Skip to content

build(deps-dev): bump @angular/core from 20.3.24 to 20.3.27 - #2613

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/core-20.3.27
Open

build(deps-dev): bump @angular/core from 20.3.24 to 20.3.27#2613
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/core-20.3.27

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/core from 20.3.24 to 20.3.27.

Release notes

Sourced from @​angular/core's releases.

20.3.27

compiler

CommitDescription
fix - 5dbcd0ee16disallow i18n event attributes
fix - db0d4a1a39restrict possible event handler check to property names longer than 2 characters

http

CommitDescription
fix - a64e2883e9distinguish repeated transfer cache params

platform-server

CommitDescription
fix - 6f80cca0b8update domino to latest version

20.3.26

compiler-cli

CommitDescription
fix - 406aaa31e6update babel dependencies to latest v7

core

CommitDescription
fix - 26831d0cbdavoid caching missing locale data
fix - 8eb7aea08breject dynamic script host elements

http

CommitDescription
fix - b963f61028prevent caching of responses with Set-Cookie headers

service-worker

CommitDescription
fix - 1fdf234168preserve referrer in asset requests
fix - baa093ba68preserve referrer policy in asset requests

20.3.25

common

CommitDescription
fix - 9f443bc24cLimits date format string length
fix - 566ad05f20skip transfer cache for uncacheable HTTP traffic
fix - 1a62130a6buse cryptographically secure SHA-256 for transfer cache key generation

compiler

CommitDescription
fix - a68ec702a0sanitize two-way properties

core

CommitDescription
fix - 768a349e6eharden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

20.3.27 (2026-07-29)

compiler

CommitTypeDescription
5dbcd0ee16fixdisallow i18n event attributes
db0d4a1a39fixrestrict possible event handler check to property names longer than 2 characters

http

CommitTypeDescription
a64e2883e9fixdistinguish repeated transfer cache params

platform-server

CommitTypeDescription
6f80cca0b8fixupdate domino to latest version

22.0.8 (2026-07-22)

common

CommitTypeDescription
c0368f2278fixpreserve crossorigin on image preloads

core

CommitTypeDescription
8616ba9db6fixensure SVG animation attributeName is checked case-insensitively

forms

CommitTypeDescription
d302c7ab83fixensure pending status propagates to the root form in signal forms

http

CommitTypeDescription
9d40f8aefefixprevent transfer cache key collisions

migrations

CommitTypeDescription
388daea2fcfixcorrectly migrate ngClass with mixed space-separated keys
bb39cda648fixpreserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

CommitTypeDescription
91e33aa1defixavoid prototype lookups in date format caches

compiler

... (truncated)

Commits
  • db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
  • 5dbcd0e fix(compiler): disallow i18n event attributes
  • 8eb7aea fix(core): reject dynamic script host elements
  • 26831d0 fix(core): avoid caching missing locale data
  • ca48b47 fix(core): validate lowercase SVG animation attribute names (#69270)
  • 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
  • 49368c1 fix(platform-server): harden platform location origin validation during SSR
  • 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
  • 768a349 fix(core): harden TransferState restoration against DOM clobbering
  • See full diff in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 3, 2026
@netlify

netlifyBot commented Aug 3, 2026

Copy link
Copy Markdown

Deploy Preview for jsonforms-examples ready!

NameLink
🔨 Latest commitd10f132
🔍 Latest deploy loghttps://app.netlify.com/projects/jsonforms-examples/deploys/6a74819951347b000843e277
😎 Deploy Previewhttps://deploy-preview-2613--jsonforms-examples.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@coveralls

Copy link
Copy Markdown

Coverage Status

coverage: 84.286%. remained the same — dependabot/npm_and_yarn/angular/core-20.3.27 into master

Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 20.3.24 to 20.3.27.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.27/packages/core)
---
updated-dependencies:
- dependency-name: "@angular/core"
dependency-version: 20.3.27
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/angular/core-20.3.27 branch from 36e4828 to d10f132CompareAugust 6, 2026 12:44
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

@coveralls