 18.2.9 to 21.0.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.0.8/packages/forms)

Updates `@angular/platform-browser` from 18.2.9 to 21.0.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.0.8/packages/platform-browser)

Updates `@angular/platform-browser-dynamic` from 18.2.9 to 21.0.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.0.8/packages/platform-browser-dynamic)

Updates `@angular/router` from 18.2.9 to 21.0.8
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.0.8/packages/router)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.0.8
  dependency-type: direct:production
- dependency-name: "@angular/forms"
  dependency-version: 21.0.8
  dependency-type: direct:production
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.0.8
  dependency-type: direct:production
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-version: 21.0.8
  dependency-type: direct:production
- dependency-name: "@angular/router"
  dependency-version: 21.0.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant