Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: angular/angular-cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v20.3.35
Choose a base ref
...
head repository: angular/angular-cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v20.3.41
Choose a head ref
  • 17 commits
  • 19 files changed
  • 3 contributors

Commits on Aug 27, 2026

  1. fix(@angular-devkit/build-angular): update less to 4.9.0 

    Update less dependency to version 4.9.0 to address a vulnerability with image-size.

closes #33934
    @alan-agius4
    alan-agius4 committed Aug 27, 2026
    Configuration menu
    Copy the full SHA
    b4059cd View commit details
    Browse the repository at this point in the history

Commits on Aug 28, 2026

  1. fix(@angular/ssr): ensure public directory containment in CommonEngine 

    Ensure that paths resolved in `retrieveSSGPage` strictly remain within the configured `publicPath` by checking `relative()` containment before evaluating the static file.

Previously, a string `startsWith()` check was used, which could match sibling directories that share the same name prefix as `publicPath`.
    @alan-agius4
    alan-agius4 committed Aug 28, 2026
    Configuration menu
    Copy the full SHA
    c3e5982 View commit details
    Browse the repository at this point in the history

Commits on Sep 2, 2026

  1. release: cut the v20.3.36 release

    @dgp1130
    dgp1130 committed Sep 2, 2026
    Configuration menu
    Copy the full SHA
    a9f4dae View commit details
    Browse the repository at this point in the history

Commits on Sep 9, 2026

  1. fix(@angular-devkit/build-angular): update undici to 7.29.1 

    Update undici to version 7.29.1.
    @alan-agius4
    alan-agius4 committed Sep 9, 2026
    Configuration menu
    Copy the full SHA
    c376420 View commit details
    Browse the repository at this point in the history

Commits on Sep 10, 2026

  1. build: replace pnpm -s shorthand with --silent for improved readability 

    Trying to fix the release

(cherry picked from commit ded7653)
    @alan-agius4
    alan-agius4 committed Sep 10, 2026
    Configuration menu
    Copy the full SHA
    54529a0 View commit details
    Browse the repository at this point in the history

  2. release: cut the v20.3.37 release

    @alan-agius4
    alan-agius4 committed Sep 10, 2026
    Configuration menu
    Copy the full SHA
    b5b81d6 View commit details
    Browse the repository at this point in the history

Commits on Oct 2, 2026

  1. fix(@angular/build): bump piscina to 5.3.2 

    Bumps piscina to 5.3.2 to address GHSA-67c8-pqhq-4rmx / CVE-2026-102992.

Closes #34241
    @alan-agius4
    alan-agius4 committed Oct 2, 2026
    Configuration menu
    Copy the full SHA
    3e39e33 View commit details
    Browse the repository at this point in the history

Commits on Oct 5, 2026

  1. release: cut the v20.3.38 release

    @alan-agius4
    alan-agius4 committed Oct 5, 2026
    Configuration menu
    Copy the full SHA
    94f0f21 View commit details
    Browse the repository at this point in the history

Commits on Oct 7, 2026

  1. fix(@angular/cli): bump @modelcontextprotocol/sdk to 1.31.0 

    Bumps @modelcontextprotocol/sdk to 1.31.0 to address GHSA-6qxp-vccf-f47h / CVE-2026-104850.

Closes #34263
    @florimond-collette @alan-agius4
    florimond-collette authored and alan-agius4 committed Oct 7, 2026
    Configuration menu
    Copy the full SHA
    373a7ce View commit details
    Browse the repository at this point in the history

  2. release: cut the v20.3.39 release

    @alan-agius4
    alan-agius4 committed Oct 7, 2026
    Configuration menu
    Copy the full SHA
    4c9e203 View commit details
    Browse the repository at this point in the history

Commits on Oct 13, 2026

  1. fix(@angular/cli): update zod to 4.6.6 

    Fixes #34330
    @alan-agius4
    alan-agius4 committed Oct 13, 2026
    Configuration menu
    Copy the full SHA
    bfe1908 View commit details
    Browse the repository at this point in the history

Commits on Oct 14, 2026

  1. release: cut the v20.3.40 release

    @dgp1130
    dgp1130 committed Oct 14, 2026
    Configuration menu
    Copy the full SHA
    6b00dbb View commit details
    Browse the repository at this point in the history

Commits on Oct 21, 2026

  1. refactor(@angular-devkit/build-angular): update internal webpack depe… 

    …ndency paths

Update internal webpack dependency deep imports to match the reorganized module structure in Webpack 5.112.0.

(cherry picked from commit 508d6a2)
    @alan-agius4
    alan-agius4 committed Oct 21, 2026
    Configuration menu
    Copy the full SHA
    ff9d72f View commit details
    Browse the repository at this point in the history

  2. fix(@angular-devkit/build-angular): update webpack to 5.112.0

    @alan-agius4
    alan-agius4 committed Oct 21, 2026
    Configuration menu
    Copy the full SHA
    f905af9 View commit details
    Browse the repository at this point in the history

  3. fix(@angular/cli): bump @modelcontextprotocol/sdk to 1.32.1 

    Bumps @modelcontextprotocol/sdk to 1.32.1 to address GHSA-22jm-h49p-29qw / CVE-2026-111767, GHSA-46jr-4wx8-v453 / CVE-2026-111768, GHSA-6prh-2h8m-c8cw / CVE-2026-111769 and GHSA-rvq5-wwqv-78pq / CVE-2026-111771.

Closes #34455
    @florimond-collette @clydin
    florimond-collette authored and clydin committed Oct 21, 2026
    Configuration menu
    Copy the full SHA
    36fbb89 View commit details
    Browse the repository at this point in the history

  4. fix(@angular/build): bump vite to 7.3.7 

    Bumps vite to 7.3.7 to address GHSA-698v-4r3x-3vcv / CVE-2026-112943.

Refs #34452
    @florimond-collette @clydin
    florimond-collette authored and clydin committed Oct 21, 2026
    Configuration menu
    Copy the full SHA
    a1e3016 View commit details
    Browse the repository at this point in the history

Commits on Oct 22, 2026

  1. release: cut the v20.3.41 release

    @alan-agius4
    alan-agius4 committed Oct 22, 2026
    Configuration menu
    Copy the full SHA
    1f1402d View commit details
    Browse the repository at this point in the history
Loading