Skip to content

Bump @angular/compiler from 19.2.18 to 19.2.20 in /pupil-spa#3206

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/pupil-spa/angular/compiler-19.2.20
Open

Bump @angular/compiler from 19.2.18 to 19.2.20 in /pupil-spa#3206
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/pupil-spa/angular/compiler-19.2.20

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 14, 2026

Bumps @angular/compiler from 19.2.18 to 19.2.20.

Release notes

Sourced from @​angular/compiler's releases.

19.2.20

compiler

Commit Description
fix - 5be912eb55 disallow translations of iframe src

core

Commit Description
fix - b89b0a83a4 sanitize translated attribute bindings with interpolations
fix - 621c7071ad sanitize translated form attributes

19.2.19

core

Commit Description
fix - 747548721d block creation of sensitive URI attributes from ICU messages

Breaking Changes

core

  • Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

    (cherry picked from commit 03da204b6daa5e4583e0d0968c2107390bbd8235)

Changelog

Sourced from @​angular/compiler's changelog.

19.2.20 (2026-03-12)

compiler

Commit Type Description
5be912eb55 fix disallow translations of iframe src

core

Commit Type Description
b89b0a83a4 fix sanitize translated attribute bindings with interpolations
621c7071ad fix sanitize translated form attributes

20.3.18 (2026-03-12)

compiler

Commit Type Description
02fbf08890 fix disallow translations of iframe src

core

Commit Type Description
72126f9a08 fix sanitize translated attribute bindings with interpolations
626bc8bc20 fix sanitize translated form attributes

22.0.0-next.3 (2026-03-12)

compiler

Commit Type Description
78dea55351 fix disallow translations of iframe src

core

Commit Type Description
999c14eaab fix reverts "feat(core): add support for nested animations"
de0eb4c656 fix sanitize translated form attributes

21.2.4 (2026-03-12)

compiler

Commit Type Description
ed2d324f9c fix disallow translations of iframe src

core

Commit Type Description

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 14, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/pupil-spa/angular/compiler-19.2.20 branch from e2d297a to 0f4ee2a Compare March 18, 2026 14:30
Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 19.2.18 to 19.2.20.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v19.2.20/packages/compiler)

---
updated-dependencies:
- dependency-name: "@angular/compiler"
  dependency-version: 19.2.20
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/pupil-spa/angular/compiler-19.2.20 branch from 0f4ee2a to 9759339 Compare April 3, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants