// GitHub

angular/angular

fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP

Open

Open PR "fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP" (#69763)
on 14 July 2026 by CYANO-01

fix(http): preserve immutability of materialized clones

Open

Open PR "fix(http): preserve immutability of materialized clones" (#69762)
on 13 July 2026 by SkyZeroZx

feat(docs-infra): show Angie in the error snack bar

Merged or Closed

Closed or merged PR "feat(docs-infra): show Angie in the error snack bar" (#69761)
on 13 July 2026 by erkamyaman

@default never; throws ngtsc(2322) during compilation

Closed

Closed issue "@default never; throws ngtsc(2322) during compilation" (#69750)
on 13 July 2026 by Nness

docs: Add mention that about signal narrowing on `@switch` blocks

Merged or Closed

Closed or merged PR "docs: Add mention that about signal narrowing on `@switch` blocks" (#69759)
on 13 July 2026 by JeanMeche

feat(forms): warn when a text input receives a null value in Signal F…

Open

Open PR "feat(forms): warn when a text input receives a null value in Signal F…" (#69760)
on 13 July 2026 by MeAkib

build: update pnpm to v10.34.5 (22.0.x) - autoclosed

Merged or Closed

Closed or merged PR "build: update pnpm to v10.34.5 (22.0.x) - autoclosed" (#69753)
on 13 July 2026 by angular-robot

docs(docs-infra): remove orphaned IDX config left behind by #68946

Merged or Closed

Closed or merged PR "docs(docs-infra): remove orphaned IDX config left behind by #68946" (#69749)
on 13 July 2026 by erkamyaman

fix(docs-infra): don't show `$` prompt on empty lines

Merged or Closed

Closed or merged PR "fix(docs-infra): don't show `$` prompt on empty lines" (#69737)
on 13 July 2026 by MeAkib

fix(docs-infra): render the Console tab error badge in the embedded e…

Merged or Closed

Closed or merged PR "fix(docs-infra): render the Console tab error badge in the embedded e…" (#69742)
on 13 July 2026 by erkamyaman

docs: add native html validation clarification in signal forms docs

Open

Open PR "docs: add native html validation clarification in signal forms docs" (#69758)
on 13 July 2026 by bencodezen

refactor: remove obsolete @types/babel__core dependency

Merged or Closed

Closed or merged PR "refactor: remove obsolete @types/babel__core dependency" (#69754)
on 13 July 2026 by alan-agius4

Signal Forms coerce null to numeric value on text inputs ( ) in v22

Open

Open issue "Signal Forms coerce null to numeric value on text inputs ( ) in v22" (#69757)
on 13 July 2026 by xMikee

Signal Forms: enhance validation interop with `ngModel` / reactive forms

Open

Open issue "Signal Forms: enhance validation interop with `ngModel` / reactive forms" (#69756)
on 13 July 2026 by spike-rabbit

fix(zone.js): vitest patching of describe/it curried calls

Open

Open PR "fix(zone.js): vitest patching of describe/it curried calls" (#69755)
on 13 July 2026 by hawkgs

fix(platform-server): enforce allowOriginChange for protocol-relative urls

Merged or Closed

Closed or merged PR "fix(platform-server): enforce allowOriginChange for protocol-relative urls" (#69740)
on 13 July 2026 by arshsmith1

build: update pnpm to v11.12.0 (main)

Open

Open PR "build: update pnpm to v11.12.0 (main)" (#69752)
on 13 July 2026 by angular-robot

fix(compiler): prevent ReDoS in ShadowCss selector paren matching

Open

Open PR "fix(compiler): prevent ReDoS in ShadowCss selector paren matching" (#69751)
on 13 July 2026 by arshsmith1

zone.js vitest-patch breaks all describe/it modifiers: describe.skip runs the suite, it.skip/it.todo silently vanish, .each is miswired

Open

Open issue "zone.js vitest-patch breaks all describe/it modifiers: describe.skip runs the suite, it.skip/it.todo silently vanish, .each is miswired" (#69748)
on 12 July 2026 by janiis-scott

fix(forms): ignore stale value accessor callbacks after control is rebound

Open

Open PR "fix(forms): ignore stale value accessor callbacks after control is rebound" (#69747)
on 12 July 2026 by MedOussemaNjimi

docs: clarify usage of 'same-origin' mode and add SSR considerations

Open

Open PR "docs: clarify usage of 'same-origin' mode and add SSR considerations" (#69745)
on 11 July 2026 by SkyZeroZx

Signal Forms: Native does not support FormField

Closed

Closed issue "Signal Forms: Native does not support FormField" (#69744)
on 11 July 2026 by Akash-Peace

fix(common): preserve crossorigin on image preloads

Open

Open PR "fix(common): preserve crossorigin on image preloads" (#69743)
on 11 July 2026 by SkyZeroZx

Defer loaded

Merged or Closed

Closed or merged PR "Defer loaded" (#69741)
on 11 July 2026 by nigrosimone

refactor(core): use native `Promise.withResolvers()` in tests

Open

Open PR "refactor(core): use native `Promise.withResolvers()` in tests" (#69739)
on 11 July 2026 by MeAkib

Weekend

Merged or Closed

Closed or merged PR "Weekend" (#69738)
on 11 July 2026 by angela12345678901

docs: update cross-repo adev docs [22.0.x]

Merged or Closed

Closed or merged PR "docs: update cross-repo adev docs [22.0.x]" (#69735)
on 10 July 2026 by angular-robot

docs: update cross-repo adev docs [main]

Merged or Closed

Closed or merged PR "docs: update cross-repo adev docs [main]" (#69734)
on 10 July 2026 by angular-robot

feat(docs-infra): add an angry Angie theme-toggle easter egg

Open

Open PR "feat(docs-infra): add an angry Angie theme-toggle easter egg" (#69736)
on 10 July 2026 by erkamyaman

refactor(devtools): rename timing API to performance track

Open

Open PR "refactor(devtools): rename timing API to performance track" (#69733)
on 10 July 2026 by hawkgs

angular/angular-cli

fix(@angular/cli): support resolving subproject dependencies in pnpm workspaces

Merged or Closed

Closed or merged PR "fix(@angular/cli): support resolving subproject dependencies in pnpm workspaces" (#33546)
on 13 July 2026 by clydin

fix(@angular/build): prevent stripping nested sourceMappingURL comments

Merged or Closed

Closed or merged PR "fix(@angular/build): prevent stripping nested sourceMappingURL comments" (#33545)
on 13 July 2026 by clydin

`ng serve` serves broken JS (HTTP 500 / "Failed to fetch dynamically imported module") when a chunk contains a `//# sourceMappingURL=` line inside a template literal

Closed

Closed issue "`ng serve` serves broken JS (HTTP 500 / "Failed to fetch dynamically imported module") when a chunk contains a `//# sourceMappingURL=` line inside a template literal" (#33544)
on 13 July 2026 by roman-garcia

fix(@angular/cli): copy packageManager field and yarn config for temp installs

Merged or Closed

Closed or merged PR "fix(@angular/cli): copy packageManager field and yarn config for temp installs" (#33551)
on 13 July 2026 by clydin

`@angular/build:unit-test` (vitest): every test fails with "Vitest failed to find the runner" on Windows when the cwd drive-letter casing differs from the on-disk casing

Open

Open issue "`@angular/build:unit-test` (vitest): every test fails with "Vitest failed to find the runner" on Windows when the cwd drive-letter casing differs from the on-disk casing" (#33559)
on 13 July 2026 by reifi

build: update pnpm to v10.34.5 (22.0.x)

Open

Open PR "build: update pnpm to v10.34.5 (22.0.x)" (#33558)
on 13 July 2026 by angular-robot

build: update dependency quicktype-core to v24 (main)

Open

Open PR "build: update dependency quicktype-core to v24 (main)" (#33557)
on 13 July 2026 by angular-robot

build: update pnpm to v11.12.0 (main)

Open

Open PR "build: update pnpm to v11.12.0 (main)" (#33556)
on 13 July 2026 by angular-robot

Angular SSR route-policy confusion can expose client-only data under public cache headers

Open

Open issue "Angular SSR route-policy confusion can expose client-only data under public cache headers" (#33555)
on 12 July 2026 by SkyZeroZx

esbuild `application` builder is significantly slower than webpack with many locales

Open

Open issue "esbuild `application` builder is significantly slower than webpack with many locales" (#33554)
on 12 July 2026 by shamoon

feat(@schematics/angular): install official agent skills

Merged or Closed

Closed or merged PR "feat(@schematics/angular): install official agent skills" (#33553)
on 11 July 2026 by rainerhahnekamp

fix(@angular/build): prevent HTML injection from inlined font CSS

Open

Open PR "fix(@angular/build): prevent HTML injection from inlined font CSS" (#33552)
on 10 July 2026 by SkyZeroZx

test(@angular/cli): verify package group locking under peer updates

Merged or Closed

Closed or merged PR "test(@angular/cli): verify package group locking under peer updates" (#33549)
on 10 July 2026 by clydin

build: update babel monorepo to v7.29.7 (22.0.x)

Merged or Closed

Closed or merged PR "build: update babel monorepo to v7.29.7 (22.0.x)" (#33548)
on 10 July 2026 by angular-robot

build: update cross-repo angular dependencies (main)

Open

Open PR "build: update cross-repo angular dependencies (main)" (#33550)
on 10 July 2026 by angular-robot

22.0.x branch has @babel/core 7.29.0 but 21.2.x branch has newer 7.29.7

Closed

Closed issue "22.0.x branch has @babel/core 7.29.0 but 21.2.x branch has newer 7.29.7" (#33547)
on 10 July 2026 by daddyman

fix(@angular/build): warn when TestBed.overrideComponent is used in AOT mode

Merged or Closed

Closed or merged PR "fix(@angular/build): warn when TestBed.overrideComponent is used in AOT mode" (#33542)
on 10 July 2026 by clydin

build: update all non-major dependencies

Merged or Closed

Closed or merged PR "build: update all non-major dependencies" (#33543)
on 10 July 2026 by alan-agius4

docs: release notes for the v21.2.19 release

Merged or Closed

Closed or merged PR "docs: release notes for the v21.2.19 release" (#33541)
on 09 July 2026 by clydin

Bump version to "v21.2.19" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v21.2.19" with changelog." (#33540)
on 09 July 2026 by clydin

docs: release notes for the v20.3.32 release

Merged or Closed

Closed or merged PR "docs: release notes for the v20.3.32 release" (#33539)
on 09 July 2026 by clydin

Bump version to "v20.3.32" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v20.3.32" with changelog." (#33538)
on 09 July 2026 by clydin

(CVE-2026-55603) http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` LTS

Closed

Closed issue "(CVE-2026-55603) http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody` LTS" (#33534)
on 09 July 2026 by TomekStolarz

fix(@angular-devkit/build-angular): update http-proxy-middleware to 3.0.7

Merged or Closed

Closed or merged PR "fix(@angular-devkit/build-angular): update http-proxy-middleware to 3.0.7" (#33535)
on 09 July 2026 by alan-agius4

fix(@angular-devkit/build-angular): update http-proxy-middleware to 3.0.7

Merged or Closed

Closed or merged PR "fix(@angular-devkit/build-angular): update http-proxy-middleware to 3.0.7" (#33536)
on 09 July 2026 by alan-agius4

build: update dependency http-proxy-middleware to v3.0.7 (22.0.x)

Merged or Closed

Closed or merged PR "build: update dependency http-proxy-middleware to v3.0.7 (22.0.x)" (#33537)
on 09 July 2026 by angular-robot

build: lock file maintenance (22.0.x)

Merged or Closed

Closed or merged PR "build: lock file maintenance (22.0.x)" (#33531)
on 09 July 2026 by angular-robot

Bump version to "v22.1.0-next.3" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v22.1.0-next.3" with changelog." (#33533)
on 09 July 2026 by clydin

docs: release notes for the v22.0.6 release

Merged or Closed

Closed or merged PR "docs: release notes for the v22.0.6 release" (#33532)
on 09 July 2026 by clydin

build: update cross-repo angular dependencies to v22.0.6 (22.0.x)

Open

Open PR "build: update cross-repo angular dependencies to v22.0.6 (22.0.x)" (#33530)
on 08 July 2026 by angular-robot

material2

build: update pnpm to v10.34.5 (22.0.x)

Merged or Closed

Closed or merged PR "build: update pnpm to v10.34.5 (22.0.x)" (#33523)
on 13 July 2026 by angular-robot

build: update pnpm to v11.12.0 (main)

Merged or Closed

Closed or merged PR "build: update pnpm to v11.12.0 (main)" (#33522)
on 13 July 2026 by angular-robot

build: update cross-repo angular dependencies to v22.0.6 (22.0.x)

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies to v22.0.6 (22.0.x)" (#33515)
on 13 July 2026 by angular-robot

build: update cross-repo angular dependencies to v22.1.0-next.3 (main)

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies to v22.1.0-next.3 (main)" (#33514)
on 13 July 2026 by angular-robot

build: lock file maintenance (22.0.x)

Merged or Closed

Closed or merged PR "build: lock file maintenance (22.0.x)" (#33511)
on 13 July 2026 by angular-robot

fix(material/datepicker): use rounded shape for calendar focus indicators

Merged or Closed

Closed or merged PR "fix(material/datepicker): use rounded shape for calendar focus indicators" (#33524)
on 13 July 2026 by crisbeto

fix(material/sort): double focus indicators when strong focus is enabled

Merged or Closed

Closed or merged PR "fix(material/sort): double focus indicators when strong focus is enabled" (#33520)
on 13 July 2026 by crisbeto

bug(sort header): Default focus state do not work well with strong focus indicator

Closed

Closed issue "bug(sort header): Default focus state do not work well with strong focus indicator" (#33519)
on 13 July 2026 by ryuran

test(google-maps): move more tests away from fakeAsync

Merged or Closed

Closed or merged PR "test(google-maps): move more tests away from fakeAsync" (#33521)
on 12 July 2026 by crisbeto

bug(aria/combobox): setting expanded programmatically closes the popup immediately under Zone.js (works zoneless)

Closed

Closed issue "bug(aria/combobox): setting expanded programmatically closes the popup immediately under Zone.js (works zoneless)" (#33516)
on 10 July 2026 by FrapperColin

fix(aria/combobox): closing immediately when opening programmatically with zone.js

Merged or Closed

Closed or merged PR "fix(aria/combobox): closing immediately when opening programmatically with zone.js" (#33518)
on 10 July 2026 by crisbeto

bug(strong-focus-indicator): Focus indicator should adapt its border-radius to the component shape

Open

Open issue "bug(strong-focus-indicator): Focus indicator should adapt its border-radius to the component shape" (#33517)
on 10 July 2026 by ryuran

fix(multiple): pass form field to error state tracker

Merged or Closed

Closed or merged PR "fix(multiple): pass form field to error state tracker" (#33509)
on 09 July 2026 by crisbeto

build: update cross-repo angular dependencies (main) - autoclosed

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies (main) - autoclosed" (#33513)
on 09 July 2026 by angular-robot

build: update to Babel 8 and latest Angular version

Merged or Closed

Closed or merged PR "build: update to Babel 8 and latest Angular version" (#33512)
on 09 July 2026 by crisbeto

build: update cross-repo angular dependencies (main)

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies (main)" (#33495)
on 09 July 2026 by angular-robot

build: update dependency protobufjs to v8.7.0 (main)

Merged or Closed

Closed or merged PR "build: update dependency protobufjs to v8.7.0 (main)" (#33508)
on 09 July 2026 by angular-robot

build: lock file maintenance (22.0.x)

Merged or Closed

Closed or merged PR "build: lock file maintenance (22.0.x)" (#33499)
on 09 July 2026 by angular-robot

build: lock file maintenance (main)

Merged or Closed

Closed or merged PR "build: lock file maintenance (main)" (#33498)
on 09 July 2026 by angular-robot

build: update cross-repo angular dependencies (22.0.x)

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies (22.0.x)" (#33496)
on 09 July 2026 by angular-robot

bug(mat-form-field): when subscript sizing is set to fixed, not all hint or error text is visible

Open

Open issue "bug(mat-form-field): when subscript sizing is set to fixed, not all hint or error text is visible" (#33510)
on 09 July 2026 by kainiedziela

Update/deps and deploy/angular components

Merged or Closed

Closed or merged PR "Update/deps and deploy/angular components" (#33507)
on 09 July 2026 by lkk989

fix(cdk/a11y): focus trap not finding tabbable elements in shadow DOM

Open

Open PR "fix(cdk/a11y): focus trap not finding tabbable elements in shadow DOM" (#33506)
on 08 July 2026 by arturovt

Bump version to "v22.1.0-next.3" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v22.1.0-next.3" with changelog." (#33505)
on 08 July 2026 by crisbeto

docs: release notes for the v22.0.4 release

Merged or Closed

Closed or merged PR "docs: release notes for the v22.0.4 release" (#33504)
on 08 July 2026 by crisbeto

Bump version to "v22.0.4" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v22.0.4" with changelog." (#33503)
on 08 July 2026 by crisbeto

docs: convert select/sidenav/slidetog/slider/snackb/sort to signals

Merged or Closed

Closed or merged PR "docs: convert select/sidenav/slidetog/slider/snackb/sort to signals" (#33502)
on 08 July 2026 by msmallest

fix(material/core): rework error state matcher to handle signal forms

Merged or Closed

Closed or merged PR "fix(material/core): rework error state matcher to handle signal forms" (#33500)
on 07 July 2026 by crisbeto

docs: convert list/pag/progb/progs/rad/rip/elev to signals

Merged or Closed

Closed or merged PR "docs: convert list/pag/progb/progs/rad/rip/elev to signals" (#33497)
on 07 July 2026 by msmallest

docs: use proper shadow classes in examples

Merged or Closed

Closed or merged PR "docs: use proper shadow classes in examples" (#33494)
on 06 July 2026 by crisbeto