chore(deps): bump the patch-updates group across 1 directory with 20 updates by dependabot[bot] · Pull Request #3473 · numbersprotocol/capture-cam

dependabot · 2026-05-28T20:22:27Z

Bumps the patch-updates group with 19 updates in the / directory:

Package	From	To
@angular/animations	`21.2.11`	`21.2.15`
@angular/cdk	`21.2.9`	`21.2.13`
@angular/common	`21.2.11`	`21.2.15`
@angular/core	`21.2.11`	`21.2.15`
@angular/forms	`21.2.11`	`21.2.15`
@angular/material	`21.2.9`	`21.2.13`
@angular/platform-browser	`21.2.11`	`21.2.15`
@angular/platform-browser-dynamic	`21.2.11`	`21.2.15`
@angular/router	`21.2.11`	`21.2.15`
@capacitor/android	`8.3.1`	`8.3.4`
@capacitor/core	`8.3.1`	`8.3.4`
@capacitor/ios	`8.3.1`	`8.3.4`
@capgo/capacitor-social-login	`8.3.20`	`8.3.22`
@ionic/angular	`8.8.5`	`8.8.8`
zone.js	`0.16.1`	`0.16.2`
@angular/cli	`21.2.9`	`21.2.13`
@angular/compiler	`21.2.11`	`21.2.15`
@angular/compiler-cli	`21.2.11`	`21.2.15`
@angular/language-service	`21.2.11`	`21.2.15`

Updates @angular/animations from 21.2.11 to 21.2.15

Release notes

Sourced from @angular/animations's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

21.2.14

compiler

Commit Description

strip namespaced SVG script elements during template compilation

core

Commit Description

do not insert todo when migrating void @Output

makes resource URL sanitizer lookup case-insensitive

reject script element as a dynamic component host

visit ICU expressions in signal migration schematics

router

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/animations's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

See full diff in compare view

Updates @angular/cdk from 21.2.9 to 21.2.13

Release notes

Sourced from @angular/cdk's releases.

21.2.13

No user facing changes in this release

21.2.12

material

Commit Description

datepicker: ensure dates don't overflow on a small screen (#33281)

21.2.11

No user facing changes in this release

21.2.10

aria

Commit Description

menu: do not set default aria-label (#33202)

Changelog

Sourced from @angular/cdk's changelog.

21.2.13 "21-2-13" (2026-05-27)

No user facing changes in this release

22.0.0-rc.1 "metal-monkey" (2026-05-20)

aria

Commit Type Description

ce1d9a7286 fix menu: allow menu item role override (#33264)

196b7064db fix menu: defer menu item focus in case menus in cdk overlay (#33258)

6443b79f9a fix menu: unable to set softDisabled (#33265)

cdk

Commit Type Description

4c298970ed fix scrolling: make it easier to provide custom scrollable (#33269)

material

Commit Type Description

f2f62675e1 fix datepicker: ensure dates don't overflow on a small screen (#33281)

f1a435508a fix sidenav: handle mixed sidenav and drawer (#33274)

a4d92c5fcb fix sidenav: more robust reset logic for inert attribute (#33257)

21.2.12 "plastic-moose" (2026-05-20)

material

Commit Type Description

da87be7646 fix datepicker: ensure dates don't overflow on a small screen (#33281)

22.0.0-rc.0 "crystal lotion" (2026-05-13)

material

Commit Type Description

c316198527 fix sidenav: mark content as inert while open

c2f1c5b035 fix sidenav: query not resolving

multiple

Commit Type Description

84f2afd249 fix remove developer preview tag from aria (#33232)

... (truncated)

Commits

7828452 release: cut the v21.2.13 release
e43b7aa release: cut the v21.2.12 release
da87be7 fix(material/datepicker): ensure dates don't overflow on a small screen (#33281)
e101874 docs(material/tooltip): fix tooltip-position-at-origin example overflow (#33218)
1238d15 release: cut the v21.2.11 release
583da8a release: cut the v21.2.10 release
babfbb7 build: update cross-repo angular dependencies (#33205)
e08fdf2 build: fix failing test (#33212)
09e89fa build: lock file maintenance (#33201)
4897366 fix(aria/menu): do not set default aria-label (#33202)
Additional commits viewable in compare view

