Skip to content

build(deps): Bump the angular group with 6 updates - #155

Merged
adamtasteslikegood merged 2 commits into
mainfrom
dependabot/npm_and_yarn/main/angular-c6780b6d68
Apr 10, 2026
Merged

build(deps): Bump the angular group with 6 updates#155
adamtasteslikegood merged 2 commits into
mainfrom
dependabot/npm_and_yarn/main/angular-c6780b6d68

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the angular group with 6 updates:

Package From To
@angular/common 21.2.6 21.2.7
@angular/compiler 21.2.6 21.2.7
@angular/compiler-cli 21.2.6 21.2.7
@angular/core 21.2.6 21.2.7
@angular/forms 21.2.6 21.2.7
@angular/platform-browser 21.2.6 21.2.7

Updates @angular/common from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/common's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/common's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits
  • 13f050d test: construct local Date objects to fix timezone flakiness
  • d0cf299 test: remove unsupported timezone from formatDate tests
  • See full diff in compare view

Updates @angular/compiler from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/compiler's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/compiler's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits
  • d04ddd7 fix(core): prevent binding unsafe attributes on SVG animation elements (#67797)
  • fea25d1 fix(compiler): register SVG animation attributes in URL security context (#67...
  • See full diff in compare view

Updates @angular/compiler-cli from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/compiler-cli's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/compiler-cli's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits
  • bba5ed8 fix(compiler-cli): prevent recursive scope checks for invalid NgModule imports
  • See full diff in compare view

Updates @angular/core from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/core's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/core's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits
  • 4ad6d58 build: update cross-repo angular dependencies to v21.2.6
  • d04ddd7 fix(core): prevent binding unsafe attributes on SVG animation elements (#67797)
  • b682c62 fix(core): treat object[data] as resource URL context (#67797)
  • fea25d1 fix(compiler): register SVG animation attributes in URL security context (#67...
  • 8fd896e fix(core): resolve component import by exact specifier in route lazy-loading ...
  • 4b2008d build: update cross-repo angular dependencies
  • See full diff in compare view

Updates @angular/forms from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/forms's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/forms's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits
  • 895c576 refactor(forms): use strict equality for pending status getter
  • See full diff in compare view

Updates @angular/platform-browser from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/platform-browser's releases.

21.2.7

compiler

Commit Description
fix - fea25d1a60 register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Description
fix - bba5ed8e64 prevent recursive scope checks for invalid NgModule imports

core

Commit Description
fix - d04ddd73df prevent binding unsafe attributes on SVG animation elements (#67797)
fix - 8fd896e99a resolve component import by exact specifier in route lazy-loading schematic
fix - b682c62873 treat object[data] as resource URL context (#67797)

localize

Commit Description
fix - 3c41e74fdd validate locale in getOutputPathFn to prevent path traversal

router

Commit Description
fix - 0960592d3d pass outlet context to split to fix empty path named outlets
Changelog

Sourced from @​angular/platform-browser's changelog.

21.2.7 (2026-04-01)

compiler

Commit Type Description
fea25d1a60 fix register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit Type Description
bba5ed8e64 fix prevent recursive scope checks for invalid NgModule imports

core

Commit Type Description
d04ddd73df fix prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a fix resolve component import by exact specifier in route lazy-loading schematic
b682c62873 fix treat object[data] as resource URL context (#67797)

localize

Commit Type Description
3c41e74fdd fix validate locale in getOutputPathFn to prevent path traversal

router

Commit Type Description
0960592d3d fix pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

  • Elements with multiple matching selectors will now throw at compile time.

core

  • Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

  • Hammer.js integration has been removed. Use your own implementation.

common

Commit Type Description
c1312da183 fix avoid redundant image fetch on destroy with auto sizes

compiler

Commit Type Description
e850643b1b feat Support comments in html element.
96be4f429b fix abstract emitter producing incorrect code for dynamic imports
5a712d42d1 fix prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit Type Description
ca67828ee2 refactor introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the angular group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.6` | `21.2.7` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.6` | `21.2.7` |
| [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.6` | `21.2.7` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.6` | `21.2.7` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.6` | `21.2.7` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.6` | `21.2.7` |


Updates `@angular/common` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/common)

Updates `@angular/compiler` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/compiler)

Updates `@angular/compiler-cli` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/compiler-cli)

Updates `@angular/core` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/core)

Updates `@angular/forms` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/forms)

Updates `@angular/platform-browser` from 21.2.6 to 21.2.7
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v21.2.7/packages/platform-browser)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/compiler-cli"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/core"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/forms"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
- dependency-name: "@angular/platform-browser"
  dependency-version: 21.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: angular
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 3, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Dependabot version-update:semver-patch update.

@github-actions

github-actions Bot commented Apr 3, 2026

Copy link
Copy Markdown
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 452bf16.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@angular/common 21.2.7 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 078 existing vulnerabilities detected
npm/@angular/compiler 21.2.7 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 078 existing vulnerabilities detected
npm/@angular/compiler-cli 21.2.7 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 078 existing vulnerabilities detected
npm/@angular/core 21.2.7 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 078 existing vulnerabilities detected
npm/@angular/forms 21.2.7 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 078 existing vulnerabilities detected
npm/@angular/platform-browser 21.2.7 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Dependency-Update-Tool🟢 10update tool detected
Code-Review🟢 8Found 26/29 approved changesets -- score normalized to 8
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
CI-Tests🟢 1028 out of 28 merged PRs checked by a CI test -- score normalized to 10
Contributors🟢 10project has 35 contributing companies or organizations
Vulnerabilities⚠️ 078 existing vulnerabilities detected

Scanned Files

  • package-lock.json

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: Dependabot version-update:semver-patch update.

@adamtasteslikegood
adamtasteslikegood merged commit 30987a7 into main Apr 10, 2026
26 of 27 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/main/angular-c6780b6d68 branch April 10, 2026 07:32
@github-actions

Copy link
Copy Markdown
Contributor

Qodana for JS

31 new problems were found

Inspection name Severity Problems
ESLint 🔴 Failure 20
Incorrect usage of Angular block 🔴 Failure 1
Unresolved pipe 🔴 Failure 1
Exception used for local control-flow 🔶 Warning 3
Angular CLI add dependency 🔶 Warning 1
Vulnerable declared dependency 🔶 Warning 1
Missing await for an async function call ◽️ Notice 2
Result of method call returning a promise is ignored ◽️ Notice 2

☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant