chore(deps-dev): bump @angular/common from 19.2.20 to 21.2.7

[dependabot]

Bumps @angular/common from 19.2.20 to 21.2.7.

Release notes

Sourced from @​angular/common's releases.

21.2.7

compiler

Commit	Description
	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Description
	prevent recursive scope checks for invalid NgModule imports

core

Commit	Description
	prevent binding unsafe attributes on SVG animation elements (#67797)
	resolve component import by exact specifier in route lazy-loading schematic
	treat object[data] as resource URL context (#67797)

localize

Commit	Description
	validate locale in getOutputPathFn to prevent path traversal

router

Commit	Description
	pass outlet context to split to fix empty path named outlets

21.2.6

common

Commit	Description
	avoid redundant image fetch on destroy with auto sizes

compiler

Commit	Description
	prevent shimCssText from adding extra blank lines per CSS comment

core

Commit	Description
	fixes a regression with animate.leave and reordering

migrations

Commit	Description
	inject migration not work in multi-project workspace with option path

21.2.5

compiler

Commit	Description
	ensure generated code compiles
	parse named HTML entities containing digits

compiler-cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.7 (2026-04-01)

compiler

Commit	Type	Description
fea25d1a60	fix	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Type	Description
bba5ed8e64	fix	prevent recursive scope checks for invalid NgModule imports

core

Commit	Type	Description
d04ddd73df	fix	prevent binding unsafe attributes on SVG animation elements (#67797)
8fd896e99a	fix	resolve component import by exact specifier in route lazy-loading schematic
b682c62873	fix	treat object[data] as resource URL context (#67797)

localize

Commit	Type	Description
3c41e74fdd	fix	validate locale in getOutputPathFn to prevent path traversal

router

Commit	Type	Description
0960592d3d	fix	pass outlet context to split to fix empty path named outlets

22.0.0-next.5 (2026-03-25)

Breaking Changes

compiler-cli

• Elements with multiple matching selectors will now throw at compile time.

core

• Component with undefined changeDetection property are now OnPush by default. Specify changeDetection: ChangeDetectionStrategy.Eager to keep the previous behavior.

platform-browser

• Hammer.js integration has been removed. Use your own implementation.

common

Commit	Type	Description
c1312da183	fix	avoid redundant image fetch on destroy with auto sizes

compiler

Commit	Type	Description
e850643b1b	feat	Support comments in html element.
96be4f429b	fix	abstract emitter producing incorrect code for dynamic imports
5a712d42d1	fix	prevent shimCssText from adding extra blank lines per CSS comment

compiler-cli

Commit	Type	Description
ca67828ee2	refactor	introduce NG8023 compile-time diagnostic for duplicate selectors

core

... (truncated)

Commits

• 13f050d test: construct local Date objects to fix timezone flakiness
• d0cf299 test: remove unsupported timezone from formatDate tests
• b4ab6ba fix(common): avoid redundant image fetch on destroy with auto sizes
• adda6c5 build: update aspect_rules_js to 3.0.2
• 93c6dc6 Revert "refactor(http): Improves base64 encoding/decoding with feature detect...
• 76431ed Revert "fix(http): correctly cache blob responses in transfer cache (#67002)"
• 277ade9 fix(http): correctly cache blob responses in transfer cache (#67002)
• aeb9b81 refactor(http): Improves base64 encoding/decoding with feature detection (#67...
• ecf0bb4 test(http): refactors HTTP client tests to use TestBed and providers
• e2e9a9a fix(core): adds transfer cache to httpResource to fix hydration
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.