Skip to content

chore(deps): update dependency @angular/compiler to v21.2.19 [security] (main) - #4420

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-npm-angular-compiler-vulnerability
Open

chore(deps): update dependency @angular/compiler to v21.2.19 [security] (main)#4420
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-npm-angular-compiler-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@angular/compiler (source) 21.2.1821.2.19 age confidence

Angular i18n: Cross-Site Scripting (XSS) via event-handler attributes

CVE-2026-69151 / GHSA-jj27-h5hq-8x99

More information

Details

A Cross-Site Scripting (XSS) vulnerability has been identified in the Angular compiler's internationalization (i18n) pipeline. Although Angular disallows binding to event-handler attributes such as onclick and onerror through standard attribute validation (validateAttribute() / validateProperty()), the i18n metadata collection path allowed these same attribute names to be marked for translation using i18n-on* attributes (e.g., i18n-onerror).

When exploited, a lower-trust translation file could replace a benign static handler such as onerror="void 0" with arbitrary executable JavaScript in the localized build.

The following example illustrates a vulnerable pattern:

<img src="foo.jpg" onerror="void 0" i18n-onerror />
Impact

When exploited, this vulnerability allows arbitrary JavaScript execution within the context of the vulnerable application's domain if an attacker can control or influence the translation files used during localization. This can lead to:

  • Session Hijacking: Accessing session cookies, tokens, or sensitive user data.
  • Unauthorized Actions: Performing actions on behalf of the authenticated user.
Patched Versions
  • 22.0.1
  • 21.2.19
  • 20.3.27
Workarounds

Ensure that static event-handler attributes (e.g., onerror, onclick) are never marked for internationalization (i18n-on*) in application templates, and ensure translation files are sourced from trusted origins.

Severity

  • CVSS Score: 7.6 / 10 (High)
  • Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).


Release Notes

angular/angular (@​angular/compiler)

v21.2.19

Compare Source

compiler
Commit Type Description
e2660c3dee fix disallow i18n event attributes
7b884f585a fix restrict possible event handler check to property names longer than 2 characters
http
Commit Type Description
948a8d6831 fix distinguish repeated transfer cache params
9949dccce1 fix enable xsrf for root-provided HttpClient
platform-server
Commit Type Description
f34a93c946 fix update domino to latest version

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 3, 2026
@renovate
renovate Bot requested a review from a team as a code owner August 3, 2026 17:28
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 3, 2026
@nx-cloud

nx-cloud Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

View your CI Pipeline Execution ↗ for commit a5512ec

Command Status Duration Result
nx run-many --target=build,build-jar ❌ Failed 10m 35s View ↗
nx affected --target=test --coverage --configur... ✅ Succeeded 5m 56s View ↗
nx affected --target=lint --configuration ci ✅ Succeeded 10m 28s View ↗
nx run-many --tui=false --target=build --projec... ✅ Succeeded 2m 26s View ↗
nx run-many --target=documentation ✅ Succeeded 1m 18s View ↗
nx affected --target=package-github-action ✅ Succeeded 1m 8s View ↗

💡 Dealing with memory or CPU issues? See memory and CPU details with the resource usage add-on ↗.


☁️ Nx Cloud last updated this comment at 2026-08-03 17:47:36 UTC

@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown

⚠️ Yarn detected 186 errors during the install process.


List of reported errors
Error Description
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p017bc1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p04b195), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p066f25), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p06db93), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p0a13af), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p0bc3c0), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p0d4d67), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p0f76ea), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p10cecd), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p12789a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p127d40), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p13e420), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p143ea3), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p15d738), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p17bafa), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p1a6708), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p1a6a1d), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p1aa288), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p1ca82e), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p1f12e8), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p1f8a1a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p21f92c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p228864), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p22e006), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p23a410), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p263a30), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p27cd6d), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p28b3bb), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p2ab50c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p3390ad), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p348ffa), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p35a163), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p36e29b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p3741cf), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p38a1dc), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p3c4923), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p3d3d83), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p3fc437), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p400925), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4083f6), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p41ac81), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p429396), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4372ec), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p440153), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p453e73), which doesn't satisfy what @angular/platform-browser-dynamic and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p48e789), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p491a3f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p497de5), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4a55ee), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4b73d5), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4b9ead), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4c3716), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4cd8d9), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4d6b75), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4d6fc3), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4f14fd), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p4ff3a3), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p500b63), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p515280), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p54d693), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p579c57), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p57f5ad), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p580813), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p59cff7), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p5b0919), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p5b27bd), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p5b7711), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p5b96fb), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p5ce608), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p5f699a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p614bcc), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p6199ed), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p61e2c1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p641ff1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p64b168), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p65a04e), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p677631), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p682f89), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p68ca39), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p71947c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p722d4f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p74f16b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p75119c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p7550d4), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p772775), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p781542), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p7b9126), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p7c7c2f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p7f1d30), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p840e17), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p85481d), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p86245e), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p868b67), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p86e50b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p885b8a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p886846), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p898500), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p89ec24), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8aa911), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8bec61), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8da176), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8dce12), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8dd775), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8e2a61), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8e5550), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8e9a0f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p8f6547), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p902bfe), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p904c65), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p90786b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9291c2), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p929e68), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9382cf), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p954940), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p964bb9), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p96d9fc), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9b332a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9c6776), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9e3591), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9eb3c1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (p9f1ff7), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa04a5c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa0beda), which doesn't satisfy what @angular/platform-browser-dynamic and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa3a8ae), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa5fe38), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa60f64), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa7b00f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pa7cc83), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (paa64ee), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pabd28a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pac3ce1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pad6acb), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pae0a65), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (paff07b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb0283b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb259f7), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb342fc), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb45cf3), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb4bc82), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb69be8), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb714d1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb8585c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb9648f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb9be53), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pb9e49f), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pbb7024), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pbd5c21), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pbe09f6), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pc0c38d), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pc1fd55), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pc8d9b1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pccc839), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pce4f5e), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pceee8e), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pd3e14d), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pd58786), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pda37a5), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pdf9629), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe0296e), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe3033a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe52380), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe655f5), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe66fbc), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe760bc), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pe95300), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (peb62a3), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (peba4b4), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pec4c9d), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (peca291), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pecb15c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pece93b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf08799), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf15faa), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf4a8bb), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf543b7), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf6dbb1), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf8a9f0), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf962be), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pf9a766), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pfa66d3), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pfc993a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pfd3b45), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pfd451c), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pfde938), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pfe468a), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).
YN0060 @angular/compiler is listed by your project with version 21.2.19 (pff496b), which doesn't satisfy what @angular/compiler-cli and other dependencies request (21.2.18).

@codecov

codecov Bot commented Aug 3, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 70.52%. Comparing base (789e6ab) to head (a5512ec).

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@nx-cloud nx-cloud Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nx Cloud is proposing a fix for your failed CI:

We narrowed the logger parameter type in LocalizationExtractor from logging.LoggerApi to Pick<logging.LoggerApi, 'debug' | 'error' | 'warn'> in both the @o3r/localization and @o3r/transloco builder helpers. This resolves the TypeScript structural incompatibility that arose because the @angular/compiler security update introduced @angular-devkit/core@21.2.19 alongside the pre-existing 21.2.18, causing LoggerApi.createChild() — which returns a Logger class with a protected _subject member — to be treated as an incompatible type across the two module instances. By excluding createChild() via Pick, only the three methods actually used by the class are required, and their signatures are structurally identical across both versions.

Tip

We verified this fix by re-running transloco:build-builders.

Suggested Fix changes
diff --git a/packages/@o3r/localization/builders/helpers/localization-generator.ts b/packages/@o3r/localization/builders/helpers/localization-generator.ts
index 1af544543..9469a5025 100644
--- a/packages/@o3r/localization/builders/helpers/localization-generator.ts
+++ b/packages/@o3r/localization/builders/helpers/localization-generator.ts
@@ -75,9 +75,9 @@ export class LocalizationExtractor {
   /** TsConfig of the file to base on */
   private readonly tsconfigPath: string;
 
-  private readonly logger: logging.LoggerApi;
+  private readonly logger: Pick<logging.LoggerApi, 'debug' | 'error' | 'warn'>;
 
-  constructor(tsconfigPath: string, logger: logging.LoggerApi, private readonly options?: Partial<LocalizationExtractorBuilderSchema>) {
+  constructor(tsconfigPath: string, logger: Pick<logging.LoggerApi, 'debug' | 'error' | 'warn'>, private readonly options?: Partial<LocalizationExtractorBuilderSchema>) {
     this.tsconfigPath = tsconfigPath;
     this.logger = logger;
   }
diff --git a/packages/@o3r/transloco/builders/helpers/localization-generator.ts b/packages/@o3r/transloco/builders/helpers/localization-generator.ts
index cc52e78bc..09910209a 100644
--- a/packages/@o3r/transloco/builders/helpers/localization-generator.ts
+++ b/packages/@o3r/transloco/builders/helpers/localization-generator.ts
@@ -78,9 +78,9 @@ export class LocalizationExtractor {
   /** TsConfig of the file to base on */
   private readonly tsconfigPath: string;
 
-  private readonly logger: logging.LoggerApi;
+  private readonly logger: Pick<logging.LoggerApi, 'debug' | 'error' | 'warn'>;
 
-  constructor(tsconfigPath: string, logger: logging.LoggerApi, private readonly options?: Partial<LocalizationExtractorBuilderSchema>) {
+  constructor(tsconfigPath: string, logger: Pick<logging.LoggerApi, 'debug' | 'error' | 'warn'>, private readonly options?: Partial<LocalizationExtractorBuilderSchema>) {
     this.tsconfigPath = tsconfigPath;
     this.logger = logger;
   }

Apply fix via Nx Cloud  Reject fix via Nx Cloud


Or Apply changes locally with:

npx nx-cloud apply-locally sHxA-hjC3

Apply fix locally with your editor ↗   View interactive diff ↗



🎓 Learn more about Self-Healing CI on nx.dev

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants