Bump the angular group with 14 updates by dependabot[bot] · Pull Request #5814 · DSpace/dspace-angular

dependabot · 2026-06-08T22:11:01Z

Bumps the angular group with 14 updates:

Package	From	To
@angular/animations	`20.3.21`	`20.3.23`
@angular/common	`20.3.21`	`20.3.23`
@angular/compiler	`20.3.21`	`20.3.23`
@angular/core	`20.3.21`	`20.3.23`
@angular/forms	`20.3.21`	`20.3.23`
@angular/localize	`20.3.21`	`20.3.23`
@angular/platform-browser	`20.3.21`	`20.3.23`
@angular/platform-browser-dynamic	`20.3.21`	`20.3.23`
@angular/platform-server	`20.3.21`	`20.3.23`
@angular/router	`20.3.21`	`20.3.23`
@angular/ssr	`20.3.26`	`20.3.27`
@angular-devkit/build-angular	`20.3.26`	`20.3.27`
@angular/compiler-cli	`20.3.21`	`20.3.23`
@ngtools/webpack	`20.3.26`	`20.3.27`

Updates @angular/animations from 20.3.21 to 20.3.23

Release notes

Sourced from @angular/animations's releases.

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

strip namespaced SVG script elements during template compilation (#68926)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68926)

reject script element as a dynamic component host (#68926)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

synchronize core sanitization schema with compiler (#68926)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/animations's changelog.

20.3.23 (2026-05-28)

compiler

Commit Type Description

d40acc6431 fix prevent namespaced SVG elements from being stripped

20.3.22 (2026-05-27)

common

Commit Type Description

3d135ce59b fix add upper bounds for digitsInfo

39a4b4cc8e fix sanitize placeholder

compiler

Commit Type Description

8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

6404edfe0a fix strip namespaced SVG script elements during template compilation (#68926)

core

Commit Type Description

e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#68926)

d86e4e7b2a fix reject script element as a dynamic component host (#68926)

af04936045 fix sanitize meta selectors

dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

909ef047b3 fix synchronize core sanitization schema with compiler (#68926)

http

Commit Type Description

de7b2a62e7 fix exclude withCredentials requests from transfer cache

4233188d8e fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

49a60f6045 fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

5fdfd8a998 fix preserve redirect policy on reconstructed asset requests

83b022f2d0 fix Preserves explicit 'credentials: omit' in asset requests

e617fa06eb fix Preserves HTTP cache mode in asset group requests

19.2.23 (2026-05-27)

common

... (truncated)

Commits

See full diff in compare view

Updates @angular/common from 20.3.21 to 20.3.23

Release notes

Sourced from @angular/common's releases.

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

strip namespaced SVG script elements during template compilation (#68926)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68926)

reject script element as a dynamic component host (#68926)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

synchronize core sanitization schema with compiler (#68926)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/common's changelog.

20.3.23 (2026-05-28)

compiler

Commit Type Description

d40acc6431 fix prevent namespaced SVG elements from being stripped

20.3.22 (2026-05-27)

common

Commit Type Description

3d135ce59b fix add upper bounds for digitsInfo

39a4b4cc8e fix sanitize placeholder

compiler

Commit Type Description

8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

6404edfe0a fix strip namespaced SVG script elements during template compilation (#68926)

core

Commit Type Description

e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#68926)

d86e4e7b2a fix reject script element as a dynamic component host (#68926)

af04936045 fix sanitize meta selectors

dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

909ef047b3 fix synchronize core sanitization schema with compiler (#68926)

http

Commit Type Description

de7b2a62e7 fix exclude withCredentials requests from transfer cache

4233188d8e fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

49a60f6045 fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

5fdfd8a998 fix preserve redirect policy on reconstructed asset requests

83b022f2d0 fix Preserves explicit 'credentials: omit' in asset requests

e617fa06eb fix Preserves HTTP cache mode in asset group requests

19.2.23 (2026-05-27)

common

... (truncated)

Commits

3d135ce fix(common): add upper bounds for digitsInfo
39a4b4c fix(common): sanitize placeholder
de7b2a6 fix(http): exclude withCredentials requests from transfer cache
4233188 fix(http): skip TransferCache for cookie-bearing requests by default
See full diff in compare view

Updates @angular/compiler from 20.3.21 to 20.3.23

Release notes

Sourced from @angular/compiler's releases.

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

strip namespaced SVG script elements during template compilation (#68926)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68926)

reject script element as a dynamic component host (#68926)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

synchronize core sanitization schema with compiler (#68926)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/compiler's changelog.

20.3.23 (2026-05-28)

compiler

Commit Type Description

d40acc6431 fix prevent namespaced SVG elements from being stripped

20.3.22 (2026-05-27)

common

Commit Type Description

3d135ce59b fix add upper bounds for digitsInfo

39a4b4cc8e fix sanitize placeholder

compiler

Commit Type Description

8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

6404edfe0a fix strip namespaced SVG script elements during template compilation (#68926)

core

Commit Type Description

e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#68926)

d86e4e7b2a fix reject script element as a dynamic component host (#68926)

af04936045 fix sanitize meta selectors

dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

909ef047b3 fix synchronize core sanitization schema with compiler (#68926)

http

Commit Type Description

de7b2a62e7 fix exclude withCredentials requests from transfer cache

4233188d8e fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

49a60f6045 fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

5fdfd8a998 fix preserve redirect policy on reconstructed asset requests

83b022f2d0 fix Preserves explicit 'credentials: omit' in asset requests

e617fa06eb fix Preserves HTTP cache mode in asset group requests

19.2.23 (2026-05-27)

common

... (truncated)

Commits

d40acc6 fix(compiler): prevent namespaced SVG <style> elements from being stripped
7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
823b37f test(compiler): remove obsolete schema_extractor import (#68926)
e345a58 fix(core): normalize tag names in runtime i18n attribute security context loo...
8f35b18 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
64a89e9 fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
6404edf fix(compiler): strip namespaced SVG script elements during template compilati...
dc631ef fix(core): support prefix-insensitive DOM schema lookups and compile-time i18...
3b66843 refactor(core): align namespaced attribute validation and security schema con...
See full diff in compare view

Updates @angular/core from 20.3.21 to 20.3.23

Release notes

Sourced from @angular/core's releases.

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

strip namespaced SVG script elements during template compilation (#68926)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68926)

reject script element as a dynamic component host (#68926)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

synchronize core sanitization schema with compiler (#68926)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/core's changelog.

20.3.23 (2026-05-28)

compiler

Commit Type Description

d40acc6431 fix prevent namespaced SVG elements from being stripped

20.3.22 (2026-05-27)

common

Commit Type Description

3d135ce59b fix add upper bounds for digitsInfo

39a4b4cc8e fix sanitize placeholder

compiler

Commit Type Description

8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

6404edfe0a fix strip namespaced SVG script elements during template compilation (#68926)

core

Commit Type Description

e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#68926)

d86e4e7b2a fix reject script element as a dynamic component host (#68926)

af04936045 fix sanitize meta selectors

dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

909ef047b3 fix synchronize core sanitization schema with compiler (#68926)

http

Commit Type Description

de7b2a62e7 fix exclude withCredentials requests from transfer cache

4233188d8e fix skip TransferCache for cookie-bearing requests by default

platform-server

Commit Type Description

49a60f6045 fix secure location and document initialization against SSRF and path hijack

service-worker

Commit Type Description

5fdfd8a998 fix preserve redirect policy on reconstructed asset requests

83b022f2d0 fix Preserves explicit 'credentials: omit' in asset requests

e617fa06eb fix Preserves HTTP cache mode in asset group requests

19.2.23 (2026-05-27)

common

... (truncated)

Commits

7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
6595409 test(core): update golden symbols and host bindings sanitization spec (#68926)
d86e4e7 fix(core): reject script element as a dynamic component host (#68926)
b8f1f72 test(core): remove obsolete blockquote cite host binding tests (#68926)
36200bd test(core): update spec files to match 20.3.x limits and actual contexts (#68...
81e70d3 refactor(core): resolve merge conflicts in sanitization.ts (#68926)
909ef04 fix(core): synchronize core sanitization schema with compiler (#68926)
e345a58 fix(core): normalize tag names in runtime i18n attribute security context loo...
8f35b18 fix(compiler): normalize tag names with custom namespaces in DomElementSchema...
64a89e9 fix(compiler): sanitize dynamic href and xlink:href bindings on SVG a element...
Additional commits viewable in compare view

Updates @angular/forms from 20.3.21 to 20.3.23

Release notes

Sourced from @angular/forms's releases.

20.3.23

compiler

Commit Description

prevent namespaced SVG elements from being stripped

20.3.22

common

Commit Description

add upper bounds for digitsInfo

sanitize placeholder

compiler

Commit Description

normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

strip namespaced SVG script elements during template compilation (#68926)

core

Commit Description

normalize tag names in runtime i18n attribute security context lookup (#68926)

reject script element as a dynamic component host (#68926)

sanitize meta selectors

support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

synchronize core sanitization schema with compiler (#68926)

http

Commit Description

exclude withCredentials requests from transfer cache

skip TransferCache for cookie-bearing requests by default

platform-server

Commit Description

secure location and document initialization against SSRF and path hijack

service-worker

Commit Description

preserve redirect policy on reconstructed asset requests

Preserves explicit 'credentials: omit' in asset requests

Preserves HTTP cache mode in asset group requests

Changelog

Sourced from @angular/forms's changelog.

20.3.23 (2026-05-28)

compiler

Commit Type Description

d40acc6431 fix prevent namespaced SVG elements from being stripped

20.3.22 (2026-05-27)

common

Commit Type Description

3d135ce59b fix add upper bounds for digitsInfo

39a4b4cc8e fix sanitize placeholder

compiler

Commit Type Description

8f35b182b1 fix normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)

64a89e917a fix sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)

6404edfe0a fix strip namespaced SVG script elements during template compilation (#68926)

core

Commit Type Description

e345a58069 fix normalize tag names in runtime i18n attribute security context lookup (#68926)

d86e4e7b2a fix reject script element as a dynamic component host (#68926)

af04936045 fix sanitize meta selectors

dc631efa96 fix support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)

909ef047b3 fix synchronize core sanitization schema with compiler (#68926)

http
...
Description has been truncated

Commit

Bumps the angular group with 14 updates: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `20.3.21` | `20.3.23` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `20.3.21` | `20.3.23` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `20.3.21` | `20.3.23` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `20.3.21` | `20.3.23` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `20.3.21` | `20.3.23` | | [@angular/localize](https://github.com/angular/angular) | `20.3.21` | `20.3.23` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `20.3.21` | `20.3.23` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `20.3.21` | `20.3.23` | | [@angular/platform-server](https://github.com/angular/angular/tree/HEAD/packages/platform-server) | `20.3.21` | `20.3.23` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `20.3.21` | `20.3.23` | | [@angular/ssr](https://github.com/angular/angular-cli) | `20.3.26` | `20.3.27` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `20.3.26` | `20.3.27` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `20.3.21` | `20.3.23` | | [@ngtools/webpack](https://github.com/angular/angular-cli) | `20.3.26` | `20.3.27` | Updates `@angular/animations` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/animations) Updates `@angular/common` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/common) Updates `@angular/compiler` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/compiler) Updates `@angular/core` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/core) Updates `@angular/forms` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/forms) Updates `@angular/localize` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](angular/angular@v20.3.21...v20.3.23) Updates `@angular/platform-browser` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/platform-browser-dynamic) Updates `@angular/platform-server` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/platform-server) Updates `@angular/router` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/router) Updates `@angular/ssr` from 20.3.26 to 20.3.27 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v20.3.26...v20.3.27) Updates `@angular-devkit/build-angular` from 20.3.26 to 20.3.27 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v20.3.26...v20.3.27) Updates `@angular/compiler-cli` from 20.3.21 to 20.3.23 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v20.3.23/packages/compiler-cli) Updates `@ngtools/webpack` from 20.3.26 to 20.3.27 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v20.3.26...v20.3.27) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/common" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/core" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/forms" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/localize" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/platform-server" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/router" dependency-version: 20.3.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/ssr" dependency-version: 20.3.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular-devkit/build-angular" dependency-version: 20.3.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@angular/compiler-cli" dependency-version: 20.3.23 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular - dependency-name: "@ngtools/webpack" dependency-version: 20.3.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: angular ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the angular group with 14 updates#5814

Bump the angular group with 14 updates#5814
dependabot[bot] wants to merge 1 commit into
dspace-10_xfrom
dependabot/npm_and_yarn/dspace-10_x/angular-e5c072b365

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)
	sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)
	strip namespaced SVG script elements during template compilation (#68926)

Commit	Description
	normalize tag names in runtime i18n attribute security context lookup (#68926)
	reject script element as a dynamic component host (#68926)
	sanitize meta selectors
	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)
	synchronize core sanitization schema with compiler (#68926)

Commit	Description
	exclude withCredentials requests from transfer cache
	skip TransferCache for cookie-bearing requests by default

Commit	Description
	preserve redirect policy on reconstructed asset requests
	Preserves explicit 'credentials: omit' in asset requests
	Preserves HTTP cache mode in asset group requests

Commit	Type	Description
3d135ce59b	fix	add upper bounds for digitsInfo
39a4b4cc8e	fix	sanitize placeholder

Commit	Type	Description
8f35b182b1	fix	normalize tag names with custom namespaces in DomElementSchemaRegistry (#68926)
64a89e917a	fix	sanitize dynamic href and xlink:href bindings on SVG a elements (#68926)
6404edfe0a	fix	strip namespaced SVG script elements during template compilation (#68926)

Commit	Type	Description
e345a58069	fix	normalize tag names in runtime i18n attribute security context lookup (#68926)
d86e4e7b2a	fix	reject script element as a dynamic component host (#68926)
af04936045	fix	sanitize meta selectors
dc631efa96	fix	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation (#68926)
909ef047b3	fix	synchronize core sanitization schema with compiler (#68926)

Commit	Type	Description
de7b2a62e7	fix	exclude withCredentials requests from transfer cache
4233188d8e	fix	skip TransferCache for cookie-bearing requests by default

Commit	Type	Description
5fdfd8a998	fix	preserve redirect policy on reconstructed asset requests
83b022f2d0	fix	Preserves explicit 'credentials: omit' in asset requests
e617fa06eb	fix	Preserves HTTP cache mode in asset group requests

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

20.3.23

compiler

20.3.22

common

compiler

core

http

platform-server

service-worker

20.3.23 (2026-05-28)

compiler

20.3.22 (2026-05-27)

common

compiler

core

http

platform-server

service-worker

19.2.23 (2026-05-27)

common

20.3.23

compiler

20.3.22

common

compiler

core

http

platform-server

service-worker

20.3.23 (2026-05-28)

compiler

20.3.22 (2026-05-27)

common

compiler

core

http

platform-server

service-worker

19.2.23 (2026-05-27)

common

20.3.23

compiler

20.3.22

common

compiler

core

http

platform-server

service-worker

20.3.23 (2026-05-28)

compiler

20.3.22 (2026-05-27)

common

compiler

core

http

platform-server

service-worker

19.2.23 (2026-05-27)

common

20.3.23

compiler

20.3.22

common

compiler

core

http

platform-server

service-worker

20.3.23 (2026-05-28)

compiler

20.3.22 (2026-05-27)

common

compiler

core

http

platform-server

service-worker