Bump the npm_and_yarn group across 1 directory with 22 updates #1

Open
dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61 into main
dependabot[bot] commented 2026-03-20 08:01:29 +00:00 (Migrated from github.com)

Bumps the npm_and_yarn group with 14 updates in the /webui directory:

Package From To
@angular/common 18.2.8 21.2.5
@angular/compiler 18.2.8 21.2.5
@angular/core 18.2.8 21.2.5
brace-expansion 1.1.11 1.1.12
minimatch 3.1.2 3.1.5
basic-ftp 5.0.5 5.2.0
cross-spawn 7.0.3 7.0.6
flatted 3.3.1 3.4.2
immutable 3.7.6 5.1.5
js-yaml 4.1.0 4.1.1
lodash 4.17.21 4.17.23
qs 6.13.0 6.14.2
tar 6.2.1 7.5.12
tar-fs 3.0.6 3.1.2

Updates @angular/common from 18.2.8 to 21.2.5

Release notes

Sourced from @​angular/common's releases.

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description
fix - ed2d324f9c disallow translations of iframe src

core

Commit Description
fix - abbd8797bb reverts "feat(core): add support for nested animations"
fix - d1dcd16c5b sanitize translated form attributes

VSCode Extension: 21.2.3

This release contains internal refactorings only.

21.2.3

core

Commit Description
fix - 62a97f7e4b ensure definitions compile
fix - 21b1c3b2ee include signal debug names in their toString() representation
fix - 224e60ecb1 sanitize translated attribute bindings with interpolations

VSCode Extension: 21.2.2

  • fix(extension): bundle TypeScript 5.9 internally (da57d1af73)

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.5 (2026-03-18)

compiler

Commit Type Description
334ae10168 fix ensure generated code compiles
23ea431c4e fix parse named HTML entities containing digits

compiler-cli

Commit Type Description
26c43d14ba fix escape template literal in TCB
67e0ba7e03 fix generic types not filled out correctly in type check block

core

Commit Type Description
1890c3008b fix clean up dehydrated views during HMR component replacement
bf948be4c2 fix run linked signal equality check without reactive consumer

migrations

Commit Type Description
076d41c3f6 fix prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Type Description
e19150d2b5 fix preserve redirect policy on reconstructed asset requests

19.2.20 (2026-03-12)

compiler

Commit Type Description
5be912eb55 fix disallow translations of iframe src

core

Commit Type Description
b89b0a83a4 fix sanitize translated attribute bindings with interpolations
621c7071ad fix sanitize translated form attributes

20.3.18 (2026-03-12)

compiler

Commit Type Description
02fbf08890 fix disallow translations of iframe src

core

Commit Type Description

... (truncated)

Commits
  • adda6c5 build: update aspect_rules_js to 3.0.2
  • 93c6dc6 Revert "refactor(http): Improves base64 encoding/decoding with feature detect...
  • 76431ed Revert "fix(http): correctly cache blob responses in transfer cache (#67002)"
  • 277ade9 fix(http): correctly cache blob responses in transfer cache (#67002)
  • aeb9b81 refactor(http): Improves base64 encoding/decoding with feature detection (#67...
  • ecf0bb4 test(http): refactors HTTP client tests to use TestBed and providers
  • e2e9a9a fix(core): adds transfer cache to httpResource to fix hydration
  • 70e4c7f refactor(common): log a warning when a KeyValuePipe receives a signal
  • 2eeeabb fix(common): fix LCP image detection with duplicate URLs
  • 3c4deaa refactor(common): log a warning when a JsonPipe receives a signal
  • Additional commits viewable in compare view

Updates @angular/compiler from 18.2.8 to 21.2.5

Release notes

Sourced from @​angular/compiler's releases.

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description
fix - ed2d324f9c disallow translations of iframe src

core

Commit Description
fix - abbd8797bb reverts "feat(core): add support for nested animations"
fix - d1dcd16c5b sanitize translated form attributes

VSCode Extension: 21.2.3

This release contains internal refactorings only.

21.2.3

core

Commit Description
fix - 62a97f7e4b ensure definitions compile
fix - 21b1c3b2ee include signal debug names in their toString() representation
fix - 224e60ecb1 sanitize translated attribute bindings with interpolations

VSCode Extension: 21.2.2

  • fix(extension): bundle TypeScript 5.9 internally (da57d1af73)

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

21.2.5 (2026-03-18)

compiler

Commit Type Description
334ae10168 fix ensure generated code compiles
23ea431c4e fix parse named HTML entities containing digits

compiler-cli

Commit Type Description
26c43d14ba fix escape template literal in TCB
67e0ba7e03 fix generic types not filled out correctly in type check block

core

Commit Type Description
1890c3008b fix clean up dehydrated views during HMR component replacement
bf948be4c2 fix run linked signal equality check without reactive consumer

migrations

Commit Type Description
076d41c3f6 fix prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Type Description
e19150d2b5 fix preserve redirect policy on reconstructed asset requests

19.2.20 (2026-03-12)

compiler

Commit Type Description
5be912eb55 fix disallow translations of iframe src

core

Commit Type Description
b89b0a83a4 fix sanitize translated attribute bindings with interpolations
621c7071ad fix sanitize translated form attributes

20.3.18 (2026-03-12)

compiler

Commit Type Description
02fbf08890 fix disallow translations of iframe src

core

Commit Type Description

... (truncated)

Commits
  • 23ea431 fix(compiler): parse named HTML entities containing digits
  • 334ae10 fix(compiler): ensure generated code compiles
  • ed2d324 fix(compiler): disallow translations of iframe src
  • 1df1697 fix(compiler): prevent mutation of children array in RecursiveVisitor
  • 95b3f37 feat(compiler): Exhaustive checks for switch blocks
  • 9c5658a refactor(compiler): clean up pipeline compatibility distinction
  • 6e0d783 refactor(compiler): Add info about unclosed element.
  • 06d94ac Revert "refactor(compiler): Add info about unclosed element."
  • 0972084 refactor(compiler): Add info about unclosed element.
  • b386f95 Revert "refactor(compiler): Add info about unclosed element."
  • Additional commits viewable in compare view

Updates @angular/core from 18.2.8 to 21.2.5

Release notes

Sourced from @​angular/core's releases.

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests

21.2.4

compiler

Commit Description
fix - ed2d324f9c disallow translations of iframe src

core

Commit Description
fix - abbd8797bb reverts "feat(core): add support for nested animations"
fix - d1dcd16c5b sanitize translated form attributes

VSCode Extension: 21.2.3

This release contains internal refactorings only.

21.2.3

core

Commit Description
fix - 62a97f7e4b ensure definitions compile
fix - 21b1c3b2ee include signal debug names in their toString() representation
fix - 224e60ecb1 sanitize translated attribute bindings with interpolations

VSCode Extension: 21.2.2

  • fix(extension): bundle TypeScript 5.9 internally (da57d1af73)

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

21.2.5 (2026-03-18)

compiler

Commit Type Description
334ae10168 fix ensure generated code compiles
23ea431c4e fix parse named HTML entities containing digits

compiler-cli

Commit Type Description
26c43d14ba fix escape template literal in TCB
67e0ba7e03 fix generic types not filled out correctly in type check block

core

Commit Type Description
1890c3008b fix clean up dehydrated views during HMR component replacement
bf948be4c2 fix run linked signal equality check without reactive consumer

migrations

Commit Type Description
076d41c3f6 fix prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Type Description
e19150d2b5 fix preserve redirect policy on reconstructed asset requests

19.2.20 (2026-03-12)

compiler

Commit Type Description
5be912eb55 fix disallow translations of iframe src

core

Commit Type Description
b89b0a83a4 fix sanitize translated attribute bindings with interpolations
621c7071ad fix sanitize translated form attributes

20.3.18 (2026-03-12)

compiler

Commit Type Description
02fbf08890 fix disallow translations of iframe src

core

Commit Type Description

... (truncated)

Commits
  • 851ef77 Revert "refactor(core): Ensure determineLongestAnimation is run synchronously...
  • 076d41c fix(migrations): prevent trailing comma syntax errors after removing NgStyle
  • a8f80c1 refactor(core): declare explicit reactive node prototypes types
  • bf948be fix(core): run linked signal equality check without reactive consumer
  • 1890c30 fix(core): clean up dehydrated views during HMR component replacement
  • f39896d build: update cross-repo angular dependencies
  • e5ed276 refactor(core): Ensure determineLongestAnimation is run synchronously after s...
  • 334ae10 fix(compiler): ensure generated code compiles
  • 6f41efc refactor(core): Update determineLongestAnimation to account for playback rate
  • 5d755be refactor: ensure modules with 'declare global' are correctly handled by Rollup
  • Additional commits viewable in compare view

Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12

Commits

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates basic-ftp from 5.0.5 to 5.2.0

Release notes

Sourced from basic-ftp's releases.

5.2.0

  • Changed: Skip files with invalid name in downloadToDir.

5.1.0

  • Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (#259)
Changelog

Sourced from basic-ftp's changelog.

5.2.0

5.1.0

  • Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (#259)
Commits
Maintainer changes

This version was pushed to npm by patrickjuchli, a new releaser for basic-ftp since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates cross-spawn from 7.0.3 to 7.0.6

Changelog

Sourced from cross-spawn's changelog.

7.0.6 (2024-11-18)

Bug Fixes

  • update cross-spawn version to 7.0.5 in package-lock.json (f700743)

7.0.5 (2024-11-07)

Bug Fixes

  • fix escaping bug introduced by backtracking (640d391)

7.0.4 (2024-11-07)

Bug Fixes

Commits
  • 77cd97f chore(release): 7.0.6
  • 6717de4 chore: upgrade standard-version
  • f700743 fix: update cross-spawn version to 7.0.5 in package-lock.json
  • 9a7e3b2 chore: fix build status badge
  • 0852683 chore(release): 7.0.5
  • 640d391 fix: fix escaping bug introduced by backtracking
  • bff0c87 chore: remove codecov
  • a7c6abc chore: replace travis with github workflows
  • 9b9246e chore(release): 7.0.4
  • 5ff3a07 fix: disable regexp backtracking (#160)
  • Additional commits viewable in compare view

Updates esbuild from 0.21.5 to 0.27.3

Release notes

Sourced from esbuild's releases.

v0.27.3

  • Preserve URL fragments in data URLs (#4370)

    Consider the following HTML, CSS, and SVG:

    • index.html:

      <!DOCTYPE html>
      <html>
        <head><link rel="stylesheet" href="icons.css"></head>
        <body><div class="triangle"></div></body>
      </html>
      
    • icons.css:

      .triangle {
        width: 10px;
        height: 10px;
        background: currentColor;
        clip-path: url(./triangle.svg#x);
      }
      
    • triangle.svg:

      <svg xmlns="http://www.w3.org/2000/svg">
        <defs>
          <clipPath id="x">
            <path d="M0 0H10V10Z"/>
          </clipPath>
        </defs>
      </svg>
      

    The CSS uses a URL fragment (the #x) to reference the clipPath element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the dataurl loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:

    /* icons.css */
    .triangle {
      width: 10px;
      height: 10px;
      background: currentColor;
      clip-path: url('data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg"><defs><clipPath id="x"><path d="M0 0H10V10Z"/></clipPath></defs></svg>#x');
    }
    

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
      "compilerOptions": {
        "target": "ES2024"
      }
    }
    

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
      get
      *x() {}
      set
      *y() {}
    }
    

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits
  • 9129e00 publish 0.27.3 to npm
  • e20e411 small fix to release notes
  • 0dc0f2d fix #4322: parse and print CSS @scope rules
  • 55fe391 update firefox css gradient support
  • 2c35297 update gradient lowering transform
  • 9209e44 Update Go to 1.25.7 (#4388)
  • e8d861b close #4374: compat table for the using feature
  • 19b8887 no longer need williamkapke/node-compat-table
  • 7e44218 the kangax/compat-table repo moved to a new url
  • 23b9338 run make update-compat-table
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.


Updates flatted from 3.3.1 to 3.4.2

Commits
  • 3bf0909 3.4.2
  • 885ddcc fix CWE-1321
  • 0bdba70 added flatted-view to the benchmark
  • 2a02dce 3.4.1
  • fba4e8f Merge pull request #89 from WebReflection/python-fix
  • 5fe8648 added "when in Rome" also a test for PHP
  • 53517ad some minor improvement
  • b3e2a0c Fixing recursion issue in Python too
  • c4b46db Add SECURITY.md for security policy and reporting
  • f86d071 Create dependabot.yml for version updates
  • Additional commits viewable in compare view

Updates http-proxy-middleware from 2.0.7 to 2.0.9

Release notes

Sourced from http-proxy-middleware's releases.

v2.0.9

What's Changed

Full Changelog: https://github.com/chimurai/http-proxy-middleware/compare/v2.0.8...v2.0.9

v2.0.8

What's Changed

Full Changelog: https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8

Changelog

Sourced from http-proxy-middleware's changelog.

v2.0.9

  • fix(fixRequestBody): check readableLength

v2.0.8

  • fix(fixRequestBody): prevent multiple .write() calls
  • fix(fixRequestBody): handle invalid request
Commits

Updates immutable from 3.7.6 to 5.1.5

Release notes

Sourced from immutable's releases.

v5.1.5

What's Changed

Full Changelog: https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5

v5.1.4

What's Changed

Documentation

Internal

New Contributors

Full Changelog: https://github.com/immutable-js/immutable-js/compare/v5.1.3...v5.1.4

v5.1.3

What's Changed

TypeScript

Documentation

There has been a huge amount of changes in the documentation, mainly migrate from an autogenerated documentation from .d.ts file, to a proper documentation in markdown. The playground has been included on nearly all method examples.

... (truncated)

Changelog

Sourced from immutable's changelog.

5.1.5

  • Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

5.1.4

DocumentationDescription has been truncated

Bumps the npm_and_yarn group with 14 updates in the /webui directory: | Package | From | To | | --- | --- | --- | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `18.2.8` | `21.2.5` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `18.2.8` | `21.2.5` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `18.2.8` | `21.2.5` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [minimatch](https://github.com/isaacs/minimatch) | `3.1.2` | `3.1.5` | | [basic-ftp](https://github.com/patrickjuchli/basic-ftp) | `5.0.5` | `5.2.0` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [flatted](https://github.com/WebReflection/flatted) | `3.3.1` | `3.4.2` | | [immutable](https://github.com/immutable-js/immutable-js) | `3.7.6` | `5.1.5` | | [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` | | [lodash](https://github.com/lodash/lodash) | `4.17.21` | `4.17.23` | | [qs](https://github.com/ljharb/qs) | `6.13.0` | `6.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.12` | | [tar-fs](https://github.com/mafintosh/tar-fs) | `3.0.6` | `3.1.2` | Updates `@angular/common` from 18.2.8 to 21.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases"><code>@​angular/common</code>'s releases</a>.</em></p> <blockquote> <h2>21.2.5</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b"><img src="https://img.shields.io/badge/334ae10168-fix-green" alt="fix - 334ae10168" /></a></td> <td>ensure generated code compiles</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58"><img src="https://img.shields.io/badge/23ea431c4e-fix-green" alt="fix - 23ea431c4e" /></a></td> <td>parse named HTML entities containing digits</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/26c43d14baad1a6b3629a77825e702a97a4f8482"><img src="https://img.shields.io/badge/26c43d14ba-fix-green" alt="fix - 26c43d14ba" /></a></td> <td>escape template literal in TCB</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/67e0ba7e03bb940639f0eafb3af45015e9727eac"><img src="https://img.shields.io/badge/67e0ba7e03-fix-green" alt="fix - 67e0ba7e03" /></a></td> <td>generic types not filled out correctly in type check block</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb"><img src="https://img.shields.io/badge/1890c3008b-fix-green" alt="fix - 1890c3008b" /></a></td> <td>clean up dehydrated views during HMR component replacement</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0"><img src="https://img.shields.io/badge/bf948be4c2-fix-green" alt="fix - bf948be4c2" /></a></td> <td>run linked signal equality check without reactive consumer</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64"><img src="https://img.shields.io/badge/076d41c3f6-fix-green" alt="fix - 076d41c3f6" /></a></td> <td>prevent trailing comma syntax errors after removing NgStyle</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e19150d2b596e87c69bee61f478c3e9c7cbc8f67"><img src="https://img.shields.io/badge/e19150d2b5-fix-green" alt="fix - e19150d2b5" /></a></td> <td>preserve redirect policy on reconstructed asset requests</td> </tr> </tbody> </table> <h2>21.2.4</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ed2d324f9cc12aab6cfa0569ef10b73243a62c65"><img src="https://img.shields.io/badge/ed2d324f9c-fix-green" alt="fix - ed2d324f9c" /></a></td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/abbd8797bbd3ae53a10033c39bd895b5b85a4fae"><img src="https://img.shields.io/badge/abbd8797bb-fix-green" alt="fix - abbd8797bb" /></a></td> <td>reverts &quot;feat(core): add support for nested animations&quot;</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d1dcd16c5b40291aa3fa2dc84d22842cd657b201"><img src="https://img.shields.io/badge/d1dcd16c5b-fix-green" alt="fix - d1dcd16c5b" /></a></td> <td>sanitize translated form attributes</td> </tr> </tbody> </table> <h2>VSCode Extension: 21.2.3</h2> <p>This release contains internal refactorings only.</p> <h2>21.2.3</h2> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/62a97f7e4b896b4b03a1ef25764db387ffecebe1"><img src="https://img.shields.io/badge/62a97f7e4b-fix-green" alt="fix - 62a97f7e4b" /></a></td> <td>ensure definitions compile</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/21b1c3b2ee2c8423782b111b93bd60eb6b453259"><img src="https://img.shields.io/badge/21b1c3b2ee-fix-green" alt="fix - 21b1c3b2ee" /></a></td> <td>include signal debug names in their <code>toString()</code> representation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/224e60ecb1b90115baa702f1c06edc1d64d86187"><img src="https://img.shields.io/badge/224e60ecb1-fix-green" alt="fix - 224e60ecb1" /></a></td> <td>sanitize translated attribute bindings with interpolations</td> </tr> </tbody> </table> <h2>VSCode Extension: 21.2.2</h2> <ul> <li>fix(extension): bundle TypeScript 5.9 internally (<a href="https://github.com/angular/angular/commit/da57d1af732292823b1ea187b6e9cd9f6b4eca39">da57d1af73</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md"><code>@​angular/common</code>'s changelog</a>.</em></p> <blockquote> <h1>21.2.5 (2026-03-18)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b">334ae10168</a></td> <td>fix</td> <td>ensure generated code compiles</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58">23ea431c4e</a></td> <td>fix</td> <td>parse named HTML entities containing digits</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/26c43d14baad1a6b3629a77825e702a97a4f8482">26c43d14ba</a></td> <td>fix</td> <td>escape template literal in TCB</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/67e0ba7e03bb940639f0eafb3af45015e9727eac">67e0ba7e03</a></td> <td>fix</td> <td>generic types not filled out correctly in type check block</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb">1890c3008b</a></td> <td>fix</td> <td>clean up dehydrated views during HMR component replacement</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0">bf948be4c2</a></td> <td>fix</td> <td>run linked signal equality check without reactive consumer</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64">076d41c3f6</a></td> <td>fix</td> <td>prevent trailing comma syntax errors after removing NgStyle</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e19150d2b596e87c69bee61f478c3e9c7cbc8f67">e19150d2b5</a></td> <td>fix</td> <td>preserve redirect policy on reconstructed asset requests</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>19.2.20 (2026-03-12)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5be912eb55fe88e8621e2ce82470d51b7d950ceb">5be912eb55</a></td> <td>fix</td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b89b0a83a4d21bbb6f8534bbf56aece12af24595">b89b0a83a4</a></td> <td>fix</td> <td>sanitize translated attribute bindings with interpolations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/621c7071adffbe5dd45a5c954b6b6138e0870844">621c7071ad</a></td> <td>fix</td> <td>sanitize translated form attributes</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>20.3.18 (2026-03-12)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/02fbf08890ec6ac2efb6c2ec4f17e56497cb81d2">02fbf08890</a></td> <td>fix</td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/adda6c5c106815c727c1b820634614a045b42e9a"><code>adda6c5</code></a> build: update <code>aspect_rules_js</code> to <code>3.0.2</code></li> <li><a href="https://github.com/angular/angular/commit/93c6dc6395d681dacd1dbbc46b95773038b6c32f"><code>93c6dc6</code></a> Revert &quot;refactor(http): Improves base64 encoding/decoding with feature detect...</li> <li><a href="https://github.com/angular/angular/commit/76431ed3e3bd8bf90ac2fb481152a33587187037"><code>76431ed</code></a> Revert &quot;fix(http): correctly cache blob responses in transfer cache (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/67002">#67002</a>)&quot;</li> <li><a href="https://github.com/angular/angular/commit/277ade97ac2a3a7f2a5b513acaa93e7663cdc55f"><code>277ade9</code></a> fix(http): correctly cache blob responses in transfer cache (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/67002">#67002</a>)</li> <li><a href="https://github.com/angular/angular/commit/aeb9b819d2cda782de85338dc9a5457c11e51bfe"><code>aeb9b81</code></a> refactor(http): Improves base64 encoding/decoding with feature detection (<a href="https://github.com/angular/angular/tree/HEAD/packages/common/issues/67">#67</a>...</li> <li><a href="https://github.com/angular/angular/commit/ecf0bb466875d17e0823f2d793491c6f354d6c34"><code>ecf0bb4</code></a> test(http): refactors HTTP client tests to use TestBed and providers</li> <li><a href="https://github.com/angular/angular/commit/e2e9a9a531c9e9a69701e549f28354cc5d5edd77"><code>e2e9a9a</code></a> fix(core): adds transfer cache to httpResource to fix hydration</li> <li><a href="https://github.com/angular/angular/commit/70e4c7fbabb45277cf76ee138c0be275beec7919"><code>70e4c7f</code></a> refactor(common): log a warning when a KeyValuePipe receives a signal</li> <li><a href="https://github.com/angular/angular/commit/2eeeabb7606900ad4fe8e3370d73f6add985f35d"><code>2eeeabb</code></a> fix(common): fix LCP image detection with duplicate URLs</li> <li><a href="https://github.com/angular/angular/commit/3c4deaa52bb42130f90126f55786331aa8b4f7dc"><code>3c4deaa</code></a> refactor(common): log a warning when a JsonPipe receives a signal</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v21.2.5/packages/common">compare view</a></li> </ul> </details> <br /> Updates `@angular/compiler` from 18.2.8 to 21.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases"><code>@​angular/compiler</code>'s releases</a>.</em></p> <blockquote> <h2>21.2.5</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b"><img src="https://img.shields.io/badge/334ae10168-fix-green" alt="fix - 334ae10168" /></a></td> <td>ensure generated code compiles</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58"><img src="https://img.shields.io/badge/23ea431c4e-fix-green" alt="fix - 23ea431c4e" /></a></td> <td>parse named HTML entities containing digits</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/26c43d14baad1a6b3629a77825e702a97a4f8482"><img src="https://img.shields.io/badge/26c43d14ba-fix-green" alt="fix - 26c43d14ba" /></a></td> <td>escape template literal in TCB</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/67e0ba7e03bb940639f0eafb3af45015e9727eac"><img src="https://img.shields.io/badge/67e0ba7e03-fix-green" alt="fix - 67e0ba7e03" /></a></td> <td>generic types not filled out correctly in type check block</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb"><img src="https://img.shields.io/badge/1890c3008b-fix-green" alt="fix - 1890c3008b" /></a></td> <td>clean up dehydrated views during HMR component replacement</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0"><img src="https://img.shields.io/badge/bf948be4c2-fix-green" alt="fix - bf948be4c2" /></a></td> <td>run linked signal equality check without reactive consumer</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64"><img src="https://img.shields.io/badge/076d41c3f6-fix-green" alt="fix - 076d41c3f6" /></a></td> <td>prevent trailing comma syntax errors after removing NgStyle</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e19150d2b596e87c69bee61f478c3e9c7cbc8f67"><img src="https://img.shields.io/badge/e19150d2b5-fix-green" alt="fix - e19150d2b5" /></a></td> <td>preserve redirect policy on reconstructed asset requests</td> </tr> </tbody> </table> <h2>21.2.4</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ed2d324f9cc12aab6cfa0569ef10b73243a62c65"><img src="https://img.shields.io/badge/ed2d324f9c-fix-green" alt="fix - ed2d324f9c" /></a></td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/abbd8797bbd3ae53a10033c39bd895b5b85a4fae"><img src="https://img.shields.io/badge/abbd8797bb-fix-green" alt="fix - abbd8797bb" /></a></td> <td>reverts &quot;feat(core): add support for nested animations&quot;</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d1dcd16c5b40291aa3fa2dc84d22842cd657b201"><img src="https://img.shields.io/badge/d1dcd16c5b-fix-green" alt="fix - d1dcd16c5b" /></a></td> <td>sanitize translated form attributes</td> </tr> </tbody> </table> <h2>VSCode Extension: 21.2.3</h2> <p>This release contains internal refactorings only.</p> <h2>21.2.3</h2> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/62a97f7e4b896b4b03a1ef25764db387ffecebe1"><img src="https://img.shields.io/badge/62a97f7e4b-fix-green" alt="fix - 62a97f7e4b" /></a></td> <td>ensure definitions compile</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/21b1c3b2ee2c8423782b111b93bd60eb6b453259"><img src="https://img.shields.io/badge/21b1c3b2ee-fix-green" alt="fix - 21b1c3b2ee" /></a></td> <td>include signal debug names in their <code>toString()</code> representation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/224e60ecb1b90115baa702f1c06edc1d64d86187"><img src="https://img.shields.io/badge/224e60ecb1-fix-green" alt="fix - 224e60ecb1" /></a></td> <td>sanitize translated attribute bindings with interpolations</td> </tr> </tbody> </table> <h2>VSCode Extension: 21.2.2</h2> <ul> <li>fix(extension): bundle TypeScript 5.9 internally (<a href="https://github.com/angular/angular/commit/da57d1af732292823b1ea187b6e9cd9f6b4eca39">da57d1af73</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md"><code>@​angular/compiler</code>'s changelog</a>.</em></p> <blockquote> <h1>21.2.5 (2026-03-18)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b">334ae10168</a></td> <td>fix</td> <td>ensure generated code compiles</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58">23ea431c4e</a></td> <td>fix</td> <td>parse named HTML entities containing digits</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/26c43d14baad1a6b3629a77825e702a97a4f8482">26c43d14ba</a></td> <td>fix</td> <td>escape template literal in TCB</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/67e0ba7e03bb940639f0eafb3af45015e9727eac">67e0ba7e03</a></td> <td>fix</td> <td>generic types not filled out correctly in type check block</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb">1890c3008b</a></td> <td>fix</td> <td>clean up dehydrated views during HMR component replacement</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0">bf948be4c2</a></td> <td>fix</td> <td>run linked signal equality check without reactive consumer</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64">076d41c3f6</a></td> <td>fix</td> <td>prevent trailing comma syntax errors after removing NgStyle</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e19150d2b596e87c69bee61f478c3e9c7cbc8f67">e19150d2b5</a></td> <td>fix</td> <td>preserve redirect policy on reconstructed asset requests</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>19.2.20 (2026-03-12)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5be912eb55fe88e8621e2ce82470d51b7d950ceb">5be912eb55</a></td> <td>fix</td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b89b0a83a4d21bbb6f8534bbf56aece12af24595">b89b0a83a4</a></td> <td>fix</td> <td>sanitize translated attribute bindings with interpolations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/621c7071adffbe5dd45a5c954b6b6138e0870844">621c7071ad</a></td> <td>fix</td> <td>sanitize translated form attributes</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>20.3.18 (2026-03-12)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/02fbf08890ec6ac2efb6c2ec4f17e56497cb81d2">02fbf08890</a></td> <td>fix</td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58"><code>23ea431</code></a> fix(compiler): parse named HTML entities containing digits</li> <li><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b"><code>334ae10</code></a> fix(compiler): ensure generated code compiles</li> <li><a href="https://github.com/angular/angular/commit/ed2d324f9cc12aab6cfa0569ef10b73243a62c65"><code>ed2d324</code></a> fix(compiler): disallow translations of iframe src</li> <li><a href="https://github.com/angular/angular/commit/1df1697c6e3a6b1d302f7692b495146943faa12f"><code>1df1697</code></a> fix(compiler): prevent mutation of children array in RecursiveVisitor</li> <li><a href="https://github.com/angular/angular/commit/95b3f37d4a7d9a38f616d56df746dfcda3c2139b"><code>95b3f37</code></a> feat(compiler): Exhaustive checks for switch blocks</li> <li><a href="https://github.com/angular/angular/commit/9c5658adb1146b24ebf31fef534c4bbae1ced548"><code>9c5658a</code></a> refactor(compiler): clean up pipeline compatibility distinction</li> <li><a href="https://github.com/angular/angular/commit/6e0d783e5b5a256c0aa2fb1d3e008677c0603382"><code>6e0d783</code></a> refactor(compiler): Add info about unclosed element.</li> <li><a href="https://github.com/angular/angular/commit/06d94ac0caacce20d5afbdb1e940911bdc500d78"><code>06d94ac</code></a> Revert &quot;refactor(compiler): Add info about unclosed element.&quot;</li> <li><a href="https://github.com/angular/angular/commit/097208454bb0d5ebaad701a991125d2a33d1f79b"><code>0972084</code></a> refactor(compiler): Add info about unclosed element.</li> <li><a href="https://github.com/angular/angular/commit/b386f95bd05c6e9efdc00050b1e9ac28421e5f44"><code>b386f95</code></a> Revert &quot;refactor(compiler): Add info about unclosed element.