build(deps): bump the frontend-minor-patch group across 1 directory with 16 updates by dependabot[bot] · Pull Request #103 · GoogleCloudPlatform/race-condition

dependabot · 2026-05-18T10:21:30Z

Bumps the frontend-minor-patch group with 16 updates in the /web/frontend directory:

Package	From	To
@angular/animations	`21.2.10`	`21.2.13`
@angular/common	`21.2.10`	`21.2.13`
@angular/compiler	`21.2.10`	`21.2.13`
@angular/core	`21.2.10`	`21.2.13`
@angular/forms	`21.2.10`	`21.2.13`
@angular/platform-browser	`21.2.10`	`21.2.13`
@angular/platform-browser-dynamic	`21.2.10`	`21.2.13`
@angular/router	`21.2.10`	`21.2.13`
ngx-markdown	`21.2.0`	`21.3.0`
protobufjs	`8.0.1`	`8.3.0`
zone.js	`0.16.1`	`0.16.2`
@angular/build	`21.2.8`	`21.2.11`
@angular/cli	`21.2.8`	`21.2.11`
@angular/compiler-cli	`21.2.10`	`21.2.13`
@types/three	`0.184.0`	`0.184.1`
vitest	`4.1.5`	`4.1.6`

Updates @angular/animations from 21.2.10 to 21.2.13

Release notes

Sourced from @angular/animations's releases.

21.2.13

core

Commit Description

disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Description

add allowedHosts option to renderModule and renderApplication

forward BEFORE_APP_SERIALIZED errors to ErrorHandler

21.2.12

core

Commit Description

allow explicit read generic with signal input transforms

i18n flags leaking on errors

respect ngSkipHydration on components with projectable nodes in LContainers

sanitizer typings

validate security-sensitive attributes in i18n bindings

visit ng-let expression value in signal migration schematics

forms

Commit Description

prohibit concurrent submits in signal forms

21.2.11

common

Commit Description

prevent focus from scrollToAnchor

compiler

Commit Description

let declaration span not including end character

core

Commit Description

fix ordering of view queries metadata in JIT mode

guard against non-object events and avoid listener wrapper identity mismatch

prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit Description

ensure origin has a trailing slash when parsing url

Changelog

Sourced from @angular/animations's changelog.

21.2.13 (2026-05-13)

core

Commit Type Description

1c6553e97d fix disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Type Description

629905d537 fix add allowedHosts option to renderModule and renderApplication

0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

19.2.22 (2026-05-12)

core

Commit Type Description

83a640516f fix disallow event attribute bindings in host bindings unconditionally (#68469)

24a0103a98 fix validate security-sensitive attributes in i18n bindings (#68469)

platform-server

Commit Type Description

8569db8875 fix add allowedHosts option to renderModule and renderApplication

837a710217 fix ensure origin has a trailing slash when parsing url (#68469)

20.3.21 (2026-05-12)

platform-server

Commit Type Description

f584840e2e fix add allowedHosts option to renderModule and renderApplication

22.0.0-next.12 (2026-05-08)

core

Commit Type Description

8ebae1de33 fix allow service with factory on abstract classes

6f525245cd fix disallow event attribute bindings in host bindings unconditionally

migrations

Commit Type Description

0f2160c410 fix remove compiler import from safe optional chaining migration

platform-server

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/common from 21.2.10 to 21.2.13

Release notes

Sourced from @angular/common's releases.

21.2.13

core

Commit Description

disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Description

add allowedHosts option to renderModule and renderApplication

forward BEFORE_APP_SERIALIZED errors to ErrorHandler

21.2.12

core

Commit Description

allow explicit read generic with signal input transforms

i18n flags leaking on errors

respect ngSkipHydration on components with projectable nodes in LContainers

sanitizer typings

validate security-sensitive attributes in i18n bindings

visit ng-let expression value in signal migration schematics

forms

Commit Description

prohibit concurrent submits in signal forms

21.2.11

common

Commit Description

prevent focus from scrollToAnchor

compiler

Commit Description

let declaration span not including end character

core

Commit Description

fix ordering of view queries metadata in JIT mode

guard against non-object events and avoid listener wrapper identity mismatch

prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit Description

ensure origin has a trailing slash when parsing url

Changelog

Sourced from @angular/common's changelog.

21.2.13 (2026-05-13)

core

Commit Type Description

1c6553e97d fix disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Type Description

629905d537 fix add allowedHosts option to renderModule and renderApplication

0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

19.2.22 (2026-05-12)

core

Commit Type Description

83a640516f fix disallow event attribute bindings in host bindings unconditionally (#68469)

24a0103a98 fix validate security-sensitive attributes in i18n bindings (#68469)

platform-server

Commit Type Description

8569db8875 fix add allowedHosts option to renderModule and renderApplication

837a710217 fix ensure origin has a trailing slash when parsing url (#68469)

20.3.21 (2026-05-12)

platform-server

Commit Type Description

f584840e2e fix add allowedHosts option to renderModule and renderApplication

22.0.0-next.12 (2026-05-08)

core

Commit Type Description

8ebae1de33 fix allow service with factory on abstract classes

6f525245cd fix disallow event attribute bindings in host bindings unconditionally

migrations

Commit Type Description

0f2160c410 fix remove compiler import from safe optional chaining migration

platform-server

| Commit | Type | Description |

... (truncated)

Commits

30cf85f refactor(common): update deprecation message
42d57c3 refactor(common): fix viewport tests
10ad3c0 fix(common): prevent focus from scrollToAnchor
See full diff in compare view

Updates @angular/compiler from 21.2.10 to 21.2.13

Release notes

Sourced from @angular/compiler's releases.

21.2.13

core

Commit Description

disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Description

add allowedHosts option to renderModule and renderApplication

forward BEFORE_APP_SERIALIZED errors to ErrorHandler

21.2.12

core

Commit Description

allow explicit read generic with signal input transforms

i18n flags leaking on errors

respect ngSkipHydration on components with projectable nodes in LContainers

sanitizer typings

validate security-sensitive attributes in i18n bindings

visit ng-let expression value in signal migration schematics

forms

Commit Description

prohibit concurrent submits in signal forms

21.2.11

common

Commit Description

prevent focus from scrollToAnchor

compiler

Commit Description

let declaration span not including end character

core

Commit Description

fix ordering of view queries metadata in JIT mode

guard against non-object events and avoid listener wrapper identity mismatch

prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit Description

ensure origin has a trailing slash when parsing url

Changelog

Sourced from @angular/compiler's changelog.

21.2.13 (2026-05-13)

core

Commit Type Description

1c6553e97d fix disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Type Description

629905d537 fix add allowedHosts option to renderModule and renderApplication

0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

19.2.22 (2026-05-12)

core

Commit Type Description

83a640516f fix disallow event attribute bindings in host bindings unconditionally (#68469)

24a0103a98 fix validate security-sensitive attributes in i18n bindings (#68469)

platform-server

Commit Type Description

8569db8875 fix add allowedHosts option to renderModule and renderApplication

837a710217 fix ensure origin has a trailing slash when parsing url (#68469)

20.3.21 (2026-05-12)

platform-server

Commit Type Description

f584840e2e fix add allowedHosts option to renderModule and renderApplication

22.0.0-next.12 (2026-05-08)

core

Commit Type Description

8ebae1de33 fix allow service with factory on abstract classes

6f525245cd fix disallow event attribute bindings in host bindings unconditionally

migrations

Commit Type Description

0f2160c410 fix remove compiler import from safe optional chaining migration

platform-server

| Commit | Type | Description |

... (truncated)

Commits

baf92da test: remove invalid css that was causing issues with the postcss parser
1c6553e fix(core): disallow event attribute bindings in host bindings unconditionally
4f5d8a2 fix(compiler): let declaration span not including end character
See full diff in compare view

Updates @angular/core from 21.2.10 to 21.2.13

Release notes

Sourced from @angular/core's releases.

21.2.13

core

Commit Description

disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Description

add allowedHosts option to renderModule and renderApplication

forward BEFORE_APP_SERIALIZED errors to ErrorHandler

21.2.12

core

Commit Description

allow explicit read generic with signal input transforms

i18n flags leaking on errors

respect ngSkipHydration on components with projectable nodes in LContainers

sanitizer typings

validate security-sensitive attributes in i18n bindings

visit ng-let expression value in signal migration schematics

forms

Commit Description

prohibit concurrent submits in signal forms

21.2.11

common

Commit Description

prevent focus from scrollToAnchor

compiler

Commit Description

let declaration span not including end character

core

Commit Description

fix ordering of view queries metadata in JIT mode

guard against non-object events and avoid listener wrapper identity mismatch

prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit Description

ensure origin has a trailing slash when parsing url

Changelog

Sourced from @angular/core's changelog.

21.2.13 (2026-05-13)

core

Commit Type Description

1c6553e97d fix disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Type Description

629905d537 fix add allowedHosts option to renderModule and renderApplication

0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

19.2.22 (2026-05-12)

core

Commit Type Description

83a640516f fix disallow event attribute bindings in host bindings unconditionally (#68469)

24a0103a98 fix validate security-sensitive attributes in i18n bindings (#68469)

platform-server

Commit Type Description

8569db8875 fix add allowedHosts option to renderModule and renderApplication

837a710217 fix ensure origin has a trailing slash when parsing url (#68469)

20.3.21 (2026-05-12)

platform-server

Commit Type Description

f584840e2e fix add allowedHosts option to renderModule and renderApplication

22.0.0-next.12 (2026-05-08)

core

Commit Type Description

8ebae1de33 fix allow service with factory on abstract classes

6f525245cd fix disallow event attribute bindings in host bindings unconditionally

migrations

Commit Type Description

0f2160c410 fix remove compiler import from safe optional chaining migration

platform-server

| Commit | Type | Description |

... (truncated)

Commits

1c6553e fix(core): disallow event attribute bindings in host bindings unconditionally
9e38ed7 fix(core): sanitizer typings
3430251 fix(core): i18n flags leaking on errors
c37f6ca fix(core): visit ng-let expression value in signal migration schematics
fe13bb6 fix(core): allow explicit read generic with signal input transforms
7a05a9a fix(core): validate security-sensitive attributes in i18n bindings
1aeebbe fix(core): respect ngSkipHydration on components with projectable nodes in LC...
4900e45 build: update cross-repo angular dependencies
a40e2ce fix(core): fix ordering of view queries metadata in JIT mode
9bcbf37 refactor(core): fix bundling symbol test
Additional commits viewable in compare view

Updates @angular/forms from 21.2.10 to 21.2.13

Release notes

Sourced from @angular/forms's releases.

21.2.13

core

Commit Description

disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Description

add allowedHosts option to renderModule and renderApplication

forward BEFORE_APP_SERIALIZED errors to ErrorHandler

21.2.12

core

Commit Description

allow explicit read generic with signal input transforms

i18n flags leaking on errors

respect ngSkipHydration on components with projectable nodes in LContainers

sanitizer typings

validate security-sensitive attributes in i18n bindings

visit ng-let expression value in signal migration schematics

forms

Commit Description

prohibit concurrent submits in signal forms

21.2.11

common

Commit Description

prevent focus from scrollToAnchor

compiler

Commit Description

let declaration span not including end character

core

Commit Description

fix ordering of view queries metadata in JIT mode

guard against non-object events and avoid listener wrapper identity mismatch

prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit Description

ensure origin has a trailing slash when parsing url

Changelog

Sourced from @angular/forms's changelog.

21.2.13 (2026-05-13)

core

Commit Type Description

1c6553e97d fix disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Type Description

629905d537 fix add allowedHosts option to renderModule and renderApplication

0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

19.2.22 (2026-05-12)

core

Commit Type Description

83a640516f fix disallow event attribute bindings in host bindings unconditionally (#68469)

24a0103a98 fix validate security-sensitive attributes in i18n bindings (#68469)

platform-server

Commit Type Description

8569db8875 fix add allowedHosts option to renderModule and renderApplication

837a710217 fix ensure origin has a trailing slash when parsing url (#68469)

20.3.21 (2026-05-12)

platform-server

Commit Type Description

f584840e2e fix add allowedHosts option to renderModule and renderApplication

22.0.0-next.12 (2026-05-08)

core

Commit Type Description

8ebae1de33 fix allow service with factory on abstract classes

6f525245cd fix disallow event attribute bindings in host bindings unconditionally

migrations

Commit Type Description

0f2160c410 fix remove compiler import from safe optional chaining migration

platform-server

| Commit | Type | Description |

... (truncated)

Commits

03ad538 fix(forms): prohibit concurrent submits in signal forms
ce7a43a refactor(forms): improve clarity in SelectMultipleControlValueAccessor.writeV...
600da64 docs(forms): add NG01902 error reference and link to docs
See full diff in compare view

Updates @angular/platform-browser from 21.2.10 to 21.2.13

Release notes

Sourced from @angular/platform-browser's releases.

