Commit graph

198 commits

Author SHA1 Message Date
Angular Robot
b53fa3cdaa build: lock file maintenance
See associated pull request for more information.
2026-05-19 13:22:40 -07:00
Alan Agius
49ccb5154b build: update pnpm to v11.1.2
See associated pull request for more information.

Closes #68773 as a pr takeover
2026-05-18 13:24:31 -07:00
Angular Robot
2864fed214 build: update all non-major dependencies
Some checks failed
DevInfra / assistant_to_the_branch_manager (push) Has been cancelled
See associated pull request for more information.
2026-05-15 11:38:00 -07:00
Angular Robot
1a7f00f7c0 build: update cross-repo angular dependencies to v22.0.0-rc.0
See associated pull request for more information.
2026-05-15 10:40:32 -07:00
Angular Robot
642fd43ea6 build: update pnpm to v11.1.1
Some checks are pending
DevInfra / assistant_to_the_branch_manager (push) Waiting to run
CI (push) / lint (push) Waiting to run
CI (push) / devtools (push) Waiting to run
CI (push) / test (push) Waiting to run
CI (push) / integration-tests (push) Waiting to run
CI (push) / adev (push) Waiting to run
CI (push) / vscode-ng-language-service (push) Waiting to run
CI (push) / publish-snapshots (push) Waiting to run
CI (push) / zone-js (push) Waiting to run
CI (push) / adev-deploy (push) Blocked by required conditions
Update ADEV Cross Repo Docs / Update Cross Repo ADEV Docs (push) Waiting to run
OpenSSF Scorecard / Scorecards analysis (push) Waiting to run
Performance Tracking / list (push) Waiting to run
Performance Tracking / workflow (push) Blocked by required conditions
See associated pull request for more information.
2026-05-12 21:39:31 -07:00
Angular Robot
f247ea417a build: update cross-repo angular dependencies
See associated pull request for more information.
2026-05-12 21:38:32 -07:00
Angular Robot
66b9259401 build: lock file maintenance
See associated pull request for more information.
2026-05-12 11:42:31 -07:00
Alan Agius
e90423f5f7 build: disable strict release age checks in pnpm workspaces
Updates all pnpm-workspace.yaml configurations across the repository to set minimumReleaseAgeStrict: false. This resolves dependency installation failures caused by missing time field metadata in the npm registry for certain packages such as @babel/helper-globals. A TODO comment is also added to each configuration file to track future investigation of this registry metadata issue.
2026-05-12 10:43:00 -07:00
Angular Robot
7acac39ada build: update pnpm to v11.1.0
See associated pull request for more information.

Closes #68687 as a pr takeover
2026-05-12 08:49:44 -07:00
Angular Robot
90c4223aa9 build: update pnpm to v11
Some checks are pending
DevInfra / assistant_to_the_branch_manager (push) Waiting to run
See associated pull request for more information.
2026-05-11 12:43:55 -07:00
Angular Robot
3ac11a5e02 build: update pnpm to v10.33.4
See associated pull request for more information.
2026-05-07 16:40:35 -06:00
Alan Agius
60552a73e8 fix(platform-server): add allowedHosts option to renderModule and renderApplication
In server-side rendering (SSR) setups, passing request URLs directly to the lower-level rendering APIs `renderModule` or `renderApplication` can expose applications to Server-Side Request Forgery (SSRF) or Host Header Injection attacks via absolute-form request URLs.
To mitigate these vulnerabilities at the framework layer, this commit introduces the `allowedHosts` option to `PlatformConfig` (supporting exact hostnames, wildcards like `*.example.com`, or `*` to allow all).

During platform initialization inside `createServerPlatform`, the hostname of the request `url` is validated against the `allowedHosts` list. If the hostname is not authorized, bootstrap immediately throws a host validation error, preventing unauthorized rendering and silent SSRF bypasses.

