migrations

Commit	Description
	resolve migration failure when tsconfig specifies rootDir

migrations

Commit	Description
	resolve migration failure when tsconfig specifies rootDir

compiler

Commit	Description
	account for NgModule dependencies in JIT-compiled partial declarations

compiler-cli

Commit	Description
	report diagnostic instead of crashing on malformed host binding

core

Commit	Description
	avoid uncaught promise errors in injectAsync prefetching

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

migrations

Commit	Description
	add migration from injectable to service

router

Commit	Description
	handle null and undefined inputs in RouterLinkActive

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

upgrade

Commit	Description
	support model() signals in downgradeComponent

compiler

Commit	Description
	account for NgModule dependencies in JIT-compiled partial declarations
	remove unused import breaking CI in 22.0.x

compiler-cli

Commit	Description
	report diagnostic instead of crashing on malformed host binding

core

Commit	Description
	avoid uncaught promise errors in injectAsync prefetching

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

upgrade

Commit	Description
	support model() signals in downgradeComponent

common

Commit	Description
	escape anchor fragment in shadow DOM name selector

compiler

Commit	Description
	restrict possible event handler check to property names longer than 2 characters

core

Commit	Description
	avoid caching missing locale data
	escape overlapping comment delimiters in escapeCommentText
	guard against DOM clobbering in declareExperimentalWebMcpTool
	preserve leave animation for sibling instances sharing a TNode
	prevent unsubscribe during emit from throwing off other listeners
	treat iframe credentialless as security-sensitive
	detect existing signal dependency without checking all producer links

http

Commit	Description
	distinguish repeated transfer cache params

migrations

Commit	Description
	migration skip any target are not build or test

common

Commit	Description
	escape anchor fragment in shadow DOM name selector
	skip transfer cache for uncacheable HTTP traffic (#69316)

compiler

Commit	Description
	restrict possible event handler check to property names longer than 2 characters

core

Commit	Description
	avoid caching missing locale data
	escape overlapping comment delimiters in escapeCommentText
	guard against DOM clobbering in declareExperimentalWebMcpTool
	preserve leave animation for sibling instances sharing a TNode
	prevent unsubscribe during emit from throwing off other listeners
	treat iframe credentialless as security-sensitive
	detect existing signal dependency without checking all producer links

http

Commit	Description
	distinguish repeated transfer cache params
	skip transfer cache for fetch credentialed requests (#69316)

migrations

Commit	Description
	migration skip any target are not build or test

• fix(vscode-extension): resolve relative workspace tsdk paths to absolute (f6695b0eb2)
• fix(language-service): prevent external template inlay hints from appearing in TS files (43a0e28729)
• fix(vscode-extension): inspect tsdk configurations correctly (102ffb65d1)

common

Commit	Description
	skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit	Description
	support foreign components defined outside top-level scope

compiler-cli

Commit	Description
	allow passing uninvoked signals as foreign component props
	support import aliases in foreignImports (#68674)

core

Commit	Description
	add custom set option to linkedSignal
	correct container anchor collection order to match DOM layout
	introduce disposal mechanism for Angular views in foreign @content
	introduce logical-only containers for foreign content
	set current tnode in foreign component instruction on reuse

http

Commit	Description
	skip transfer cache for fetch credentialed requests (#69017)
	deprecate jsonp support

language-service

Commit	Description
	compile non-exported classes if standalone (#68454)
	Typecheck templates which would require inline typecheck blocks (#68454)

platform-server

Commit	Description
	harden platform location origin validation during SSR (#69184)

Deprecations

http

• HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit	Description
	escape CSS string-terminating characters in escapeCssUrl
	Limits date format string length
	prevent prototype pollution in formatDateTime
	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Description
	disallow i18n event attributes
	more robust logic to check if regex can be optimized
	sanitize href/xlink:href attributes of any element of the MathML namespace
	sanitize two-way properties

compiler-cli

Commit	Description
	bind switch exhaustive check expressions

core

Commit	Description
	disable WebMCP during SSR
	Handle synchronous errors in PendingTasks.run function
	harden TransferState restoration against DOM clobbering
	prevent dangling prevConsumer reference from leaking destroyed views (#68681)
	require WebMCP tool descriptions
	update comment for Default change detection
	use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray
	validate lowercase SVG animation attribute names

forms

Commit	Description
	delay mcp reading the form model by a tick
	harden FormGroup control lookups against prototype shadowing
	remove animationstart listener on component destroy to prevent memory leak
	set additionalProperties: false on generated WebMCP form

http

Commit	Description
	ensure query parameters are inserted before URL fragments
	pass down the reportUploadProgress and reportDownloadProgress on post/patch requests
	preserve empty referrer option in HttpRequest
	Rejects non-HTTP(S) URLs in JSONP requests

language-service

Commit	Description
	prevent external template inlay hints from appearing in TS files

platform-server

Commit	Description
	harden platform location origin validation during SSR
	deprecate ServerXhr

router

Commit	Description
	use native URL object for navigation boundary and comparison

service-worker

Commit	Description
	Strips sensitive headers on cross-origin redirects

Deprecations

platform-server

• XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.
  (cherry picked from commit 8446e46)

common

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Description
	sanitize two-way properties

core

Commit	Description
	harden TransferState restoration against DOM clobbering
	validate lowercase SVG animation attribute names (#69269)

http

Commit	Description
	preserve empty referrer option in HttpRequest
	Rejects non-HTTP(S) URLs in JSONP requests
	skip transfer cache for fetch credentialed requests

platform-server

Commit	Description
	harden platform location origin validation during SSR
	deprecate ServerXhr (#69255)

service-worker

Commit	Description
	Strips sensitive headers on cross-origin redirects

Deprecations

platform-server

• XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.