chore(deps-dev): bump @angular/cli from 19.2.19 to 21.0.3 #6882

dependabot · 2025-12-17T02:48:50Z

Bumps @angular/cli from 19.2.19 to 21.0.3.

Release notes

Sourced from @angular/cli's releases.

21.0.3

@angular-devkit/build-angular

Commit Description

conditionally provide Zone.js change detection in the built-in test main file

@angular/build

Commit Description

Add custom middleware for to present an Angular-tailored message

Ensure disposal of close-javascript-transformer

ensure locale base href retains leading slash (#32040)

inject testing polyfills in Karma unit-test executor

support NODE_EXTRA_CA_CERTS in SSR SSL plugin

21.0.2

@angular/cli

Commit Description

update @modelcontextprotocol/sdk to v1.24.0

@angular-devkit/schematics

Commit Description

remove lazy imports in node tasks

@angular/build

Commit Description

add filename truncation to test discovery

allow overriding Vitest coverage reportsDirectory option

21.0.1

@schematics/angular

Commit Description

add missing imports for lifecycle hooks in jasmine-vitest migration

add mock names to createSpyObj transformation

do not set esModuleInterop and moduleResolution when module is preserve

fix migration of jasmine.clock().mockDate()

handle createSpyObj without base name on refactor-jasmine-vitest

improve safety of done callback transformation

silently skip when the build target already uses one of the new builders

support testRunner option in library schematic

warn about loose matching in arrayWithExactContents

@angular/cli

Commit Description

ensure dependencies are resolved correctly for node modules directory check

@angular/build

Commit Description

correct Vitest coverage path resolution for JSDOM on Windows

... (truncated)

Changelog

Sourced from @angular/cli's changelog.

21.0.3 (2025-12-10)

@angular-devkit/build-angular

Commit Type Description

5d85f416f fix conditionally provide Zone.js change detection in the built-in test main file

@angular/build

Commit Type Description

778b4cffc fix Add custom middleware for to present an Angular-tailored message

9b02ab2ee fix Ensure disposal of close-javascript-transformer

0fc7d576e fix ensure locale base href retains leading slash (#32040)

b141670a2 fix inject testing polyfills in Karma unit-test executor

88c18ce68 fix support NODE_EXTRA_CA_CERTS in SSR SSL plugin

21.1.0-next.1 (2025-12-03)

@angular/cli

Commit Type Description

d635a6c63 feat add signal forms lessons

@schematics/angular

Commit Type Description

e71a72ffd feat generate detailed migration report for refactor-jasmine-vitest

@angular-devkit/schematics

Commit Type Description

98e10fa0f fix remove lazy imports in node tasks

@angular/build

Commit Type Description

63c3e3f64 fix add filename truncation to test discovery

8d8ba4f61 fix allow overriding Vitest coverage reportsDirectory option

... (truncated)

Commits

4878729 release: cut the v21.0.3 release
9b02ab2 fix(@angular/build): Ensure disposal of close-javascript-transformer
efff0c7 build: update github/codeql-action action to v4.31.7
0d1ff13 build: update pnpm to v10.25.0
a6ee7b4 build: lock file maintenance
2a35d8a build: update dependency rules_cc to v0.2.14
7b063de build: update cross-repo angular dependencies
bdcd6de build: update to bazel version 8.4.2
778b4cf fix(@angular/build): Add custom middleware for to present an Angular-tailored...
735a15b ci: remove single value os matrix field from E2E jobs
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

changeset-bot · 2025-12-17T02:48:55Z

⚠️ No Changeset found

Latest commit: 9b36d4b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2025-12-17T02:49:32Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@angular/cli@20.3.8 ⏵ 21.0.5	⁺³		⁺¹	^-1

View full report

swisspost-bot · 2025-12-17T02:51:46Z

Related Previews

https://preview-6882--swisspost-design-system-next.netlify.app?devModeEnabled=true

socket-security · 2026-01-09T11:21:54Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Bumps [@angular/cli](https://github.com/angular/angular-cli) from 19.2.19 to 21.0.3. - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@19.2.19...v21.0.3) --- updated-dependencies: - dependency-name: "@angular/cli" dependency-version: 21.0.3 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2026-01-09T13:29:23Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

alizedebray · 2026-01-12T12:15:16Z

Closing this PR to keep @angular/cli version aligned with other @angular dependencies.

dependabot · 2026-01-12T12:15:19Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 17, 2025

dependabot bot requested a review from a team as a code owner December 17, 2025 02:48

dependabot bot requested a review from oliverschuerch December 17, 2025 02:48

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 17, 2025

dependabot bot mentioned this pull request Dec 17, 2025

chore(deps-dev): bump @angular/cli from 19.2.19 to 21.0.2 #6828

Closed

dependabot bot force-pushed the dependabot/npm_and_yarn/angular/cli-21.0.3 branch from c5125fc to 85eef9f Compare January 9, 2026 11:21

dependabot bot force-pushed the dependabot/npm_and_yarn/angular/cli-21.0.3 branch from 85eef9f to 9b36d4b Compare January 9, 2026 13:27

alizedebray closed this Jan 12, 2026

dependabot bot deleted the dependabot/npm_and_yarn/angular/cli-21.0.3 branch January 12, 2026 12:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump @angular/cli from 19.2.19 to 21.0.3 #6882

chore(deps-dev): bump @angular/cli from 19.2.19 to 21.0.3 #6882

Uh oh!

dependabot bot commented on behalf of github Dec 17, 2025 •

edited

Loading

Uh oh!

changeset-bot bot commented Dec 17, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Dec 17, 2025 •

edited

Loading

Uh oh!

swisspost-bot commented Dec 17, 2025 •

edited

Loading

Uh oh!

socket-security bot commented Jan 9, 2026 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Jan 9, 2026

Uh oh!

alizedebray commented Jan 12, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Commit	Description
	Add custom middleware for to present an Angular-tailored message
	Ensure disposal of close-javascript-transformer
	ensure locale base href retains leading slash (#32040)
	inject testing polyfills in Karma unit-test executor
	support NODE_EXTRA_CA_CERTS in SSR SSL plugin

Commit	Description
	add filename truncation to test discovery
	allow overriding Vitest coverage `reportsDirectory` option

Commit	Description
	add missing imports for lifecycle hooks in jasmine-vitest migration
	add mock names to createSpyObj transformation
	do not set `esModuleInterop` and `moduleResolution` when module is `preserve`
	fix migration of `jasmine.clock().mockDate()`
	handle createSpyObj without base name on refactor-jasmine-vitest
	improve safety of done callback transformation
	silently skip when the build target already uses one of the new builders
	support testRunner option in library schematic
	warn about loose matching in arrayWithExactContents

Commit	Type	Description
778b4cffc	fix	Add custom middleware for to present an Angular-tailored message
9b02ab2ee	fix	Ensure disposal of close-javascript-transformer
0fc7d576e	fix	ensure locale base href retains leading slash (#32040)
b141670a2	fix	inject testing polyfills in Karma unit-test executor
88c18ce68	fix	support NODE_EXTRA_CA_CERTS in SSR SSL plugin

Commit	Type	Description
63c3e3f64	fix	add filename truncation to test discovery
8d8ba4f61	fix	allow overriding Vitest coverage `reportsDirectory` option

chore(deps-dev): bump @angular/cli from 19.2.19 to 21.0.3 #6882

chore(deps-dev): bump @angular/cli from 19.2.19 to 21.0.3 #6882

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

21.0.3

@​angular-devkit/build-angular

@​angular/build

21.0.2

@​angular/cli

@​angular-devkit/schematics

@​angular/build

21.0.1

@​schematics/angular

@​angular/cli

@​angular/build

21.0.3 (2025-12-10)

@​angular-devkit/build-angular

@​angular/build

21.1.0-next.1 (2025-12-03)

@​angular/cli

@​schematics/angular

@​angular-devkit/schematics

@​angular/build

Uh oh!

changeset-bot bot commented Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

socket-security bot commented Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

swisspost-bot commented Dec 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security bot commented Jan 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sonarqubecloud bot commented Jan 9, 2026

Quality Gate passed

Uh oh!

alizedebray commented Jan 12, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Dec 17, 2025 •

edited

Loading

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@angular-devkit/schematics`

`@angular/build`

`@schematics/angular`

`@angular/cli`

`@angular/build`

`@angular-devkit/build-angular`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular-devkit/schematics`

`@angular/build`

changeset-bot bot commented Dec 17, 2025 •

edited

Loading

socket-security bot commented Dec 17, 2025 •

edited

Loading

swisspost-bot commented Dec 17, 2025 •

edited

Loading

socket-security bot commented Jan 9, 2026 •

edited

Loading