Bump the npm-patch group across 12 directories with 14 updates

[dependabot]

Bumps the npm-patch group with 3 updates in the /src/Moryx.CommandCenter.Web directory: react, react-dom and rimraf.
Bumps the npm-patch group with 10 updates in the /src/Moryx.ControlSystem.ProcessEngine.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.ControlSystem.WorkerSupport.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.FactoryMonitor.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.Media.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.Notifications.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.Operators.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/compiler-cli	19.2.14	19.2.19
autoprefixer	10.4.21	10.4.27

Bumps the npm-patch group with 10 updates in the /src/Moryx.Orders.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.Products.Web directory:

Package	From	To
@angular/animations	19.2.15	19.2.19
@angular/common	19.2.15	19.2.19
@angular/compiler	19.2.15	19.2.19
@angular/core	19.2.15	19.2.19
@angular/forms	19.2.15	19.2.19
@angular/platform-browser	19.2.15	19.2.19
@angular/platform-browser-dynamic	19.2.15	19.2.19
@angular/router	19.2.15	19.2.19
@angular/cli	19.2.17	19.2.22
@angular/compiler-cli	19.2.15	19.2.19

Bumps the npm-patch group with 10 updates in the /src/Moryx.Resources.Web directory:

Package	From	To
@angular/animations	19.2.15	19.2.19
@angular/common	19.2.15	19.2.19
@angular/compiler	19.2.15	19.2.19
@angular/core	19.2.15	19.2.19
@angular/forms	19.2.15	19.2.19
@angular/platform-browser	19.2.15	19.2.19
@angular/platform-browser-dynamic	19.2.15	19.2.19
@angular/router	19.2.15	19.2.19
@angular/cli	19.2.17	19.2.22
@angular/compiler-cli	19.2.15	19.2.19

Bumps the npm-patch group with 11 updates in the /src/Moryx.Shifts.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19
autoprefixer	10.4.21	10.4.27

Bumps the npm-patch group with 10 updates in the /src/Moryx.Workplans.Web directory:

Package	From	To
@angular/animations	19.2.14	19.2.19
@angular/common	19.2.14	19.2.19
@angular/compiler	19.2.14	19.2.19
@angular/core	19.2.14	19.2.19
@angular/forms	19.2.14	19.2.19
@angular/platform-browser	19.2.14	19.2.19
@angular/platform-browser-dynamic	19.2.14	19.2.19
@angular/router	19.2.14	19.2.19
@angular/cli	19.2.15	19.2.22
@angular/compiler-cli	19.2.14	19.2.19

Updates react from 19.2.0 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Commits

• 90ab3f8 Version 19.2.4
• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• 053df4e Version 19.2.1
• See full diff in compare view

Updates react-dom from 19.2.0 to 19.2.4

Release notes

Sourced from react-dom's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon facebook/react#35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #35277)

Commits

• 90ab3f8 Version 19.2.4
• 612e371 Version 19.2.3
• b910fc1 Version 19.2.2
• 053df4e Version 19.2.1
• See full diff in compare view

Updates rimraf from 6.1.0 to 6.1.3

Commits

• f738c78 6.1.3
• a164a85 update deps
• 4635ba7 update deps
• 509c53f limit ci workflow permissions
• 68ce04f formatting
• 37680c5 add warning to not pass untrusted input to this method ever
• 786563d remove contributing doc, already covered by .github repo
• dbeef73 contributing
• 84d27af update workflows and standard project junk
• cd45498 6.1.2
• Additional commits viewable in compare view

Updates @angular/animations from 19.2.14 to 19.2.19

Release notes

Sourced from @​angular/animations's releases.

19.2.19

core

Commit	Description
	block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

19.2.18

core

Commit	Description
	sanitize sensitive attributes on SVG script elements

19.2.17

compiler

Commit	Description
	prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16

http

Commit	Description
	prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

... (truncated)

Changelog

Sourced from @​angular/animations's changelog.

19.2.19 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
747548721d	fix	block creation of sensitive URI attributes from ICU messages

20.3.17 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
7f9de3c118	fix	block creation of sensitive URI attributes from ICU messages

21.2.0 (2026-02-25)

common

Commit	Type	Description
18003a33bb	feat	add an 'outlet' injector option for ngTemplateOutlet
8bbe6dc46c	feat	Add Location strategies to manage trailing slash on write
51cc914807	feat	support height in ImageLoaderConfig and built-in loaders

compiler

Commit	Type	Description
72534e2a34	feat	Add support for the instanceof binary operator
95b3f37d4a	feat	Exhaustive checks for switch blocks
04ba09a8d9	feat	support AstVisitor.visitEmptyExpr()
ce80136e7b	fix	optimize away unnecessary restore/reset view calls
3242a61bae	fix	variable counter visiting some expressions twice

compiler-cli

Commit	Type	Description
473dd3e1cb	fix	attach source spans to object literal keys in TCB
a904d9f77b	fix	support nested component declaration
2ea6dfc6c9	fix	update diagnostic to flag no-op arrow functions in listeners

core

... (truncated)

Commits

• See full diff in compare view

Updates @angular/common from 19.2.14 to 19.2.19

Release notes

Sourced from @​angular/common's releases.

19.2.19

core

Commit	Description
	block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

19.2.18

core

Commit	Description
	sanitize sensitive attributes on SVG script elements

19.2.17

compiler

Commit	Description
	prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16

http

Commit	Description
	prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

19.2.19 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
747548721d	fix	block creation of sensitive URI attributes from ICU messages

20.3.17 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
7f9de3c118	fix	block creation of sensitive URI attributes from ICU messages

21.2.0 (2026-02-25)

common

Commit	Type	Description
18003a33bb	feat	add an 'outlet' injector option for ngTemplateOutlet
8bbe6dc46c	feat	Add Location strategies to manage trailing slash on write
51cc914807	feat	support height in ImageLoaderConfig and built-in loaders

compiler

Commit	Type	Description
72534e2a34	feat	Add support for the instanceof binary operator
95b3f37d4a	feat	Exhaustive checks for switch blocks
04ba09a8d9	feat	support AstVisitor.visitEmptyExpr()
ce80136e7b	fix	optimize away unnecessary restore/reset view calls
3242a61bae	fix	variable counter visiting some expressions twice

compiler-cli

Commit	Type	Description
473dd3e1cb	fix	attach source spans to object literal keys in TCB
a904d9f77b	fix	support nested component declaration
2ea6dfc6c9	fix	update diagnostic to flag no-op arrow functions in listeners

core

... (truncated)

Commits

• 05fe668 fix(http): prevent XSRF token leakage to protocol-relative URLs
• See full diff in compare view

Updates @angular/compiler from 19.2.14 to 19.2.19

Release notes

Sourced from @​angular/compiler's releases.

19.2.19

core

Commit	Description
	block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

19.2.18

core

Commit	Description
	sanitize sensitive attributes on SVG script elements

19.2.17

compiler

Commit	Description
	prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16

http

Commit	Description
	prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

19.2.19 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
747548721d	fix	block creation of sensitive URI attributes from ICU messages

20.3.17 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
7f9de3c118	fix	block creation of sensitive URI attributes from ICU messages

21.2.0 (2026-02-25)

common

Commit	Type	Description
18003a33bb	feat	add an 'outlet' injector option for ngTemplateOutlet
8bbe6dc46c	feat	Add Location strategies to manage trailing slash on write
51cc914807	feat	support height in ImageLoaderConfig and built-in loaders

compiler

Commit	Type	Description
72534e2a34	feat	Add support for the instanceof binary operator
95b3f37d4a	feat	Exhaustive checks for switch blocks
04ba09a8d9	feat	support AstVisitor.visitEmptyExpr()
ce80136e7b	fix	optimize away unnecessary restore/reset view calls
3242a61bae	fix	variable counter visiting some expressions twice

compiler-cli

Commit	Type	Description
473dd3e1cb	fix	attach source spans to object literal keys in TCB
a904d9f77b	fix	support nested component declaration
2ea6dfc6c9	fix	update diagnostic to flag no-op arrow functions in listeners

core

... (truncated)

Commits

• 26cdc53 fix(core): sanitize sensitive attributes on SVG script elements
• 7c42e2e fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
• See full diff in compare view

Updates @angular/core from 19.2.14 to 19.2.19

Release notes

Sourced from @​angular/core's releases.

19.2.19

core

Commit	Description
	block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

19.2.18

core

Commit	Description
	sanitize sensitive attributes on SVG script elements

19.2.17

compiler

Commit	Description
	prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16

http

Commit	Description
	prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

19.2.19 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
747548721d	fix	block creation of sensitive URI attributes from ICU messages

20.3.17 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
7f9de3c118	fix	block creation of sensitive URI attributes from ICU messages

21.2.0 (2026-02-25)

common

Commit	Type	Description
18003a33bb	feat	add an 'outlet' injector option for ngTemplateOutlet
8bbe6dc46c	feat	Add Location strategies to manage trailing slash on write
51cc914807	feat	support height in ImageLoaderConfig and built-in loaders

compiler

Commit	Type	Description
72534e2a34	feat	Add support for the instanceof binary operator
95b3f37d4a	feat	Exhaustive checks for switch blocks
04ba09a8d9	feat	support AstVisitor.visitEmptyExpr()
ce80136e7b	fix	optimize away unnecessary restore/reset view calls
3242a61bae	fix	variable counter visiting some expressions twice

compiler-cli

Commit	Type	Description
473dd3e1cb	fix	attach source spans to object literal keys in TCB
a904d9f77b	fix	support nested component declaration
2ea6dfc6c9	fix	update diagnostic to flag no-op arrow functions in listeners

core

... (truncated)

Commits

• 7475487 fix(core): block creation of sensitive URI attributes from ICU messages
• 26cdc53 fix(core): sanitize sensitive attributes on SVG script elements
• 7c42e2e fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
• 70d0639 fix(core): introduce BootstrapContext for improved server bootstrapping (#6...
• See full diff in compare view

Updates @angular/forms from 19.2.14 to 19.2.19

Release notes

Sourced from @​angular/forms's releases.

19.2.19

core

Commit	Description
	block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

19.2.18

core

Commit	Description
	sanitize sensitive attributes on SVG script elements

19.2.17

compiler

Commit	Description
	prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16

http

Commit	Description
	prevent XSRF token leakage to protocol-relative URLs

19.2.15

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63639)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

... (truncated)

Changelog

Sourced from @​angular/forms's changelog.

19.2.19 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
747548721d	fix	block creation of sensitive URI attributes from ICU messages

20.3.17 (2026-02-25)

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

core

Commit	Type	Description
7f9de3c118	fix	block creation of sensitive URI attributes from ICU messages

21.2.0 (2026-02-25)

common

Commit	Type	Description
18003a33bb	feat	add an 'outlet' injector option for ngTemplateOutlet
8bbe6dc46c	feat	Add Location strategies to manage trailing slash on write
51cc914807	feat	support height in ImageLoaderConfig and built-in loaders

compiler

Commit	Type	Description
72534e2a34	feat	Add support for the instanceof binary operator
95b3f37d4a	feat	Exhaustive checks for switch blocks
04ba09a8d9	feat	support AstVisitor.visitEmptyExpr()
ce80136e7b	fix	optimize away unnecessary restore/reset view calls
3242a61bae	fix	variable counter visiting some expressions twice

compiler-cli

Commit	Type	Description
473dd3e1cb	fix	attach source spans to object literal keys in TCB
a904d9f77b	fix	support nested component declaration
2ea6dfc6c9	fix	update diagnostic to flag no-op arrow functions in listeners

core

... (truncated)

Commits

• See full diff in compare view

Updates @angular/platform-browser from 19.2.14 to 19.2.19

Release notes

Sourced from @​angular/platform-browser's releases.

19.2.19

core

Commit	Description
	block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

19.2.18

core

Commit	Description
	sanitize sensitive attributes on SVG script elements

19.2.17

compiler

Commit	Description
	prevent XSS via SVG animation attributeName and MathML/SVG URLs

19.2.16

http

Commit	DescriptionDescription has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.