Closes #68436
2026-05-07 16:30:03 -06:00
Angular Robot
fc526331e3 build: lock file maintenance
See associated pull request for more information.
2026-05-05 09:35:19 -07:00
Angular Robot
4f048e7de3 build: update dependency typescript to v6.0.3
See associated pull request for more information.
2026-05-04 13:05:58 -07:00
Angular Robot
9dc4e44eea build: update cross-repo angular dependencies
See associated pull request for more information.
2026-04-30 15:52:21 -07:00
Angular Robot
32d768f69c build: lock file maintenance
See associated pull request for more information.
2026-04-28 10:25:45 -07:00
Angular Robot
f9c1f979d9 build: update pnpm to v10.33.2
See associated pull request for more information.
2026-04-24 10:10:56 -07:00
Angular Robot
218e2d0240 build: update cross-repo angular dependencies to v22.0.0-next.6
See associated pull request for more information.
2026-04-23 14:13:04 -07:00
Angular Robot
09b9a62a25 build: lock file maintenance
See associated pull request for more information.
2026-04-21 11:52:07 -07:00
Angular Robot
56ff89c92d build: update all non-major dependencies
See associated pull request for more information.
2026-04-17 14:26:35 -07:00
Angular Robot
8b4581d1bb build: lock file maintenance
See associated pull request for more information.
2026-04-15 10:49:13 -04:00
Angular Robot
8633f15613 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-04-09 14:13:51 +03:00
Angular Robot
2ff9db30e0 build: lock file maintenance
See associated pull request for more information.
2026-04-07 10:48:02 -07:00
Angular Robot
436c5df488 build: update cross-repo angular dependencies to v22.0.0-next.4
See associated pull request for more information.
2026-04-01 18:31:00 +02:00
Angular Robot
277f9adb74 build: lock file maintenance
See associated pull request for more information.
2026-03-31 13:41:22 +02:00
Angular Robot
c9502999cf build: update pnpm to v10.33.0
See associated pull request for more information.
2026-03-30 12:45:23 +02:00
Angular Robot
34e1d49b75 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-27 14:01:21 +01:00
Kristiyan Kostadinov
9ee4f83705 build: update to TypeScript 6 stable
Updates the repo to the stable version of TypeScript 6.
2026-03-25 12:57:49 -07:00
Matthieu Riegler
eae8f7e30b feat(core): Set default Component changeDetection strategy to OnPush
The default change detection strategy is now OnPush.

BREAKING CHANGE: Component with undefined `changeDetection` property are now `OnPush` by default. Specify `changeDetection: ChangeDetectionStrategy.Eager` to keep the previous behavior.
2026-03-24 16:25:02 -07:00
Angular Robot
1533242577 build: lock file maintenance
See associated pull request for more information.
2026-03-24 15:08:28 -07:00
Angular Robot
275a436a33 build: lock file maintenance
See associated pull request for more information.
2026-03-20 15:11:24 -07:00
Angular Robot
c9e6263e0e build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-19 15:04:54 -07:00
Angular Robot
ada150c693 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-13 16:26:41 -06:00
Angular Robot
ed54855f5c build: update pnpm to v10.32.1
See associated pull request for more information.
2026-03-13 13:09:26 -06:00
Angular Robot
4c532bdfb4 build: lock file maintenance
See associated pull request for more information.
2026-03-11 10:08:58 -07:00
Angular Robot
563eff0f49 build: update pnpm to v10.32.0
See associated pull request for more information.
2026-03-11 09:57:53 -07:00
Angular Robot
e121e25567 build: update pnpm to v10.31.0
See associated pull request for more information.
2026-03-09 11:18:08 -07:00
Angular Robot
9fe820d335 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-03-05 11:43:25 -08:00
Angular Robot
f390e2d6a5 build: lock file maintenance
See associated pull request for more information.
2026-03-03 09:08:23 -08:00
Angular Robot
35175b0a8a build: update pnpm to v10.30.3
See associated pull request for more information.
2026-03-02 08:38:47 -08:00
Angular Robot
b68228e89d build: lock file maintenance
See associated pull request for more information.
2026-02-25 09:13:10 -08:00
Alan Agius
6d07890d63 build: update all non-major dependencies
See associated pull request for more information.

Closes #67035 as a pr takeover
2026-02-25 08:31:32 -08:00
Angular Robot
6bfec96d41 build: update pnpm to v10.30.2
See associated pull request for more information.
2026-02-25 07:54:24 -08:00
Angular Robot
8f5214e944 build: update cross-repo angular dependencies
See associated pull request for more information.
2026-02-24 08:59:58 -08:00
Angular Robot
7ac52d8d9b build: update cross-repo angular dependencies to v21.2.0-rc.1
See associated pull request for more information.
2026-02-23 13:38:23 -08:00
Angular Robot
9a3f5cbacc build: update pnpm to v10.30.1
See associated pull request for more information.
2026-02-23 09:12:23 -08:00
Matthieu Riegler
d501506aa6 ci: add zone.js to minimumReleaseAgeExclude
This is a package we control the release of.
2026-02-19 12:41:19 -08:00
Angular Robot
1d761338b9 build: update cross-repo angular dependencies to v21.2.0-rc.0
See associated pull request for more information.
2026-02-19 08:53:49 -08:00
Angular Robot
22a209055c build: update pnpm to v10.30.0
See associated pull request for more information.
2026-02-18 09:07:03 -08:00
Angular Robot
084f7dc08d build: update cross-repo angular dependencies
See associated pull request for more information.

Closes #66795 as a pr takeover
2026-02-17 12:40:20 -08:00