Angular / update detail

21.2.17

Official Angular changelog summary with source attribution, release tags, and community reactions.

Track this Angular release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Angular·2 months ago · Jun 10, 2026, 07:54 PMDeprecationMay break your integrationAI-assisted summary

21.2.17

Summary

Hardened transfer cache and platform security by using SHA‑256 keys, skipping cache for uncacheable or credentialed requests, validating origin and stripping sensitive headers on cross‑origin redirects.
Added stricter validation for HTTP requests and SVG attributes, preserved empty referrer handling, and rejected non‑HTTP(S) URLs in JSONP.
Deprecated ServerXhr/XHR support in @angular/platform‑server in favour of standard fetch APIs.

securitydeprecationminorsource healthy

Official source Last checked 15 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 15 hours ago

Official changelog

related channels

Follow this in context

Turn this Angular release note into a weekly digest for the tools you actually use.

Create digest

related updates

More Angular changelog updates

Product page

Angular·3 days agoFix

22.1.3

Summary

Core and compiler updates replace hasOwnProperty with Object.hasOwn, add readonly array support for metadata decorators, expose debuggableFn for signal nodes, and improve hydration error handling.

Official source

Angular·3 days agoChangeMay break your integration

20.3.29

Summary

Event handler attributes (e.g., onclick) are no longer allowed on <meta> elements.

securitybreaking

Official source

Angular·3 days agoChangeMay break your integration

21.2.21

Summary

Disallows inline event handler attributes (e.g., onclick) in <meta> tags.

securitybreaking

Official source

Angular / update detail

21.2.17

Official Angular changelog summary with source attribution, release tags, and community reactions.

Track this Angular release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Angular·2 months ago · Jun 10, 2026, 07:54 PMDeprecationMay break your integrationAI-assisted summary

21.2.17

Summary

Hardened transfer cache and platform security by using SHA‑256 keys, skipping cache for uncacheable or credentialed requests, validating origin and stripping sensitive headers on cross‑origin redirects.
Added stricter validation for HTTP requests and SVG attributes, preserved empty referrer handling, and rejected non‑HTTP(S) URLs in JSONP.
Deprecated ServerXhr/XHR support in @angular/platform‑server in favour of standard fetch APIs.

securitydeprecationminorsource healthy

Official source Last checked 15 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 15 hours ago

Official changelog

related channels

Follow this in context

Turn this Angular release note into a weekly digest for the tools you actually use.

Create digest

related updates

More Angular changelog updates

Product page

Angular·3 days agoFix

22.1.3

Summary

Core and compiler updates replace hasOwnProperty with Object.hasOwn, add readonly array support for metadata decorators, expose debuggableFn for signal nodes, and improve hydration error handling.

Official source

Angular·3 days agoChangeMay break your integration

20.3.29

Summary

Event handler attributes (e.g., onclick) are no longer allowed on <meta> elements.

securitybreaking

Official source

Angular·3 days agoChangeMay break your integration

21.2.21

Summary

Disallows inline event handler attributes (e.g., onclick) in <meta> tags.

securitybreaking

Official source