Updates @angular/common from 21.2.11 to 21.2.15

Release notes

Sourced from @angular/common's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

21.2.14

compiler

Commit Description

strip namespaced SVG script elements during template compilation

core

Commit Description

do not insert todo when migrating void @Output

makes resource URL sanitizer lookup case-insensitive

reject script element as a dynamic component host

visit ICU expressions in signal migration schematics

router

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/common's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

582a417 fix(http): exclude withCredentials requests from transfer cache
5c6d6df fix(http): skip TransferCache for cookie-bearing requests by default
300f61f fix(common): sanitize placeholder
7f4ac78 fix(common): add upper bounds for digitsInfo
30cf85f refactor(common): update deprecation message
See full diff in compare view

Updates @angular/core from 21.2.11 to 21.2.15

Release notes

Sourced from @angular/core's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

21.2.14

compiler

Commit Description

strip namespaced SVG script elements during template compilation

core

Commit Description

do not insert todo when migrating void @Output

makes resource URL sanitizer lookup case-insensitive

reject script element as a dynamic component host

visit ICU expressions in signal migration schematics

router

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/core's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d fix Preserves explicit 'credentials: omit' in asset requests

ca32fc1000 fix Preserves HTTP cache mode in asset group requests

19.2.24 (2026-05-28)

compiler

Commit Type Description

6ea6379123 fix prevent namespaced SVG elements from being stripped

20.3.23 (2026-05-28)

compiler

... (truncated)

Commits

29ceeff docs: fix typos in source code comments
251c8f2 test(core): remove obsolete SVG script sanitization translation test (#68925)
dada86e fix(core): synchronize core sanitization schema with compiler (#68925)
782e015 fix(compiler): strip namespaced SVG script elements during template compilati...
ff12fe5 fix(core): normalize tag names in runtime i18n attribute security context loo...
0b07f47 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
cc1378d fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
daaf329 fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...
1d6e71d docs: clarify ngDoCheck invocation behavior with OnPush strategy
49113ac fix(core): visit ICU expressions in signal migration schematics
Additional commits viewable in compare view

Updates @angular/forms from 21.2.11 to 21.2.15

Release notes

Sourced from @angular/forms's releases.

21.2.15

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

prevent namespaced SVG elements from being stripped

sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

strip namespaced SVG script elements during template compilation (#68925)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68925)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

synchronize core sanitization schema with compiler (#68925)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

prevent SSRF bypasses via backslash URLs in HttpClient

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

21.2.14

compiler

Commit Description

strip namespaced SVG script elements during template compilation

core

Commit Description

do not insert todo when migrating void @Output

makes resource URL sanitizer lookup case-insensitive

reject script element as a dynamic component host

visit ICU expressions in signal migration schematics

router

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/forms's changelog.

21.2.15 (2026-05-28)

common

Commit Type Description

7f4ac78994 fix add upper bounds for digitsInfo

300f61feb3 fix sanitize placeholder

compiler

Commit Type Description

0b07f47bd6 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)

eb1cbbf2eb fix prevent namespaced SVG elements from being stripped

cc1378d54b fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)

782e01594e fix strip namespaced SVG script elements during template compilation (#68925)

core

Commit Type Description

ff12fe55ac fix normalize tag names in runtime i18n attribute security context lookup (#68925)

e6fe77cc97 fix sanitize meta selectors

daaf32937f fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)

dada86e43d fix synchronize core sanitization schema with compiler (#68925)

