chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

[dependabot]

Bumps the npm_and_yarn group with 2 updates in the / directory: @angular/common and @angular/core.

Updates @angular/common from 21.2.18 to 21.2.19

Release notes

Sourced from @​angular/common's releases.

21.2.19

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params
	enable xsrf for root-provided HttpClient

platform-server

Commit	Description
	update domino to latest version

Changelog

Sourced from @​angular/common's changelog.

21.2.19 (2026-07-29)

compiler

Commit	Type	Description
e2660c3dee	fix	disallow i18n event attributes
7b884f585a	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
948a8d6831	fix	distinguish repeated transfer cache params
9949dccce1	fix	enable xsrf for root-provided HttpClient

platform-server

Commit	Type	Description
f34a93c946	fix	update domino to latest version

22.1.0 (2026-07-29)

Deprecations

http

• HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit	Type	Description
1ad6824d0d	fix	skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit	Type	Description
af5e4e1131	feat	Add an error for --global-foo cases (#68846)
d579ecaf73	feat	Disable '--global-' error outside of g3 (#68846)
f98547675c	feat	Namespace CSS variables to the app (#68846)
8c8b2f7783	feat	Support css var namespacing in properties (#68846)
292199aa4d	fix	permissive whitespace parsing in default never blocks
25c744c4d0	fix	support foreign components defined outside top-level scope
5bd00add07	fix	support foreign components inside control flow blocks (#69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#68674)

core

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
eab4847a8b	feat	Adds deep linking from Performance panel to DevTools
091456a214	fix	account for namespaces in host binding sanitization (#69558)
b3748e9fe4	fix	correct container anchor collection order to match DOM layout

... (truncated)

Commits

• 948a8d6 fix(http): distinguish repeated transfer cache params
• 9949dcc fix(http): enable xsrf for root-provided HttpClient
• See full diff in compare view

Updates @angular/core from 21.2.18 to 21.2.19

Release notes

Sourced from @​angular/core's releases.

21.2.19

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params
	enable xsrf for root-provided HttpClient

platform-server

Commit	Description
	update domino to latest version

Changelog

Sourced from @​angular/core's changelog.

21.2.19 (2026-07-29)

compiler

Commit	Type	Description
e2660c3dee	fix	disallow i18n event attributes
7b884f585a	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
948a8d6831	fix	distinguish repeated transfer cache params
9949dccce1	fix	enable xsrf for root-provided HttpClient

platform-server

Commit	Type	Description
f34a93c946	fix	update domino to latest version

22.1.0 (2026-07-29)

Deprecations

http

• HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit	Type	Description
1ad6824d0d	fix	skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit	Type	Description
af5e4e1131	feat	Add an error for --global-foo cases (#68846)
d579ecaf73	feat	Disable '--global-' error outside of g3 (#68846)
f98547675c	feat	Namespace CSS variables to the app (#68846)
8c8b2f7783	feat	Support css var namespacing in properties (#68846)
292199aa4d	fix	permissive whitespace parsing in default never blocks
25c744c4d0	fix	support foreign components defined outside top-level scope
5bd00add07	fix	support foreign components inside control flow blocks (#69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#68674)

core

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
eab4847a8b	feat	Adds deep linking from Performance panel to DevTools
091456a214	fix	account for namespaces in host binding sanitization (#69558)
b3748e9fe4	fix	correct container anchor collection order to match DOM layout

... (truncated)

Commits

• 7b884f5 fix(compiler): restrict possible event handler check to property names longer...
• e2660c3 fix(compiler): disallow i18n event attributes
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Dependencies / lockfile (package.json or pnpm-lock.yaml)

• This change is either a new dependency, an upgrade, or a removal, and the reason is clear (Required)
• If this is a new dependency, it is necessary and was checked to ensure it does not have any known vulnerabilities
• If this is an upgrade, the upgraded version was checked to ensure it does not have any known vulnerabilities
• If this is an upgrade, breaking changes were reviewed, especially for major version bumps
• Dependency security scan for this change has passed, or any reported issues are explicitly documented and approved (Required)