chore(deps-dev): bump @angular/core from 20.3.14 to 21.0.2 #1273

dependabot · 2025-12-03T09:41:04Z

Bumps @angular/core from 20.3.14 to 21.0.2.

Release notes

Sourced from @angular/core's releases.

21.0.2

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

21.0.1

compiler-cli

Commit Description

do not type check native controls with ControlValueAccessor

escape angular control flow in jsdoc

ignore non-existent files

core

Commit Description

apply bootstrap-options migration to platformBrowserDynamic

debug data causing memory leak for root effects

notify profiler events in case of errors

use injected DOCUMENT for CSP_NONCE

avoid repeat searches for field directive

forms

Commit Description

add DI option for classes on Field directive

allow dynamic type bindings on signal form controls

run reset as untracked

http

Commit Description

prevent XSRF token leakage to protocol-relative URLs

migrations

Commit Description

detect structural ngTemplateOutlet and ngComponentOutlet

VSCode Extension: 21.0.0

fix(language-service): address potential memory leak during project creation (89095946cf)

fix(language-server): fix directory renaming on Windows (3f7111a9c3)

21.0.0

common

Commit Description

Add experimental support for the Navigation API (#63406)

Support of optional keys for the KeyValue pipe (#48814)

update to cldr 47 (#64032)

properly type ngComponentOutlet (#64561)

... (truncated)

Changelog

Sourced from @angular/core's changelog.

21.0.2 (2025-12-01)

compiler

Commit Type Description

78fd159b78 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

20.3.15 (2025-12-01)

compiler

Commit Type Description

d1ca8ae043 fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

Commit Type Description

7c42e2ebeb fix prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

Commit Type Description

05fe6686a9 fix prevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

... (truncated)

Commits

78fd159 fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
a408415 refactor(migrations): don't migration the server bootstrapApplicaiton on zo...
151616d refactor(core): show error message on signal error
0ae14cb test(core): test bundling of dynamic component creation and bindings
908b5a4 refactor: replace getDocument() with inject(DOCUMENT)
6b20adf refactor: add mark for signal forms
49ad7c6 fix(core): use injected DOCUMENT for CSP_NONCE
7d5c7cf feat(forms): add DI option for classes on Field directive
477df38 docs: improve core package API documentation with additional reference links
0e458c7 refactor(core): Remove toggles used for zoneless by default migration
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 20.3.14 to 21.0.2. - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/21.0.2/packages/core) --- updated-dependencies: - dependency-name: "@angular/core" dependency-version: 21.0.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

cloudflare-workers-and-pages · 2025-12-03T09:41:07Z

Deploying orpc with Cloudflare Pages

Latest commit:	`23278e5`
Status:	✅ Deploy successful!
Preview URL:	https://398da3a9.orpc-1qh.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-angu-ml85.orpc-1qh.pages.dev

View logs

coderabbitai · 2025-12-03T09:41:29Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

codecov · 2025-12-03T09:43:58Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

pkg-pr-new · 2025-12-03T09:43:59Z

More templates

@orpc/ai-sdk

npm i https://pkg.pr.new/@orpc/ai-sdk@1273

@orpc/arktype

npm i https://pkg.pr.new/@orpc/arktype@1273

@orpc/client

npm i https://pkg.pr.new/@orpc/client@1273

@orpc/contract

npm i https://pkg.pr.new/@orpc/contract@1273

@orpc/experimental-durable-iterator

npm i https://pkg.pr.new/@orpc/experimental-durable-iterator@1273

@orpc/hey-api

npm i https://pkg.pr.new/@orpc/hey-api@1273

@orpc/interop

npm i https://pkg.pr.new/@orpc/interop@1273

@orpc/json-schema

npm i https://pkg.pr.new/@orpc/json-schema@1273

@orpc/nest

npm i https://pkg.pr.new/@orpc/nest@1273

@orpc/openapi

npm i https://pkg.pr.new/@orpc/openapi@1273

@orpc/openapi-client

npm i https://pkg.pr.new/@orpc/openapi-client@1273

@orpc/otel

npm i https://pkg.pr.new/@orpc/otel@1273

@orpc/experimental-pino

npm i https://pkg.pr.new/@orpc/experimental-pino@1273

@orpc/experimental-publisher

npm i https://pkg.pr.new/@orpc/experimental-publisher@1273

@orpc/experimental-publisher-durable-object

npm i https://pkg.pr.new/@orpc/experimental-publisher-durable-object@1273

@orpc/experimental-ratelimit

npm i https://pkg.pr.new/@orpc/experimental-ratelimit@1273

@orpc/react

npm i https://pkg.pr.new/@orpc/react@1273

@orpc/react-query

npm i https://pkg.pr.new/@orpc/react-query@1273

@orpc/experimental-react-swr

npm i https://pkg.pr.new/@orpc/experimental-react-swr@1273

@orpc/server

npm i https://pkg.pr.new/@orpc/server@1273

@orpc/shared

npm i https://pkg.pr.new/@orpc/shared@1273

@orpc/solid-query

npm i https://pkg.pr.new/@orpc/solid-query@1273

@orpc/standard-server

npm i https://pkg.pr.new/@orpc/standard-server@1273

@orpc/standard-server-aws-lambda

npm i https://pkg.pr.new/@orpc/standard-server-aws-lambda@1273

@orpc/standard-server-fastify

npm i https://pkg.pr.new/@orpc/standard-server-fastify@1273

@orpc/standard-server-fetch

npm i https://pkg.pr.new/@orpc/standard-server-fetch@1273

@orpc/standard-server-node

npm i https://pkg.pr.new/@orpc/standard-server-node@1273

@orpc/standard-server-peer

npm i https://pkg.pr.new/@orpc/standard-server-peer@1273

@orpc/svelte-query

npm i https://pkg.pr.new/@orpc/svelte-query@1273

@orpc/tanstack-query

npm i https://pkg.pr.new/@orpc/tanstack-query@1273

@orpc/trpc

npm i https://pkg.pr.new/@orpc/trpc@1273

@orpc/valibot

npm i https://pkg.pr.new/@orpc/valibot@1273

@orpc/vue-colada

npm i https://pkg.pr.new/@orpc/vue-colada@1273

@orpc/vue-query

npm i https://pkg.pr.new/@orpc/vue-query@1273

@orpc/zod

npm i https://pkg.pr.new/@orpc/zod@1273

commit: 23278e5

dependabot · 2025-12-04T09:45:53Z

Superseded by #1277.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 3, 2025

dependabot bot mentioned this pull request Dec 3, 2025

chore(deps-dev): bump @angular/core from 20.3.12 to 21.0.0 #1242

Closed

dosubot bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Dec 3, 2025

dependabot bot closed this Dec 4, 2025

dependabot bot deleted the dependabot/npm_and_yarn/angular/core-21.0.2 branch December 4, 2025 09:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps-dev): bump @angular/core from 20.3.14 to 21.0.2 #1273

chore(deps-dev): bump @angular/core from 20.3.14 to 21.0.2 #1273

Uh oh!

dependabot bot commented on behalf of github Dec 3, 2025

Uh oh!

cloudflare-workers-and-pages bot commented Dec 3, 2025 •

edited

Loading

Uh oh!

coderabbitai bot commented Dec 3, 2025

Review skipped

Uh oh!

codecov bot commented Dec 3, 2025

Uh oh!

pkg-pr-new bot commented Dec 3, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Description
	do not type check native controls with ControlValueAccessor
	escape angular control flow in jsdoc
	ignore non-existent files

Commit	Description
	apply bootstrap-options migration to `platformBrowserDynamic`
	debug data causing memory leak for root effects
	notify profiler events in case of errors
	use injected `DOCUMENT` for `CSP_NONCE`
	avoid repeat searches for field directive

Commit	Description
	add DI option for classes on `Field` directive
	allow dynamic `type` bindings on signal form controls
	run reset as untracked

Commit	Description
	Add experimental support for the Navigation API (#63406)
	Support of optional keys for the KeyValue pipe (#48814)
	update to cldr 47 (#64032)
	properly type ngComponentOutlet (#64561)

Uh oh!

chore(deps-dev): bump @angular/core from 20.3.14 to 21.0.2 #1273

chore(deps-dev): bump @angular/core from 20.3.14 to 21.0.2 #1273

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 3, 2025

21.0.2

compiler

21.0.1

compiler-cli

core

forms

http

migrations

VSCode Extension: 21.0.0

21.0.0

common

21.0.2 (2025-12-01)

compiler

20.3.15 (2025-12-01)

compiler

19.2.17 (2025-12-01)

compiler

19.2.16 (2025-11-26)

http

21.1.0-next.0 (2025-11-25)

Uh oh!

cloudflare-workers-and-pages bot commented Dec 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying orpc with Cloudflare Pages

Uh oh!

coderabbitai bot commented Dec 3, 2025

Review skipped

Uh oh!

codecov bot commented Dec 3, 2025

Codecov Report

Uh oh!

pkg-pr-new bot commented Dec 3, 2025

Uh oh!

dependabot bot commented on behalf of github Dec 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

cloudflare-workers-and-pages bot commented Dec 3, 2025 •

edited

Loading