http

Commit Type Description

582a417bd2 fix exclude withCredentials requests from transfer cache

5c6d6df34b fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

37e8aadf87 fix prevent SSRF bypasses via backslash URLs in HttpClient

72696e244e fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

b8bd49341d ...
Description has been truncated

…updates Bumps the patch-updates group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `21.2.11` | `21.2.15` | | [@angular/cdk](https://github.com/angular/components) | `21.2.9` | `21.2.13` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.11` | `21.2.15` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.11` | `21.2.15` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.11` | `21.2.15` | | [@angular/material](https://github.com/angular/components) | `21.2.9` | `21.2.13` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.11` | `21.2.15` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.11` | `21.2.15` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.11` | `21.2.15` | | [@capacitor/android](https://github.com/ionic-team/capacitor) | `8.3.1` | `8.3.4` | | [@capacitor/core](https://github.com/ionic-team/capacitor) | `8.3.1` | `8.3.4` | | [@capacitor/ios](https://github.com/ionic-team/capacitor) | `8.3.1` | `8.3.4` | | [@capgo/capacitor-social-login](https://github.com/Cap-go/capacitor-social-login) | `8.3.20` | `8.3.22` | | [@ionic/angular](https://github.com/ionic-team/ionic-framework) | `8.8.5` | `8.8.8` | | [zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js) | `0.16.1` | `0.16.2` | | [@angular/cli](https://github.com/angular/angular-cli) | `21.2.9` | `21.2.13` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.11` | `21.2.15` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.11` | `21.2.15` | | [@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service) | `21.2.11` | `21.2.15` | Updates `@angular/animations` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/animations) Updates `@angular/cdk` from 21.2.9 to 21.2.13 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.9...v21.2.13) Updates `@angular/common` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/common) Updates `@angular/core` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/core) Updates `@angular/forms` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/forms) Updates `@angular/material` from 21.2.9 to 21.2.13 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.9...v21.2.13) Updates `@angular/platform-browser` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/platform-browser-dynamic) Updates `@angular/router` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/router) Updates `@capacitor/android` from 8.3.1 to 8.3.4 - [Release notes](https://github.com/ionic-team/capacitor/releases) - [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor@8.3.1...8.3.4) Updates `@capacitor/core` from 8.3.1 to 8.3.4 - [Release notes](https://github.com/ionic-team/capacitor/releases) - [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor@8.3.1...8.3.4) Updates `@capacitor/ios` from 8.3.1 to 8.3.4 - [Release notes](https://github.com/ionic-team/capacitor/releases) - [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor@8.3.1...8.3.4) Updates `@capgo/capacitor-social-login` from 8.3.20 to 8.3.22 - [Release notes](https://github.com/Cap-go/capacitor-social-login/releases) - [Changelog](https://github.com/Cap-go/capacitor-social-login/blob/main/CHANGELOG.md) - [Commits](Cap-go/capacitor-social-login@8.3.20...8.3.22) Updates `@ionic/angular` from 8.8.5 to 8.8.8 - [Release notes](https://github.com/ionic-team/ionic-framework/releases) - [Changelog](https://github.com/ionic-team/ionic-framework/blob/main/CHANGELOG.md) - [Commits](ionic-team/ionic-framework@v8.8.5...v8.8.8) Updates `@ionic/core` from 8.8.5 to 8.8.8 - [Release notes](https://github.com/ionic-team/ionic-framework/releases) - [Changelog](https://github.com/ionic-team/ionic-framework/blob/main/CHANGELOG.md) - [Commits](ionic-team/ionic-framework@v8.8.5...v8.8.8) Updates `zone.js` from 0.16.1 to 0.16.2 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/packages/zone.js/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/zone.js-0.16.2/packages/zone.js) Updates `@angular/cli` from 21.2.9 to 21.2.13 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v21.2.13) Updates `@angular/compiler` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/compiler) Updates `@angular/compiler-cli` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/compiler-cli) Updates `@angular/language-service` from 21.2.11 to 21.2.15 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.15/packages/language-service) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/cdk" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/common" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/core" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/forms" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/material" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/platform-browser" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/router" dependency-version: 21.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@capacitor/android" dependency-version: 8.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@capacitor/core" dependency-version: 8.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@capacitor/ios" dependency-version: 8.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@capgo/capacitor-social-login" dependency-version: 8.3.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@ionic/angular" dependency-version: 8.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@ionic/core" dependency-version: 8.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: zone.js dependency-version: 0.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/cli" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/compiler" dependency-version: 21.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/compiler-cli" dependency-version: 21.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@angular/language-service" dependency-version: 21.2.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 28, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the patch-updates group across 1 directory with 20 updates#3473

chore(deps): bump the patch-updates group across 1 directory with 20 updates#3473
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/patch-updates-dc757b7e88

dependabot Bot commented on behalf of github May 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)
	prevent namespaced SVG elements from being stripped
	sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)
	strip namespaced SVG script elements during template compilation (#68925)

Commit	Description
	normalize tag names in runtime i18n attribute security context lookup (#68925)
	sanitize meta selectors
	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)
	synchronize core sanitization schema with compiler (#68925)

Commit	Description
	exclude withCredentials requests from transfer cache
	skip TransferCache for cookie-bearing requests by default

Commit	Description
	prevent SSRF bypasses via backslash URLs in HttpClient
	secure location and document initialization against SSRF and path hijack

Commit	Description
	Preserves explicit 'credentials: omit' in asset requests
	Preserves HTTP cache mode in asset group requests

Commit	Description
	do not insert todo when migrating void `@Output`
	makes resource URL sanitizer lookup case-insensitive
	reject script element as a dynamic component host
	visit ICU expressions in signal migration schematics

Commit	Type	Description
7f4ac78994	fix	add upper bounds for digitsInfo
300f61feb3	fix	sanitize placeholder

Commit	Type	Description
0b07f47bd6	fix	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925)
eb1cbbf2eb	fix	prevent namespaced SVG elements from being stripped
cc1378d54b	fix	sanitize dynamic href and xlink:href bindings on SVG a elements (#68925)
782e01594e	fix	strip namespaced SVG script elements during template compilation (#68925)

Commit	Type	Description
ff12fe55ac	fix	normalize tag names in runtime i18n attribute security context lookup (#68925)
e6fe77cc97	fix	sanitize meta selectors
daaf32937f	fix	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925)
dada86e43d	fix	synchronize core sanitization schema with compiler (#68925)

Commit	Type	Description
582a417bd2	fix	exclude withCredentials requests from transfer cache
5c6d6df34b	fix	skip TransferCache for cookie-bearing requests by default

Commit	Type	Description
37e8aadf87	fix	prevent SSRF bypasses via backslash URLs in HttpClient
72696e244e	fix	secure location and document initialization against SSRF and path hijack

Commit	Type	Description
b8bd49341d	fix	Preserves explicit 'credentials: omit' in asset requests
ca32fc1000	fix	Preserves HTTP cache mode in asset group requests

Commit	Type	Description
ce1d9a7286	fix	menu: allow menu item role override (#33264)
196b7064db	fix	menu: defer menu item focus in case menus in cdk overlay (#33258)
6443b79f9a	fix	menu: unable to set softDisabled (#33265)

Commit	Type	Description
f2f62675e1	fix	datepicker: ensure dates don't overflow on a small screen (#33281)
f1a435508a	fix	sidenav: handle mixed sidenav and drawer (#33274)
a4d92c5fcb	fix	sidenav: more robust reset logic for inert attribute (#33257)

Commit	Type	Description
c316198527	fix	sidenav: mark content as inert while open
c2f1c5b035	fix	sidenav: query not resolving

Conversation

dependabot Bot commented on behalf of github May 28, 2026

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.14

compiler

core

router

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

compiler

21.2.13

21.2.12

material

21.2.11

21.2.10

aria

21.2.13 "21-2-13" (2026-05-27)

22.0.0-rc.1 "metal-monkey" (2026-05-20)

aria

cdk

material

21.2.12 "plastic-moose" (2026-05-20)

material

22.0.0-rc.0 "crystal lotion" (2026-05-13)

material

multiple

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.14

compiler

core

router

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker

19.2.24 (2026-05-28)

compiler

20.3.23 (2026-05-28)

compiler

21.2.15

common

compiler

core

http

platform-server

service-worker

21.2.14

compiler

core

router

21.2.15 (2026-05-28)

common

compiler

core

http

platform-server

service-worker