chore(deps): bump @angular/core, @angular/common, @angular/platform-browser, @angular/router and @angular-devkit/build-angular by dependabot[bot] · Pull Request #113 · contentstack/kickstart-angular

dependabot · 2026-08-05T12:12:43Z

Bumps @angular/core, @angular/common, @angular/platform-browser, @angular/router and @angular-devkit/build-angular. These dependencies needed to be updated together.
Updates @angular/core from 21.2.17 to 22.1.0

Release notes

Sourced from @angular/core's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

set current tnode in foreign component instruction on reuse

forms

Commit Description

add utility to assert that value is a field tree

http

Commit Description

add options to allow caching of credentialed and non-cacheable HTTP requests

enable xsrf for root-provided HttpClient

match header values exactly when deleting

preserve immutability of materialized clones

skip transfer cache for fetch credentialed requests (#69017)

deprecate jsonp support

language-service

Commit Description

compile non-exported classes if standalone (#68454)

Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @angular/core's changelog.

22.1.0 (2026-07-29)

Deprecations

http

HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description

1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description

af5e4e1131 feat Add an error for --global-foo cases (#68846)

d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)

f98547675c feat Namespace CSS variables to the app (#68846)

8c8b2f7783 feat Support css var namespacing in properties (#68846)

292199aa4d fix permissive whitespace parsing in default never blocks

25c744c4d0 fix support foreign components defined outside top-level scope

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

aeb55c8bc1 fix allow passing uninvoked signals as foreign component props

7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description

124ba10ead feat add custom set option to linkedSignal

eab4847a8b feat Adds deep linking from Performance panel to DevTools

091456a214 fix account for namespaces in host binding sanitization (#69558)

b3748e9fe4 fix correct container anchor collection order to match DOM layout

11b206b919 fix introduce disposal mechanism for Angular views in foreign @content

56607967db fix introduce logical-only containers for foreign content

23cf1a828b fix sanitize host bindings on concrete hosts (#69558)

0c07356c5c fix set current tnode in foreign component instruction on reuse

forms

Commit Type Description

bbbd357bd2 fix add utility to assert that value is a field tree

http

Commit Type Description

e3630c23c5 feat add options to allow caching of credentialed and non-cacheable HTTP requests

ec16a3d6c6 fix enable xsrf for root-provided HttpClient

39e362eea5 fix match header values exactly when deleting

be46ca8696 fix preserve immutability of materialized clones

c0cbd46bd7 fix skip transfer cache for fetch credentialed requests (#69017)

af04e266cc refactor deprecate jsonp support

language-service

| Commit | Type | Description |

... (truncated)

Commits

ada038f refactor(core): Migrate more tests off fakeAsync
091456a fix(core): account for namespaces in host binding sanitization (#69558)
23cf1a8 fix(core): sanitize host bindings on concrete hosts (#69558)
5d5b2ea fix(migrations): correctly detect then/else keywords in control flow migr...
350ea41 refactor(core): align navigation types with built in ones
49672c4 fix(migrations): correctly migrate ngClass with mixed space-separated keys
3499a13 fix(core): ensure SVG animation attributeName is checked case-insensitively
223e402 fix(migrations): preserve NgClass import on partial migration
f034c02 build: update cross-repo angular dependencies to v22.1.0-next.4
0ae6d81 fix(core): preserve explicit input transform write type
Additional commits viewable in compare view

Updates @angular/common from 21.2.17 to 22.1.0

Release notes

Sourced from @angular/common's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

set current tnode in foreign component instruction on reuse

forms

Commit Description

add utility to assert that value is a field tree

http

Commit Description

add options to allow caching of credentialed and non-cacheable HTTP requests

enable xsrf for root-provided HttpClient

match header values exactly when deleting

preserve immutability of materialized clones

skip transfer cache for fetch credentialed requests (#69017)

deprecate jsonp support

language-service

Commit Description

compile non-exported classes if standalone (#68454)

Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @angular/common's changelog.

22.1.0 (2026-07-29)

Deprecations

http

HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description

1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description

af5e4e1131 feat Add an error for --global-foo cases (#68846)

d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)

f98547675c feat Namespace CSS variables to the app (#68846)

8c8b2f7783 feat Support css var namespacing in properties (#68846)

292199aa4d fix permissive whitespace parsing in default never blocks

25c744c4d0 fix support foreign components defined outside top-level scope

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

aeb55c8bc1 fix allow passing uninvoked signals as foreign component props

7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description

124ba10ead feat add custom set option to linkedSignal

eab4847a8b feat Adds deep linking from Performance panel to DevTools

091456a214 fix account for namespaces in host binding sanitization (#69558)

b3748e9fe4 fix correct container anchor collection order to match DOM layout

11b206b919 fix introduce disposal mechanism for Angular views in foreign @content

56607967db fix introduce logical-only containers for foreign content

23cf1a828b fix sanitize host bindings on concrete hosts (#69558)

0c07356c5c fix set current tnode in foreign component instruction on reuse

forms

Commit Type Description

bbbd357bd2 fix add utility to assert that value is a field tree

http

Commit Type Description

e3630c23c5 feat add options to allow caching of credentialed and non-cacheable HTTP requests

ec16a3d6c6 fix enable xsrf for root-provided HttpClient

39e362eea5 fix match header values exactly when deleting

be46ca8696 fix preserve immutability of materialized clones

c0cbd46bd7 fix skip transfer cache for fetch credentialed requests (#69017)

af04e266cc refactor deprecate jsonp support

language-service

| Commit | Type | Description |

... (truncated)

Commits

79a37f3 refactor(common): replaces the deprecated positional subscribe arguments wi...
6dcb534 refactor(common): remove duplicate helper function
ec16a3d fix(http): enable xsrf for root-provided HttpClient
39e362e fix(http): match header values exactly when deleting
be46ca8 fix(http): preserve immutability of materialized clones
d14696e fix(common): preserve crossorigin on image preloads
3192dcc fix(http): prevent transfer cache key collisions
359fb50 fix(common): avoid prototype lookups in date format caches
6d043f8 fix(http): prevent interceptor signal reads from leaking into calling reactiv...
c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
Additional commits viewable in compare view

Updates @angular/platform-browser from 21.2.17 to 22.1.0

Release notes

Sourced from @angular/platform-browser's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

set current tnode in foreign component instruction on reuse

forms

Commit Description

add utility to assert that value is a field tree

http

Commit Description

add options to allow caching of credentialed and non-cacheable HTTP requests

enable xsrf for root-provided HttpClient

match header values exactly when deleting

preserve immutability of materialized clones

skip transfer cache for fetch credentialed requests (#69017)

deprecate jsonp support

language-service

Commit Description

compile non-exported classes if standalone (#68454)

Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @angular/platform-browser's changelog.

22.1.0 (2026-07-29)

Deprecations

http

HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description

1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description

af5e4e1131 feat Add an error for --global-foo cases (#68846)

d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)

f98547675c feat Namespace CSS variables to the app (#68846)

8c8b2f7783 feat Support css var namespacing in properties (#68846)

292199aa4d fix permissive whitespace parsing in default never blocks

25c744c4d0 fix support foreign components defined outside top-level scope

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

aeb55c8bc1 fix allow passing uninvoked signals as foreign component props

7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description

124ba10ead feat add custom set option to linkedSignal

eab4847a8b feat Adds deep linking from Performance panel to DevTools

091456a214 fix account for namespaces in host binding sanitization (#69558)

b3748e9fe4 fix correct container anchor collection order to match DOM layout

11b206b919 fix introduce disposal mechanism for Angular views in foreign @content

56607967db fix introduce logical-only containers for foreign content

23cf1a828b fix sanitize host bindings on concrete hosts (#69558)

0c07356c5c fix set current tnode in foreign component instruction on reuse

forms

Commit Type Description

bbbd357bd2 fix add utility to assert that value is a field tree

http

Commit Type Description

e3630c23c5 feat add options to allow caching of credentialed and non-cacheable HTTP requests

ec16a3d6c6 fix enable xsrf for root-provided HttpClient

39e362eea5 fix match header values exactly when deleting

be46ca8696 fix preserve immutability of materialized clones

c0cbd46bd7 fix skip transfer cache for fetch credentialed requests (#69017)

af04e266cc refactor deprecate jsonp support

language-service

| Commit | Type | Description |

... (truncated)

Commits

fb6b354 fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP
c0eaaed refactor(core): cleanup Meta service
c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
806a3ad docs: add NG05200 error reference page for SANITIZATION_UNSAFE_SCRIPT
d579eca feat(compiler): Disable '--global-' error outside of g3 (#68846)
8c8b2f7 feat(compiler): Support css var namespacing in properties (#68846)
f985476 feat(compiler): Namespace CSS variables to the app (#68846)
ea17725 docs: add error guide for NG05102
dead64f docs: add error guide for NG05101
6f56202 docs: fix typos in source code comments
Additional commits viewable in compare view

Updates @angular/router from 21.2.17 to 22.1.0

Release notes

Sourced from @angular/router's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

bump version to 0.0.2 and update dependencies

feat: refactor home component to use signals for state management fix: improve error handling in content loading style: update TypeScript target and library to ES2023 refactor: make stack property readonly in ContentstackService

…stack

…properties

… configuration

chore: update dependencies and Angular version to 20.1.6

add codeowners

…er-file remove-duplicate-codeowner-file

move CODEOWNERS to .github folder

package lock fixed and ignores adapted

Update package dependencies and version bump to 0.0.5

…and process.env for production

updated angular version

changed region from us to NA

Add @rollup/rollup-linux-x64-gnu, @rollup/rollup-linux-x64-musl, lightningcss-linux-x64-gnu, and lightningcss-linux-x64-musl as optionalDependencies and regenerate lockfile so Linux CI environments can resolve native platform binaries without hitting the npm optional dependency bug.

chore: add Linux optional dependencies for Rollup and LightningCSS

fix: resolve Snyk security and license issues

fix: resolve Snyk security issues

…rowser, @angular/router and @angular-devkit/build-angular Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core), [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser), [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) and [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies needed to be updated together. Updates `@angular/core` from 21.2.17 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/core) Updates `@angular/common` from 21.2.17 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/common) Updates `@angular/platform-browser` from 21.2.17 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/platform-browser) Updates `@angular/router` from 21.2.17 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/router) Updates `@angular-devkit/build-angular` from 21.2.15 to 22.1.3 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.15...v22.1.3) --- updated-dependencies: - dependency-name: "@angular/core" dependency-version: 22.1.0 dependency-type: direct:production - dependency-name: "@angular/common" dependency-version: 22.1.0 dependency-type: direct:production - dependency-name: "@angular/platform-browser" dependency-version: 22.1.0 dependency-type: direct:production - dependency-name: "@angular/router" dependency-version: 22.1.0 dependency-type: direct:production - dependency-name: "@angular-devkit/build-angular" dependency-version: 22.1.3 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

snyk-io · 2026-08-05T12:12:55Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

github-actions · 2026-08-05T12:13:17Z

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Threshold	Result
🔴 Critical Severity	10	✅ Passed
🟠 High Severity	25	✅ Passed
🟡 Medium Severity	0	✅ Passed
🔵 Low Severity	0	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	SLA Threshold (with/no fixes)	Status
🔴 Critical	15 / 30 days	✅ Passed
🟠 High	30 / 120 days	✅ Passed
🟡 Medium	90 / 365 days	✅ Passed
🔵 Low	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed

dependabot · 2026-08-07T11:02:44Z

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

nandeesh-gajula and others added 30 commits June 26, 2025 18:50

Initial commit

7952573

feat: initial commit

6003f6c

sca-scan.yml

fedc0e5

policy-scan.yml

9eee049

issues-jira.yml

7b45b0b

secrets-scan.yml

43c6580

Updated codeowners

cb3ba94

bump version to 0.0.2 and update dependencies

8ff5144

Merge pull request #8 from contentstack/feat/deps

b3999c0

bump version to 0.0.2 and update dependencies

chore: update dependencies and Angular version to 20.1.6

469091e

feat: refactor home component to use signals for state management fix: improve error handling in content loading style: update TypeScript target and library to ES2023 refactor: make stack property readonly in ContentstackService

feat: add environment configuration and generation script for Content…

c85d31d

…stack

chore: remove unused environment configuration files

43b22b1

feat: enhance environment configuration with additional Contentstack …

24562e6

…properties

feat: add checksums for generate-env.js and vite-env.d.ts in Talisman…

0f0edd2

… configuration

Merge pull request #14 from contentstack/chore/angular-20

345e1a4

chore: update dependencies and Angular version to 20.1.6

add codeowners

e360b85

Merge pull request #18 from contentstack/fix/add-code0wner

ef4ca40

add codeowners

remove-duplicate-codeowner-file

ed185ca

Merge pull request #19 from contentstack/fix/remove-duplicate-codeown…

55f0f13

…er-file remove-duplicate-codeowner-file

move CODEOWNERS to .github folder

f2df159

Merge pull request #21 from contentstack/fix/move-codeowners

5cb7fb6

move CODEOWNERS to .github folder

package lock fixed and ignores adapted

2b6148a

talisman fix

3edd1cc

Merge pull request #22 from contentstack/chore/fix-pkg-lock

7e4c877

package lock fixed and ignores adapted

Delete secrets-scan.yml

a19aa9f

Updated codeowners

6542dcf

Update package dependencies and version bump to 0.0.5

0c5f05e

Merge pull request #30 from contentstack/chore/update-deps-02-10-2025

d62204f

Update package dependencies and version bump to 0.0.5

Enhance environment variable loading: read from .env for development …

2842eca

…and process.env for production

deps

b2d14f3

cs-raj and others added 18 commits June 17, 2026 15:18

updated angular version

28f200b

Merge branch 'main' into enhc/DX-8580

f9de4f1

Merge pull request #82 from contentstack/enhc/DX-8580

6ff6fb8

updated angular version

issues-jira.yml

97a8900

changed region from us to NA

233b878

Merge branch 'main' into enhc/DX-8580

2f293e2

Merge pull request #83 from contentstack/enhc/DX-8580

f4a2b9a

changed region from us to NA

Merge branch 'main' into enhc/DX-8580

aac61c1

Merge pull request #84 from contentstack/enhc/DX-8580

64d9236

chore: add Linux optional dependencies for Rollup and LightningCSS

Delete issues-jira.yml

e26798c

fix snyk issues

38086a7

snyk fixes

25ae2bc

Merge pull request #98 from contentstack/fix/snyk-issues

fd7302a

fix: resolve Snyk security and license issues

sca-scan.yml

e7bdd25

fix: resolve Snyk security issues

0d53a42

Merge pull request #105 from contentstack/fix/snyk-issues-10-8

0d94ace

fix: resolve Snyk security issues

dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 5, 2026

dependabot Bot requested a review from a team as a code owner August 5, 2026 12:12

dependabot Bot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Aug 5, 2026

dependabot Bot mentioned this pull request Aug 5, 2026

chore(deps): bump @angular/common, @angular/platform-browser, @angular/router and @angular-devkit/build-angular #112

Closed

harshitha-cstk closed this Aug 7, 2026

harshitha-cstk force-pushed the dependabot/npm_and_yarn/multi-560b4cb1b8 branch from 6f8869c to 797919a Compare August 7, 2026 11:02

dependabot Bot deleted the dependabot/npm_and_yarn/multi-560b4cb1b8 branch August 7, 2026 11:02

Navigation Menu

Uh oh!

chore(deps): bump @angular/core, @angular/common, @angular/platform-browser, @angular/router and @angular-devkit/build-angular - #113

chore(deps): bump @angular/core, @angular/common, @angular/platform-browser, @angular/router and @angular-devkit/build-angular#113
dependabot[bot] wants to merge 74 commits into
mainfrom
dependabot/npm_and_yarn/multi-560b4cb1b8

dependabot Bot commented on behalf of github Aug 5, 2026

Uh oh!

snyk-io Bot commented Aug 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

8 participants

Commit	Description
	Add an error for --global-foo cases (#68846)
	Disable '--global-' error outside of g3 (#68846)
	Namespace CSS variables to the app (#68846)
	Support css var namespacing in properties (#68846)
	permissive whitespace parsing in default never blocks
	support foreign components defined outside top-level scope
	support foreign components inside control flow blocks (#69674)
	do not emit tag name when control flow root is foreign component (#69674)

Commit	Description
	allow passing uninvoked signals as foreign component props
	support import aliases in foreignImports (#68674)

Commit	Description
	add custom set option to linkedSignal
	Adds deep linking from Performance panel to DevTools
	account for namespaces in host binding sanitization (#69558)
	correct container anchor collection order to match DOM layout
	introduce disposal mechanism for Angular views in foreign `@content`
	introduce logical-only containers for foreign content
	sanitize host bindings on concrete hosts (#69558)
	set current tnode in foreign component instruction on reuse

Commit	Description
	add options to allow caching of credentialed and non-cacheable HTTP requests
	enable xsrf for root-provided HttpClient
	match header values exactly when deleting
	preserve immutability of materialized clones
	skip transfer cache for fetch credentialed requests (#69017)
	deprecate jsonp support

Commit	Description
	compile non-exported classes if standalone (#68454)
	Typecheck templates which would require inline typecheck blocks (#68454)

Commit	Type	Description
af5e4e1131	feat	Add an error for --global-foo cases (#68846)
d579ecaf73	feat	Disable '--global-' error outside of g3 (#68846)
f98547675c	feat	Namespace CSS variables to the app (#68846)
8c8b2f7783	feat	Support css var namespacing in properties (#68846)
292199aa4d	fix	permissive whitespace parsing in default never blocks
25c744c4d0	fix	support foreign components defined outside top-level scope
5bd00add07	fix	support foreign components inside control flow blocks (#69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#69674)

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#68674)

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
eab4847a8b	feat	Adds deep linking from Performance panel to DevTools
091456a214	fix	account for namespaces in host binding sanitization (#69558)
b3748e9fe4	fix	correct container anchor collection order to match DOM layout
11b206b919	fix	introduce disposal mechanism for Angular views in foreign `@content`
56607967db	fix	introduce logical-only containers for foreign content
23cf1a828b	fix	sanitize host bindings on concrete hosts (#69558)
0c07356c5c	fix	set current tnode in foreign component instruction on reuse

Commit	Type	Description
e3630c23c5	feat	add options to allow caching of credentialed and non-cacheable HTTP requests
ec16a3d6c6	fix	enable xsrf for root-provided HttpClient
39e362eea5	fix	match header values exactly when deleting
be46ca8696	fix	preserve immutability of materialized clones
c0cbd46bd7	fix	skip transfer cache for fetch credentialed requests (#69017)
af04e266cc	refactor	deprecate jsonp support

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 5, 2026

22.1.0

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0 (2026-07-29)

Deprecations

http

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0 (2026-07-29)

Deprecations

http

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0 (2026-07-29)

Deprecations

http

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0

common

compiler

compiler-cli

core

Uh oh!

snyk-io Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

github-actions Bot commented Aug 5, 2026

🔒 Security Scan Results

⏱️ SLA Breach Summary

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

snyk-io Bot commented Aug 5, 2026 •

edited

Loading