&quot;</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v21.2.5/packages/compiler">compare view</a></li> </ul> </details> <br /> Updates `@angular/core` from 18.2.8 to 21.2.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/releases"><code>@​angular/core</code>'s releases</a>.</em></p> <blockquote> <h2>21.2.5</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b"><img src="https://img.shields.io/badge/334ae10168-fix-green" alt="fix - 334ae10168" /></a></td> <td>ensure generated code compiles</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58"><img src="https://img.shields.io/badge/23ea431c4e-fix-green" alt="fix - 23ea431c4e" /></a></td> <td>parse named HTML entities containing digits</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/26c43d14baad1a6b3629a77825e702a97a4f8482"><img src="https://img.shields.io/badge/26c43d14ba-fix-green" alt="fix - 26c43d14ba" /></a></td> <td>escape template literal in TCB</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/67e0ba7e03bb940639f0eafb3af45015e9727eac"><img src="https://img.shields.io/badge/67e0ba7e03-fix-green" alt="fix - 67e0ba7e03" /></a></td> <td>generic types not filled out correctly in type check block</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb"><img src="https://img.shields.io/badge/1890c3008b-fix-green" alt="fix - 1890c3008b" /></a></td> <td>clean up dehydrated views during HMR component replacement</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0"><img src="https://img.shields.io/badge/bf948be4c2-fix-green" alt="fix - bf948be4c2" /></a></td> <td>run linked signal equality check without reactive consumer</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64"><img src="https://img.shields.io/badge/076d41c3f6-fix-green" alt="fix - 076d41c3f6" /></a></td> <td>prevent trailing comma syntax errors after removing NgStyle</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e19150d2b596e87c69bee61f478c3e9c7cbc8f67"><img src="https://img.shields.io/badge/e19150d2b5-fix-green" alt="fix - e19150d2b5" /></a></td> <td>preserve redirect policy on reconstructed asset requests</td> </tr> </tbody> </table> <h2>21.2.4</h2> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/ed2d324f9cc12aab6cfa0569ef10b73243a62c65"><img src="https://img.shields.io/badge/ed2d324f9c-fix-green" alt="fix - ed2d324f9c" /></a></td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/abbd8797bbd3ae53a10033c39bd895b5b85a4fae"><img src="https://img.shields.io/badge/abbd8797bb-fix-green" alt="fix - abbd8797bb" /></a></td> <td>reverts &quot;feat(core): add support for nested animations&quot;</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/d1dcd16c5b40291aa3fa2dc84d22842cd657b201"><img src="https://img.shields.io/badge/d1dcd16c5b-fix-green" alt="fix - d1dcd16c5b" /></a></td> <td>sanitize translated form attributes</td> </tr> </tbody> </table> <h2>VSCode Extension: 21.2.3</h2> <p>This release contains internal refactorings only.</p> <h2>21.2.3</h2> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/62a97f7e4b896b4b03a1ef25764db387ffecebe1"><img src="https://img.shields.io/badge/62a97f7e4b-fix-green" alt="fix - 62a97f7e4b" /></a></td> <td>ensure definitions compile</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/21b1c3b2ee2c8423782b111b93bd60eb6b453259"><img src="https://img.shields.io/badge/21b1c3b2ee-fix-green" alt="fix - 21b1c3b2ee" /></a></td> <td>include signal debug names in their <code>toString()</code> representation</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/224e60ecb1b90115baa702f1c06edc1d64d86187"><img src="https://img.shields.io/badge/224e60ecb1-fix-green" alt="fix - 224e60ecb1" /></a></td> <td>sanitize translated attribute bindings with interpolations</td> </tr> </tbody> </table> <h2>VSCode Extension: 21.2.2</h2> <ul> <li>fix(extension): bundle TypeScript 5.9 internally (<a href="https://github.com/angular/angular/commit/da57d1af732292823b1ea187b6e9cd9f6b4eca39">da57d1af73</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/angular/angular/blob/main/CHANGELOG.md"><code>@​angular/core</code>'s changelog</a>.</em></p> <blockquote> <h1>21.2.5 (2026-03-18)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b">334ae10168</a></td> <td>fix</td> <td>ensure generated code compiles</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/23ea431c4ec45cbb4a7db9839969e7cb23b07f58">23ea431c4e</a></td> <td>fix</td> <td>parse named HTML entities containing digits</td> </tr> </tbody> </table> <h3>compiler-cli</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/26c43d14baad1a6b3629a77825e702a97a4f8482">26c43d14ba</a></td> <td>fix</td> <td>escape template literal in TCB</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/67e0ba7e03bb940639f0eafb3af45015e9727eac">67e0ba7e03</a></td> <td>fix</td> <td>generic types not filled out correctly in type check block</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb">1890c3008b</a></td> <td>fix</td> <td>clean up dehydrated views during HMR component replacement</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0">bf948be4c2</a></td> <td>fix</td> <td>run linked signal equality check without reactive consumer</td> </tr> </tbody> </table> <h3>migrations</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64">076d41c3f6</a></td> <td>fix</td> <td>prevent trailing comma syntax errors after removing NgStyle</td> </tr> </tbody> </table> <h3>service-worker</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/e19150d2b596e87c69bee61f478c3e9c7cbc8f67">e19150d2b5</a></td> <td>fix</td> <td>preserve redirect policy on reconstructed asset requests</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>19.2.20 (2026-03-12)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/5be912eb55fe88e8621e2ce82470d51b7d950ceb">5be912eb55</a></td> <td>fix</td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/b89b0a83a4d21bbb6f8534bbf56aece12af24595">b89b0a83a4</a></td> <td>fix</td> <td>sanitize translated attribute bindings with interpolations</td> </tr> <tr> <td><a href="https://github.com/angular/angular/commit/621c7071adffbe5dd45a5c954b6b6138e0870844">621c7071ad</a></td> <td>fix</td> <td>sanitize translated form attributes</td> </tr> </tbody> </table> <!-- raw HTML omitted --> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> <h1>20.3.18 (2026-03-12)</h1> <h3>compiler</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><a href="https://github.com/angular/angular/commit/02fbf08890ec6ac2efb6c2ec4f17e56497cb81d2">02fbf08890</a></td> <td>fix</td> <td>disallow translations of iframe src</td> </tr> </tbody> </table> <h3>core</h3> <table> <thead> <tr> <th>Commit</th> <th>Type</th> <th>Description</th> </tr> </thead> </table> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/angular/angular/commit/851ef77318541580d186d7f1c02061cc615450da"><code>851ef77</code></a> Revert &quot;refactor(core): Ensure determineLongestAnimation is run synchronously...</li> <li><a href="https://github.com/angular/angular/commit/076d41c3f6496eb6c6f84b54e2d2ca85c1b35e64"><code>076d41c</code></a> fix(migrations): prevent trailing comma syntax errors after removing NgStyle</li> <li><a href="https://github.com/angular/angular/commit/a8f80c1f995dd7bab6ee1d42f033ebc3d101e9bd"><code>a8f80c1</code></a> refactor(core): declare explicit reactive node prototypes types</li> <li><a href="https://github.com/angular/angular/commit/bf948be4c2c88c604e428cba35e3b9e532bfe5b0"><code>bf948be</code></a> fix(core): run linked signal equality check without reactive consumer</li> <li><a href="https://github.com/angular/angular/commit/1890c3008bbb41b7143b7ede09bed1f7704744fb"><code>1890c30</code></a> fix(core): clean up dehydrated views during HMR component replacement</li> <li><a href="https://github.com/angular/angular/commit/f39896da995f346a26e3508215beb03be26c606e"><code>f39896d</code></a> build: update cross-repo angular dependencies</li> <li><a href="https://github.com/angular/angular/commit/e5ed276f27c75da192099ed2814a96f52084a589"><code>e5ed276</code></a> refactor(core): Ensure determineLongestAnimation is run synchronously after s...</li> <li><a href="https://github.com/angular/angular/commit/334ae10168fdad15cd1390180e2994b4eb65349b"><code>334ae10</code></a> fix(compiler): ensure generated code compiles</li> <li><a href="https://github.com/angular/angular/commit/6f41efc6894147c5f7fac25fa1ebb4bba968d4b7"><code>6f41efc</code></a> refactor(core): Update determineLongestAnimation to account for playback rate</li> <li><a href="https://github.com/angular/angular/commit/5d755be01cfbc58a5b4b721fac4fccde76645fb7"><code>5d755be</code></a> refactor: ensure modules with 'declare global' are correctly handled by Rollup</li> <li>Additional commits viewable in <a href="https://github.com/angular/angular/commits/v21.2.5/packages/core">compare view</a></li> </ul> </details> <br /> Updates `brace-expansion` from 1.1.11 to 1.1.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's releases</a>.</em></p> <blockquote> <h2>v1.1.12</h2> <ul> <li>pkg: publish on tag 1.x c460dbd</li> <li>fmt ccb8ac6</li> <li>Fix potential ReDoS Vulnerability or Inefficient Regular Expression (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/65">#65</a>) c3c73c8</li> </ul> <hr /> <p><a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12">https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/44f33b47c5c6a965d507421af43e86cf5971d711"><code>44f33b4</code></a> 1.1.12</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/c460dbd68e428d147b2080622d8ce126c7a08570"><code>c460dbd</code></a> pkg: publish on tag 1.x</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/ccb8ac6d4292b7661b677fe048ba6690c877f51f"><code>ccb8ac6</code></a> fmt</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/c3c73c8b088defc70851843be88ccc3af08e7217"><code>c3c73c8</code></a> Fix potential ReDoS Vulnerability or Inefficient Regular Expression (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/65">#65</a>)</li> <li>See full diff in <a href="https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.12">compare view</a></li> </ul> </details> <br /> Updates `minimatch` from 3.1.2 to 3.1.5 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712"><code>7bba978</code></a> 3.1.5</li> <li><a href="https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d"><code>bd25942</code></a> docs: add warning about ReDoS</li> <li><a href="https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d"><code>1a9c27c</code></a> fix partial matching of globstar patterns</li> <li><a href="https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23"><code>1a2e084</code></a> 3.1.4</li> <li><a href="https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47"><code>ae24656</code></a> update lockfile</li> <li><a href="https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e"><code>b100374</code></a> limit recursion for **, improve perf considerably</li> <li><a href="https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13"><code>26ffeaa</code></a> lockfile update</li> <li><a href="https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb"><code>9eca892</code></a> lock node version to 14</li> <li><a href="https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a"><code>00c323b</code></a> 3.1.3</li> <li><a href="https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b"><code>30486b2</code></a> update CI matrix and actions</li> <li>Additional commits viewable in <a href="https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5">compare view</a></li> </ul> </details> <br /> Updates `basic-ftp` from 5.0.5 to 5.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/patrickjuchli/basic-ftp/releases">basic-ftp's releases</a>.</em></p> <blockquote> <h2>5.2.0</h2> <ul> <li>Changed: Skip files with invalid name in downloadToDir.</li> </ul> <h2>5.1.0</h2> <ul> <li>Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (<a href="https://redirect.github.com/patrickjuchli/basic-ftp/issues/259">#259</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/patrickjuchli/basic-ftp/blob/master/CHANGELOG.md">basic-ftp's changelog</a>.</em></p> <blockquote> <h2>5.2.0</h2> <ul> <li>Changed: Skip files with invalid name in downloadToDir. Fixes security vulnerability CVE-2026-27699, see <a href="https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-5rq4-664w-9x2c">https://github.com/patrickjuchli/basic-ftp/security/advisories/GHSA-5rq4-664w-9x2c</a>.</li> </ul> <h2>5.1.0</h2> <ul> <li>Added: Add the option to prevent the use of separate transfer host IPs when using PASV. (<a href="https://redirect.github.com/patrickjuchli/basic-ftp/issues/259">#259</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/5d41e45073ed1a8a3b5e5a1bbfcd131e61295bf8"><code>5d41e45</code></a> Bump version</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/49c2e73ed1cae4962ae38b33ab93a3548c2f5622"><code>49c2e73</code></a> Update dependencies</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/2a2a0e6514357b9eda07c2f8afbd3f04727a7cd9"><code>2a2a0e6</code></a> Skip invalid filenames</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/65c90d949c0f8a9709759dff9e76bbe07061812b"><code>65c90d9</code></a> Fix permissions for workflows</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/593cb7831bec60d5590acc3eeb2e553f4a431167"><code>593cb78</code></a> Set permissions for workflow jobs</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/36adf110beabc9acdcad122149a2ea795a2b1a6c"><code>36adf11</code></a> Remove deprecated CodeQL check</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/9da4af0e1f82fe372bedc1b7820f55c6eaf012e5"><code>9da4af0</code></a> Update changelog</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/699303975bea182b966f9f34a1ecbbebe92afcef"><code>6993039</code></a> Improve naming</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/0b8f7560e11af817d70ff17f986b334ba2e99b81"><code>0b8f756</code></a> Improve naming</li> <li><a href="https://github.com/patrickjuchli/basic-ftp/commit/67a53f21623e4047d28d7a6f98f539f1adc9d1d0"><code>67a53f2</code></a> Bump version</li> <li>Additional commits viewable in <a href="https://github.com/patrickjuchli/basic-ftp/compare/v5.0.5...v5.2.0">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~patrickjuchli">patrickjuchli</a>, a new releaser for basic-ftp since your current version.</p> </details> <details> <summary>Install script changes</summary> <p>This version adds <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Updates `cross-spawn` from 7.0.3 to 7.0.6 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md">cross-spawn's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.5...v7.0.6">7.0.6</a> (2024-11-18)</h3> <h3>Bug Fixes</h3> <ul> <li>update cross-spawn version to 7.0.5 in package-lock.json (<a href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176">f700743</a>)</li> </ul> <h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.4...v7.0.5">7.0.5</a> (2024-11-07)</h3> <h3>Bug Fixes</h3> <ul> <li>fix escaping bug introduced by backtracking (<a href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f">640d391</a>)</li> </ul> <h3><a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.4">7.0.4</a> (2024-11-07)</h3> <h3>Bug Fixes</h3> <ul> <li>disable regexp backtracking (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>) (<a href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff">5ff3a07</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/77cd97f3ca7b62c904a63a698fc4a79bf41977d0"><code>77cd97f</code></a> chore(release): 7.0.6</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/6717de49ff1e5de49622488dcb9c33fb25370c85"><code>6717de4</code></a> chore: upgrade standard-version</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/f700743918d901eff92960e15a8dd68f87bd4176"><code>f700743</code></a> fix: update cross-spawn version to 7.0.5 in package-lock.json</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/9a7e3b2165917367f74b8365faad9873b30d7263"><code>9a7e3b2</code></a> chore: fix build status badge</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/085268352dcbcad8064c64c5efb25268b4023184"><code>0852683</code></a> chore(release): 7.0.5</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/640d391fde65388548601d95abedccc12943374f"><code>640d391</code></a> fix: fix escaping bug introduced by backtracking</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/bff0c87c8b627c4e6d04ec2449e733048bebb464"><code>bff0c87</code></a> chore: remove codecov</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/a7c6abc6fee79641d45b452fe6217deaa1bd0973"><code>a7c6abc</code></a> chore: replace travis with github workflows</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/9b9246e0969e86656d7ccd527716bc3c18842a19"><code>9b9246e</code></a> chore(release): 7.0.4</li> <li><a href="https://github.com/moxystudio/node-cross-spawn/commit/5ff3a07d9add449021d806e45c4168203aa833ff"><code>5ff3a07</code></a> fix: disable regexp backtracking (<a href="https://redirect.github.com/moxystudio/node-cross-spawn/issues/160">#160</a>)</li> <li>Additional commits viewable in <a href="https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6">compare view</a></li> </ul> </details> <br /> Updates `esbuild` from 0.21.5 to 0.27.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/evanw/esbuild/releases">esbuild's releases</a>.