Sourced from @​angular/platform-server's releases.

20.3.0

Commit	Description
	remove refresh button from transfer state tab (#63592)

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63636)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);
  

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);
  

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

For more information please see: https://github.com/angular/angular/security/advisories/GHSA-68x2-mx4q-78m7

20.3.0-rc.0

Commit	Description
	remove refresh button from transfer state tab (#63592)

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63636)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);
  

  After:

... (truncated)

Sourced from @​angular/platform-server's changelog.

20.3.0 (2025-09-10)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);
  

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);
  

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

  (cherry picked from commit 8bf80c9d2314b4f2bcf3df83ae01552a6fc49834)

Commit	Type	Description
a3f808d7c8	fix	remove refresh button from transfer state tab (#63592)

core

Commit	Type	Description
6117ccee2e	feat	introduce BootstrapContext for improved server bootstrapping (#63636)

21.0.0-next.2 (2025-09-03)

Breaking Changes

common

• (test only) - TestBed now provides a fake PlatformLocation implementation that supports the Navigation API. This may break some tests, though we have not observed any failures internally. You can revert to the old default for TestBed by providing the MockPlatformLocation from @angular/common/testing in your providers: {provide: PlatformLocation, useClass: MockPlatformLocation}

core

• (test only) - Using provideZoneChangeDetection in the TestBed providers would previously prevent TestBed from rethrowing errors as it should. Errors in the test will now be rethrown, regardless of the usage of provideZoneChangeDetection. Tests should be adjusted to prevent or account for these errors. As in previous major versions, this behavior can be disabled with rethrowApplicationErrors: false in configureTestingModule as a last resort.

... (truncated)

• 7a7725e refactor(core): Update tests for zoneless by default (#63672)
• 6117cce feat(core): introduce BootstrapContext for improved server bootstrapping (#...
• 0c2255b refactor(platform-server): simplify transfer state serialization tracking (#6...
• d1d32db fix(platform-server): prevent false warning for duplicate state serialization...
• b549cd2 refactor(bazel): reduce build deps (#63348)
• 9a27c5b build: rename defaults2.bzl to defaults.bzl (#63384)
• 10b0927 refactor: various build and import specificer fixes for strict deps (#63324)
• See full diff in compare view

Sourced from @​angular/ssr's releases.

20.3.2

No release notes provided.

20.3.1

@​angular/build

Commit	Description
	add timestamp to bundle generation log
	update vite to version 7.1.5

20.3.0

@​angular/cli

Commit	Description
	improve bun lockfile detection and optimize lockfile checks

@​schematics/angular

Commit	Description
	align labels in ai-config schema

@​angular-devkit/build-angular

Commit	Description
	avoid extra tick in SSR builds

@​angular/build

Commit	Description
	preserve names in esbuild for improved debugging in dev mode

@​angular/ssr

Commit	Description
	introduce BootstrapContext for isolated server-side rendering

Breaking Changes

@​angular/ssr

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);
  

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);
  

For more information please see: https://github.com/angular/angular/security/advisories/GHSA-68x2-mx4q-78m7

20.3.0-rc.0

@​angular/cli

... (truncated)

Sourced from @​angular/ssr's changelog.

20.3.2 (2025-09-17)

19.2.17 (2025-09-17)

@​angular/build

Commit	Type	Description
365d525b5	fix	update vite to 6.3.6

20.3.1 (2025-09-11)

@​angular/build

Commit	Type	Description
be60be499	fix	add timestamp to bundle generation log
d60f4e53d	fix	update vite to version 7.1.5

18.2.21 (2025-09-10)

Breaking Changes

@​angular/ssr

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);
  

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);
  

... (truncated)

• 1b05a3a release: cut the v20.3.2 release
• ac7adf4 build: update pnpm to v10.17.0
• 5edb82e build: update cross-repo angular dependencies
• 34b88c8 build: enable minimumReleaseAge to mitigate dependency chain attacks
• 3164bc2 build: disable eslint await-thenable
• 5b804a5 build: update dependency aspect_rules_js to v2.6.0
• deb3ed0 Revert "fix(@​angular/build): preserve names in esbuild for improved debugging...
• 4c1ef20 build: lock file maintenance
• 3fb4aa2 build: update pnpm to v10.16.1
• bb93ebd build: update cross-repo angular dependencies
• Additional commits viewable in compare view

Sourced from axios's releases.

Release v1.12.0

Release notes:

Bug Fixes

• adding build artifacts (9ec86de)
• dont add dist on release (a2edc36)
• fetch-adapter: set correct Content-Type for Node FormData (#6998) (a9f47af)
• node: enforce maxContentLength for data: URLs (#7011) (945435f)
• package exports (#5627) (aa78ac2)
• params: removing '[' and ']' from URL encode exclude characters (#3316) (#5715) (6d84189)
• release pr run (fd7f404)
• types: change the type guard on isCancel (#5595) (0dbb7fd)

Features

• adapter: surface low‑level network error details; attach original error via cause (#6982) (78b290c)
• fetch: add fetch, Request, Response env config variables for the adapter; (#7003) (c959ff2)
• support reviver on JSON.parse (#5926) (2a97634), closes #5924
• types: extend AxiosResponse interface to include custom headers type (#6782) (7960d34)

Contributors to this release

• Willian Agostini
• Dmitriy Mozgovoy
• khani
• Ameer Assadi
• Emiedonmokumo Dick-Boro
• Zeroday BYTE
• Jason Saayman
• 최예찬
• Gligor Kotushevski
• Aleksandar Dimitrov

Sourced from axios's changelog.

1.12.0 (2025-09-11)

Bug Fixes

• adding build artifacts (9ec86de)
• dont add dist on release (a2edc36)
• fetch-adapter: set correct Content-Type for Node FormData (#6998) (a9f47af)
• node: enforce maxContentLength for data: URLs (#7011) (945435f)
• package exports (#5627) (aa78ac2)
• params: removing '[' and ']' from URL encode exclude characters (#3316) (#5715) (6d84189)
• release pr run (fd7f404)
• types: change the type guard on isCancel (#5595) (0dbb7fd)

Features

• adapter: surface low‑level network error details; attach original error via cause (#6982) (78b290c)
• fetch: add fetch, Request, Response env config variables for the adapter; (#7003) (c959ff2)
• support reviver on JSON.parse (#5926) (2a97634), closes #5924
• types: extend AxiosResponse interface to include custom headers type (#6782) (7960d34)

Contributors to this release

• Willian Agostini
• Dmitriy Mozgovoy
• khani
• Ameer Assadi
• Emiedonmokumo Dick-Boro
• Zeroday BYTE
• Jason Saayman
• 최예찬
• Gligor Kotushevski
• Aleksandar Dimitrov

• 0d8ad6e chore(release): v1.12.0 (#7013)
• fd7f404 fix: release pr run
• a2edc36 fix: dont add dist on release
• 9ec86de fix: adding build artifacts
• 945435f fix(node): enforce maxContentLength for data: URLs (#7011)
• 28e5e30 chore(sponsor): update sponsor block (#7005)
• d03f245 chore(CI): fixed release info script to use npm registry instead of git as fi...
• a0bc911 chore: removing dist files from src (#7002)
• c959ff2 feat(fetch): add fetch, Request, Response env config variables for the adapte...
• a9f47af fix(fetch-adapter): set correct Content-Type for Node FormData (#6998)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.