fix(deps): update core packages

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@angular-devkit/build-angular	21.1.2 → 21.2.3
@angular/animations (source)	21.1.2 → 21.2.5
@angular/cli	21.1.2 → 21.2.3
@angular/common (source)	21.1.2 → 21.2.5
@angular/compiler (source)	21.1.2 → 21.2.5
@angular/compiler-cli (source)	21.1.2 → 21.2.5
@angular/core (source)	21.1.2 → 21.2.5
@angular/forms (source)	21.1.2 → 21.2.5
@angular/platform-browser (source)	21.1.2 → 21.2.5
@angular/platform-browser-dynamic (source)	21.1.2 → 21.2.5
@angular/router (source)	21.1.2 → 21.2.5
@nuxt/kit (source)	4.3.1 → 4.4.2
@nuxt/schema (source)	3.16.2 → 3.21.2
@pinia/colada (source)	0.19.1 → 0.21.7
@tanstack/angular-query-experimental (source)	5.90.25 → 5.95.0
@tanstack/preact-query (source)	5.93.0 → 5.95.0
@tanstack/react-query (source)	5.90.21 → 5.95.0
@tanstack/solid-query (source)	5.90.23 → 5.95.0
@tanstack/vue-query (source)	5.92.9 → 5.95.0
@types/bun (source)	1.3.8 → 1.3.11
ajv (source)	8.17.1 → 8.18.0
arktype (source)	2.1.29 → 2.2.0
axios (source)	1.13.4 → 1.13.6
eslint (source)	9.39.1 → 9.39.4
fastify (source)	5.7.4 → 5.8.4
get-tsconfig	4.13.6 → 4.13.7
mlly	1.8.0 → 1.8.2
nuxt (source)	3.14.1592 → 3.21.2
rollup (source)	4.56.0 → 4.60.0
rollup-plugin-dts	6.1.1 → 6.4.1
semver	7.7.3 → 7.7.4
valibot (source)	1.2.0 → 1.3.1
vue (source)	3.5.25 → 3.5.30
yaml (source)	2.8.2 → 2.8.3
zod (source)	3.25.3 → 3.25.76
zone.js (source, changelog)	0.16.0 → 0.16.1

---

Release Notes

angular/angular-cli (@​angular-devkit/build-angular)

v21.2.3

Compare Source

@​angular/cli

Commit	Type	Description
1505164bb	fix	use parsed package name for migrate-only updates

@​angular/build

Commit	Type	Description
75fa94cad	fix	alias createRequire banner import to avoid duplicate binding
d009aa1ec	fix	only use external packages for polyfills when no local files are present

@​angular/ssr

Commit	Type	Description
f3e0e82c2	fix	disallow x-forwarded-prefix starting with a backslash
b8bcd59b4	fix	ensure unique values in redirect response Vary header
84385411d	fix	support custom headers in redirect responses

v21.2.2

Compare Source

@​angular/cli

Commit	Type	Description
8447d9132	fix	conditionally quote package names when adding dependencies based on host requirements
d2f209823	fix	preserve exact version in ng add when requested
28f4d684a	perf	avoid redundant package version resolution in ng add

@​angular/build

Commit	Type	Description
06010294f	fix	allow any CHROME_BIN for vitest playwright provider
8dec0c62b	fix	normalize line endings for CSP hash generation
58688ebd7	fix	pass process environment variables to prerender workers
4ca61647f	fix	resolve assets correctly during i18n prerendering

v21.2.1

Compare Source

@​angular/cli

Commit	Type	Description
ae4c28d00	fix	correct dev dependency detection logic in ng add
465073bc1	fix	disable npm update notifier in package manager host
36270634f	fix	ensure group members are updated to targeted version
d87dba6af	fix	ignore unknown files when formatting schematic changes

@​schematics/angular

Commit	Type	Description
72d466aa0	fix	prevent adding test dependencies when minimal option is enabled

@​angular-devkit/build-angular

Commit	Type	Description
0019d1c8e	fix	update copy-webpack-plugin to v14.0.0

@​angular/build

Commit	Type	Description
6ad860863	fix	bundle polyfills to preserve execution order in dev server
d17397375	fix	conditionally allow vi.mock for non-relative imports
0d49f86ed	fix	resolve style include paths relative to ng-package.json in unit-test builder
584f6a2d9	fix	treat empty browsers array as undefined in unit-test builder
6699cdc9b	perf	fix memory leak in ng serve with i18n

@​angular/ssr

Commit	Type	Description
43a9dfa66	fix	improve header validation logic
dee3717b3	fix	introduce DI token to signal route discovery process

v21.2.0

Compare Source

@​angular/cli

Commit	Type	Description
0dd04f289	feat	add markdown files to Prettier's formatting list
fbae1b6ab	feat	automatic formatting files modified by schematics
91b9d281f	feat	integrate file formatting into update migrations
98a24d040	feat	standardize MCP tools around workspace/project options
d9cd609c5	fix	correctly parse scoped packages in yarn classic list output
5b05f2500	fix	enable shell option for Prettier execution on Windows platforms
25b8a157d	fix	quote complex range specifiers in package manager
6f29a8c35	fix	renamed files by their new path in the schematic workflow
201a036f2	fix	simplify Angular version compatibility checks and add special handling for local builds of new major versions
cdd26bb66	fix	validate package manager version using semver.valid and throw an error if invalid
bc363af8b	perf	optimize package manager discovery with stat-based probing

@​schematics/angular

Commit	Type	Description
aa7381efd	feat	add a '.prettierrc' file to generated workspaces and add Prettier as dev dependency
f80db6fb7	feat	add ng-add support for Vitest browser providers
5d1df50d8	fix	add actionable feedback to vitest-browser schematic

@​angular/build

Commit	Type	Description
ece30f235	feat	add headless option to unit-test builder
cad7a7c0f	feat	run vitest browser with playwright with OS theme
0b4982720	fix	adjust sourcemap sources when Vitest wrapper is bypassed
1f114a9e8	fix	bundle setup files in unit-test builder for Vitest
fd5cb28c8	fix	explicitly fail when using Vitest runtime mocking
dc899e8a5	fix	normalize allowedHosts in dev-server
26bbea12f	fix	serve extensionless assets without transformation

v21.1.5

Compare Source

@​angular/ssr

Commit	Type	Description
8695d6063	fix	prevent open redirect via X-Forwarded-Prefix header
e4d445ec6	fix	validate host headers to prevent header-based SSRF

v21.1.4

Compare Source

@​angular/build

Commit	Type	Description
7a9dd6b47	fix	correctly resolve absolute setup file paths in Vitest

v21.1.3

Compare Source

@​schematics/angular

Commit	Type	Description
a18196a10	fix	warn when production configuration is missing for service worker

@​angular-devkit/build-angular

Commit	Type	Description
6d05d27ca	fix	address Node.js deprecation DEP0190

angular/angular (@​angular/animations)

v21.2.5

Compare Source

compiler

Commit	Type	Description
334ae10168	fix	ensure generated code compiles
23ea431c4e	fix	parse named HTML entities containing digits

compiler-cli

Commit	Type	Description
26c43d14ba	fix	escape template literal in TCB
67e0ba7e03	fix	generic types not filled out correctly in type check block

core

Commit	Type	Description
1890c3008b	fix	clean up dehydrated views during HMR component replacement
bf948be4c2	fix	run linked signal equality check without reactive consumer

migrations

Commit	Type	Description
076d41c3f6	fix	prevent trailing comma syntax errors after removing NgStyle

service-worker

Commit	Type	Description
e19150d2b5	fix	preserve redirect policy on reconstructed asset requests

v21.2.4

Compare Source

compiler

Commit	Type	Description
ed2d324f9c	fix	disallow translations of iframe src

core

Commit	Type	Description
abbd8797bb	fix	reverts "feat(core): add support for nested animations"
d1dcd16c5b	fix	sanitize translated form attributes

v21.2.3

Compare Source

core

Commit	Type	Description
62a97f7e4b	fix	ensure definitions compile
21b1c3b2ee	fix	include signal debug names in their toString() representation
224e60ecb1	fix	sanitize translated attribute bindings with interpolations

v21.2.2

Compare Source

compiler

Commit	Type	Description
1df1697c6e	fix	prevent mutation of children array in RecursiveVisitor

compiler-cli

Commit	Type	Description
c822bf8e76	fix	always parenthesize object literals in TCB
05d022d5e6	fix	ignore generated ngDevMode signal branch for code coverage

forms

Commit	Type	Description
670d1660c4	feat	add 'blur' option to debounce rule

v21.2.1

Compare Source

core

Commit	Type	Description
e2e9a9a531	fix	adds transfer cache to httpResource to fix hydration
b4ec3cc4e4	fix	prevent child animation elements from being orphaned
e923d88398	fix	Prevent removal of elements during drag and drop

http

Commit	Type	Description
277ade97ac	fix	correctly cache blob responses in transfer cache (#​67002)

v21.2.0

Compare Source

common

Commit	Type	Description
18003a33bb	feat	add an 'outlet' injector option for ngTemplateOutlet
8bbe6dc46c	feat	Add Location strategies to manage trailing slash on write
51cc914807	feat	support height in ImageLoaderConfig and built-in loaders

compiler

Commit	Type	Description
72534e2a34	feat	Add support for the instanceof binary operator
95b3f37d4a	feat	Exhaustive checks for switch blocks
04ba09a8d9	feat	support AstVisitor.visitEmptyExpr()
ce80136e7b	fix	optimize away unnecessary restore/reset view calls
3242a61bae	fix	variable counter visiting some expressions twice

compiler-cli

Commit	Type	Description
473dd3e1cb	fix	attach source spans to object literal keys in TCB
a904d9f77b	fix	support nested component declaration
2ea6dfc6c9	fix	update diagnostic to flag no-op arrow functions in listeners

core

Commit	Type	Description
8d5210c9fe	feat	add ChangeDetectionStrategy.Eager alias for Default
92d2498910	feat	add host node to DeferBlockData (#​66546)
ea2016a6dc	feat	add support for nested animations
81cabc1477	feat	add support for TypeScript 6
1ba9b7ac50	feat	resource composition via snapshots
d9923b72a2	feat	support arrow functions in expressions
a7e8abbb7e	fix	correctly handle SkipSelf when resolving from embedded view injector
0806ee3826	fix	prevent animated element duplication with dynamic components in zoneless mode
ed78fa05c7	fix	Remove note to skip arrow functions in best practices

forms

Commit	Type	Description
f56bb07d83	feat	add field param to submit action and onInvalid
ba009b6031	feat	add form directive
22afbb2f36	feat	add parsing support to native inputs (#​66917)
95c386469c	feat	Add passing focus options to form field
95ecce8334	feat	allow setting submit options at form-level
ebae211add	feat	introduce parse errors in signal forms
3937afc316	feat	introduce SignalFormControl for Reactive Forms compatibility
30f0914754	feat	support binding null to number input (#​66917)
dd208ca259	feat	update submit function to accept options object
27397b3f4f	fix	clear parse errors when model updates (#​66917)
63d8005703	fix	preserve custom-control focus context in signal forms
631f60d1f9	fix	preserve parse errors when parse returns value
adfb83146b	fix	simplify design of parse errors
fb05fc86d0	fix	sort error summary by DOM order
567f292e8e	fix	support custom controls as host directives
bdfb60f3e3	fix	use consistent error format returned from parse
d75046bc09	fix	warn when showing hidden field state

language-server

Commit	Type	Description
ebc90c26f5	feat	Add completions and hover info for inline styles
26fd0839c3	feat	Add folding range support for inline styles
573aadef7e	feat	Add quick info for inline styles
6fb39d9b62	feat	Support client-side file watching via onDidChangeWatchedFiles

language-service

Commit	Type	Description
496967e7b1	feat	add JSON schema for angularCompilerOptions
8c21866f49	feat	add linked editing ranges for HTML tag synchronization
d2137928e8	perf	use lightweight project warmup for Angular analysis

router

Commit	Type	Description
b51bab583d	feat	Add partial ActivatedRouteSnapshot information to canMatch params
cf9620f7d0	feat	Make match options optional in isActive
907a94dcec	feat	Update IsActiveMatchOptions APIs to accept a Partial

v21.1.6

Compare Source

Breaking Changes

core

• Angular now only applies known attributes from HTML in translated ICU content. Unknown attributes are dropped and not rendered.

  (cherry picked from commit 306f367)

common

| Commit

---

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hey-api-docs	Error		Mar 26, 2026 1:06pm

[changeset-bot]

⚠️ No Changeset found

Latest commit: 03a22c7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR