Skip to content

build(deps-dev): bump @angular/core from 20.3.20 to 20.3.28 - #1383

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/core-20.3.28
Open

build(deps-dev): bump @angular/core from 20.3.20 to 20.3.28#1383
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/angular/core-20.3.28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps @angular/core from 20.3.20 to 20.3.28.

Release notes

Sourced from @​angular/core's releases.

20.3.28

core

Commit Description
fix - 2f96c8020f sanitize host bindings on concrete hosts

http

Commit Description
fix - 969133d426 match header values exactly when deleting
fix - 29dd26bd71 preserve immutability of materialized clones
fix - e4c416c20a run root interceptors in the terminal request chain

20.3.27

compiler

Commit Description
fix - 5dbcd0ee16 disallow i18n event attributes
fix - db0d4a1a39 restrict possible event handler check to property names longer than 2 characters

http

Commit Description
fix - a64e2883e9 distinguish repeated transfer cache params

platform-server

Commit Description
fix - 6f80cca0b8 update domino to latest version

20.3.26

compiler-cli

Commit Description
fix - 406aaa31e6 update babel dependencies to latest v7

core

Commit Description
fix - 26831d0cbd avoid caching missing locale data
fix - 8eb7aea08b reject dynamic script host elements

http

Commit Description
fix - b963f61028 prevent caching of responses with Set-Cookie headers

service-worker

Commit Description
fix - 1fdf234168 preserve referrer in asset requests
fix - baa093ba68 preserve referrer policy in asset requests

20.3.25

common

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

20.3.28 (2026-08-13)

core

Commit Type Description
2f96c8020f fix sanitize host bindings on concrete hosts

http

Commit Type Description
969133d426 fix match header values exactly when deleting
29dd26bd71 fix preserve immutability of materialized clones
e4c416c20a fix run root interceptors in the terminal request chain

20.3.27 (2026-07-29)

compiler

Commit Type Description
5dbcd0ee16 fix disallow i18n event attributes
db0d4a1a39 fix restrict possible event handler check to property names longer than 2 characters

http

Commit Type Description
a64e2883e9 fix distinguish repeated transfer cache params

platform-server

Commit Type Description
6f80cca0b8 fix update domino to latest version

20.3.26 (2026-07-08)

compiler-cli

| Commit | Type | Description |

... (truncated)

Commits
  • 2f96c80 fix(core): sanitize host bindings on concrete hosts
  • db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
  • 5dbcd0e fix(compiler): disallow i18n event attributes
  • 8eb7aea fix(core): reject dynamic script host elements
  • 26831d0 fix(core): avoid caching missing locale data
  • ca48b47 fix(core): validate lowercase SVG animation attribute names (#69270)
  • 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
  • 49368c1 fix(platform-server): harden platform location origin validation during SSR
  • 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
  • 768a349 fix(core): harden TransferState restoration against DOM clobbering
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 20.3.20 to 20.3.28.
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/v20.3.28/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/v20.3.28/packages/core)

---
updated-dependencies:
- dependency-name: "@angular/core"
  dependency-version: 20.3.28
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 11, 2026
@vercel

vercel Bot commented Sep 11, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
ehtt-editor Ready Ready Preview Sep 11, 2026 11:14am UTC

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants