Skip to content

build(deps): Bump the angular group with 8 updates - #145

Merged
adamtasteslikegood merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/angular-13553b80a4
Apr 1, 2026
Merged

build(deps): Bump the angular group with 8 updates#145
adamtasteslikegood merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/angular-13553b80a4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 28, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the angular group with 8 updates:

Package From To
@angular/build 21.2.4 21.2.5
@angular/cli 21.2.4 21.2.5
@angular/common 21.2.4 21.2.6
@angular/compiler 21.2.4 21.2.6
@angular/compiler-cli 21.2.4 21.2.6
@angular/core 21.2.4 21.2.6
@angular/forms 21.2.4 21.2.6
@angular/platform-browser 21.2.4 21.2.6

Updates @angular/build from 21.2.4 to 21.2.5

Release notes

Sourced from @​angular/build's releases.

21.2.5

@​angular/cli

Commit Description
feat - cadf9b201 support custom port in MCP devserver start tool

@​angular/ssr

Commit Description
fix - bbc255419 allow underscores in host validation
fix - b1fe66a7f patch Headers.forEach in cloneRequestAndPatchHeaders
Changelog

Sourced from @​angular/build's changelog.

21.2.5 (2026-03-27)

@​angular/cli

Commit Type Description
cadf9b201 feat support custom port in MCP devserver start tool

@​angular/ssr

Commit Type Description
bbc255419 fix allow underscores in host validation
b1fe66a7f fix patch Headers.forEach in cloneRequestAndPatchHeaders

20.3.22 (2026-03-27)

@​angular-devkit/build-angular

Commit Type Description
5978eeeff fix update picomatch to 4.0.4

@​angular-devkit/core

Commit Type Description
6e9b92612 fix update picomatch to 4.0.4

@​angular/build

Commit Type Description
6f209c26d fix update picomatch to 4.0.4

19.2.23 (2026-03-27)

@​angular/cli

Commit Type Description
67cfbe32f fix update picomatch to 4.0.4

... (truncated)

Commits
  • 3018612 release: cut the v21.2.5 release
  • 349bd43 build: update dependency picomatch to v4.0.4
  • cadf9b2 feat(@​angular/cli): support custom port in MCP devserver start tool
  • bbc2554 fix(@​angular/ssr): allow underscores in host validation
  • 88ac998 build: update cross-repo angular dependencies
  • 022e0ef build: update github/codeql-action action to v4.34.1
  • c363f19 build: update dependency node to v22.22.2
  • b1fe66a fix(@​angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders
  • See full diff in compare view

Updates @angular/cli from 21.2.4 to 21.2.5

Release notes

Sourced from @​angular/cli's releases.

21.2.5

@​angular/cli

Commit Description
feat - cadf9b201 support custom port in MCP devserver start tool

@​angular/ssr

Commit Description
fix - bbc255419 allow underscores in host validation
fix - b1fe66a7f patch Headers.forEach in cloneRequestAndPatchHeaders
Changelog

Sourced from @​angular/cli's changelog.

21.2.5 (2026-03-27)

@​angular/cli

Commit Type Description
cadf9b201 feat support custom port in MCP devserver start tool

@​angular/ssr

Commit Type Description
bbc255419 fix allow underscores in host validation
b1fe66a7f fix patch Headers.forEach in cloneRequestAndPatchHeaders

20.3.22 (2026-03-27)

@​angular-devkit/build-angular

Commit Type Description
5978eeeff fix update picomatch to 4.0.4

@​angular-devkit/core

Commit Type Description
6e9b92612 fix update picomatch to 4.0.4

@​angular/build

Commit Type Description
6f209c26d fix update picomatch to 4.0.4

19.2.23 (2026-03-27)

@​angular/cli

Commit Type Description
67cfbe32f fix update picomatch to 4.0.4

... (truncated)

Commits
  • 3018612 release: cut the v21.2.5 release
  • 349bd43 build: update dependency picomatch to v4.0.4
  • cadf9b2 feat(@​angular/cli): support custom port in MCP devserver start tool
  • bbc2554 fix(@​angular/ssr): allow underscores in host validation
  • 88ac998 build: update cross-repo angular dependencies
  • 022e0ef build: update github/codeql-action action to v4.34.1
  • c363f19 build: update dependency node to v22.22.2
  • b1fe66a fix(@​angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders
  • See full diff in compare view

Updates @angular/common from 21.2.4 to 21.2.6

Release notes

Sourced from @​angular/common's releases.

21.2.6

common

Commit Description
fix - b4ab6ba2e8 avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description
fix - 880a57d4b3 prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description
fix - ad0156e056 fixes a regression with animate.leave and reordering

migrations

Commit Description
fix - 73d6b01b47 inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests
Changelog

Sourced from @​angular/common's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description
b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description
ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description
73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

  • Leave animations are no longer limited to the element being removed.
  • ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description
412788fac9 fix ensure generated code compiles
75560ce43d fix parse named HTML entities containing digits
d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description
2bd708fb6b fix escape template literal in TCB
9769560da7 fix generic types not filled out correctly in type check block
7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description
df659b8d0c feat re-introduce nested leave animations scoped to component boundaries
dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a fix clean up dehydrated views during HMR component replacement
523d69a768 fix run linked signal equality check without reactive consumer
69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description
3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits
  • b4ab6ba fix(common): avoid redundant image fetch on destroy with auto sizes
  • See full diff in compare view

Updates @angular/compiler from 21.2.4 to 21.2.6

Release notes

Sourced from @​angular/compiler's releases.

21.2.6

common

Commit Description
fix - b4ab6ba2e8 avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description
fix - 880a57d4b3 prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description
fix - ad0156e056 fixes a regression with animate.leave and reordering

migrations

Commit Description
fix - 73d6b01b47 inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests
Changelog

Sourced from @​angular/compiler's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description
b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description
ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description
73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

  • Leave animations are no longer limited to the element being removed.
  • ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description
412788fac9 fix ensure generated code compiles
75560ce43d fix parse named HTML entities containing digits
d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description
2bd708fb6b fix escape template literal in TCB
9769560da7 fix generic types not filled out correctly in type check block
7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description
df659b8d0c feat re-introduce nested leave animations scoped to component boundaries
dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a fix clean up dehydrated views during HMR component replacement
523d69a768 fix run linked signal equality check without reactive consumer
69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description
3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits
  • 880a57d fix(compiler): prevent shimCssText from adding extra blank lines per CSS comment
  • 23ea431 fix(compiler): parse named HTML entities containing digits
  • 334ae10 fix(compiler): ensure generated code compiles
  • See full diff in compare view

Updates @angular/compiler-cli from 21.2.4 to 21.2.6

Release notes

Sourced from @​angular/compiler-cli's releases.

21.2.6

common

Commit Description
fix - b4ab6ba2e8 avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description
fix - 880a57d4b3 prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description
fix - ad0156e056 fixes a regression with animate.leave and reordering

migrations

Commit Description
fix - 73d6b01b47 inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests
Changelog

Sourced from @​angular/compiler-cli's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description
b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description
ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description
73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

  • Leave animations are no longer limited to the element being removed.
  • ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description
412788fac9 fix ensure generated code compiles
75560ce43d fix parse named HTML entities containing digits
d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description
2bd708fb6b fix escape template literal in TCB
9769560da7 fix generic types not filled out correctly in type check block
7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description
df659b8d0c feat re-introduce nested leave animations scoped to component boundaries
dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a fix clean up dehydrated views during HMR component replacement
523d69a768 fix run linked signal equality check without reactive consumer
69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description
3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits
  • 67e0ba7 fix(compiler-cli): generic types not filled out correctly in type check block
  • 26c43d1 fix(compiler-cli): escape template literal in TCB
  • 334ae10 fix(compiler): ensure generated code compiles
  • 1f2dc72 refactor(compiler-cli): update ast factories to account for type nodes
  • e3b0e5a refactor(compiler-cli): add type nodes to translator
  • 10b0dd9 refactor(compiler-cli): add generic for type nodes to AST factories
  • bfb8b17 refactor(compiler-cli): remove more unused code
  • 2feced3 refactor(compiler-cli): replace typescript usage in type reference emits
  • See full diff in compare view

Updates @angular/core from 21.2.4 to 21.2.6

Release notes

Sourced from @​angular/core's releases.

21.2.6

common

Commit Description
fix - b4ab6ba2e8 avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description
fix - 880a57d4b3 prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description
fix - ad0156e056 fixes a regression with animate.leave and reordering

migrations

Commit Description
fix - 73d6b01b47 inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests
Changelog

Sourced from @​angular/core's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description
b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description
ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description
73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

  • Leave animations are no longer limited to the element being removed.
  • ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description
412788fac9 fix ensure generated code compiles
75560ce43d fix parse named HTML entities containing digits
d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description
2bd708fb6b fix escape template literal in TCB
9769560da7 fix generic types not filled out correctly in type check block
7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description
df659b8d0c feat re-introduce nested leave animations scoped to component boundaries
dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a fix clean up dehydrated views during HMR component replacement
523d69a768 fix run linked signal equality check without reactive consumer
69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description
3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits
  • c157916 build: consolidate domino bundling in platform-server
  • 9be5e2c docs: fix typo in Input decorator
  • a21be36 refactor: prepare for required changeDetection prop on G3.
  • 831746e docs: Add callout about the Component interface.
  • ad0156e fix(core): fixes a regression with animate.leave and reordering
  • 73d6b01 fix(migrations): inject migration not work in multi-project workspace with op...
  • 3838554 build: update cross-repo angular dependencies to v21.2.3
  • 851ef77 Revert "refactor(core): Ensure determineLongestAnimation is run synchronously...
  • 076d41c fix(migrations): prevent trailing comma syntax errors after removing NgStyle
  • a8f80c1 refactor(core): declare explicit reactive node prototypes types
  • Additional commits viewable in compare view

Updates @angular/forms from 21.2.4 to 21.2.6

Release notes

Sourced from @​angular/forms's releases.

21.2.6

common

Commit Description
fix - b4ab6ba2e8 avoid redundant image fetch on destroy with auto sizes

compiler

Commit Description
fix - 880a57d4b3 prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Description
fix - ad0156e056 fixes a regression with animate.leave and reordering

migrations

Commit Description
fix - 73d6b01b47 inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit Description
fix - 334ae10168 ensure generated code compiles
fix - 23ea431c4e parse named HTML entities containing digits

compiler-cli

Commit Description
fix - 26c43d14ba escape template literal in TCB
fix - 67e0ba7e03 generic types not filled out correctly in type check block

core

Commit Description
fix - 1890c3008b clean up dehydrated views during HMR component replacement
fix - bf948be4c2 run linked signal equality check without reactive consumer

migrations

Commit Description
fix - 076d41c3f6 prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit Description
fix - e19150d2b5 preserve redirect policy on reconstructed asset requests
Changelog

Sourced from @​angular/forms's changelog.

21.2.6 (2026-03-25)

common

Commit Type Description
b4ab6ba2e8 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
880a57d4b3 fix prevent shimCssText from adding extra blank lines per CSS comment

core

Commit Type Description
ad0156e056 fix fixes a regression with animate.leave and reordering

migrations

Commit Type Description
73d6b01b47 fix inject migration not work in multi-project workspace with option path

22.0.0-next.4 (2026-03-18)

Breaking Changes

core

  • Leave animations are no longer limited to the element being removed.
  • ChangeDetectorRef.checkNoChanges was removed. In tests use fixture.detectChanges() instead.

compiler

Commit Type Description
412788fac9 fix ensure generated code compiles
75560ce43d fix parse named HTML entities containing digits
d99ab0e040 fix stop generating unused field

compiler-cli

Commit Type Description
2bd708fb6b fix escape template literal in TCB
9769560da7 fix generic types not filled out correctly in type check block
7a0d6b8df2 fix transform dropping exclamationToken from properties

core

Commit Type Description
df659b8d0c feat re-introduce nested leave animations scoped to component boundaries
dc3131c639 feat TestBed.getFixture -> TestBed.getLastFixture and update implementation
dc0446552a fix clean up dehydrated views during HMR component replacement
523d69a768 fix run linked signal equality check without reactive consumer
69fb1614ef refactor remove checkNoChanges from the public API.

forms

Commit Type Description
3983080236 feat support ngNoCva as an opt-out for ControlValueAccessors

... (truncated)

Commits
  • b658acc docs: fix js doc of signal forms ignoreValidators option.
  • See full diff in compare view

Updates `@angular/platform...

Description has been truncated

@github-actions

github-actions Bot commented Mar 28, 2026

Copy link
Copy Markdown
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 6 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA f23e21d.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

package-lock.json

PackageVersionLicenseIssue Type
@angular-devkit/architect0.2102.6NullUnknown License
@angular-devkit/core21.2.6NullUnknown License
@angular-devkit/schematics21.2.6NullUnknown License
@angular/build21.2.6NullUnknown License
@angular/cli21.2.6NullUnknown License
@schematics/angular21.2.6NullUnknown License
Denied Licenses: GPL-2.0-only, GPL-3.0-only, AGPL-3.0-only

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@angular-devkit/architect 0.2102.6 UnknownUnknown
npm/@angular-devkit/core 21.2.6 UnknownUnknown
npm/@angular-devkit/schematics 21.2.6 UnknownUnknown
npm/@angular/build 21.2.6 UnknownUnknown
npm/@angular/cli 21.2.6 UnknownUnknown
npm/@angular/common 21.2.6 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 064 existing vulnerabilities detected
npm/@angular/compiler 21.2.6 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 064 existing vulnerabilities detected
npm/@angular/compiler-cli 21.2.6 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 064 existing vulnerabilities detected
npm/@angular/core 21.2.6 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 064 existing vulnerabilities detected
npm/@angular/forms 21.2.6 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 064 existing vulnerabilities detected
npm/@angular/platform-browser 21.2.6 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Security-Policy🟢 10security policy file detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 2badge detected: InProgress
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1025 out of 25 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 064 existing vulnerabilities detected
npm/@schematics/angular 21.2.6 UnknownUnknown

Scanned Files

  • package-lock.json

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Dependabot version-update:semver-patch update.

Bumps the angular group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/build](https://github.com/angular/angular-cli) | `21.2.4` | `21.2.5` |
| [@angular/cli](https://github.com/angular/angular-cli) | `21.2.4` | `21.2.5` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.4` | `21.2.6` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.4` | `21.2.6` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.4` | `21.2.6` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.4` | `21.2.6` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.4` | `21.2.6` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.4` | `21.2.6` |


Updates `@angular/build` from 21.2.4 to 21.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.4...v21.2.5)

Updates `@angular/cli` from 21.2.4 to 21.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v21.2.4...v21.2.5)

Updates `@angular/common` from 21.2.4 to 21.2.6
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/common)

Updates `@angular/compiler` from 21.2.4 to 21.2.6
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/compiler)

Updates `@angular/compiler-cli` from 21.2.4 to 21.2.6
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/compiler-cli)

Updates `@angular/core` from 21.2.4 to 21.2.6
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/core)

Updates `@angular/forms` from 21.2.4 to 21.2.6
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/forms)

Updates `@angular/platform-browser` from 21.2.4 to 21.2.6
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.6/packages/platform-browser)

---
updated-dependencies:
- dependency-name: "@angular/build"
  dependency-version: 21.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/cli"
  dependency-version: 21.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/common"
  dependency-version: 21.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler-cli"
  dependency-version: 21.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/core"
  dependency-version: 21.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/forms"
  dependency-version: 21.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/angular-13553b80a4 branch from 7fc6040 to f23e21d Compare April 1, 2026 14:52

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Dependabot version-update:semver-patch update.

@adamtasteslikegood
adamtasteslikegood merged commit 0af44a0 into main Apr 1, 2026
34 of 35 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/angular-13553b80a4 branch April 1, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant