Angular Robot
295dad7389
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-24 10:48:36 -04:00
Angular Robot
681148c674
build: lock file maintenance
...
See associated pull request for more information.
2026-06-23 15:00:31 -04:00
Angular Robot
738479f21c
build: update pnpm to v11.8.0
...
See associated pull request for more information.
2026-06-22 16:08:41 -04:00
Angular Robot
1566442a0d
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-18 12:26:16 -04:00
Angular Robot
2d2d5fc362
build: lock file maintenance
...
See associated pull request for more information.
Closes #69367 as a pr takeover
2026-06-17 09:12:30 -07:00
Angular Robot
9378577bd7
build: update pnpm to v11.7.0
...
See associated pull request for more information.
2026-06-17 08:07:51 -07:00
Angular Robot
20fb11bdda
build: update pnpm to v11.6.0
...
See associated pull request for more information.
2026-06-15 08:54:16 -07:00
Angular Robot
a157ec51af
build: update pnpm to v11.5.3
...
See associated pull request for more information.
2026-06-12 08:18:32 -07:00
Jessica Janiuk
dcc4fe06b9
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-11 13:04:18 -07:00
Angular Robot
71bb19d772
build: lock file maintenance
...
See associated pull request for more information.
2026-06-10 15:43:00 -07:00
Angular Robot
7541f3012f
build: update pnpm to v11.5.2
...
See associated pull request for more information.
2026-06-09 14:55:56 -07:00
Angular Robot
0a9ff4ea47
build: update all non-major dependencies
...
See associated pull request for more information.
2026-06-09 11:07:34 -07:00
Angular Robot
e0d9ea2560
build: lock file maintenance
...
See associated pull request for more information.
2026-06-05 11:14:14 -07:00
Angular Robot
8da119857f
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-04 11:24:00 -07:00
Angular Robot
30ff589566
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-06-02 12:25:05 +02:00
Angular Robot
688cb51d95
build: update dependency concurrently to v10
...
See associated pull request for more information.
2026-06-01 18:47:21 +02:00
Angular Robot
71a11b2f30
build: update pnpm to v11.5.0
...
See associated pull request for more information.
2026-06-01 18:45:37 +02:00
Angular Robot
5f62a95bab
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-29 11:49:44 +02:00
Angular Robot
74d5886c46
build: update all non-major dependencies
...
See associated pull request for more information.
2026-05-29 11:47:46 +02:00
Angular Robot
db59909c06
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-27 16:39:56 -07:00
Angular Robot
b8e13872e0
build: update pnpm to v11.3.0
...
See associated pull request for more information.
2026-05-27 11:15:04 -07:00
Angular Robot
bc9d033fe2
build: lock file maintenance
...
See associated pull request for more information.
2026-05-27 11:12:33 -07:00
Angular Robot
23e744ec25
build: update all non-major dependencies
...
See associated pull request for more information.
2026-05-21 13:16:22 -07:00
Angular Robot
2953ca7b0d
build: update pnpm to v11.1.3
...
See associated pull request for more information.
2026-05-20 10:19:39 -07:00
Angular Robot
b53fa3cdaa
build: lock file maintenance
...
See associated pull request for more information.
2026-05-19 13:22:40 -07:00
Alan Agius
61a97f22e8
fix(core): support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation
...
Updates `DomElementSchemaRegistry` to strip `:svg:` and `:math:` namespace prefixes
from tag names before querying `SECURITY_SCHEMA` at compile-time. This allows SVG
and MathML attributes to correctly match their security contexts during compilation.
2026-05-19 13:00:32 -07:00
Alan Agius
49ccb5154b
build: update pnpm to v11.1.2
...
See associated pull request for more information.
Closes #68773 as a pr takeover
2026-05-18 13:24:31 -07:00
Angular Robot
7ec399ecb5
build: update dependency puppeteer to v25
...
See associated pull request for more information.
2026-05-18 13:23:09 -07:00
Angular Robot
2864fed214
build: update all non-major dependencies
...
See associated pull request for more information.
2026-05-15 11:38:00 -07:00
Angular Robot
1a7f00f7c0
build: update cross-repo angular dependencies to v22.0.0-rc.0
...
See associated pull request for more information.
2026-05-15 10:40:32 -07:00
Angular Robot
642fd43ea6
build: update pnpm to v11.1.1
...
See associated pull request for more information.
2026-05-12 21:39:31 -07:00
Angular Robot
f247ea417a
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-12 21:38:32 -07:00
Angular Robot
ff816fb5ae
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-12 16:41:38 -07:00
Angular Robot
66b9259401
build: lock file maintenance
...
See associated pull request for more information.
2026-05-12 11:42:31 -07:00
Alan Agius
e90423f5f7
build: disable strict release age checks in pnpm workspaces
...
Updates all pnpm-workspace.yaml configurations across the repository to set minimumReleaseAgeStrict: false. This resolves dependency installation failures caused by missing time field metadata in the npm registry for certain packages such as @babel/helper-globals. A TODO comment is also added to each configuration file to track future investigation of this registry metadata issue.
2026-05-12 10:43:00 -07:00
Alan Agius
62f8dbb626
build: remove @angular-devkit/build-angular dependency and configure pnpm resolution mode
...
Try to fix pnpm 11 and defer integration test.
2026-05-12 08:49:44 -07:00
Angular Robot
7acac39ada
build: update pnpm to v11.1.0
...
See associated pull request for more information.
Closes #68687 as a pr takeover
2026-05-12 08:49:44 -07:00
Angular Robot
90c4223aa9
build: update pnpm to v11
...
See associated pull request for more information.
2026-05-11 12:43:55 -07:00
Angular Robot
3ac11a5e02
build: update pnpm to v10.33.4
...
See associated pull request for more information.
2026-05-07 16:40:35 -06:00
Angular Robot
827781ea12
build: update all non-major dependencies
...
See associated pull request for more information.
2026-05-07 16:39:49 -06:00
Alan Agius
60552a73e8
fix(platform-server): add allowedHosts option to renderModule and renderApplication
...
In server-side rendering (SSR) setups, passing request URLs directly to the lower-level rendering APIs `renderModule` or `renderApplication` can expose applications to Server-Side Request Forgery (SSRF) or Host Header Injection attacks via absolute-form request URLs.
To mitigate these vulnerabilities at the framework layer, this commit introduces the `allowedHosts` option to `PlatformConfig` (supporting exact hostnames, wildcards like `*.example.com`, or `*` to allow all).
During platform initialization inside `createServerPlatform`, the hostname of the request `url` is validated against the `allowedHosts` list. If the hostname is not authorized, bootstrap immediately throws a host validation error, preventing unauthorized rendering and silent SSRF bypasses.
Closes #68436
2026-05-07 16:30:03 -06:00
Angular Robot
fc526331e3
build: lock file maintenance
...
See associated pull request for more information.
2026-05-05 09:35:19 -07:00
Angular Robot
4f048e7de3
build: update dependency typescript to v6.0.3
...
See associated pull request for more information.
2026-05-04 13:05:58 -07:00
Angular Robot
9c7cbcd263
build: update all non-major dependencies
...
See associated pull request for more information.
2026-05-01 15:57:16 -07:00
SkyZeroZx
11721509b0
refactor(core): Makes @defer(hydrate ...) runtime tree-shakable
...
This commit updates `@defer` logic related to incremental hydration to be tree-shakable.
If hydrate triggers are used in a `@defer` block, the compiler emits a single top-level call to `ɵɵenableIncrementalHydrationRuntime`, placed once per create block before the first `ɵɵdefer` that requires it.
As a result, the incremental hydration runtime is only included in the bundle when hydrate is explicitly used.
2026-05-01 15:54:55 -07:00
Angular Robot
9dc4e44eea
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-04-30 15:52:21 -07:00
Angular Robot
37ba0a79a6
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-04-29 13:34:08 -07:00
Angular Robot
32d768f69c
build: lock file maintenance
...
See associated pull request for more information.
2026-04-28 10:25:45 -07:00
Angular Robot
f9c1f979d9
build: update pnpm to v10.33.2
...
See associated pull request for more information.
2026-04-24 10:10:56 -07:00
Angular Robot
65c205dc34
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-04-23 15:11:57 -07:00