From ddfcaa0fa9148b7d89f64aaba5b5d808195963c3 Mon Sep 17 00:00:00 2001
From: Alan Agius <17563226+alan-agius4@users.noreply.github.com>
Date: Mon, 23 Feb 2026 17:19:54 +0000
Subject: [PATCH] release: cut the v21.2.0-rc.1 release
---
CHANGELOG.md | 19 +++++++++++++++++++
package.json | 2 +-
2 files changed, 20 insertions(+), 1 deletion(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2570306842cf..8a0146416420 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,22 @@
+
+
+# 21.2.0-rc.1 (2026-02-23)
+
+### @angular/cli
+
+| Commit | Type | Description |
+| --------------------------------------------------------------------------------------------------- | ---- | ----------------------------------------------------------------------------------- |
+| [cdd26bb66](https://github.com/angular/angular-cli/commit/cdd26bb66d8ab334f76323c2b5cae1aa8ce815f6) | fix | validate package manager version using `semver.valid` and throw an error if invalid |
+
+### @angular/ssr
+
+| Commit | Type | Description |
+| --------------------------------------------------------------------------------------------------- | ---- | --------------------------------------------------- |
+| [cf5a72d33](https://github.com/angular/angular-cli/commit/cf5a72d33c1753c121f71498c0c415a0f0864492) | fix | prevent open redirect via X-Forwarded-Prefix header |
+| [f78f38827](https://github.com/angular/angular-cli/commit/f78f38827861cf01471e30fcf81ef14d6265a0f2) | fix | validate host headers to prevent header-based SSRF |
+
+
+
# 21.2.0-rc.0 (2026-02-18)
diff --git a/package.json b/package.json
index 6fce98729c32..2439d7fed4ff 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
{
"name": "@angular/devkit-repo",
- "version": "21.2.0-rc.0",
+ "version": "21.2.0-rc.1",
"private": true,
"description": "Software Development Kit for Angular",
"keywords": [