Skip to content

Bump @angular/common from 19.2.17 to 22.0.7 - #6416

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/common-22.0.7
Open

Bump @angular/common from 19.2.17 to 22.0.7#6416
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/common-22.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/common from 19.2.17 to 22.0.7.

Release notes

Sourced from @​angular/common's releases.

22.0.7

common

Commit Description
fix - 91e33aa1de avoid prototype lookups in date format caches

compiler

Commit Description
fix - 5b516e3a58 parsing of an empty template literal interpolation

compiler-cli

Commit Description
fix - c88ddde1c9 re-tag SourceFiles after TsCreateProgramDriver.updateFiles()

core

Commit Description
fix - 94d9591b51 allow static attributes for explicit input transforms
fix - c89f71a74c ignore processing instruction syntax in templates
fix - 70500e4067 preserve explicit input transform write type

forms

Commit Description
fix - 1b9964675f allow multiple async validators
fix - 64d6d47a0c preserve intermediate number values in signal forms
fix - 6cf7446afa prevent stale CVA writeback during debounce

http

Commit Description
fix - 20b7dc3023 prevent interceptor signal reads from leaking into calling reactive contexts

localize

Commit Description
fix - 22d5a091d1 build runtime translations map with a null prototype
fix - 8ce1fcf7fa use Object.hasOwn for placeholder lookup in translate

platform-browser

Commit Description
fix - b34bf0dce8 prevent ReDoS in SOURCEMAP_URL_REGEXP

22.0.6

compiler

Commit Description
fix - fd4ddcafed use regular optional chaining expression for safe function calls in TCBs

compiler-cli

Commit Description
fix - 534fe81a89 apply debugName transform to required signal queries
fix - 3b08201bfb detect uninvoked signals in bound expressions using ternary

forms/signals

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

22.0.7 (2026-07-15)

common

Commit Type Description
91e33aa1de fix avoid prototype lookups in date format caches

compiler

Commit Type Description
5b516e3a58 fix parsing of an empty template literal interpolation

compiler-cli

Commit Type Description
c88ddde1c9 fix re-tag SourceFiles after TsCreateProgramDriver.updateFiles()

core

Commit Type Description
94d9591b51 fix allow static attributes for explicit input transforms
c89f71a74c fix ignore processing instruction syntax in templates
70500e4067 fix preserve explicit input transform write type

forms

Commit Type Description
1b9964675f fix allow multiple async validators
64d6d47a0c fix preserve intermediate number values in signal forms
6cf7446afa fix prevent stale CVA writeback during debounce

http

Commit Type Description
20b7dc3023 fix prevent interceptor signal reads from leaking into calling reactive contexts

localize

Commit Type Description
22d5a091d1 fix build runtime translations map with a null prototype
8ce1fcf7fa fix use Object.hasOwn for placeholder lookup in translate

platform-browser

Commit Type Description
b34bf0dce8 fix prevent ReDoS in SOURCEMAP_URL_REGEXP

20.3.26 (2026-07-08)

compiler-cli

Commit Type Description
406aaa31e6 fix update babel dependencies to latest v7

core

Commit Type Description

... (truncated)

Commits
  • 91e33aa fix(common): avoid prototype lookups in date format caches
  • 20b7dc3 fix(http): prevent interceptor signal reads from leaking into calling reactiv...
  • 748faa4 docs(docs-infra): Add build-time validation for API and guide links using rou...
  • 8e6d7f7 fix(router): use safe hasOwnProperty when parsing query params
  • eb8fb9f fix(common): use Object.hasOwn in I18nSelectPipe to handle null-prototype and...
  • cd8f472 docs: add documentation for HttpClient response body size limit and related e...
  • 8cdc202 fix(http): prevent caching of responses with Set-Cookie headers
  • 6867f77 fix(http): distinguish repeated transfer cache params
  • 6c1f3e9 fix(common): skip transfer cache for uncacheable HTTP traffic (#69316)
  • 7ef1399 fix(http): skip transfer cache for fetch credentialed requests (#69316)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) from 19.2.17 to 22.0.7.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v22.0.7/packages/common)

---
updated-dependencies:
- dependency-name: "@angular/common"
  dependency-version: 22.0.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 25, 2026
@changeset-bot

changeset-bot Bot commented Jul 25, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 69022fd

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​angular/​common@​19.2.17 ⏵ 22.0.7100 +1100 +407997100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants