Angular Robot
b53fa3cdaa
build: lock file maintenance
...
See associated pull request for more information.
2026-05-19 13:22:40 -07:00
Alan Agius
49ccb5154b
build: update pnpm to v11.1.2
...
See associated pull request for more information.
Closes #68773 as a pr takeover
2026-05-18 13:24:31 -07:00
Angular Robot
2864fed214
build: update all non-major dependencies
...
DevInfra / assistant_to_the_branch_manager (push) Has been cancelled
See associated pull request for more information.
2026-05-15 11:38:00 -07:00
Angular Robot
1a7f00f7c0
build: update cross-repo angular dependencies to v22.0.0-rc.0
...
See associated pull request for more information.
2026-05-15 10:40:32 -07:00
Angular Robot
642fd43ea6
build: update pnpm to v11.1.1
...
DevInfra / assistant_to_the_branch_manager (push) Waiting to run
CI (push) / lint (push) Waiting to run
CI (push) / devtools (push) Waiting to run
CI (push) / test (push) Waiting to run
CI (push) / integration-tests (push) Waiting to run
CI (push) / adev (push) Waiting to run
CI (push) / vscode-ng-language-service (push) Waiting to run
CI (push) / publish-snapshots (push) Waiting to run
CI (push) / zone-js (push) Waiting to run
CI (push) / adev-deploy (push) Blocked by required conditions
Update ADEV Cross Repo Docs / Update Cross Repo ADEV Docs (push) Waiting to run
OpenSSF Scorecard / Scorecards analysis (push) Waiting to run
Performance Tracking / list (push) Waiting to run
Performance Tracking / workflow (push) Blocked by required conditions
See associated pull request for more information.
2026-05-12 21:39:31 -07:00
Angular Robot
f247ea417a
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-05-12 21:38:32 -07:00
Angular Robot
66b9259401
build: lock file maintenance
...
See associated pull request for more information.
2026-05-12 11:42:31 -07:00
Alan Agius
e90423f5f7
build: disable strict release age checks in pnpm workspaces
...
Updates all pnpm-workspace.yaml configurations across the repository to set minimumReleaseAgeStrict: false. This resolves dependency installation failures caused by missing time field metadata in the npm registry for certain packages such as @babel/helper-globals. A TODO comment is also added to each configuration file to track future investigation of this registry metadata issue.
2026-05-12 10:43:00 -07:00
Angular Robot
7acac39ada
build: update pnpm to v11.1.0
...
See associated pull request for more information.
Closes #68687 as a pr takeover
2026-05-12 08:49:44 -07:00
Angular Robot
90c4223aa9
build: update pnpm to v11
...
DevInfra / assistant_to_the_branch_manager (push) Waiting to run
See associated pull request for more information.
2026-05-11 12:43:55 -07:00
Angular Robot
3ac11a5e02
build: update pnpm to v10.33.4
...
See associated pull request for more information.
2026-05-07 16:40:35 -06:00
Alan Agius
60552a73e8
fix(platform-server): add allowedHosts option to renderModule and renderApplication
...
In server-side rendering (SSR) setups, passing request URLs directly to the lower-level rendering APIs `renderModule` or `renderApplication` can expose applications to Server-Side Request Forgery (SSRF) or Host Header Injection attacks via absolute-form request URLs.
To mitigate these vulnerabilities at the framework layer, this commit introduces the `allowedHosts` option to `PlatformConfig` (supporting exact hostnames, wildcards like `*.example.com`, or `*` to allow all).
During platform initialization inside `createServerPlatform`, the hostname of the request `url` is validated against the `allowedHosts` list. If the hostname is not authorized, bootstrap immediately throws a host validation error, preventing unauthorized rendering and silent SSRF bypasses.
Closes #68436
2026-05-07 16:30:03 -06:00
Angular Robot
fc526331e3
build: lock file maintenance
...
See associated pull request for more information.
2026-05-05 09:35:19 -07:00
Angular Robot
4f048e7de3
build: update dependency typescript to v6.0.3
...
See associated pull request for more information.
2026-05-04 13:05:58 -07:00
Angular Robot
9dc4e44eea
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-04-30 15:52:21 -07:00
Angular Robot
32d768f69c
build: lock file maintenance
...
See associated pull request for more information.
2026-04-28 10:25:45 -07:00
Angular Robot
f9c1f979d9
build: update pnpm to v10.33.2
...
See associated pull request for more information.
2026-04-24 10:10:56 -07:00
Angular Robot
218e2d0240
build: update cross-repo angular dependencies to v22.0.0-next.6
...
See associated pull request for more information.
2026-04-23 14:13:04 -07:00
Angular Robot
09b9a62a25
build: lock file maintenance
...
See associated pull request for more information.
2026-04-21 11:52:07 -07:00
Angular Robot
56ff89c92d
build: update all non-major dependencies
...
See associated pull request for more information.
2026-04-17 14:26:35 -07:00
Angular Robot
8b4581d1bb
build: lock file maintenance
...
See associated pull request for more information.
2026-04-15 10:49:13 -04:00
Angular Robot
8633f15613
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-04-09 14:13:51 +03:00
Angular Robot
2ff9db30e0
build: lock file maintenance
...
See associated pull request for more information.
2026-04-07 10:48:02 -07:00
Angular Robot
436c5df488
build: update cross-repo angular dependencies to v22.0.0-next.4
...
See associated pull request for more information.
2026-04-01 18:31:00 +02:00
Angular Robot
277f9adb74
build: lock file maintenance
...
See associated pull request for more information.
2026-03-31 13:41:22 +02:00
Angular Robot
c9502999cf
build: update pnpm to v10.33.0
...
See associated pull request for more information.
2026-03-30 12:45:23 +02:00
Angular Robot
34e1d49b75
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-27 14:01:21 +01:00
Kristiyan Kostadinov
9ee4f83705
build: update to TypeScript 6 stable
...
Updates the repo to the stable version of TypeScript 6.
2026-03-25 12:57:49 -07:00
Matthieu Riegler
eae8f7e30b
feat(core): Set default Component changeDetection strategy to OnPush
...
The default change detection strategy is now OnPush.
BREAKING CHANGE: Component with undefined `changeDetection` property are now `OnPush` by default. Specify `changeDetection: ChangeDetectionStrategy.Eager` to keep the previous behavior.
2026-03-24 16:25:02 -07:00
Angular Robot
1533242577
build: lock file maintenance
...
See associated pull request for more information.
2026-03-24 15:08:28 -07:00
Angular Robot
275a436a33
build: lock file maintenance
...
See associated pull request for more information.
2026-03-20 15:11:24 -07:00
Angular Robot
c9e6263e0e
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-19 15:04:54 -07:00
Angular Robot
ada150c693
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-13 16:26:41 -06:00
Angular Robot
ed54855f5c
build: update pnpm to v10.32.1
...
See associated pull request for more information.
2026-03-13 13:09:26 -06:00
Angular Robot
4c532bdfb4
build: lock file maintenance
...
See associated pull request for more information.
2026-03-11 10:08:58 -07:00
Angular Robot
563eff0f49
build: update pnpm to v10.32.0
...
See associated pull request for more information.
2026-03-11 09:57:53 -07:00
Angular Robot
e121e25567
build: update pnpm to v10.31.0
...
See associated pull request for more information.
2026-03-09 11:18:08 -07:00
Angular Robot
9fe820d335
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-03-05 11:43:25 -08:00
Angular Robot
f390e2d6a5
build: lock file maintenance
...
See associated pull request for more information.
2026-03-03 09:08:23 -08:00
Angular Robot
35175b0a8a
build: update pnpm to v10.30.3
...
See associated pull request for more information.
2026-03-02 08:38:47 -08:00
Angular Robot
b68228e89d
build: lock file maintenance
...
See associated pull request for more information.
2026-02-25 09:13:10 -08:00
Alan Agius
6d07890d63
build: update all non-major dependencies
...
See associated pull request for more information.
Closes #67035 as a pr takeover
2026-02-25 08:31:32 -08:00
Angular Robot
6bfec96d41
build: update pnpm to v10.30.2
...
See associated pull request for more information.
2026-02-25 07:54:24 -08:00
Angular Robot
8f5214e944
build: update cross-repo angular dependencies
...
See associated pull request for more information.
2026-02-24 08:59:58 -08:00
Angular Robot
7ac52d8d9b
build: update cross-repo angular dependencies to v21.2.0-rc.1
...
See associated pull request for more information.
2026-02-23 13:38:23 -08:00
Angular Robot
9a3f5cbacc
build: update pnpm to v10.30.1
...
See associated pull request for more information.
2026-02-23 09:12:23 -08:00
Matthieu Riegler
d501506aa6
ci: add zone.js to minimumReleaseAgeExclude
...
This is a package we control the release of.
2026-02-19 12:41:19 -08:00
Angular Robot
1d761338b9
build: update cross-repo angular dependencies to v21.2.0-rc.0
...
See associated pull request for more information.
2026-02-19 08:53:49 -08:00
Angular Robot
22a209055c
build: update pnpm to v10.30.0
...
See associated pull request for more information.
2026-02-18 09:07:03 -08:00
Angular Robot
084f7dc08d
build: update cross-repo angular dependencies
...
See associated pull request for more information.
Closes #66795 as a pr takeover
2026-02-17 12:40:20 -08:00