</em></p> <blockquote> <h2>v0.27.3</h2> <ul> <li> <p>Preserve URL fragments in data URLs (<a href="https://redirect.github.com/evanw/esbuild/issues/4370">#4370</a>)</p> <p>Consider the following HTML, CSS, and SVG:</p> <ul> <li> <p><code>index.html</code>:</p> <pre lang="html"><code>&lt;!DOCTYPE html&gt; &lt;html&gt; &lt;head&gt;&lt;link rel=&quot;stylesheet&quot; href=&quot;icons.css&quot;&gt;&lt;/head&gt; &lt;body&gt;&lt;div class=&quot;triangle&quot;&gt;&lt;/div&gt;&lt;/body&gt; &lt;/html&gt; </code></pre> </li> <li> <p><code>icons.css</code>:</p> <pre lang="css"><code>.triangle { width: 10px; height: 10px; background: currentColor; clip-path: url(./triangle.svg#x); } </code></pre> </li> <li> <p><code>triangle.svg</code>:</p> <pre lang="xml"><code>&lt;svg xmlns=&quot;http://www.w3.org/2000/svg&quot;&gt; &lt;defs&gt; &lt;clipPath id=&quot;x&quot;&gt; &lt;path d=&quot;M0 0H10V10Z&quot;/&gt; &lt;/clipPath&gt; &lt;/defs&gt; &lt;/svg&gt; </code></pre> </li> </ul> <p>The CSS uses a URL fragment (the <code>#x</code>) to reference the <code>clipPath</code> element in the SVG file. Previously esbuild's CSS bundler didn't preserve the URL fragment when bundling the SVG using the <code>dataurl</code> loader, which broke the bundled CSS. With this release, esbuild will now preserve the URL fragment in the bundled CSS:</p> <pre lang="css"><code>/* icons.css */ .triangle { width: 10px; height: 10px; background: currentColor; clip-path: url('data:image/svg+xml,&lt;svg xmlns=&quot;http://www.w3.org/2000/svg&quot;&gt;&lt;defs&gt;&lt;clipPath id=&quot;x&quot;&gt;&lt;path d=&quot;M0 0H10V10Z&quot;/&gt;&lt;/clipPath&gt;&lt;/defs&gt;&lt;/svg&gt;#x'); } </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md">esbuild's changelog</a>.</em></p> <blockquote> <h1>Changelog: 2024</h1> <p>This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).</p> <h2>0.24.2</h2> <ul> <li> <p>Fix regression with <code>--define</code> and <code>import.meta</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4010">#4010</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4012">#4012</a>, <a href="https://redirect.github.com/evanw/esbuild/pull/4013">#4013</a>)</p> <p>The previous change in version 0.24.1 to use a more expression-like parser for <code>define</code> values to allow quoted property names introduced a regression that removed the ability to use <code>--define:import.meta=...</code>. Even though <code>import</code> is normally a keyword that can't be used as an identifier, ES modules special-case the <code>import.meta</code> expression to behave like an identifier anyway. This change fixes the regression.</p> <p>This fix was contributed by <a href="https://github.com/sapphi-red"><code>@​sapphi-red</code></a>.</p> </li> </ul> <h2>0.24.1</h2> <ul> <li> <p>Allow <code>es2024</code> as a target in <code>tsconfig.json</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4004">#4004</a>)</p> <p>TypeScript recently <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-5-7/#support-for---target-es2024-and---lib-es2024">added <code>es2024</code></a> as a compilation target, so esbuild now supports this in the <code>target</code> field of <code>tsconfig.json</code> files, such as in the following configuration file:</p> <pre lang="json"><code>{ &quot;compilerOptions&quot;: { &quot;target&quot;: &quot;ES2024&quot; } } </code></pre> <p>As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in <a href="https://esbuild.github.io/content-types/#tsconfig-json">the documentation</a>.</p> <p>This fix was contributed by <a href="https://github.com/billyjanitsch"><code>@​billyjanitsch</code></a>.</p> </li> <li> <p>Allow automatic semicolon insertion after <code>get</code>/<code>set</code></p> <p>This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:</p> <pre lang="ts"><code>class Foo { get *x() {} set *y() {} } </code></pre> <p>The above code will be considered valid starting with this release. This change to esbuild follows a <a href="https://redirect.github.com/microsoft/TypeScript/pull/60225">similar change to TypeScript</a> which will allow this syntax starting with TypeScript 5.7.</p> </li> <li> <p>Allow quoted property names in <code>--define</code> and <code>--pure</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4008">#4008</a>)</p> <p>The <code>define</code> and <code>pure</code> API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes <code>--define</code> and <code>--pure</code> consistent with <code>--global-name</code>, which already supported quoted property names. For example, the following is now possible:</p> <pre lang="js"><code></code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/evanw/esbuild/commit/9129e00e6c36a3e374820cb5e3fc2cd319c8ab85"><code>9129e00</code></a> publish 0.27.3 to npm</li> <li><a href="https://github.com/evanw/esbuild/commit/e20e4115acda9c9f052fdd1ec8d7d5c5489e837b"><code>e20e411</code></a> small fix to release notes</li> <li><a href="https://github.com/evanw/esbuild/commit/0dc0f2dee556460bd7b81d5bbbae5a2f86449ab6"><code>0dc0f2d</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4322">#4322</a>: parse and print CSS <code>@scope</code> rules</li> <li><a href="https://github.com/evanw/esbuild/commit/55fe39164cd3429fcb92c6f358a8dfe2f6e6e559"><code>55fe391</code></a> update firefox css gradient support</li> <li><a href="https://github.com/evanw/esbuild/commit/2c35297c7ad249a51b9cc3974fa91f74dc13f68c"><code>2c35297</code></a> update gradient lowering transform</li> <li><a href="https://github.com/evanw/esbuild/commit/9209e4445abe7610018f0f758fd5d1fa13ec3ea8"><code>9209e44</code></a> Update Go to 1.25.7 (<a href="https://redirect.github.com/evanw/esbuild/issues/4388">#4388</a>)</li> <li><a href="https://github.com/evanw/esbuild/commit/e8d861b68cf8c3c3a4806ec87444ee48b9af1ade"><code>e8d861b</code></a> close <a href="https://redirect.github.com/evanw/esbuild/issues/4374">#4374</a>: compat table for the <code>using</code> feature</li> <li><a href="https://github.com/evanw/esbuild/commit/19b8887368396934957abd75f316cc069d6cc067"><code>19b8887</code></a> no longer need <code>williamkapke/node-compat-table</code></li> <li><a href="https://github.com/evanw/esbuild/commit/7e442189722b54bc6c574ae1148e1014d99e5f32"><code>7e44218</code></a> the <code>kangax/compat-table</code> repo moved to a new url</li> <li><a href="https://github.com/evanw/esbuild/commit/23b9338ed5efbdfa29d59b8b0d8088b1761fdc39"><code>23b9338</code></a> run <code>make update-compat-table</code></li> <li>Additional commits viewable in <a href="https://github.com/evanw/esbuild/compare/v0.21.5...v0.27.3">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by [GitHub Actions](<a href="https://www.npmjs.com/~GitHub">https://www.npmjs.com/~GitHub</a> Actions), a new releaser for esbuild since your current version.</p> </details> <br /> Updates `flatted` from 3.3.1 to 3.4.2 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/WebReflection/flatted/commit/3bf09091c3562e17a0647bc06710dd6097079cf7"><code>3bf0909</code></a> 3.4.2</li> <li><a href="https://github.com/WebReflection/flatted/commit/885ddcc33cf9657caf38c57c7be45ae1c5272802"><code>885ddcc</code></a> fix CWE-1321</li> <li><a href="https://github.com/WebReflection/flatted/commit/0bdba705d130f00892b1b8fcc80cf4cdea0631e3"><code>0bdba70</code></a> added flatted-view to the benchmark</li> <li><a href="https://github.com/WebReflection/flatted/commit/2a02dce7c641dec31194c67663f9b0b12e62da20"><code>2a02dce</code></a> 3.4.1</li> <li><a href="https://github.com/WebReflection/flatted/commit/fba4e8f2e113665da275b19cd0f695f3d98e9416"><code>fba4e8f</code></a> Merge pull request <a href="https://redirect.github.com/WebReflection/flatted/issues/89">#89</a> from WebReflection/python-fix</li> <li><a href="https://github.com/WebReflection/flatted/commit/5fe86485e6df7f7f34a07a2a85498bd3e17384e7"><code>5fe8648</code></a> added &quot;when in Rome&quot; also a test for PHP</li> <li><a href="https://github.com/WebReflection/flatted/commit/53517adbefe724fe472b2f9ebcdb01910d0ae3f0"><code>53517ad</code></a> some minor improvement</li> <li><a href="https://github.com/WebReflection/flatted/commit/b3e2a0c387bf446435fec45ad7f05299f012346f"><code>b3e2a0c</code></a> Fixing recursion issue in Python too</li> <li><a href="https://github.com/WebReflection/flatted/commit/c4b46dbcbf782326e54ea1b65d3ebb1dc7a23fad"><code>c4b46db</code></a> Add SECURITY.md for security policy and reporting</li> <li><a href="https://github.com/WebReflection/flatted/commit/f86d071e0f70de5a7d8200198824a3f07fc9c988"><code>f86d071</code></a> Create dependabot.yml for version updates</li> <li>Additional commits viewable in <a href="https://github.com/WebReflection/flatted/compare/v3.3.1...v3.4.2">compare view</a></li> </ul> </details> <br /> Updates `http-proxy-middleware` from 2.0.7 to 2.0.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/chimurai/http-proxy-middleware/releases">http-proxy-middleware's releases</a>.</em></p> <blockquote> <h2>v2.0.9</h2> <h2>What's Changed</h2> <ul> <li>fix(fixRequestBody): check readableLength by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1097">chimurai/http-proxy-middleware#1097</a></li> <li>chore(package): v2.0.9 by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1099">chimurai/http-proxy-middleware#1099</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/chimurai/http-proxy-middleware/compare/v2.0.8...v2.0.9">https://github.com/chimurai/http-proxy-middleware/compare/v2.0.8...v2.0.9</a></p> <h2>v2.0.8</h2> <h2>What's Changed</h2> <ul> <li>fix(fixRequestBody): prevent multiple .write() calls by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1090">chimurai/http-proxy-middleware#1090</a></li> <li>fix(fixRequestBody): handle invalid request by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1091">chimurai/http-proxy-middleware#1091</a></li> <li>chore(package): v2.0.8 by <a href="https://github.com/chimurai"><code>@​chimurai</code></a> in <a href="https://redirect.github.com/chimurai/http-proxy-middleware/pull/1094">chimurai/http-proxy-middleware#1094</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8">https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.8</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/chimurai/http-proxy-middleware/blob/v2.0.9/CHANGELOG.md">http-proxy-middleware's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.9">v2.0.9</a></h2> <ul> <li>fix(fixRequestBody): check readableLength</li> </ul> <h2><a href="https://github.com/chimurai/http-proxy-middleware/releases/tag/v2.0.8">v2.0.8</a></h2> <ul> <li>fix(fixRequestBody): prevent multiple .write() calls</li> <li>fix(fixRequestBody): handle invalid request</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/617a7c9da9cc90ecc00b0c8b1c2f6a385c879cb1"><code>617a7c9</code></a> chore(package): v2.0.9 (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1099">#1099</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/d22d58764832fea429d60109a19e1a23136d4425"><code>d22d587</code></a> fix(fixRequestBody): check readableLength (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1097">#1097</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/d03d51b54ac8d40db8438a8b216cf1ea92bb7849"><code>d03d51b</code></a> chore(package): v2.0.8 (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1094">#1094</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/c50dd06d9102fbb81dd4cbad7a295dddee5f6e1e"><code>c50dd06</code></a> fix(fixRequestBody): handle invalid request (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1091">#1091</a>)</li> <li><a href="https://github.com/chimurai/http-proxy-middleware/commit/76a9d8d6dc2b971f63df19d805c7ab656540525b"><code>76a9d8d</code></a> fix(fixRequestBody): prevent multiple .write() calls (<a href="https://redirect.github.com/chimurai/http-proxy-middleware/issues/1090">#1090</a>)</li> <li>See full diff in <a href="https://github.com/chimurai/http-proxy-middleware/compare/v2.0.7...v2.0.9">compare view</a></li> </ul> </details> <br /> Updates `immutable` from 3.7.6 to 5.1.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/immutable-js/immutable-js/releases">immutable's releases</a>.</em></p> <blockquote> <h2>v5.1.5</h2> <h2>What's Changed</h2> <ul> <li>Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable</li> <li>Upgrade devtools and use immutable version by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2158">immutable-js/immutable-js#2158</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5">https://github.com/immutable-js/immutable-js/compare/v5.1.4...v5.1.5</a></p> <h2>v5.1.4</h2> <h2>What's Changed</h2> <ul> <li>Migrate some files to TS by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2125">immutable-js/immutable-js#2125</a> <ul> <li>Iterator.ts</li> <li>PairSorting.ts</li> <li>toJS.ts</li> <li>Math.ts</li> <li>Hash.ts</li> </ul> </li> <li>Extract CollectionHelperMethods and convert to TS by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2131">immutable-js/immutable-js#2131</a></li> <li>Use npm <a href="https://docs.npmjs.com/trusted-publishers">trusted publishing only</a> to avoid token stealing.</li> </ul> <h3>Documentation</h3> <ul> <li>Fix/a11y issues by <a href="https://github.com/lyannel"><code>@​lyannel</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2136">immutable-js/immutable-js#2136</a></li> <li>Doc add Map.get signature update by <a href="https://github.com/borracciaBlu"><code>@​borracciaBlu</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2138">immutable-js/immutable-js#2138</a></li> <li>fix(doc):minor-issues#2132 by <a href="https://github.com/JayMeDotDot"><code>@​JayMeDotDot</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2133">immutable-js/immutable-js#2133</a></li> <li>Fix algolia search by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2135">immutable-js/immutable-js#2135</a></li> <li>Typo in OrderedMap by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2144">immutable-js/immutable-js#2144</a></li> </ul> <h3>Internal</h3> <ul> <li>chore: Sort all imports and activate eslint import rule by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2119">immutable-js/immutable-js#2119</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/JayMeDotDot"><code>@​JayMeDotDot</code></a> made their first contribution in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2133">immutable-js/immutable-js#2133</a></li> <li><a href="https://github.com/lyannel"><code>@​lyannel</code></a> made their first contribution in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2136">immutable-js/immutable-js#2136</a></li> <li><a href="https://github.com/borracciaBlu"><code>@​borracciaBlu</code></a> made their first contribution in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2138">immutable-js/immutable-js#2138</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/immutable-js/immutable-js/compare/v5.1.3...v5.1.4">https://github.com/immutable-js/immutable-js/compare/v5.1.3...v5.1.4</a></p> <h2>v5.1.3</h2> <h2>What's Changed</h2> <h3>TypeScript</h3> <ul> <li>fix: allow readonly map entry constructor by <a href="https://github.com/septs"><code>@​septs</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2123">immutable-js/immutable-js#2123</a></li> </ul> <h3>Documentation</h3> <p>There has been a huge amount of changes in the documentation, mainly migrate from an autogenerated documentation from .d.ts file, to a proper documentation in markdown. The playground has been included on nearly all method examples.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/immutable-js/immutable-js/blob/main/CHANGELOG.md">immutable's changelog</a>.</em></p> <blockquote> <h2>5.1.5</h2> <ul> <li>Fix Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable</li> </ul> <h2>5.1.4</h2> <ul> <li>Migrate some files to TS by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2125">immutable-js/immutable-js#2125</a> <ul> <li>Iterator.ts</li> <li>PairSorting.ts</li> <li>toJS.ts</li> <li>Math.ts</li> <li>Hash.ts</li> </ul> </li> <li>Extract CollectionHelperMethods and convert to TS by <a href="https://github.com/jdeniau"><code>@​jdeniau</code></a> in <a href="https://redirect.github.com/immutable-js/immutable-js/pull/2131">immutable-js/immutable-js#2131</a></li> <li>Use npm <a href="https://docs.npmjs.com/trusted-publishers">trusted publishing only</a> to avoid token stealing.</li> </ul> <h3>Documentation</h... _Description has been truncated_
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61:dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git switch dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git switch dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git rebase main
git switch main
git merge --ff-only dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git switch dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git rebase main
git switch main
git merge --no-ff dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git switch main
git merge --squash dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git switch main
git merge --ff-only dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git switch main
git merge dependabot/npm_and_yarn/webui/npm_and_yarn-00814e6c61
git push origin main
Sign in to join this conversation.
No description provided.