// GitHub

angular/angular

fix(core): sanitize namespaced SVG attributes and missing elements

Open

Open PR "fix(core): sanitize namespaced SVG attributes and missing elements" (#67904)
on 27 March 2026 by VenkatKwest

tests

Open

Open PR "tests" (#67903)
on 27 March 2026 by JeanMeche

Incomplete Fix for CVE-2026-22610: Namespace Prefix Bypass and Missing SVG Elements in Security Schema

Open

Open issue "Incomplete Fix for CVE-2026-22610: Namespace Prefix Bypass and Missing SVG Elements in Security Schema" (#67902)
on 27 March 2026 by VenkatKwest

Support 'when' in configuration object for all the built-in validators

Closed

Closed issue "Support 'when' in configuration object for all the built-in validators" (#67901)
on 27 March 2026 by hannah23280

feat(forms): add parseErrors to ControlValueAccessor for Signal Forms

Open

Open PR "feat(forms): add parseErrors to ControlValueAccessor for Signal Forms" (#67900)
on 26 March 2026 by alxhub

refactor: extract comments utilities to private

Open

Open PR "refactor: extract comments utilities to private" (#67899)
on 26 March 2026 by atscott

refactor: fix types extraction for private

Merged or Closed

Closed or merged PR "refactor: fix types extraction for private" (#67898)
on 26 March 2026 by atscott

fix: extract 2 unsafe expression(s) to env vars

Merged or Closed

Closed or merged PR "fix: extract 2 unsafe expression(s) to env vars" (#67895)
on 26 March 2026 by dagecko

docs(docs-infra): replace `wait` with `debounce` for search

Open

Open PR "docs(docs-infra): replace `wait` with `debounce` for search" (#67897)
on 26 March 2026 by SkyZeroZx

PATCH: fix(dev-infra): improve PR review skill handling of git worktrees

Merged or Closed

Closed or merged PR "PATCH: fix(dev-infra): improve PR review skill handling of git worktrees" (#67896)
on 26 March 2026 by thePunderWoman

build: remove unused `@nginfra/angular-linking` dependency

Merged or Closed

Closed or merged PR "build: remove unused `@nginfra/angular-linking` dependency" (#67883)
on 26 March 2026 by alan-agius4

docs: update cross-repo adev docs [21.2.x]

Open

Open PR "docs: update cross-repo adev docs [21.2.x]" (#67894)
on 26 March 2026 by angular-robot

docs: update cross-repo adev docs [main]

Open

Open PR "docs: update cross-repo adev docs [main]" (#67893)
on 26 March 2026 by angular-robot

docs: remove private utils from testing skills

Merged or Closed

Closed or merged PR "docs: remove private utils from testing skills" (#67880)
on 26 March 2026 by cexbrayat

reflectComponentType does not detect hostDirective inputs

Closed

Closed issue "reflectComponentType does not detect hostDirective inputs" (#67892)
on 26 March 2026 by PatrickLasota

docs: explain library secondary entrypoints

Open

Open PR "docs: explain library secondary entrypoints" (#67891)
on 26 March 2026 by weedorflow

Angular Elements lost from view when reusing a detached component instance

Open

Open issue "Angular Elements lost from view when reusing a detached component instance" (#67890)
on 26 March 2026 by jeanpaulattard

Remove `ComponentFactoryResolver` from api surface

Open

Open PR "Remove `ComponentFactoryResolver` from api surface" (#67889)
on 26 March 2026 by JeanMeche

refactor(compiler-cli): decouple schema checker from typescript

Open

Open PR "refactor(compiler-cli): decouple schema checker from typescript" (#67888)
on 26 March 2026 by crisbeto

Syntax sugar for deferred loading inside for

Closed

Closed issue "Syntax sugar for deferred loading inside for" (#67885)
on 26 March 2026 by splincode

fix: extract 2 unsafe expression(s) to env vars

Merged or Closed

Closed or merged PR "fix: extract 2 unsafe expression(s) to env vars" (#67881)
on 26 March 2026 by dagecko

build: update cross-repo angular dependencies (21.2.x)

Open

Open PR "build: update cross-repo angular dependencies (21.2.x)" (#67887)
on 26 March 2026 by angular-robot

build: update cross-repo angular dependencies (main)

