Files
zitadel/console
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>Marco A.
349451b028 chore(deps): bump the console group across 1 directory with 31 updates (#12183)
Bumps the console group with 31 updates in the /console directory:

| Package | From | To |
| --- | --- | --- |
|
[@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations)
| `21.2.10` | `21.2.13` |
| [@angular/cdk](https://github.com/angular/components) | `21.2.8` |
`21.2.11` |
|
[@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common)
| `21.2.10` | `21.2.13` |
|
[@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler)
| `21.2.10` | `21.2.13` |
|
[@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core)
| `21.2.10` | `21.2.13` |
|
[@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms)
| `21.2.10` | `21.2.13` |
| [@angular/material](https://github.com/angular/components) | `21.2.8`
| `21.2.11` |
|
[@angular/material-moment-adapter](https://github.com/angular/components)
| `21.2.8` | `21.2.11` |
|
[@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser)
| `21.2.10` | `21.2.13` |
|
[@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic)
| `21.2.10` | `21.2.13` |
|
[@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router)
| `21.2.10` | `21.2.13` |
|
[@angular/service-worker](https://github.com/angular/angular/tree/HEAD/packages/service-worker)
| `21.2.10` | `21.2.13` |
|
[@tanstack/angular-query-experimental](https://github.com/TanStack/query/tree/HEAD/packages/angular-query-experimental)
| `5.100.5` | `5.100.11` |
|
[libphonenumber-js](https://gitlab.com/catamphetamine/libphonenumber-js)
| `1.12.42` | `1.13.2` |
| [posthog-js](https://github.com/PostHog/posthog-js) | `1.372.3` |
`1.374.2` |
|
[zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js)
| `0.16.1` | `0.16.2` |
|
[@angular-eslint/eslint-plugin](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/eslint-plugin)
| `21.3.1` | `21.4.0` |
|
[@angular-eslint/eslint-plugin-template](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/eslint-plugin-template)
| `21.3.1` | `21.4.0` |
|
[@angular-eslint/template-parser](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/template-parser)
| `21.3.1` | `21.4.0` |
| [@angular/build](https://github.com/angular/angular-cli) | `21.2.8` |
`21.2.11` |
| [@angular/cli](https://github.com/angular/angular-cli) | `21.2.8` |
`21.2.11` |
|
[@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli)
| `21.2.10` | `21.2.13` |
|
[@angular/language-service](https://github.com/angular/angular/tree/HEAD/packages/language-service)
| `21.2.10` | `21.2.13` |
|
[@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss)
| `4.2.4` | `4.3.0` |
|
[@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node)
| `25.6.0` | `25.9.1` |
|
[@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin)
| `8.59.1` | `8.59.4` |
|
[@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser)
| `8.59.1` | `8.59.4` |
| [eslint](https://github.com/eslint/eslint) | `10.2.1` | `10.4.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.5.0` |
`17.6.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.12` | `8.5.15` |
|
[tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss)
| `4.2.4` | `4.3.0` |