21.2.13

core

Commit Description

disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Description

add allowedHosts option to renderModule and renderApplication

forward BEFORE_APP_SERIALIZED errors to ErrorHandler

21.2.12

core

Commit Description

allow explicit read generic with signal input transforms

i18n flags leaking on errors

respect ngSkipHydration on components with projectable nodes in LContainers

sanitizer typings

validate security-sensitive attributes in i18n bindings

visit ng-let expression value in signal migration schematics

forms

Commit Description

prohibit concurrent submits in signal forms

21.2.11

common

Commit Description

prevent focus from scrollToAnchor

compiler

Commit Description

let declaration span not including end character

core

Commit Description

fix ordering of view queries metadata in JIT mode

guard against non-object events and avoid listener wrapper identity mismatch

prevent event replay double-invocation when element hydrates before app stability

platform-server

Commit Description

ensure origin has a trailing slash when parsing url

Changelog

Sourced from @angular/platform-browser's changelog.

21.2.13 (2026-05-13)

core

Commit Type Description

1c6553e97d fix disallow event attribute bindings in host bindings unconditionally

platform-server

Commit Type Description

629905d537 fix add allowedHosts option to renderModule and renderApplication

0b7192f441 fix forward BEFORE_APP_SERIALIZED errors to ErrorHandler

19.2.22 (2026-05-12)

core

Commit Type Description

83a640516f fix disallow event attribute bindings in host bindings unconditionally (#68469)

24a0103a98 fix validate security-sensitive attributes in i18n bindings (#68469)

platform-server

Commit Type Description

8569db8875 fix add allowedHosts option to renderModule and renderApplication

837a710217 fix ensure origin has a trailing slash when parsing url (#68469)

20.3.21 (2026-05-12)

platform-server

Commit Type Description

f584840e2e fix add allowedHosts option to renderModule and renderApplication

22.0.0-next.12 (2026-05-08)

core

Commit Type Description

8ebae1de33 fix allow service with factory on abstract classes

6f525245cd fix disallow event attribute bindings in host bindings unconditionally

migrations

Commit Type Description

0f2160c410 fix remove compiler import from safe optional chaining migration

platform-server

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare viewDescription has been truncated

…ith 16 updates Bumps the frontend-minor-patch group with 16 updates in the /web/frontend directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `21.2.10` | `21.2.13` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.10` | `21.2.13` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.10` | `21.2.13` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.10` | `21.2.13` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.10` | `21.2.13` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.10` | `21.2.13` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.10` | `21.2.13` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.10` | `21.2.13` | | [ngx-markdown](https://github.com/jfcere/ngx-markdown) | `21.2.0` | `21.3.0` | | [protobufjs](https://github.com/protobufjs/protobuf.js) | `8.0.1` | `8.3.0` | | [zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js) | `0.16.1` | `0.16.2` | | [@angular/build](https://github.com/angular/angular-cli) | `21.2.8` | `21.2.11` | | [@angular/cli](https://github.com/angular/angular-cli) | `21.2.8` | `21.2.11` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.10` | `21.2.13` | | [@types/three](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/three) | `0.184.0` | `0.184.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.5` | `4.1.6` | Updates `@angular/animations` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/animations) Updates `@angular/common` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/common) Updates `@angular/compiler` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/compiler) Updates `@angular/core` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/core) Updates `@angular/forms` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/forms) Updates `@angular/platform-browser` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/platform-browser-dynamic) Updates `@angular/router` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/router) Updates `ngx-markdown` from 21.2.0 to 21.3.0 - [Release notes](https://github.com/jfcere/ngx-markdown/releases) - [Commits](jfcere/ngx-markdown@v21.2.0...v21.3.0) Updates `protobufjs` from 8.0.1 to 8.3.0 - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/master/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v8.0.1...protobufjs-v8.3.0) Updates `zone.js` from 0.16.1 to 0.16.2 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/packages/zone.js/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/zone.js-0.16.2/packages/zone.js) Updates `@angular/build` from 21.2.8 to 21.2.11 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.8...v21.2.11) Updates `@angular/cli` from 21.2.8 to 21.2.11 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.8...v21.2.11) Updates `@angular/compiler-cli` from 21.2.10 to 21.2.13 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.13/packages/compiler-cli) Updates `@types/three` from 0.184.0 to 0.184.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/three) Updates `vitest` from 4.1.5 to 4.1.6 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/vitest) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/common" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/compiler" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/core" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/forms" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/platform-browser" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/router" dependency-version: 21.2.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: ngx-markdown dependency-version: 21.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-minor-patch - dependency-name: protobufjs dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-minor-patch - dependency-name: zone.js dependency-version: 0.16.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/build" dependency-version: 21.2.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/cli" dependency-version: 21.2.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@angular/compiler-cli" dependency-version: 21.2.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: "@types/three" dependency-version: 0.184.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-minor-patch - dependency-name: vitest dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026

dependabot Bot requested a review from a team as a code owner May 18, 2026 10:21

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the frontend-minor-patch group across 1 directory with 16 updates#103

build(deps): bump the frontend-minor-patch group across 1 directory with 16 updates#103
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/frontend/frontend-minor-patch-ae318da074

dependabot Bot commented on behalf of github May 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	add `allowedHosts` option to `renderModule` and `renderApplication`
	forward BEFORE_APP_SERIALIZED errors to ErrorHandler

Commit	Description
	allow explicit read generic with signal input transforms
	i18n flags leaking on errors
	respect ngSkipHydration on components with projectable nodes in LContainers
	sanitizer typings
	validate security-sensitive attributes in i18n bindings
	visit ng-let expression value in signal migration schematics

Commit	Description
	fix ordering of view queries metadata in JIT mode
	guard against non-object events and avoid listener wrapper identity mismatch
	prevent event replay double-invocation when element hydrates before app stability

Commit	Type	Description
629905d537	fix	add `allowedHosts` option to `renderModule` and `renderApplication`
0b7192f441	fix	forward BEFORE_APP_SERIALIZED errors to ErrorHandler

Commit	Type	Description
83a640516f	fix	disallow event attribute bindings in host bindings unconditionally (#68469)
24a0103a98	fix	validate security-sensitive attributes in i18n bindings (#68469)

Commit	Type	Description
8569db8875	fix	add `allowedHosts` option to `renderModule` and `renderApplication`
837a710217	fix	ensure origin has a trailing slash when parsing url (#68469)

Commit	Type	Description
8ebae1de33	fix	allow service with factory on abstract classes
6f525245cd	fix	disallow event attribute bindings in host bindings unconditionally

Conversation

dependabot Bot commented on behalf of github May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

21.2.13

core

platform-server

21.2.12

core

forms

21.2.11

common

compiler

core

platform-server

21.2.13 (2026-05-13)

core

platform-server

19.2.22 (2026-05-12)

core

platform-server

20.3.21 (2026-05-12)

platform-server

22.0.0-next.12 (2026-05-08)

core

migrations

platform-server

21.2.13

core

platform-server

21.2.12

core

forms

21.2.11

common

compiler

core

platform-server

21.2.13 (2026-05-13)

core

platform-server

19.2.22 (2026-05-12)

core

platform-server

20.3.21 (2026-05-12)

platform-server

22.0.0-next.12 (2026-05-08)

core

migrations

platform-server

21.2.13

core

platform-server

21.2.12

core

forms

21.2.11

common

compiler

core

platform-server

21.2.13 (2026-05-13)

core

platform-server

19.2.22 (2026-05-12)

core

platform-server

20.3.21 (2026-05-12)

platform-server

22.0.0-next.12 (2026-05-08)

core

migrations

platform-server

21.2.13

core

platform-server

21.2.12

core

forms

21.2.11

common

dependabot Bot commented on behalf of github May 18, 2026 •

edited

Loading