@angular/upgrade
22.2.3 · 14 Oct 2026MIT104.4k / weekRepositoryHomepagenpmAtom feed
Your version
21.2.25 is the newest release of 21.x.
Release note
common
| Commit | Description |
|---|---|
| fix - 7f4ac78994 | add upper bounds for digitsInfo |
| fix - 300f61feb3 | sanitize placeholder |
compiler
| Commit | Description |
|---|---|
| fix - 0b07f47bd6 | normalize tag names with custom namespaces in DomElementSchemaRegistry (#68925) |
| fix - eb1cbbf2eb | prevent namespaced SVG <style> elements from being stripped |
| fix - cc1378d54b | sanitize dynamic href and xlink:href bindings on SVG a elements (#68925) |
| fix - 782e01594e | strip namespaced SVG script elements during template compilation (#68925) |
core
| Commit | Description |
|---|---|
| fix - ff12fe55ac | normalize tag names in runtime i18n attribute security context lookup (#68925) |
| fix - e6fe77cc97 | sanitize meta selectors |
| fix - daaf32937f | support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68925) |
| fix - dada86e43d | synchronize core sanitization schema with compiler (#68925) |
http
| Commit | Description |
|---|---|
| fix - 582a417bd2 | exclude withCredentials requests from transfer cache |
| fix - 5c6d6df34b | skip TransferCache for cookie-bearing requests by default |
platform-server
| Commit | Description |
|---|---|
| fix - 37e8aadf87 | prevent SSRF bypasses via backslash URLs in HttpClient |
| fix - 72696e244e | secure location and document initialization against SSRF and path hijack |
service-worker
| Commit | Description |
|---|---|
| fix - b8bd49341d | Preserves explicit 'credentials: omit' in asset requests |
| fix - ca32fc1000 | Preserves HTTP cache mode in asset group requests |