Open

Open PR "build: update cross-repo angular dependencies (main)" (#67886)
on 26 March 2026 by angular-robot

feat(migrations): add strictTemplates to tsconfig during ng update

Open

Open PR "feat(migrations): add strictTemplates to tsconfig during ng update" (#67884)
on 26 March 2026 by aparzi

Signal Forms: Can't submitting a form that has already returns a submission error

Open

Open issue "Signal Forms: Can't submitting a form that has already returns a submission error" (#67882)
on 26 March 2026 by baptistemoreau14

fix(router): use null-prototype objects for parsed URL params

Open

Open PR "fix(router): use null-prototype objects for parsed URL params" (#67879)
on 26 March 2026 by gnesher

build: update all github actions (21.2.x)

Open

Open PR "build: update all github actions (21.2.x)" (#67878)
on 26 March 2026 by angular-robot

build: update all non-major dependencies (main)

Open

Open PR "build: update all non-major dependencies (main)" (#67877)
on 26 March 2026 by angular-robot

build: update all github actions (main)

Open

Open PR "build: update all github actions (main)" (#67876)
on 26 March 2026 by angular-robot

docs: update change detection strategy references

Open

Open PR "docs: update change detection strategy references" (#67875)
on 26 March 2026 by SkyZeroZx

angular/angular-cli

feat(@angular/cli): support custom port in MCP devserver start tool

Open

Open PR "feat(@angular/cli): support custom port in MCP devserver start tool" (#32855)
on 26 March 2026 by amishne

SSRF in CoreSchemaRegistry._fetch() allows arbitrary HTTP requests to internal/external URLs

Closed

Closed issue "SSRF in CoreSchemaRegistry._fetch() allows arbitrary HTTP requests to internal/external URLs" (#32841)
on 26 March 2026 by ZeroXJacks

test: use eager change detection in fake-async test component

Merged or Closed

Closed or merged PR "test: use eager change detection in fake-async test component" (#32851)
on 26 March 2026 by alan-agius4

perf(@angular/cli): lazily initialize package manager in command context

Open

Open PR "perf(@angular/cli): lazily initialize package manager in command context" (#32854)
on 26 March 2026 by alan-agius4

build: update cross-repo angular dependencies (21.2.x)

Open

Open PR "build: update cross-repo angular dependencies (21.2.x)" (#32853)
on 26 March 2026 by angular-robot

build: update cross-repo angular dependencies (main)

Open

Open PR "build: update cross-repo angular dependencies (main)" (#32852)
on 26 March 2026 by angular-robot

provide option to simulate ci for ng test

Closed

Closed issue "provide option to simulate ci for ng test" (#32850)
on 26 March 2026 by robertIsaac

build: update cross-repo angular dependencies (21.2.x)

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies (21.2.x)" (#32837)
on 26 March 2026 by angular-robot

build: update github/codeql-action action to v4.34.1 (21.2.x)

Merged or Closed

Closed or merged PR "build: update github/codeql-action action to v4.34.1 (21.2.x)" (#32840)
on 26 March 2026 by angular-robot

build: update github/codeql-action action to v4.34.1 (main)

Merged or Closed

Closed or merged PR "build: update github/codeql-action action to v4.34.1 (main)" (#32839)
on 26 March 2026 by angular-robot

build: update dependency node to v22.22.2 (21.2.x)

Merged or Closed

Closed or merged PR "build: update dependency node to v22.22.2 (21.2.x)" (#32831)
on 26 March 2026 by angular-robot

build: update dependency node to v22.22.2 (main)

Merged or Closed

Closed or merged PR "build: update dependency node to v22.22.2 (main)" (#32830)
on 26 March 2026 by angular-robot

Picomatch 19

Open

Open PR "Picomatch 19" (#32849)
on 26 March 2026 by alan-agius4

Update picomatch LTS 20

Open

Open PR "Update picomatch LTS 20" (#32848)
on 26 March 2026 by alan-agius4

fix(@angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders

Merged or Closed

Closed or merged PR "fix(@angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders" (#32834)
on 26 March 2026 by alan-agius4

build: update dependency picomatch to v4.0.4 (21.2.x)

Open

Open PR "build: update dependency picomatch to v4.0.4 (21.2.x)" (#32847)
on 26 March 2026 by angular-robot

fix(ssr): allow underscores in host validation

Open

Open PR "fix(ssr): allow underscores in host validation" (#32846)
on 26 March 2026 by alan-agius4

Bump version to "v22.0.0-next.3" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v22.0.0-next.3" with changelog." (#32845)
on 26 March 2026 by alan-agius4

docs: release notes for the v21.2.4 release

Merged or Closed

Closed or merged PR "docs: release notes for the v21.2.4 release" (#32844)
on 26 March 2026 by alan-agius4

Bump version to "v21.2.4" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v21.2.4" with changelog." (#32843)
on 26 March 2026 by alan-agius4

security: vulnerability found in transitive dependency picomatch

Open

Open issue "security: vulnerability found in transitive dependency picomatch" (#32842)
on 26 March 2026 by leszq

build: update all non-major dependencies (main)

Open

Open PR "build: update all non-major dependencies (main)" (#32838)
on 26 March 2026 by angular-robot

allowedHosts doesn't allow for my-site_1.localhost type host.

Open

Open issue "allowedHosts doesn't allow for my-site_1.localhost type host." (#32835)
on 25 March 2026 by QuentinPetel

fix(@angular/cli): restore console methods after logger completes

Merged or Closed

Closed or merged PR "fix(@angular/cli): restore console methods after logger completes" (#32828)
on 25 March 2026 by oBusk

build: update dependency typescript to v6.0.2 (main) - autoclosed

Merged or Closed

Closed or merged PR "build: update dependency typescript to v6.0.2 (main) - autoclosed" (#32833)
on 25 March 2026 by angular-robot

build: update to TypeScript 6 stable

Merged or Closed

Closed or merged PR "build: update to TypeScript 6 stable" (#32829)
on 25 March 2026 by crisbeto

fix(@angular/ssr): support '*' in allowedHosts and warn about security risks

Merged or Closed

Closed or merged PR "fix(@angular/ssr): support '*' in allowedHosts and warn about security risks" (#32827)
on 25 March 2026 by alan-agius4

@angular/build:unit-test vitest executor hangs indefinitely — uses close() instead of exit()

Open

Open issue "@angular/build:unit-test vitest executor hangs indefinitely — uses close() instead of exit()" (#32832)
on 25 March 2026 by scottcurrie

V8 Coverage showing unexpected results

Open

Open issue "V8 Coverage showing unexpected results" (#32836)
on 24 March 2026 by daniemo2

Vitest with runner config outputs entire build chunks after coverage - allow hiding/minimizing chunk result

Open

Open issue "Vitest with runner config outputs entire build chunks after coverage - allow hiding/minimizing chunk result" (#32826)
on 24 March 2026 by Martinspire

material2

build: update cross-repo angular dependencies (21.2.x)

Open

Open PR "build: update cross-repo angular dependencies (21.2.x)" (#32998)
on 26 March 2026 by angular-robot

build: update cross-repo angular dependencies (main)

Open

Open PR "build: update cross-repo angular dependencies (main)" (#32997)
on 26 March 2026 by angular-robot

build: test failure in example

Merged or Closed

Closed or merged PR "build: test failure in example" (#32996)
on 26 March 2026 by crisbeto

build: update cross-repo angular dependencies (main)

Merged or Closed

Closed or merged PR "build: update cross-repo angular dependencies (main)" (#32985)
on 26 March 2026 by angular-robot

refactor(multiple): remove declare global usages

Merged or Closed

Closed or merged PR "refactor(multiple): remove declare global usages" (#32991)
on 26 March 2026 by crisbeto

feat(Accordion): `ngAccordionGroup` should discover `ngAccordionTrigger` across component view boundaries

Open

Open issue "feat(Accordion): `ngAccordionGroup` should discover `ngAccordionTrigger` across component view boundaries" (#32995)
on 26 March 2026 by denisyilmaz

build: update `@nginfra/angular-linking` to latests (#32993)

Merged or Closed

Closed or merged PR "build: update `@nginfra/angular-linking` to latests (#32993)" (#32994)
on 26 March 2026 by alan-agius4

build: update `@nginfra/angular-linking` to latests

Merged or Closed

Closed or merged PR "build: update `@nginfra/angular-linking` to latests" (#32993)
on 26 March 2026 by alan-agius4

bug(sidenav): drawer leaves empty space if closing animation is interrupted

Open

Open issue "bug(sidenav): drawer leaves empty space if closing animation is interrupted" (#32992)
on 26 March 2026 by P4

build: update github/codeql-action action to v4.34.1 (21.2.x)

Open

Open PR "build: update github/codeql-action action to v4.34.1 (21.2.x)" (#32990)
on 26 March 2026 by angular-robot

build: update bazel dependencies (21.2.x)

Open

Open PR "build: update bazel dependencies (21.2.x)" (#32989)
on 26 March 2026 by angular-robot

build: update github/codeql-action action to v4.34.1 (main)

Open

Open PR "build: update github/codeql-action action to v4.34.1 (main)" (#32988)
on 26 March 2026 by angular-robot

build: update dependency rollup-plugin-dts to v6.4.1 (main)

Open

Open PR "build: update dependency rollup-plugin-dts to v6.4.1 (main)" (#32987)
on 26 March 2026 by angular-robot

bug(grid-list): mat-form-field is clipped inside mat-grid-tile when browser zoom increases

Open

Open issue "bug(grid-list): mat-form-field is clipped inside mat-grid-tile when browser zoom increases" (#32986)
on 26 March 2026 by DUGELO

docs: release notes for the v21.2.4 release

Merged or Closed

Closed or merged PR "docs: release notes for the v21.2.4 release" (#32984)
on 25 March 2026 by crisbeto

Bump version to "v21.2.4" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v21.2.4" with changelog." (#32983)
on 25 March 2026 by crisbeto

Bump version to "v22.0.0-next.2" with changelog.

Merged or Closed

Closed or merged PR "Bump version to "v22.0.0-next.2" with changelog." (#32982)
on 25 March 2026 by crisbeto

Resolve dependency update breakages

Merged or Closed

Closed or merged PR "Resolve dependency update breakages" (#32978)
on 25 March 2026 by crisbeto

build: update to TypeScript 6 stable

Merged or Closed

Closed or merged PR "build: update to TypeScript 6 stable" (#32976)
on 25 March 2026 by crisbeto

Breaking change in @angular/aria accordion API between patch versions 21.2.1 and 21.2.3

Closed

Closed issue "Breaking change in @angular/aria accordion API between patch versions 21.2.1 and 21.2.3" (#32977)
on 25 March 2026 by SaranshChaudhary

build: update dependency node to v22.22.2 (21.2.x)

Merged or Closed

Closed or merged PR "build: update dependency node to v22.22.2 (21.2.x)" (#32973)
on 25 March 2026 by angular-robot

build: update dependency node to v22.22.2 (main)

Merged or Closed

Closed or merged PR "build: update dependency node to v22.22.2 (main)" (#32972)
on 25 March 2026 by angular-robot

fix(material/tooltip): tooltip inside sidenav hides after text update

Merged or Closed

Closed or merged PR "fix(material/tooltip): tooltip inside sidenav hides after text update" (#32980)
on 25 March 2026 by yogeshwaran-c

fix(material/toolbar): heading styles not taking precedence over mat-typography

Merged or Closed

Closed or merged PR "fix(material/toolbar): heading styles not taking precedence over mat-typography" (#32981)
on 25 March 2026 by yogeshwaran-c

fix(material/chips): hide input placeholder when chip grid is disabled

Merged or Closed

Closed or merged PR "fix(material/chips): hide input placeholder when chip grid is disabled" (#32979)
on 25 March 2026 by yogeshwaran-c

docs(material/datepicker): fix incorrect provideLuxonDateAdapter usage for UTC

Open

Open PR "docs(material/datepicker): fix incorrect provideLuxonDateAdapter usage for UTC" (#32975)
on 25 March 2026 by yogeshwaran-c

fix(material/form-field): hide decorative elements from assistive technology

Open

Open PR "fix(material/form-field): hide decorative elements from assistive technology" (#32974)
on 25 March 2026 by yogeshwaran-c

feat(aria/tabs): Support activation on `click` instead of only on `pointerdown`

Open

Open issue "feat(aria/tabs): Support activation on `click` instead of only on `pointerdown`" (#32971)
on 24 March 2026 by makmn1

bug(Slider): direction rtl doesn't work properly

Open

Open issue "bug(Slider): direction rtl doesn't work properly" (#32970)
on 24 March 2026 by xVinCe

refactor(multiple): stabilize default state upon any type of interaction

Open

Open PR "refactor(multiple): stabilize default state upon any type of interaction" (#32969)
on 24 March 2026 by ok7sai