Skip to content

chore(deps): bump @angular/compiler from 22.0.0 to 22.0.1 in /animated-transformer - #104

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/animated-transformer/angular/compiler-22.0.1
Open

chore(deps): bump @angular/compiler from 22.0.0 to 22.0.1 in /animated-transformer#104
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/animated-transformer/angular/compiler-22.0.1

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/compiler from 22.0.0 to 22.0.1.

Release notes

Sourced from @​angular/compiler's releases.

22.0.1

common

CommitDescription
fix - c4b5fa3c92escape CSS string-terminating characters in escapeCssUrl
fix - dfff57ede9Limits date format string length
fix - 3c2892c8dfprevent prototype pollution in formatDateTime
fix - 1d87c49f6euse cryptographically secure SHA-256 for transfer cache key generation

compiler

CommitDescription
fix - 1ee224ca30disallow i18n event attributes
fix - a56f1cdf8fmore robust logic to check if regex can be optimized
fix - 5946c18275sanitize href/xlink:href attributes of any element of the MathML namespace
fix - 393b84caf8sanitize two-way properties

compiler-cli

CommitDescription
fix - 3d9ca2f173bind switch exhaustive check expressions

core

CommitDescription
fix - 669146b0e7disable WebMCP during SSR
fix - 562a566eadHandle synchronous errors in PendingTasks.run function
fix - fa546f382dharden TransferState restoration against DOM clobbering
fix - 29fdb98684prevent dangling prevConsumer reference from leaking destroyed views (#68681)
fix - cdcea80327require WebMCP tool descriptions
fix - 4289c4c840update comment for Default change detection
fix - 3dd433b39ause Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray
fix - 045bb736b3validate lowercase SVG animation attribute names

forms

CommitDescription
fix - 11836a670adelay mcp reading the form model by a tick
fix - 85d2d100e3harden FormGroup control lookups against prototype shadowing
fix - e51ad374earemove animationstart listener on component destroy to prevent memory leak
fix - 55b7b5a6b6set additionalProperties: false on generated WebMCP form

http

CommitDescription
fix - ffb06c0514ensure query parameters are inserted before URL fragments
fix - 2dd65d21e6pass down the reportUploadProgress and reportDownloadProgress on post/patch requests
fix - 4254eb416cpreserve empty referrer option in HttpRequest
fix - 167bd4c162Rejects non-HTTP(S) URLs in JSONP requests

language-service

CommitDescription
fix - 43a0e28729prevent external template inlay hints from appearing in TS files

platform-server

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

22.0.1 (2026-06-10)

Deprecations

platform-server

  • XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead. (cherry picked from commit 8446e46f8bc33bd4419fa7f6106b8d117ca2e099)

common

CommitTypeDescription
c4b5fa3c92fixescape CSS string-terminating characters in escapeCssUrl
dfff57ede9fixLimits date format string length
3c2892c8dffixprevent prototype pollution in formatDateTime
1d87c49f6efixuse cryptographically secure SHA-256 for transfer cache key generation

compiler

CommitTypeDescription
1ee224ca30fixdisallow i18n event attributes
a56f1cdf8ffixmore robust logic to check if regex can be optimized
5946c18275fixsanitize href/xlink:href attributes of any element of the MathML namespace
393b84caf8fixsanitize two-way properties

compiler-cli

CommitTypeDescription
3d9ca2f173fixbind switch exhaustive check expressions

core

CommitTypeDescription
669146b0e7fixdisable WebMCP during SSR
562a566eadfixHandle synchronous errors in PendingTasks.run function
fa546f382dfixharden TransferState restoration against DOM clobbering
29fdb98684fixprevent dangling prevConsumer reference from leaking destroyed views (#68681)
cdcea80327fixrequire WebMCP tool descriptions
4289c4c840fixupdate comment for Default change detection
3dd433b39afixuse Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray
045bb736b3fixvalidate lowercase SVG animation attribute names

forms

CommitTypeDescription
11836a670afixdelay mcp reading the form model by a tick
85d2d100e3fixharden FormGroup control lookups against prototype shadowing
e51ad374eafixremove animationstart listener on component destroy to prevent memory leak
55b7b5a6b6fixset additionalProperties: false on generated WebMCP form

http

CommitTypeDescription
ffb06c0514fixensure query parameters are inserted before URL fragments
2dd65d21e6fixpass down the reportUploadProgress and reportDownloadProgress on post/patch requests
4254eb416cfixpreserve empty referrer option in HttpRequest
167bd4c162fixRejects non-HTTP(S) URLs in JSONP requests

language-service

| Commit | Type | Description |

... (truncated)

Commits
  • 4645850 refactor(compiler): Remove 80 char limit on AbstractEmitterVisitor
  • 1ee224c fix(compiler): disallow i18n event attributes
  • 5946c18 fix(compiler): sanitize href/xlink:href attributes of any element of the ...
  • 393b84c fix(compiler): sanitize two-way properties
  • 3d9ca2f fix(compiler-cli): bind switch exhaustive check expressions
  • a56f1cd fix(compiler): more robust logic to check if regex can be optimized
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 22.0.0 to 22.0.1.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.0.1/packages/compiler)
---
updated-dependencies:
- dependency-name: "@angular/compiler"
dependency-version: 22.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 15, 2026
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants