build(deps): bump the npm_and_yarn group across 4 directories with 3 updates by dependabot[bot] · Pull Request #10674 · public-ui/kolibri

dependabot · 2026-08-12T12:58:57Z

Bumps the npm_and_yarn group with 3 updates in the / directory: @angular/common, @angular/compiler and @angular/core.
Bumps the npm_and_yarn group with 3 updates in the /packages/adapters/angular/v19 directory: @angular/common, @angular/compiler and @angular/core.
Bumps the npm_and_yarn group with 2 updates in the /packages/adapters/angular/v20 directory: @angular/compiler and @angular/core.
Bumps the npm_and_yarn group with 2 updates in the /packages/adapters/angular/v21 directory: @angular/compiler and @angular/core.

Updates @angular/common from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/common's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/common's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

a64e288 fix(http): distinguish repeated transfer cache params
b963f61 fix(http): prevent caching of responses with Set-Cookie headers
06be298 fix(http): preserve empty referrer option in HttpRequest
9f443bc fix(common): Limits date format string length
fa940e1 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
e2ef1ce fix(http): skip transfer cache for fetch credentialed requests
3d135ce fix(common): add upper bounds for digitsInfo
39a4b4c fix(common): sanitize placeholder
Additional commits viewable in compare view

Updates @angular/compiler from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/compiler's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
5dbcd0e fix(compiler): disallow i18n event attributes
a68ec70 fix(compiler): sanitize two-way properties
d40acc6 fix(compiler): prevent namespaced SVG <style> elements from being stripped
7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
823b37f test(compiler): remove obsolete schema_extractor import (#68926)
e345a58 fix(core): normalize tag names in runtime i18n attribute security context loo...
8f35b18 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
64a89e9 fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
Additional commits viewable in compare view

Updates @angular/core from 19.2.21 to 20.3.25

Release notes

Sourced from @angular/core's releases.

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

validate lowercase SVG animation attribute names (#69270)

http

Commit Description

preserve empty referrer option in HttpRequest

Rejects non-HTTP(S) URLs in JSONP requests

skip transfer cache for fetch credentialed requests

platform-server

Commit Description

harden platform location origin validation during SSR

deprecate ServerXhr (#69256)

service-worker

Commit Description

Strips sensitive headers on cross-origin redirects

Deprecations

platform-server

XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

20.3.24

platform-server

Commit Description

throw on suspicious URLs and restrict protocol-relative URLs

update domino to latest version

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

... (truncated)

Changelog

Sourced from @angular/core's changelog.

20.3.25 (2026-06-10)

Deprecations

platform-server

XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

common

Commit Type Description

9f443bc24c fix Limits date format string length

566ad05f20 fix skip transfer cache for uncacheable HTTP traffic

1a62130a6b fix use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Type Description

a68ec702a0 fix sanitize two-way properties

core

Commit Type Description

768a349e6e fix harden TransferState restoration against DOM clobbering

ca48b4728d fix validate lowercase SVG animation attribute names (#69270)

http

Commit Type Description

06be298267 fix preserve empty referrer option in HttpRequest

fa940e1f4d fix Rejects non-HTTP(S) URLs in JSONP requests

e2ef1ce72a fix skip transfer cache for fetch credentialed requests

platform-server

Commit Type Description

49368c1859 fix harden platform location origin validation during SSR

d55c94ad81 refactor deprecate ServerXhr (#69256)

service-worker

Commit Type Description

d65a5f457b fix Strips sensitive headers on cross-origin redirects

22.0.0 (2026-06-03)

Blog post "Announcing Angular v22".

Breaking Changes

compiler

This change will trigger the nullishCoalescingNotNullable and optionalChainNotNullable diagnostics on exisiting projects. You might want to disable those 2 diagnotiscs in your tsconfig temporarily.

data prefixed attribute no-longer bind inputs nor outputs.

The compiler will throw when there a when inputs, outputs or model are binding to the same input/outputs.

in variables will throw in template expressions.

compiler-cli

... (truncated)

Commits

ca48b47 fix(core): validate lowercase SVG animation attribute names (#69270)
1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
49368c1 fix(platform-server): harden platform location origin validation during SSR
566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
768a349 fix(core): harden TransferState restoration against DOM clobbering
7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
6595409 test(core): update golden symbols and host bindings sanitization spec (#68926)
d86e4e7 fix(core): reject script element as a dynamic component host (#68926)
b8f1f72 test(core): remove obsolete blockquote cite host binding tests (#68926)
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
Additional commits viewable in compare view

Updates @angular/common from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/common's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/common's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

a64e288 fix(http): distinguish repeated transfer cache params
b963f61 fix(http): prevent caching of responses with Set-Cookie headers
06be298 fix(http): preserve empty referrer option in HttpRequest
9f443bc fix(common): Limits date format string length
fa940e1 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
e2ef1ce fix(http): skip transfer cache for fetch credentialed requests
3d135ce fix(common): add upper bounds for digitsInfo
39a4b4c fix(common): sanitize placeholder
Additional commits viewable in compare view

Updates @angular/compiler from 19.2.25 to 20.3.27

Release notes

Sourced from @angular/compiler's releases.

20.3.27

compiler

Commit Description

disallow i18n event attributes

restrict possible event handler check to property names longer than 2 characters

http

Commit Description

distinguish repeated transfer cache params

platform-server

Commit Description

update domino to latest version

20.3.26

compiler-cli

Commit Description

update babel dependencies to latest v7

core

Commit Description

avoid caching missing locale data

reject dynamic script host elements

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

20.3.27 (2026-07-29)

compiler

Commit Type Description

5dbcd0ee16 fix disallow i18n event attributes

db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description

a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description

6f80cca0b8 fix update domino to latest version

22.0.8 (2026-07-22)

common

Commit Type Description

c0368f2278 fix preserve crossorigin on image preloads

core

Commit Type Description

8616ba9db6 fix ensure SVG animation attributeName is checked case-insensitively

forms

Commit Type Description

d302c7ab83 fix ensure pending status propagates to the root form in signal forms

http

Commit Type Description

9d40f8aefe fix prevent transfer cache key collisions

migrations

Commit Type Description

388daea2fc fix correctly migrate ngClass with mixed space-separated keys

bb39cda648 fix preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit Type Description

91e33aa1de fix avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
5dbcd0e fix(compiler): disallow i18n event attributes
a68ec70 fix(compiler): sanitize two-way properties
d40acc6 fix(compiler): prevent namespaced SVG <style> elements from being stripped
7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
823b37f test(compiler): remove obsolete schema_extractor import (#68926)
e345a58 fix(core): normalize tag names in runtime i18n attribute security context loo...
8f35b18 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
64a89e9 fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
Additional commits viewable in compare view

Updates @angular/core from 19.2.21 to 20.3.25

Release notes

Sourced from @angular/core's releases.

20.3.25

common

Commit Description

Limits date format string length

skip transfer cache for uncacheable HTTP traffic

use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit Description

sanitize two-way properties

core

Commit Description

harden TransferState restoration against DOM clobbering

validate lowercase SVG animation attribute names (#69270)

http

Commit Description

preserve empty referrer option in HttpRequest

Rejects non-HTTP(S) URLs in JSONP requests

skip transfer cache for fetch credentialed requests

platform-server

Commit Description

harden platform location origin validation during SSR

deprecate ServerXhr (#69256)

service-worker

Commit Description

Strips sensitive headers on cross-origin redirects

Deprecations

platform-server

XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.

20.3.24

platform-server

Commit Description

throw on suspicious URLs and restrict protocol-relative URLs

update domino to latest version

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

…updates Bumps the npm_and_yarn group with 3 updates in the / directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core). Bumps the npm_and_yarn group with 3 updates in the /packages/adapters/angular/v19 directory: [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core). Bumps the npm_and_yarn group with 2 updates in the /packages/adapters/angular/v20 directory: [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core). Bumps the npm_and_yarn group with 2 updates in the /packages/adapters/angular/v21 directory: [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) and [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core). Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/common` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/common) Updates `@angular/compiler` from 19.2.25 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 19.2.21 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 20.3.20 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 20.3.20 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 20.3.20 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 20.3.20 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 20.3.20 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 20.3.20 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 20.3.20 to 20.3.27 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 20.3.20 to 20.3.25 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 21.2.12 to 21.2.19 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 21.2.12 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 21.2.12 to 21.2.19 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 21.2.12 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 21.2.12 to 21.2.19 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 21.2.12 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) Updates `@angular/compiler` from 21.2.12 to 21.2.19 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/compiler) Updates `@angular/core` from 21.2.12 to 21.2.17 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.25/packages/core) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/common" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 20.3.27 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 20.3.25 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.17 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.17 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.17 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/compiler" dependency-version: 21.2.19 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: "@angular/core" dependency-version: 21.2.17 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-08-12T12:59:35Z

📸 Visual Test Reports

No Playwright HTML reports were produced for this run.

Run: https://github.com/public-ui/kolibri/actions/runs/31599107346

github-actions · 2026-08-12T13:02:56Z

Netlify Draft Deployment
URL:
Logs:

github-actions · 2026-08-12T13:03:19Z

🚀 Preview deployed to GitHub Pages: https://public-ui.github.io/kolibri/pr-10674/41cd55a/
Commit: 41cd55a

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026

Navigation Menu

Uh oh!

build(deps): bump the npm_and_yarn group across 4 directories with 3 updates - #10674

build(deps): bump the npm_and_yarn group across 4 directories with 3 updates#10674
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/npm_and_yarn-47ac94891d

dependabot Bot commented on behalf of github Aug 12, 2026

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

github-actions Bot commented Aug 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

Commit	Type	Description
5dbcd0ee16	fix	disallow i18n event attributes
db0d4a1a39	fix	restrict possible event handler check to property names longer than 2 characters

Commit	Type	Description
388daea2fc	fix	correctly migrate ngClass with mixed space-separated keys
bb39cda648	fix	preserve NgClass import on partial migration

Commit	Description
	harden TransferState restoration against DOM clobbering
	validate lowercase SVG animation attribute names (#69270)

Commit	Description
	preserve empty referrer option in HttpRequest
	Rejects non-HTTP(S) URLs in JSONP requests
	skip transfer cache for fetch credentialed requests

Commit	Description
	harden platform location origin validation during SSR
	deprecate ServerXhr (#69256)

Commit	Description
	throw on suspicious URLs and restrict protocol-relative URLs
	update domino to latest version

Commit	Type	Description
9f443bc24c	fix	Limits date format string length
566ad05f20	fix	skip transfer cache for uncacheable HTTP traffic
1a62130a6b	fix	use cryptographically secure SHA-256 for transfer cache key generation

Commit	Type	Description
768a349e6e	fix	harden TransferState restoration against DOM clobbering
ca48b4728d	fix	validate lowercase SVG animation attribute names (#69270)

Commit	Type	Description
06be298267	fix	preserve empty referrer option in HttpRequest
fa940e1f4d	fix	Rejects non-HTTP(S) URLs in JSONP requests
e2ef1ce72a	fix	skip transfer cache for fetch credentialed requests

Commit	Type	Description
49368c1859	fix	harden platform location origin validation during SSR
d55c94ad81	refactor	deprecate ServerXhr (#69256)

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 12, 2026

20.3.27

compiler

http

platform-server

20.3.26

compiler-cli

core

http

service-worker

20.3.25

common

compiler

core

20.3.27 (2026-07-29)

compiler

http

platform-server

22.0.8 (2026-07-22)

common

core

forms

http

migrations

22.0.7 (2026-07-15)

common

compiler

20.3.27

compiler

http

platform-server

20.3.26

compiler-cli

core

http

service-worker

20.3.25

common

compiler

core

20.3.27 (2026-07-29)

compiler

http

platform-server

22.0.8 (2026-07-22)

common

core

forms

http

migrations

22.0.7 (2026-07-15)

common

compiler

20.3.25

common

compiler

core

http

platform-server

service-worker

Deprecations

platform-server

20.3.24

platform-server

20.3.23

compiler

20.3.22

common

20.3.25 (2026-06-10)

Deprecations

platform-server

common

compiler

core

http

platform-server

service-worker

22.0.0 (2026-06-03)