Skip to content

chore(deps-dev): bump @angular/core from 21.2.6 to 21.2.7#2610

Merged
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/angular/core-21.2.7
Apr 2, 2026
Merged

chore(deps-dev): bump @angular/core from 21.2.6 to 21.2.7#2610
github-actions[bot] merged 1 commit intomainfrom
dependabot/npm_and_yarn/angular/core-21.2.7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026

Bumps @angular/core from 21.2.6 to 21.2.7.

Release notes

Sourced from @​angular/core's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/core's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits
  • 4ad6d58 build: update cross-repo angular dependencies to v21.2.6
  • d04ddd7 fix(core): prevent binding unsafe attributes on SVG animation elements (#67797)
  • b682c62 fix(core): treat object[data] as resource URL context (#67797)
  • fea25d1 fix(compiler): register SVG animation attributes in URL security context (#67...
  • 8fd896e fix(core): resolve component import by exact specifier in route lazy-loading ...
  • 4b2008d build: update cross-repo angular dependencies
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 2, 2026
Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 21.2.6 to 21.2.7.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/core)

---
updated-dependencies:
- dependency-name: "@angular/core"
  dependency-version: 21.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/angular/core-21.2.7 branch from ce877fc to d2b55e2 Compare April 2, 2026 01:57
@github-actions github-actions bot merged commit cbd3026 into main Apr 2, 2026
2 of 3 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/angular/core-21.2.7 branch April 2, 2026 01:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants