chore: bump @angular/common from 8.0.3 to 21.2.10#355
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) from 8.0.3 to 21.2.10. - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v21.2.10/packages/common) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 21.2.10 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
|
Deploy preview for file ready!
Deployed with vercel-action |
Contributor
|
Deploy preview for express-basic-auth ready!
Deployed with vercel-action |
|
Contributor
|
Deploy preview for static ready!
Deployed with vercel-action |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
1 issue found across 2 files
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name="example/angular/package.json">
<violation number="1" location="example/angular/package.json:15">
P1: This single-package major bump makes the Angular dependency set inconsistent (`@angular/common` 21.x with `@angular/core`/CLI 8.x), which is likely to fail dependency resolution or builds. Keep Angular framework packages on the same major/version line.</violation>
</file>
Architecture diagram
sequenceDiagram
participant Browser as Client Browser
participant Router as Angular Router
participant Common as @angular/common (Directives/Pipes)
participant Http as HttpClient (@angular/common/http)
participant SSR as Platform Server (SSR)
participant API as External API
Note over Browser, SSR: Runtime Request & Lifecycle Changes (Angular 8 -> 21)
Browser->>SSR: HTTP GET /request-url
activate SSR
SSR->>SSR: NEW: Normalize URL (Leading slashes/backslashes)
SSR->>SSR: NEW: Prevent SSRF (Protocol-relative URL check)
SSR-->>Browser: Rendered HTML + Hydration State
deactivate SSR
Browser->>Browser: CHANGED: Hydration (Handle missing serialized data)
Note over Browser, Router: Navigation Flow
Browser->>Router: Navigation (popstate)
Router->>Router: CHANGED: Restore internal URL when browserUrl is used
Note over Browser, Http: Data & Assets Flow
Browser->>Http: request()
Http->>Http: NEW: Support CSP Nonce in JsonpClientBackend
Http->>Http: CHANGED: Support Blob caching in Transfer Cache
Http->>API: Fetch resources
API-->>Http: Response
Http-->>Browser: Return data/blob
Note over Browser, Common: DOM & Template Interactions
Common->>Browser: NEW: NgClass cleanup (remove trailing commas)
Common->>Browser: CHANGED: Image directive (skip redundant fetch on destroy)
Browser->>Browser: CHANGED: Event delegation (iOS cursor hack removed)
Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.
| "dependencies": { | ||
| "@angular/animations": "~8.0.1", | ||
| "@angular/common": "~8.0.1", | ||
| "@angular/common": "~21.2.10", |
There was a problem hiding this comment.
P1: This single-package major bump makes the Angular dependency set inconsistent (@angular/common 21.x with @angular/core/CLI 8.x), which is likely to fail dependency resolution or builds. Keep Angular framework packages on the same major/version line.
Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At example/angular/package.json, line 15:
<comment>This single-package major bump makes the Angular dependency set inconsistent (`@angular/common` 21.x with `@angular/core`/CLI 8.x), which is likely to fail dependency resolution or builds. Keep Angular framework packages on the same major/version line.</comment>
<file context>
@@ -12,7 +12,7 @@
"dependencies": {
"@angular/animations": "~8.0.1",
- "@angular/common": "~8.0.1",
+ "@angular/common": "~21.2.10",
"@angular/compiler": "~8.0.1",
"@angular/core": "~8.0.1",
</file context>
Suggested change
| "@angular/common": "~21.2.10", | |
| "@angular/common": "~8.0.1", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps @angular/common from 8.0.3 to 21.2.10.
Release notes
Sourced from
@angular/common's releases.... (truncated)
Changelog
Sourced from
@angular/common's changelog.... (truncated)
Commits
540536cfix(http): add CSP nonce support to JsonpClientBackend8102331test(http): disable XSRF and mock location in HttpClient tests to avoid Domin...13f050dtest: construct localDateobjects to fix timezone flakinessd0cf299test: remove unsupported timezone fromformatDatetestsb4ab6bafix(common): avoid redundant image fetch on destroy with auto sizesadda6c5build: updateaspect_rules_jsto3.0.293c6dc6Revert "refactor(http): Improves base64 encoding/decoding with feature detect...76431edRevert "fix(http): correctly cache blob responses in transfer cache (#67002)"277ade9fix(http): correctly cache blob responses in transfer cache (#67002)aeb9b81refactor(http): Improves base64 encoding/decoding with feature detection (#67...Maintainer changes
This version was pushed to npm by google-wombot, a new releaser for
@angular/commonsince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by cubic
Bumped
@angular/commonfrom 8.0.3 to 21.2.10 in the Angular example. This is a major upgrade and requires aligning other Angular packages,rxjs, and Node to avoid peer dependency errors.@angular/*deps to21.2.x(e.g.,@angular/core,@angular/forms,@angular/platform-browser,@angular/router).rxjsto^6.5.3or^7.4.0(current is6.4.0).>=20.19.0(or>=22.12.0).ng update @angular/core@21 @angular/cli@21) and follow migration prompts.pnpm install && pnpm build).Written for commit 6e70283. Summary will update on new commits. Review in cubic