From 0a1bbbe31c05bc93fbe22245fcb862aca3a0ee34 Mon Sep 17 00:00:00 2001 From: Matthew Beck Date: Wed, 2 Sep 2026 14:00:35 -0700 Subject: [PATCH] release: cut the zone.js-0.16.3 release (cherry picked from commit 124bf448091d0b2314275ca9bed12d82b3b7ef7e) --- packages/zone.js/CHANGELOG.md | 12 ++++++++++++ packages/zone.js/package.json | 2 +- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/packages/zone.js/CHANGELOG.md b/packages/zone.js/CHANGELOG.md index c14980b88ba..5610e067a43 100644 --- a/packages/zone.js/CHANGELOG.md +++ b/packages/zone.js/CHANGELOG.md @@ -1,3 +1,15 @@ +## 0.16.3 (2026-09-02) + +* docs(zone.js): point the Bluebird link at the project repo ([731c838](https://github.com/angular/angular/commit/731c838)) +* fix(zone.js): preserve accessor and non-enumerable event listener options ([4c4a705](https://github.com/angular/angular/commit/4c4a705)), closes [#54142](https://github.com/angular/angular/issues/54142) [#54142](https://github.com/angular/angular/issues/54142) [#70431](https://github.com/angular/angular/issues/70431) +* ci: add Alan as a zone.js reviewer ([5553699](https://github.com/angular/angular/commit/5553699)) +* fix(zone.js): guard against null handle when detecting refreshable timers ([36c2197](https://github.com/angular/angular/commit/36c2197)), closes [#70044](https://github.com/angular/angular/issues/70044) +* fix(zone.js): vitest patching of describe/it curried calls ([e23541b](https://github.com/angular/angular/commit/e23541b)), closes [#69748](https://github.com/angular/angular/issues/69748) +* fix(zone.js): harden zoneSymbolEventNames and patches against __proto__ key ([2d33fd5](https://github.com/angular/angular/commit/2d33fd5)) +* fix(zone.js): harden zoneSymbolEventNames against __proto__ key (defense-in-depth) ([fd7c2da](https://github.com/angular/angular/commit/fd7c2da)) +* fix(zone.js): avoid type error on custom object rejection with rejection property ([fa75800](https://github.com/angular/angular/commit/fa75800)) +* fix(zone.js): validate __Zone_symbol_prefix to prevent DOM clobbering attacks ([e50f504](https://github.com/angular/angular/commit/e50f504)) + ## 0.16.2 (2026-05-06) * feat(zone.js): support vitest patching in zone.js/testing (#68395) ([62c6e3b](https://github.com/angular/angular/commit/62c6e3b)), closes [#68395](https://github.com/angular/angular/issues/68395) [#68395](https://github.com/angular/angular/issues/68395) diff --git a/packages/zone.js/package.json b/packages/zone.js/package.json index d99ae3ab584..9aecd0706da 100644 --- a/packages/zone.js/package.json +++ b/packages/zone.js/package.json @@ -1,6 +1,6 @@ { "name": "zone.js", - "version": "0.16.2", + "version": "0.16.3", "description": "Zones for JavaScript", "main": "./bundles/zone.umd.js", "module": "./fesm2015/zone.js",