Skip to content

Upgrading @angular/core 21 to 22

Unknown21.2.26 → 22.2.5Security4New13Changed4Fixed65

Full comparisonBack to @angular/core
Fetching 58 releases from GitHub…7 / 58
UnknownUpgrade verdict

DepDelta is still reading the notes for 51 of 58 releases, so breaking changes can't be ruled out yet.

In plain terms
  • DepDelta is still reading the release notes in this range, so it can't rule out breaking changes yet.
  • This page updates as the notes come in.
Must act Top 3 of 4 that need code or config changes

Node.js requirement changed in 22.0.0-rc.2: ^20.19.0 || ^22.12.0 || >=24.0.0 → ^22.22.3 || ^24.15.0 || >=26.0.0.

What you must change

Security4
Hardens parameter encoding in @angular/common against prototype pollution.
22.2.3GitHub ReleaseSummarizedView source
Hardens the JIT compiler against prototype pollution.
22.2.3GitHub ReleaseSummarizedView source
Blocks dangerous data: and vbscript: URLs in the URL sanitizer.
22.2.1GitHub ReleaseSummarizedView source
Extends the data: URL allowlist for non-executable MIME types.
22.2.1GitHub ReleaseSummarizedView source