Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Bump @angular/compiler from 20.0.2 to 20.3.15#293

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
dependabot wants to merge1 commit intomaster
base:master
Choose a base branch
Loading
fromdependabot/npm_and_yarn/angular/compiler-20.3.15

Conversation

@dependabot
Copy link
Contributor

@dependabotdependabotbot commented on behalf ofgithubDec 2, 2025

Bumps@angular/compiler from 20.0.2 to 20.3.15.

Release notes

Sourced from@​angular/compiler's releases.

20.3.15

compiler

CommitDescription
fix - d1ca8ae043prevent XSS via SVG animationattributeName and MathML/SVG URLs

20.3.14

http

CommitDescription
fix - 0276479e7dprevent XSRF token leakage to protocol-relative URLs

20.3.13

No release notes provided.

20.3.12

No release notes provided.

20.3.11

common

CommitDescription
fix - 5047849a4aremove placeholder image listeners once view is removed

compiler

CommitDescription
fix - f9d0818087support arbitrary nesting in :host-context()
fix - 106b9040dfsupport commas in :host() argument
fix - 9419ea348asupport complex selectors in :nth-child()
fix - 036c5d2a07support one additional level of nesting in :host()

core

CommitDescription
fix - dcdd1bcdbbskip leave animations on view swaps

20.3.10

compiler-cli

CommitDescription
fix - 840db59dc1make required inputs diagnostic less noisy

migrations

CommitDescription
fix - a45e6b2b66Prevent removal of templates referenced with preceding whitespace characters

20.3.9

No release notes provided.

20.3.8

common

... (truncated)

Changelog

Sourced from@​angular/compiler's changelog.

20.3.15 (2025-12-01)

compiler

CommitTypeDescription
d1ca8ae043fixprevent XSS via SVG animationattributeName and MathML/SVG URLs

19.2.17 (2025-12-01)

compiler

CommitTypeDescription
7c42e2ebebfixprevent XSS via SVG animationattributeName and MathML/SVG URLs

19.2.16 (2025-11-26)

http

CommitTypeDescription
05fe6686a9fixprevent XSRF token leakage to protocol-relative URLs

21.1.0-next.0 (2025-11-25)

platform-browser

CommitTypeDescription
ec9dc94ceefeataddcontext tocreateApplication
ab67988d2efeatresolve JIT resources increateApplication

router

CommitTypeDescription
a03c82564dfeatAdd scroll behavior controls on router navigation

... (truncated)

Commits
  • d1ca8ae fix(compiler): prevent XSS via SVG animationattributeName and MathML/SVG URLs
  • f689269 Revert "fix(compiler): support one additional level of nesting in :host()"
  • 7b2e6ca Revert "fix(compiler): support arbitrary nesting in :host-context()"
  • 6036eef Revert "fix(compiler): support commas in :host() argument"
  • a44658b Revert "fix(compiler): support complex selectors in :nth-child()"
  • 9419ea3 fix(compiler): support complex selectors in :nth-child()
  • 2531863 test(compiler): add test for :host:has(> .foo)
  • 106b904 fix(compiler): support commas in :host() argument
  • f9d0818 fix(compiler): support arbitrary nesting in :host-context()
  • b47054c Revert "fix(compiler): support commas in :host() argument"
  • Additional commits viewable incompare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from theSecurity Alerts page.

Bumps [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) from 20.0.2 to 20.3.15.- [Release notes](https://github.com/angular/angular/releases)- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)- [Commits](https://github.com/angular/angular/commits/20.3.15/packages/compiler)---updated-dependencies:- dependency-name: "@angular/compiler"  dependency-version: 20.3.15  dependency-type: direct:production...Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotbot added dependenciesPull requests that update a dependency file javascriptPull requests that update javascript code labelsDec 2, 2025
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant


[8]ページ先頭

©2009-2025 Movatter.jp