Bump the angular group across 1 directory with 15 updates #5010

dependabot · 2026-01-20T18:06:54Z

Bumps the angular group with 11 updates in the / directory:

Package	From	To
@angular/animations	`20.3.14`	`20.3.16`
@angular/common	`20.3.14`	`20.3.16`
@angular/compiler	`20.3.14`	`20.3.16`
@angular/core	`20.3.14`	`20.3.16`
@angular/forms	`20.3.14`	`20.3.16`
@angular/localize	`20.3.14`	`20.3.16`
@angular/platform-browser	`20.3.14`	`20.3.16`
@angular/platform-browser-dynamic	`20.3.14`	`20.3.16`
@angular/platform-server	`20.3.14`	`20.3.16`
@angular/router	`20.3.14`	`20.3.16`
@angular/cli	`20.3.12`	`20.3.14`

Updates @angular/animations from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/animations's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/animations's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/common from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/common's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/common's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/compiler from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/compiler's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/compiler's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

c2c2b4a fix(core): sanitize sensitive attributes on SVG script elements
d1ca8ae fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
See full diff in compare view

Updates @angular/core from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/core's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/core's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

c2c2b4a fix(core): sanitize sensitive attributes on SVG script elements
d1ca8ae fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
See full diff in compare view

Updates @angular/forms from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/forms's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/forms's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/localize from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/localize's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/localize's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

f76d891 release: cut the v20.3.16 release
c2c2b4a fix(core): sanitize sensitive attributes on SVG script elements
4755bbd release: cut the v20.3.15 release
d1ca8ae fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
See full diff in compare view

Updates @angular/platform-browser from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/platform-browser's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/platform-browser's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/platform-browser-dynamic from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/platform-browser-dynamic's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/platform-browser-dynamic's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/platform-server from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/platform-server's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/platform-server's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

f9c29572d2 fix sanitize sensitive attributes on SVG script elements

forms

Commit Type Description

e3fba182f9 feat add [formField] directive

561772b152 fix allow custom controls to require dirty input

f0fb1d8581 fix allow custom controls to require hidden input

ec110f170b fix allow custom controls to require pending input

ae1dc16bb0 fix clean up abort listener after timeout

9748b0d5da fix support custom controls with non signal-based models

6bd22df987 fix Support readonly arrays in signal forms

router

| Commit | Type | Description |

... (truncated)

Commits

See full diff in compare view

Updates @angular/router from 20.3.14 to 20.3.16

Release notes

Sourced from @angular/router's releases.

20.3.16

core

Commit Description

sanitize sensitive attributes on SVG script elements

20.3.15

compiler

Commit Description

prevent XSS via SVG animation attributeName and MathML/SVG URLs

Changelog

Sourced from @angular/router's changelog.

20.3.16 (2026-01-07)

core

Commit Type Description

c2c2b4aaa8 fix sanitize sensitive attributes on SVG script elements

19.2.18 (2026-01-07)

core

Commit Type Description

26cdc53d9c fix sanitize sensitive attributes on SVG script elements

21.0.7 (2026-01-07)

compiler

Commit Type Description

8e808740c9 fix better types for a few expression AST nodes

63b1cdcf70 fix produce accurate span for typeof and void expressions

3c3ae0cb64 fix provide location information for literal map keys

523dbaf1c3 fix stop ThisReceiver inheritance from ImplicitReceiver

compiler-cli

Commit Type Description

4d9c4567ed fix ensure component import diagnostics are reported within the imports expression

cd405685af fix fix up spelling of diagnostic

778460fcca fix support qualified names in typeof type references

core

Commit Type Description

7c74674eb0 fix avoid leaking view data in animations

0edbee4550 fix explicitly cast signal node value to String

github-actions · 2026-02-09T22:48:06Z

Hi @dependabot,
Conflicts have been detected against the base branch.
Please resolve these conflicts as soon as you can. Thanks!

Bumps the angular group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `20.3.14` | `20.3.16` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `20.3.14` | `20.3.16` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `20.3.14` | `20.3.16` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.14` | `20.3.16` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `20.3.14` | `20.3.16` | | [@angular/localize](https://github.com/angular/angular) | `20.3.14` | `20.3.16` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `20.3.14` | `20.3.16` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `20.3.14` | `20.3.16` | | [@angular/platform-server](https://github.com/angular/angular/tree/HEAD/packages/platform-server) | `20.3.14` | `20.3.16` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `20.3.14` | `20.3.16` | | [@angular/cli](https://github.com/angular/angular-cli) | `20.3.12` | `20.3.14` | Updates `@angular/animations` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/animations) Updates `@angular/common` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/common) Updates `@angular/compiler` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/compiler) Updates `@angular/core` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/core) Updates `@angular/forms` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/forms) Updates `@angular/localize` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](angular/angular@20.3.14...v20.3.16) Updates `@angular/platform-browser` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/platform-browser-dynamic) Updates `@angular/platform-server` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/platform-server) Updates `@angular/router` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/router) Updates `@angular/ssr` from 20.3.13 to 20.3.14 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@20.3.13...v20.3.14) Updates `@angular-devkit/build-angular` from 20.3.13 to 20.3.14 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@20.3.13...v20.3.14) Updates `@angular/cli` from 20.3.12 to 20.3.14 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@20.3.12...v20.3.14) Updates `@angular/compiler-cli` from 20.3.14 to 20.3.16 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.16/packages/compiler-cli) Updates `@ngtools/webpack` from 20.3.13 to 20.3.14 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@20.3.13...v20.3.14) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/common" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/core" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/forms" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/localize" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-server" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/router" dependency-version: 20.3.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/ssr" dependency-version: 20.3.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular-devkit/build-angular" dependency-version: 20.3.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/cli" dependency-version: 20.3.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler-cli" dependency-version: 20.3.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@ngtools/webpack" dependency-version: 20.3.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular ... Signed-off-by: dependabot[bot] <support@github.com>

alanorth · 2026-02-10T07:06:57Z

I tested this by building and running the interface in dev mode. As this is a patch release and also passes all tests in CI, I think we are safe to merge it.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 20, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/angular-4b07ea1d46 branch from c817034 to 7fb847d Compare February 1, 2026 05:18

github-actions bot added the merge conflict label Feb 9, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/angular-4b07ea1d46 branch from 7fb847d to b12020f Compare February 9, 2026 22:52

github-actions bot removed the merge conflict label Feb 9, 2026

alanorth approved these changes Feb 10, 2026

View reviewed changes

alanorth merged commit 7b6b000 into main Feb 10, 2026
19 checks passed

alanorth deleted the dependabot/npm_and_yarn/angular-4b07ea1d46 branch February 10, 2026 07:07

alanorth added this to DSpace 10.0 Release Feb 10, 2026

alanorth added this to the 10.0 milestone Feb 10, 2026

github-project-automation bot moved this to ✅ Done in DSpace 10.0 Release Feb 10, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the angular group across 1 directory with 15 updates #5010

Bump the angular group across 1 directory with 15 updates #5010

Uh oh!

dependabot bot commented on behalf of github Jan 20, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 9, 2026

Uh oh!

alanorth commented Feb 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Commit	Type	Description
8e808740c9	fix	better types for a few expression AST nodes
63b1cdcf70	fix	produce accurate span for typeof and void expressions
3c3ae0cb64	fix	provide location information for literal map keys
523dbaf1c3	fix	stop ThisReceiver inheritance from ImplicitReceiver

Commit	Type	Description
4d9c4567ed	fix	ensure component import diagnostics are reported within the `imports` expression
cd405685af	fix	fix up spelling of diagnostic
778460fcca	fix	support qualified names in `typeof` type references

Commit	Type	Description
7c74674eb0	fix	avoid leaking view data in animations
0edbee4550	fix	explicitly cast signal node value to String
f9c29572d2	fix	sanitize sensitive attributes on SVG script elements

Commit	Type	Description
e3fba182f9	feat	add `[formField]` directive
561772b152	fix	allow custom controls to require `dirty` input
f0fb1d8581	fix	allow custom controls to require `hidden` input
ec110f170b	fix	allow custom controls to require `pending` input
ae1dc16bb0	fix	clean up abort listener after timeout
9748b0d5da	fix	support custom controls with non signal-based models
6bd22df987	fix	Support readonly arrays in signal forms

Bump the angular group across 1 directory with 15 updates #5010

Bump the angular group across 1 directory with 15 updates #5010

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

20.3.16

core

20.3.15

compiler

20.3.16 (2026-01-07)

core

19.2.18 (2026-01-07)

core

21.0.7 (2026-01-07)

compiler

compiler-cli

core

forms

router

20.3.16

core

20.3.15

compiler

20.3.16 (2026-01-07)

core

19.2.18 (2026-01-07)

core

21.0.7 (2026-01-07)

compiler

compiler-cli

core

forms

router

20.3.16

core

20.3.15

compiler

20.3.16 (2026-01-07)

core

19.2.18 (2026-01-07)

core

21.0.7 (2026-01-07)

compiler

compiler-cli

core

forms

router

20.3.16

core

20.3.15

compiler

20.3.16 (2026-01-07)

core

19.2.18 (2026-01-07)

core

21.0.7 (2026-01-07)

compiler

compiler-cli

core

forms

router

20.3.16

core

20.3.15

compiler

20.3.16 (2026-01-07)

core

19.2.18 (2026-01-07)

core

21.0.7 (2026-01-07)

compiler

compiler-cli

core

forms

router

20.3.16

core

20.3.15

compiler

dependabot bot commented on behalf of github Jan 20, 2026 •

edited

Loading