chore(deps): bump the angular group across 1 directory with 9 updates by dependabot[bot] · Pull Request #974 · haiilo/catalyst

dependabot · 2026-04-17T15:22:22Z

Bumps the angular group with 9 updates in the / directory:

Package	From	To
@angular/animations	`21.2.8`	`21.2.9`
@angular/cdk	`21.2.5`	`21.2.7`
@angular/common	`21.2.8`	`21.2.9`
@angular/compiler	`21.2.8`	`21.2.9`
@angular/core	`21.2.8`	`21.2.9`
@angular/forms	`21.2.8`	`21.2.9`
@angular/platform-browser	`21.2.8`	`21.2.9`
@angular/platform-browser-dynamic	`21.2.8`	`21.2.9`
@angular/compiler-cli	`21.2.8`	`21.2.9`

Updates @angular/animations from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/animations's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/animations's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

See full diff in compare view

Updates @angular/cdk from 21.2.5 to 21.2.7

Release notes

Sourced from @angular/cdk's releases.

21.2.7

material

Commit Description

sort: deprecate MatSortHeaderIntl and hide from docs (#33089)

21.2.6

material

Commit Description

select: wrong transform origin when opening upwards inside another overlay (#33032)

Changelog

Sourced from @angular/cdk's changelog.

21.2.7 "carbon-jetski" (2026-04-16)

material

Commit Type Description

5954c4594c fix sort: deprecate MatSortHeaderIntl and hide from docs (#33089)

22.0.0-next.4 "paper cup" (2026-04-08)

Breaking Changes

multiple

A bunch of constructors that with rest arguments have been removed. If you were extending Material/CDK components, you may have to update your super calls accordingly.

material

Commit Type Description

07c2d002de fix core: address sass compiler warnings (#33040)

ab21f78b12 fix select: wrong transform origin when opening upwards inside another overlay (#33032)

multiple

Commit Type Description

ce4c2c0a11 fix remove empty constructors (#33048)

21.2.6 "steel bottle" (2026-04-08)

material

Commit Type Description

5b4bbe9c4f fix select: wrong transform origin when opening upwards inside another overlay (#33032)

22.0.0-next.3 "rubber-wombat" (2026-04-01)

Breaking Changes

multiple

Renames the values input/model to value in Combobox, Listbox, Tree, Menu, Toolbar, and Select. Users must update their templates to use the value property instead of values.

refactor(multiple): update api goldens

material

Commit Type Description

ac3911071 fix sidenav: not resetting margin if transition does not start (#33001)

a7d556180 fix slider: not picking up static direction (#33006)

236762fbc fix tooltip: allow hover detection logic to be customized (#33018)

cdk

Commit Type Description

... (truncated)

Commits

2a6cff6 release: cut the v21.2.7 release
5954c45 fix(material/sort): deprecate MatSortHeaderIntl and hide from docs (#33089)
a236a40 release: cut the v21.2.6 release
6b955a7 build: update cross-repo angular dependencies (#33043)
2909c3a build: lock file maintenance (#33038)
5b4bbe9 fix(material/select): wrong transform origin when opening upwards inside anot...
2c877d2 Set generic on some InjectionToken. (#32753)
97be64a build: update cross-repo angular dependencies (#33030)
424b282 build: update dependency aspect_rules_ts to v3.8.8 (#33025)
e433a66 docs(material/dialog): clarify that default options replace rather than merge...
See full diff in compare view

Updates @angular/common from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/common's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/common's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

540536c fix(http): add CSP nonce support to JsonpClientBackend
See full diff in compare view

Updates @angular/compiler from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/compiler's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/compiler's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

See full diff in compare view

Updates @angular/core from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/core's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/core's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

17cae6a docs: fix bootstraping link
f603d47 fix(core): escape forward slashes in transfer state to prevent crawler indexing
05d9b97 build: update cross-repo angular dependencies
See full diff in compare view

Updates @angular/forms from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/forms's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/forms's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

dc95814 docs: add documentation for NG1002
See full diff in compare view

Updates @angular/platform-browser from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/platform-browser's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/platform-browser's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

See full diff in compare view

Updates @angular/platform-browser-dynamic from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/platform-browser-dynamic's releases.

21.2.9

core

Commit Description

escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description

add CSP nonce support to JsonpClientBackend

Don't on Passthru outside of reactive context

platform-server

Commit Description

prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description

normalize multiple leading slashes in URL parser

Changelog

Sourced from @angular/platform-browser-dynamic's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description

f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description

540536c386 fix add CSP nonce support to JsonpClientBackend

63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description

e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description

684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.

TypeScript versions older than 6.0 are no longer supported.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.

ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description

2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description

7f9450219f feat Adds warning for prefetch without main defer trigger

ab061a7610 fix error for type parameter declarations

9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description

a0aa8304cd feat bootstrap via ApplicationRef with config

9c55fcb3e6 feat de-duplicate host directives

8fe025f514 feat drop support for TypeScript 5.9

77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

See full diff in compare view

Updates @angular/compiler-cli from 21.2.8 to 21.2.9

Release notes

Sourced from @angular/compiler-cli's releases.

21.2.9

core
Description has been truncated

Commit Description

Bumps the angular group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `21.2.8` | `21.2.9` | | [@angular/cdk](https://github.com/angular/components) | `21.2.5` | `21.2.7` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.8` | `21.2.9` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.8` | `21.2.9` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.8` | `21.2.9` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.8` | `21.2.9` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.8` | `21.2.9` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.8` | `21.2.9` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.8` | `21.2.9` | Updates `@angular/animations` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/animations) Updates `@angular/cdk` from 21.2.5 to 21.2.7 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.5...v21.2.7) Updates `@angular/common` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/common) Updates `@angular/compiler` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/compiler) Updates `@angular/core` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/core) Updates `@angular/forms` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/forms) Updates `@angular/platform-browser` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/platform-browser-dynamic) Updates `@angular/compiler-cli` from 21.2.8 to 21.2.9 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.9/packages/compiler-cli) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/cdk" dependency-version: 21.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/common" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/core" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/forms" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 21.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler-cli" dependency-version: 21.2.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-26T06:25:23Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 17, 2026

dependabot Bot closed this Apr 26, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/angular-05baaaa38e branch April 26, 2026 06:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the angular group across 1 directory with 9 updates#974

chore(deps): bump the angular group across 1 directory with 9 updates#974
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/angular-05baaaa38e

dependabot Bot commented on behalf of github Apr 17, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	add CSP nonce support to JsonpClientBackend
	Don't on Passthru outside of reactive context

Commit	Type	Description
540536c386	fix	add CSP nonce support to JsonpClientBackend
63a857b874	fix	Don't on Passthru outside of reactive context

Commit	Type	Description
7f9450219f	feat	Adds warning for prefetch without main defer trigger
ab061a7610	fix	error for type parameter declarations
9218140348	fix	resolve TCB mapping failure for safe property reads with as any

Commit	Type	Description
a0aa8304cd	feat	bootstrap via `ApplicationRef` with config
9c55fcb3e6	feat	de-duplicate host directives
8fe025f514	feat	drop support for TypeScript 5.9
77f1ca08e4	fix	handle missing serialized container hydration data

Commit	Type	Description
07c2d002de	fix	core: address sass compiler warnings (#33040)
ab21f78b12	fix	select: wrong transform origin when opening upwards inside another overlay (#33032)

Commit	Type	Description
ac3911071	fix	sidenav: not resetting margin if transition does not start (#33001)
a7d556180	fix	slider: not picking up static direction (#33006)
236762fbc	fix	tooltip: allow hover detection logic to be customized (#33018)

Conversation

dependabot Bot commented on behalf of github Apr 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

21.2.9

core

http

platform-server

router

21.2.9 (2026-04-15)

core

http

platform-server

router

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

platform-browser

router

compiler

compiler-cli

core

21.2.7

material

21.2.6

material

21.2.7 "carbon-jetski" (2026-04-16)

material

22.0.0-next.4 "paper cup" (2026-04-08)

Breaking Changes

multiple

material

multiple

21.2.6 "steel bottle" (2026-04-08)

material

22.0.0-next.3 "rubber-wombat" (2026-04-01)

Breaking Changes

multiple

material

cdk

21.2.9

core

http

platform-server

router

21.2.9 (2026-04-15)

core

http

platform-server

router

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

platform-browser

router

compiler

compiler-cli

core

21.2.9

core

http

platform-server

router

21.2.9 (2026-04-15)

core

http

platform-server

router

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

platform-browser

router

compiler

compiler-cli

core

21.2.9

core

http

platform-server

router

dependabot Bot commented on behalf of github Apr 17, 2026 •

edited

Loading