Updates `@angular/animations` from 21.2.10 to 21.2.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/animations's
releases</a>.</em></p>
<blockquote>
<h2>21.2.13</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><img
src="https://img.shields.io/badge/1c6553e97d-fix-green" alt="fix -
1c6553e97d" /></a></td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215"><img
src="https://img.shields.io/badge/629905d537-fix-green" alt="fix -
629905d537" /></a></td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f"><img
src="https://img.shields.io/badge/0b7192f441-fix-green" alt="fix -
0b7192f441" /></a></td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<h2>21.2.12</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/fe13bb669d2bfab4713623d17b41c430aa0a61d8"><img
src="https://img.shields.io/badge/fe13bb669d-fix-green" alt="fix -
fe13bb669d" /></a></td>
<td>allow explicit read generic with signal input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/3430251fef93f6aec1fa9c7867e85df23f67c9a0"><img
src="https://img.shields.io/badge/3430251fef-fix-green" alt="fix -
3430251fef" /></a></td>
<td>i18n flags leaking on errors</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1aeebbe3048b5aa612dd0a5448de9883ed51e7e8"><img
src="https://img.shields.io/badge/1aeebbe304-fix-green" alt="fix -
1aeebbe304" /></a></td>
<td>respect ngSkipHydration on components with projectable nodes in
LContainers</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9e38ed7d5773a9193ba07afdba3f7a9f2fe02d18"><img
src="https://img.shields.io/badge/9e38ed7d57-fix-green" alt="fix -
9e38ed7d57" /></a></td>
<td>sanitizer typings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a05a9a71a5ab75042ec5560c01526de6e61e062"><img
src="https://img.shields.io/badge/7a05a9a71a-fix-green" alt="fix -
7a05a9a71a" /></a></td>
<td>validate security-sensitive attributes in i18n bindings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c37f6ca42f263353cb9563fa90d7b31d3c7837ca"><img
src="https://img.shields.io/badge/c37f6ca42f-fix-green" alt="fix -
c37f6ca42f" /></a></td>
<td>visit ng-let expression value in signal migration schematics</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/03ad53863bf3c368f0f02a4322d4141e8f70f674"><img
src="https://img.shields.io/badge/03ad53863b-fix-green" alt="fix -
03ad53863b" /></a></td>
<td>prohibit concurrent submits in signal forms</td>
</tr>
</tbody>
</table>
<h2>21.2.11</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/10ad3c06923453ae0ec06b06e664ce05900a4ff6"><img
src="https://img.shields.io/badge/10ad3c0692-fix-green" alt="fix -
10ad3c0692" /></a></td>
<td>prevent focus from scrollToAnchor</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f5d8a2c0b5e38d4debc4293945270cea4a9590d"><img
src="https://img.shields.io/badge/4f5d8a2c0b-fix-green" alt="fix -
4f5d8a2c0b" /></a></td>
<td>let declaration span not including end character</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a40e2cebc878965c3e21bfb61658f3f80cbd2ebf"><img
src="https://img.shields.io/badge/a40e2cebc8-fix-green" alt="fix -
a40e2cebc8" /></a></td>
<td>fix ordering of view queries metadata in JIT mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/885a1a1d9757adfa8766d9b369c848a277438c31"><img
src="https://img.shields.io/badge/885a1a1d97-fix-green" alt="fix -
885a1a1d97" /></a></td>
<td>guard against non-object events and avoid listener wrapper identity
mismatch</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a64aff9b59999077ea915486a7fa0b97a286659"><img
src="https://img.shields.io/badge/7a64aff9b5-fix-green" alt="fix -
7a64aff9b5" /></a></td>
<td>prevent event replay double-invocation when element hydrates before
app stability</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be1f80a253b8ee27ed7d8de2287d6895c4821909"><img
src="https://img.shields.io/badge/be1f80a253-fix-green" alt="fix -
be1f80a253" /></a></td>
<td>ensure origin has a trailing slash when parsing url</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/animations's
changelog</a>.</em></p>
<blockquote>
<h1>21.2.13 (2026-05-13)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947">1c6553e97d</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215">629905d537</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f">0b7192f441</a></td>
<td>fix</td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>19.2.22 (2026-05-12)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/83a640516f7b1fff4dfb0fd0ed8b19876bdb00c4">83a640516f</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings unconditionally
(<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/24a0103a9898b1547f5d1f57314e2bb6545a2c7a">24a0103a98</a></td>
<td>fix</td>
<td>validate security-sensitive attributes in i18n bindings (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8569db88758d189544b03ec4474fd5334ff29346">8569db8875</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/837a7102172502dd3d92793ec15b2d4e533a573d">837a710217</a></td>
<td>fix</td>
<td>ensure origin has a trailing slash when parsing url (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>20.3.21 (2026-05-12)</h1>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f584840e2e50f751397cf3fad5258e18e857427e">f584840e2e</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.0.0-next.12 (2026-05-08)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8ebae1de330729f945391283e25661aada11b4ed">8ebae1de33</a></td>
<td>fix</td>
<td>allow service with factory on abstract classes</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6f525245cd97a934b2b5ea888ee9d52c26c58cb5">6f525245cd</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0f2160c4105a53ef6488d2c799dda9c0959ce7dc">0f2160c410</a></td>
<td>fix</td>
<td>remove compiler import from safe optional chaining migration</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/angular/angular/commits/v21.2.13/packages/animations">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/cdk` from 21.2.8 to 21.2.11
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/components/releases">@​angular/cdk's
releases</a>.</em></p>
<blockquote>
<h2>21.2.11</h2>
<p>No user facing changes in this release</p>
<h2>21.2.10</h2>
<h3>aria</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/components/commit/48973661ec50649918e3dcafc096d340219135da"><img
src="https://img.shields.io/badge/48973661e-fix-green" alt="fix -
48973661e" /></a></td>
<td><strong>menu:</strong> do not set default aria-label (<a
href="https://redirect.github.com/angular/components/issues/33202">#33202</a>)</td>
</tr>
</tbody>
</table>
<h2>21.2.9</h2>
<h3>material</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/components/commit/51271c6194a9b55ee847c566a8960c9be5ec7cce"><img
src="https://img.shields.io/badge/51271c619-fix-green" alt="fix -
51271c619" /></a></td>
<td><strong>stepper:</strong> allow stepper to be labelled (<a
href="https://redirect.github.com/angular/components/issues/33137">#33137</a>)</td>
</tr>
</tbody>
</table>
<h3>cdk</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/components/commit/3a3852d45a4bbcfb23b46ca00e0eba1d70081ba3"><img
src="https://img.shields.io/badge/3a3852d45-fix-green" alt="fix -
3a3852d45" /></a></td>
<td><strong>tree:</strong> enter/space key on child node should not
toggle parent node expansion (<a
href="https://redirect.github.com/angular/components/issues/33125">#33125</a>)</td>
</tr>
</tbody>
</table>
<h3>aria</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/components/commit/bf14cc9d9fd349974cba853d4747b6859b3aae5b"><img
src="https://img.shields.io/badge/bf14cc9d9-fix-green" alt="fix -
bf14cc9d9" /></a></td>
<td><strong>menu:</strong> use computed for menu item patterns, with
trigger on visible (<a
href="https://redirect.github.com/angular/components/issues/33118">#33118</a>)</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/components/blob/main/CHANGELOG.md">@​angular/cdk's
changelog</a>.</em></p>
<blockquote>
<h1>21.2.11 &quot;crystal ball&quot; (2026-05-13)</h1>
<p>No user facing changes in this release</p>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.0.0-next.8 &quot;plastic-wallaby&quot; (2026-05-06)</h1>
<h2>Breaking Changes</h2>
<h3>aria</h3>
<ul>
<li>
<p>The legacy combobox and autocomplete implementations have been
removed. Use the new standalone combobox instead.</p>
<ul>
<li>feat(aria/combobox): promote simple-combobox to stable un-prefixed
combobox</li>
</ul>
<ul>
<li>Relocates public, private, and example directories to clean
<code>combobox</code> entry points.</li>
<li>Renames internal layout symbols, selectors, and uppercase tokens
(<code>SIMPLE_COMBOBOX_POPUP</code> -&gt;
<code>COMBOBOX_POPUP</code>).</li>
<li>Establishes full documentation extraction parity with the
<code>json_api</code> Bazel rule target.</li>
<li>Standardizes the accompanying toolbar component showcase into the
clean <code>aria-toolbar</code> path.</li>
<li>Re-routes dev-app navigation links and migrates public API golden
records.</li>
</ul>
</li>
<li>
<p><code>SimpleCombobox</code> has been promoted to
<code>Combobox</code>. All <code>simple-combobox</code> prefixed
symbols, selectors, and tokens have been renamed to use the
<code>combobox</code> prefix.</p>
<ul>
<li>refactor(aria/combobox): relocate and restructure autocomplete and
toolbar examples
Relocate the autocomplete examples to
<code>src/components-examples/aria/autocomplete</code> and toolbar
examples to <code>src/components-examples/aria/toolbar</code>.</li>
</ul>
<ul>
<li>Restore naming continuity with the historical codebase by stripping
redundant prefixes from example filenames and component selectors.</li>
<li>Sync dev-app preview routing layout paths and strict Bazel target
dependency links.</li>
</ul>
</li>
</ul>
<h3>cdk</h3>
<ul>
<li>
<ul>
<li><code>CDK_DESCRIBEDBY_HOST_ATTRIBUTE</code> has been removed.</li>
<li><code>CDK_DESCRIBEDBY_ID_PREFIX</code> has been removed.</li>
<li>The <code>injector</code> parameter of the
<code>ConfigurableFocusTrap</code> and <code>FocusTrap</code>
constructors is now required.</li>
<li>The boolean parameter of
<code>ConfigurableFocusTrapFactory.create</code> has been replaced with
a config object.</li>
<li><code>MESSAGES_CONTAINER_ID</code> has been removed.</li>
</ul>
</li>
<li>
<ul>
<li>The <code>event</code> parameter of <code>DropListRef.drop</code> is
now required.</li>
</ul>
</li>
<li>
<ul>
<li><code>ContextMenuTracker</code> has been renamed to
<code>MenuTracker</code>.</li>
</ul>
</li>
</ul>
<h3>material</h3>
<ul>
<li>
<ul>
<li><code>MatListOption.checkboxPosition</code> has been removed. use
<code>togglePosition</code> instead.</li>
<li><code>MatListOptionCheckboxPosition</code> has been renamed to
<code>MatListOptionTogglePosition</code>.</li>
</ul>
</li>
<li>
<ul>
<li><code>ArrowViewState</code> has been removed.</li>
<li><code>ArrowViewStateTransition</code> has been removed.</li>
</ul>
</li>
</ul>
<h3>google-maps</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/components/commit/b8201edeef62258c3d1e1ebeaf8ee14766918c22">b8201edee</a></td>
<td>fix</td>
<td>deprecate heatmap layer (<a
href="https://redirect.github.com/angular/components/pull/33208">#33208</a>)</td>
</tr>
</tbody>
</table>
<h3>material</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/components/commit/add8f16c01ad683b9e2ab9e1bf5ad3a984dd9921">add8f16c0</a></td>
<td>fix</td>
<td><strong>list:</strong> breaking changes for v22</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/components/commit/9d73c98b57d46454d51344bbd59055bc06dabc6b">9d73c98b5</a></td>
<td>fix</td>
<td><strong>menu:</strong> missing panelClass getter (<a
href="https://redirect.github.com/angular/components/pull/33191">#33191</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/components/commit/75718e4fbebce2a7f8aa30550a12d58a5a6f9b93">75718e4fb</a></td>
<td>fix</td>
<td><strong>sort:</strong> breaking changes for v22</td>
</tr>
</tbody>
</table>
<h3>cdk</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/components/commit/1238d1573e706cbf0a2cabcc97e59d28a9499ecb"><code>1238d15</code></a>
release: cut the v21.2.11 release</li>
<li><a
href="https://github.com/angular/components/commit/583da8a564dcb667cb8928e79d286eadee0a5013"><code>583da8a</code></a>
release: cut the v21.2.10 release</li>
<li><a
href="https://github.com/angular/components/commit/babfbb7430547d5f4558174aec1a07ce6c67a26f"><code>babfbb7</code></a>
build: update cross-repo angular dependencies (<a
href="https://redirect.github.com/angular/components/issues/33205">#33205</a>)</li>
<li><a
href="https://github.com/angular/components/commit/e08fdf2a6a120078b512043bf5804bc3c7f9716a"><code>e08fdf2</code></a>
build: fix failing test (<a
href="https://redirect.github.com/angular/components/issues/33212">#33212</a>)</li>
<li><a
href="https://github.com/angular/components/commit/09e89fa188f157c0892019a461459cd9a252a673"><code>09e89fa</code></a>
build: lock file maintenance (<a
href="https://redirect.github.com/angular/components/issues/33201">#33201</a>)</li>
<li><a
href="https://github.com/angular/components/commit/48973661ec50649918e3dcafc096d340219135da"><code>4897366</code></a>
fix(aria/menu): do not set default aria-label (<a
href="https://redirect.github.com/angular/components/issues/33202">#33202</a>)</li>
<li><a
href="https://github.com/angular/components/commit/a6c5b72562b9d46ea3c10a2ecb668e013b46a103"><code>a6c5b72</code></a>
build: update cross-repo angular dependencies (<a
href="https://redirect.github.com/angular/components/issues/33181">#33181</a>)</li>
<li><a
href="https://github.com/angular/components/commit/b7c34e306539716a1222468907ad4af5fb6b1aee"><code>b7c34e3</code></a>
build: update cross-repo angular dependencies (<a
href="https://redirect.github.com/angular/components/issues/33160">#33160</a>)</li>
<li><a
href="https://github.com/angular/components/commit/58e29cf1aa8265d6041350c716c5fbfa9e25b738"><code>58e29cf</code></a>
build: update dependency bazel_lib to v3.3.1 (<a
href="https://redirect.github.com/angular/components/issues/33177">#33177</a>)</li>
<li><a
href="https://github.com/angular/components/commit/e2f16ac34e93e69b1ef960ba70c517de799d05cc"><code>e2f16ac</code></a>
build: update pnpm to v10.33.2 (<a
href="https://redirect.github.com/angular/components/issues/33165">#33165</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/components/compare/v21.2.8...v21.2.11">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/common` from 21.2.10 to 21.2.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/common's
releases</a>.</em></p>
<blockquote>
<h2>21.2.13</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><img
src="https://img.shields.io/badge/1c6553e97d-fix-green" alt="fix -
1c6553e97d" /></a></td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215"><img
src="https://img.shields.io/badge/629905d537-fix-green" alt="fix -
629905d537" /></a></td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f"><img
src="https://img.shields.io/badge/0b7192f441-fix-green" alt="fix -
0b7192f441" /></a></td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<h2>21.2.12</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/fe13bb669d2bfab4713623d17b41c430aa0a61d8"><img
src="https://img.shields.io/badge/fe13bb669d-fix-green" alt="fix -
fe13bb669d" /></a></td>
<td>allow explicit read generic with signal input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/3430251fef93f6aec1fa9c7867e85df23f67c9a0"><img
src="https://img.shields.io/badge/3430251fef-fix-green" alt="fix -
3430251fef" /></a></td>
<td>i18n flags leaking on errors</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1aeebbe3048b5aa612dd0a5448de9883ed51e7e8"><img
src="https://img.shields.io/badge/1aeebbe304-fix-green" alt="fix -
1aeebbe304" /></a></td>
<td>respect ngSkipHydration on components with projectable nodes in
LContainers</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9e38ed7d5773a9193ba07afdba3f7a9f2fe02d18"><img
src="https://img.shields.io/badge/9e38ed7d57-fix-green" alt="fix -
9e38ed7d57" /></a></td>
<td>sanitizer typings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a05a9a71a5ab75042ec5560c01526de6e61e062"><img
src="https://img.shields.io/badge/7a05a9a71a-fix-green" alt="fix -
7a05a9a71a" /></a></td>
<td>validate security-sensitive attributes in i18n bindings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c37f6ca42f263353cb9563fa90d7b31d3c7837ca"><img
src="https://img.shields.io/badge/c37f6ca42f-fix-green" alt="fix -
c37f6ca42f" /></a></td>
<td>visit ng-let expression value in signal migration schematics</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/03ad53863bf3c368f0f02a4322d4141e8f70f674"><img
src="https://img.shields.io/badge/03ad53863b-fix-green" alt="fix -
03ad53863b" /></a></td>
<td>prohibit concurrent submits in signal forms</td>
</tr>
</tbody>
</table>
<h2>21.2.11</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/10ad3c06923453ae0ec06b06e664ce05900a4ff6"><img
src="https://img.shields.io/badge/10ad3c0692-fix-green" alt="fix -
10ad3c0692" /></a></td>
<td>prevent focus from scrollToAnchor</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f5d8a2c0b5e38d4debc4293945270cea4a9590d"><img
src="https://img.shields.io/badge/4f5d8a2c0b-fix-green" alt="fix -
4f5d8a2c0b" /></a></td>
<td>let declaration span not including end character</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a40e2cebc878965c3e21bfb61658f3f80cbd2ebf"><img
src="https://img.shields.io/badge/a40e2cebc8-fix-green" alt="fix -
a40e2cebc8" /></a></td>
<td>fix ordering of view queries metadata in JIT mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/885a1a1d9757adfa8766d9b369c848a277438c31"><img
src="https://img.shields.io/badge/885a1a1d97-fix-green" alt="fix -
885a1a1d97" /></a></td>
<td>guard against non-object events and avoid listener wrapper identity
mismatch</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a64aff9b59999077ea915486a7fa0b97a286659"><img
src="https://img.shields.io/badge/7a64aff9b5-fix-green" alt="fix -
7a64aff9b5" /></a></td>
<td>prevent event replay double-invocation when element hydrates before
app stability</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be1f80a253b8ee27ed7d8de2287d6895c4821909"><img
src="https://img.shields.io/badge/be1f80a253-fix-green" alt="fix -
be1f80a253" /></a></td>
<td>ensure origin has a trailing slash when parsing url</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/common's
changelog</a>.</em></p>
<blockquote>
<h1>21.2.13 (2026-05-13)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947">1c6553e97d</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215">629905d537</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f">0b7192f441</a></td>
<td>fix</td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>19.2.22 (2026-05-12)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/83a640516f7b1fff4dfb0fd0ed8b19876bdb00c4">83a640516f</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings unconditionally
(<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/24a0103a9898b1547f5d1f57314e2bb6545a2c7a">24a0103a98</a></td>
<td>fix</td>
<td>validate security-sensitive attributes in i18n bindings (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8569db88758d189544b03ec4474fd5334ff29346">8569db8875</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/837a7102172502dd3d92793ec15b2d4e533a573d">837a710217</a></td>
<td>fix</td>
<td>ensure origin has a trailing slash when parsing url (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>20.3.21 (2026-05-12)</h1>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f584840e2e50f751397cf3fad5258e18e857427e">f584840e2e</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.0.0-next.12 (2026-05-08)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8ebae1de330729f945391283e25661aada11b4ed">8ebae1de33</a></td>
<td>fix</td>
<td>allow service with factory on abstract classes</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6f525245cd97a934b2b5ea888ee9d52c26c58cb5">6f525245cd</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0f2160c4105a53ef6488d2c799dda9c0959ce7dc">0f2160c410</a></td>
<td>fix</td>
<td>remove compiler import from safe optional chaining migration</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/30cf85f71c52683016200ecf6d68b4418084ee6e"><code>30cf85f</code></a>
refactor(common): update deprecation message</li>
<li><a
href="https://github.com/angular/angular/commit/42d57c35781fb65fc4d44df59b6a85287664216a"><code>42d57c3</code></a>
refactor(common): fix viewport tests</li>
<li><a
href="https://github.com/angular/angular/commit/10ad3c06923453ae0ec06b06e664ce05900a4ff6"><code>10ad3c0</code></a>
fix(common): prevent focus from scrollToAnchor</li>
<li>See full diff in <a
href="https://github.com/angular/angular/commits/v21.2.13/packages/common">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/compiler` from 21.2.10 to 21.2.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/compiler's
releases</a>.</em></p>
<blockquote>
<h2>21.2.13</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><img
src="https://img.shields.io/badge/1c6553e97d-fix-green" alt="fix -
1c6553e97d" /></a></td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215"><img
src="https://img.shields.io/badge/629905d537-fix-green" alt="fix -
629905d537" /></a></td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f"><img
src="https://img.shields.io/badge/0b7192f441-fix-green" alt="fix -
0b7192f441" /></a></td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<h2>21.2.12</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/fe13bb669d2bfab4713623d17b41c430aa0a61d8"><img
src="https://img.shields.io/badge/fe13bb669d-fix-green" alt="fix -
fe13bb669d" /></a></td>
<td>allow explicit read generic with signal input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/3430251fef93f6aec1fa9c7867e85df23f67c9a0"><img
src="https://img.shields.io/badge/3430251fef-fix-green" alt="fix -
3430251fef" /></a></td>
<td>i18n flags leaking on errors</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1aeebbe3048b5aa612dd0a5448de9883ed51e7e8"><img
src="https://img.shields.io/badge/1aeebbe304-fix-green" alt="fix -
1aeebbe304" /></a></td>
<td>respect ngSkipHydration on components with projectable nodes in
LContainers</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9e38ed7d5773a9193ba07afdba3f7a9f2fe02d18"><img
src="https://img.shields.io/badge/9e38ed7d57-fix-green" alt="fix -
9e38ed7d57" /></a></td>
<td>sanitizer typings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a05a9a71a5ab75042ec5560c01526de6e61e062"><img
src="https://img.shields.io/badge/7a05a9a71a-fix-green" alt="fix -
7a05a9a71a" /></a></td>
<td>validate security-sensitive attributes in i18n bindings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c37f6ca42f263353cb9563fa90d7b31d3c7837ca"><img
src="https://img.shields.io/badge/c37f6ca42f-fix-green" alt="fix -
c37f6ca42f" /></a></td>
<td>visit ng-let expression value in signal migration schematics</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/03ad53863bf3c368f0f02a4322d4141e8f70f674"><img
src="https://img.shields.io/badge/03ad53863b-fix-green" alt="fix -
03ad53863b" /></a></td>
<td>prohibit concurrent submits in signal forms</td>
</tr>
</tbody>
</table>
<h2>21.2.11</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/10ad3c06923453ae0ec06b06e664ce05900a4ff6"><img
src="https://img.shields.io/badge/10ad3c0692-fix-green" alt="fix -
10ad3c0692" /></a></td>
<td>prevent focus from scrollToAnchor</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f5d8a2c0b5e38d4debc4293945270cea4a9590d"><img
src="https://img.shields.io/badge/4f5d8a2c0b-fix-green" alt="fix -
4f5d8a2c0b" /></a></td>
<td>let declaration span not including end character</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a40e2cebc878965c3e21bfb61658f3f80cbd2ebf"><img
src="https://img.shields.io/badge/a40e2cebc8-fix-green" alt="fix -
a40e2cebc8" /></a></td>
<td>fix ordering of view queries metadata in JIT mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/885a1a1d9757adfa8766d9b369c848a277438c31"><img
src="https://img.shields.io/badge/885a1a1d97-fix-green" alt="fix -
885a1a1d97" /></a></td>
<td>guard against non-object events and avoid listener wrapper identity
mismatch</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a64aff9b59999077ea915486a7fa0b97a286659"><img
src="https://img.shields.io/badge/7a64aff9b5-fix-green" alt="fix -
7a64aff9b5" /></a></td>
<td>prevent event replay double-invocation when element hydrates before
app stability</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be1f80a253b8ee27ed7d8de2287d6895c4821909"><img
src="https://img.shields.io/badge/be1f80a253-fix-green" alt="fix -
be1f80a253" /></a></td>
<td>ensure origin has a trailing slash when parsing url</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/compiler's
changelog</a>.</em></p>
<blockquote>
<h1>21.2.13 (2026-05-13)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947">1c6553e97d</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215">629905d537</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f">0b7192f441</a></td>
<td>fix</td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>19.2.22 (2026-05-12)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/83a640516f7b1fff4dfb0fd0ed8b19876bdb00c4">83a640516f</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings unconditionally
(<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/24a0103a9898b1547f5d1f57314e2bb6545a2c7a">24a0103a98</a></td>
<td>fix</td>
<td>validate security-sensitive attributes in i18n bindings (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8569db88758d189544b03ec4474fd5334ff29346">8569db8875</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/837a7102172502dd3d92793ec15b2d4e533a573d">837a710217</a></td>
<td>fix</td>
<td>ensure origin has a trailing slash when parsing url (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>20.3.21 (2026-05-12)</h1>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f584840e2e50f751397cf3fad5258e18e857427e">f584840e2e</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.0.0-next.12 (2026-05-08)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8ebae1de330729f945391283e25661aada11b4ed">8ebae1de33</a></td>
<td>fix</td>
<td>allow service with factory on abstract classes</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6f525245cd97a934b2b5ea888ee9d52c26c58cb5">6f525245cd</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0f2160c4105a53ef6488d2c799dda9c0959ce7dc">0f2160c410</a></td>
<td>fix</td>
<td>remove compiler import from safe optional chaining migration</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/baf92da96ed73a0f4748edf05d3c0702cab219da"><code>baf92da</code></a>
test: remove invalid css that was causing issues with the postcss
parser</li>
<li><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><code>1c6553e</code></a>
fix(core): disallow event attribute bindings in host bindings
unconditionally</li>
<li><a
href="https://github.com/angular/angular/commit/4f5d8a2c0b5e38d4debc4293945270cea4a9590d"><code>4f5d8a2</code></a>
fix(compiler): let declaration span not including end character</li>
<li>See full diff in <a
href="https://github.com/angular/angular/commits/v21.2.13/packages/compiler">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/core` from 21.2.10 to 21.2.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/core's
releases</a>.</em></p>
<blockquote>
<h2>21.2.13</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><img
src="https://img.shields.io/badge/1c6553e97d-fix-green" alt="fix -
1c6553e97d" /></a></td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215"><img
src="https://img.shields.io/badge/629905d537-fix-green" alt="fix -
629905d537" /></a></td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f"><img
src="https://img.shields.io/badge/0b7192f441-fix-green" alt="fix -
0b7192f441" /></a></td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<h2>21.2.12</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/fe13bb669d2bfab4713623d17b41c430aa0a61d8"><img
src="https://img.shields.io/badge/fe13bb669d-fix-green" alt="fix -
fe13bb669d" /></a></td>
<td>allow explicit read generic with signal input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/3430251fef93f6aec1fa9c7867e85df23f67c9a0"><img
src="https://img.shields.io/badge/3430251fef-fix-green" alt="fix -
3430251fef" /></a></td>
<td>i18n flags leaking on errors</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1aeebbe3048b5aa612dd0a5448de9883ed51e7e8"><img
src="https://img.shields.io/badge/1aeebbe304-fix-green" alt="fix -
1aeebbe304" /></a></td>
<td>respect ngSkipHydration on components with projectable nodes in
LContainers</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9e38ed7d5773a9193ba07afdba3f7a9f2fe02d18"><img
src="https://img.shields.io/badge/9e38ed7d57-fix-green" alt="fix -
9e38ed7d57" /></a></td>
<td>sanitizer typings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a05a9a71a5ab75042ec5560c01526de6e61e062"><img
src="https://img.shields.io/badge/7a05a9a71a-fix-green" alt="fix -
7a05a9a71a" /></a></td>
<td>validate security-sensitive attributes in i18n bindings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c37f6ca42f263353cb9563fa90d7b31d3c7837ca"><img
src="https://img.shields.io/badge/c37f6ca42f-fix-green" alt="fix -
c37f6ca42f" /></a></td>
<td>visit ng-let expression value in signal migration schematics</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/03ad53863bf3c368f0f02a4322d4141e8f70f674"><img
src="https://img.shields.io/badge/03ad53863b-fix-green" alt="fix -
03ad53863b" /></a></td>
<td>prohibit concurrent submits in signal forms</td>
</tr>
</tbody>
</table>
<h2>21.2.11</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/10ad3c06923453ae0ec06b06e664ce05900a4ff6"><img
src="https://img.shields.io/badge/10ad3c0692-fix-green" alt="fix -
10ad3c0692" /></a></td>
<td>prevent focus from scrollToAnchor</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f5d8a2c0b5e38d4debc4293945270cea4a9590d"><img
src="https://img.shields.io/badge/4f5d8a2c0b-fix-green" alt="fix -
4f5d8a2c0b" /></a></td>
<td>let declaration span not including end character</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a40e2cebc878965c3e21bfb61658f3f80cbd2ebf"><img
src="https://img.shields.io/badge/a40e2cebc8-fix-green" alt="fix -
a40e2cebc8" /></a></td>
<td>fix ordering of view queries metadata in JIT mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/885a1a1d9757adfa8766d9b369c848a277438c31"><img
src="https://img.shields.io/badge/885a1a1d97-fix-green" alt="fix -
885a1a1d97" /></a></td>
<td>guard against non-object events and avoid listener wrapper identity
mismatch</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a64aff9b59999077ea915486a7fa0b97a286659"><img
src="https://img.shields.io/badge/7a64aff9b5-fix-green" alt="fix -
7a64aff9b5" /></a></td>
<td>prevent event replay double-invocation when element hydrates before
app stability</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be1f80a253b8ee27ed7d8de2287d6895c4821909"><img
src="https://img.shields.io/badge/be1f80a253-fix-green" alt="fix -
be1f80a253" /></a></td>
<td>ensure origin has a trailing slash when parsing url</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/core's
changelog</a>.</em></p>
<blockquote>
<h1>21.2.13 (2026-05-13)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947">1c6553e97d</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215">629905d537</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f">0b7192f441</a></td>
<td>fix</td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>19.2.22 (2026-05-12)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/83a640516f7b1fff4dfb0fd0ed8b19876bdb00c4">83a640516f</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings unconditionally
(<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/24a0103a9898b1547f5d1f57314e2bb6545a2c7a">24a0103a98</a></td>
<td>fix</td>
<td>validate security-sensitive attributes in i18n bindings (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8569db88758d189544b03ec4474fd5334ff29346">8569db8875</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/837a7102172502dd3d92793ec15b2d4e533a573d">837a710217</a></td>
<td>fix</td>
<td>ensure origin has a trailing slash when parsing url (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>20.3.21 (2026-05-12)</h1>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f584840e2e50f751397cf3fad5258e18e857427e">f584840e2e</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.0.0-next.12 (2026-05-08)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8ebae1de330729f945391283e25661aada11b4ed">8ebae1de33</a></td>
<td>fix</td>
<td>allow service with factory on abstract classes</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6f525245cd97a934b2b5ea888ee9d52c26c58cb5">6f525245cd</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0f2160c4105a53ef6488d2c799dda9c0959ce7dc">0f2160c410</a></td>
<td>fix</td>
<td>remove compiler import from safe optional chaining migration</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<p>| Commit | Type | Description |</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><code>1c6553e</code></a>
fix(core): disallow event attribute bindings in host bindings
unconditionally</li>
<li><a
href="https://github.com/angular/angular/commit/9e38ed7d5773a9193ba07afdba3f7a9f2fe02d18"><code>9e38ed7</code></a>
fix(core): sanitizer typings</li>
<li><a
href="https://github.com/angular/angular/commit/3430251fef93f6aec1fa9c7867e85df23f67c9a0"><code>3430251</code></a>
fix(core): i18n flags leaking on errors</li>
<li><a
href="https://github.com/angular/angular/commit/c37f6ca42f263353cb9563fa90d7b31d3c7837ca"><code>c37f6ca</code></a>
fix(core): visit ng-let expression value in signal migration
schematics</li>
<li><a
href="https://github.com/angular/angular/commit/fe13bb669d2bfab4713623d17b41c430aa0a61d8"><code>fe13bb6</code></a>
fix(core): allow explicit read generic with signal input transforms</li>
<li><a
href="https://github.com/angular/angular/commit/7a05a9a71a5ab75042ec5560c01526de6e61e062"><code>7a05a9a</code></a>
fix(core): validate security-sensitive attributes in i18n bindings</li>
<li><a
href="https://github.com/angular/angular/commit/1aeebbe3048b5aa612dd0a5448de9883ed51e7e8"><code>1aeebbe</code></a>
fix(core): respect ngSkipHydration on components with projectable nodes
in LC...</li>
<li><a
href="https://github.com/angular/angular/commit/4900e453e1a2e9351ad2672a804d876ff5a62968"><code>4900e45</code></a>
build: update cross-repo angular dependencies</li>
<li><a
href="https://github.com/angular/angular/commit/a40e2cebc878965c3e21bfb61658f3f80cbd2ebf"><code>a40e2ce</code></a>
fix(core): fix ordering of view queries metadata in JIT mode</li>
<li><a
href="https://github.com/angular/angular/commit/9bcbf376413632590ef1fb1cebe68d049d9bd45b"><code>9bcbf37</code></a>
refactor(core): fix bundling symbol test</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/v21.2.13/packages/core">compare
view</a></li>
</ul>
</details>
<br />

Updates `@angular/forms` from 21.2.10 to 21.2.13
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases">@​angular/forms's
releases</a>.</em></p>
<blockquote>
<h2>21.2.13</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947"><img
src="https://img.shields.io/badge/1c6553e97d-fix-green" alt="fix -
1c6553e97d" /></a></td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215"><img
src="https://img.shields.io/badge/629905d537-fix-green" alt="fix -
629905d537" /></a></td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f"><img
src="https://img.shields.io/badge/0b7192f441-fix-green" alt="fix -
0b7192f441" /></a></td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<h2>21.2.12</h2>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/fe13bb669d2bfab4713623d17b41c430aa0a61d8"><img
src="https://img.shields.io/badge/fe13bb669d-fix-green" alt="fix -
fe13bb669d" /></a></td>
<td>allow explicit read generic with signal input transforms</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/3430251fef93f6aec1fa9c7867e85df23f67c9a0"><img
src="https://img.shields.io/badge/3430251fef-fix-green" alt="fix -
3430251fef" /></a></td>
<td>i18n flags leaking on errors</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1aeebbe3048b5aa612dd0a5448de9883ed51e7e8"><img
src="https://img.shields.io/badge/1aeebbe304-fix-green" alt="fix -
1aeebbe304" /></a></td>
<td>respect ngSkipHydration on components with projectable nodes in
LContainers</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/9e38ed7d5773a9193ba07afdba3f7a9f2fe02d18"><img
src="https://img.shields.io/badge/9e38ed7d57-fix-green" alt="fix -
9e38ed7d57" /></a></td>
<td>sanitizer typings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a05a9a71a5ab75042ec5560c01526de6e61e062"><img
src="https://img.shields.io/badge/7a05a9a71a-fix-green" alt="fix -
7a05a9a71a" /></a></td>
<td>validate security-sensitive attributes in i18n bindings</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/c37f6ca42f263353cb9563fa90d7b31d3c7837ca"><img
src="https://img.shields.io/badge/c37f6ca42f-fix-green" alt="fix -
c37f6ca42f" /></a></td>
<td>visit ng-let expression value in signal migration schematics</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/03ad53863bf3c368f0f02a4322d4141e8f70f674"><img
src="https://img.shields.io/badge/03ad53863b-fix-green" alt="fix -
03ad53863b" /></a></td>
<td>prohibit concurrent submits in signal forms</td>
</tr>
</tbody>
</table>
<h2>21.2.11</h2>
<h3>common</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/10ad3c06923453ae0ec06b06e664ce05900a4ff6"><img
src="https://img.shields.io/badge/10ad3c0692-fix-green" alt="fix -
10ad3c0692" /></a></td>
<td>prevent focus from scrollToAnchor</td>
</tr>
</tbody>
</table>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4f5d8a2c0b5e38d4debc4293945270cea4a9590d"><img
src="https://img.shields.io/badge/4f5d8a2c0b-fix-green" alt="fix -
4f5d8a2c0b" /></a></td>
<td>let declaration span not including end character</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a40e2cebc878965c3e21bfb61658f3f80cbd2ebf"><img
src="https://img.shields.io/badge/a40e2cebc8-fix-green" alt="fix -
a40e2cebc8" /></a></td>
<td>fix ordering of view queries metadata in JIT mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/885a1a1d9757adfa8766d9b369c848a277438c31"><img
src="https://img.shields.io/badge/885a1a1d97-fix-green" alt="fix -
885a1a1d97" /></a></td>
<td>guard against non-object events and avoid listener wrapper identity
mismatch</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/7a64aff9b59999077ea915486a7fa0b97a286659"><img
src="https://img.shields.io/badge/7a64aff9b5-fix-green" alt="fix -
7a64aff9b5" /></a></td>
<td>prevent event replay double-invocation when element hydrates before
app stability</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/be1f80a253b8ee27ed7d8de2287d6895c4821909"><img
src="https://img.shields.io/badge/be1f80a253-fix-green" alt="fix -
be1f80a253" /></a></td>
<td>ensure origin has a trailing slash when parsing url</td>
</tr>
</tbody>
</table>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md">@​angular/forms's
changelog</a>.</em></p>
<blockquote>
<h1>21.2.13 (2026-05-13)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1c6553e97d9655d8c48fbf625987fae86f9cd947">1c6553e97d</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/629905d537f59dc3c264c49f6347e3599dea0215">629905d537</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0b7192f4410d055191ac9b15bff57d1d0b9a644f">0b7192f441</a></td>
<td>fix</td>
<td>forward BEFORE_APP_SERIALIZED errors to ErrorHandler</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>19.2.22 (2026-05-12)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/83a640516f7b1fff4dfb0fd0ed8b19876bdb00c4">83a640516f</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings unconditionally
(<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/24a0103a9898b1547f5d1f57314e2bb6545a2c7a">24a0103a98</a></td>
<td>fix</td>
<td>validate security-sensitive attributes in i18n bindings (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8569db88758d189544b03ec4474fd5334ff29346">8569db8875</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/837a7102172502dd3d92793ec15b2d4e533a573d">837a710217</a></td>
<td>fix</td>
<td>ensure origin has a trailing slash when parsing url (<a
href="https://redirect.github.com/angular/angular/pull/68469">#68469</a>)</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>20.3.21 (2026-05-12)</h1>
<h3>platform-server</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/f584840e2e50f751397cf3fad5258e18e857427e">f584840e2e</a></td>
<td>fix</td>
<td>add <code>allowedHosts</code> option to <code>renderModule</code>
and <code>renderApplication</code></td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>22.0.0-next.12 (2026-05-08)</h1>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8ebae1de330729f945391283e25661aada11b4ed">8ebae1de33</a></td>
<td>fix</td>
<td>allow service with factory on abstract classes</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6f525245cd97a934b2b5ea888ee9d52c26c58cb5">6f525245cd</a></td>
<td>fix</td>
<td>disallow event attribute bindings in host bindings
unconditionally</td>
</tr>
</tbody>
</table>
<h3>migrations</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a href="https:...

_Description has been truncated_

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marco A. <[email protected]>
2026-05-25 11:14:11 +02:00
..
2025-10-08 10:27:02 +02:00
2026-04-02 15:53:08 +02:00

Zitadel Management Console

The Management Console is Zitadel's management UI.

It is built using Angular and part of the Zitadel monorepo.

To get started follow the contributing quick start.

Building

To build for production:

pnpm nx run @zitadel/console:build

This will:

  1. Generate proto files (via prebuild script)
  2. Build the Angular app with production optimizations

Linting

To run linting and formatting checks:

pnpm nx @zitadel/console:lint

To auto-fix formatting issues:

pnpm nx @zitadel/console:lint-fix

Project Structure

  • src/app/proto/generated/ - Generated proto files (Angular-specific format)
  • buf.gen.yaml - Local proto generation configuration
  • project.json - Nx orchestration and caching for builds and tests
  • prebuild.development.js - Development environment settings script

Dependency Chain

The Management Console app has the following build dependencies managed by Nx:

  1. @zitadel/proto:generate - Generates the protobuf stubs
  2. @zitadel/client:build - Builds the TypeScript gRPC client library
  3. @zitadel/console:generate - Generates Management Console-specific protobuf stubs
  4. @zitadel/console:build - Creates a production build from Management Console

This ensures that the Management Console always has access to the latest client library and protobuf definitions.

Proto Generation Details

  1. @zitadel/proto generation: Modern ES modules with @bufbuild/protobuf for v2 APIs
  2. Local buf.gen.yaml generation: Traditional protobuf JavaScript classes for v1 APIs

The Management Console app calls Zitadel v1 and v2 APIs. As long as the Management Console still calls v1 APIs, it needs to import client stubs from separate sources:

Legacy v1 API (Traditional Protobuf)

  • Uses local buf.gen.yaml configuration
  • Generates traditional Google protobuf JavaScript classes extending jspb.Message
  • Uses plugins: protocolbuffers/js, grpc/web, grpc-ecosystem/openapiv2
  • Output: src/app/proto/generated/
  • Used for: Most existing Management Console functionality

Modern v2 API (ES Modules)

  • Uses @zitadel/proto package generation
  • Generates modern ES modules with @bufbuild/protobuf
  • Uses plugin: @bufbuild/es with ES modules and JSON types
  • Output: login/packages/zitadel-proto/
  • Used for: New user v2 API and services

Dependency Management

The Management Console's project.json ensures proper execution order:

  1. @zitadel/proto:generate runs first (modern ES modules)
  2. Management Console's local generation runs second (traditional protobuf)
  3. Build/lint/start tasks depend on both generations being complete

This approach allows the Management Console app to use both v1 and v2 APIs while maintaining proper build dependencies.

Legacy Information

This project was originally generated with Angular CLI version 8.3.20 and has been updated over time.