Bumps @angular/common from 4.2.3 to 20.3.27.

Sourced from @​angular/common's releases.

20.3.27

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params

platform-server

Commit	Description
	update domino to latest version

20.3.26

compiler-cli

Commit	Description
	update babel dependencies to latest v7

core

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

20.3.25

common

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Description
	sanitize two-way properties

core

Commit	Description
	harden TransferState restoration against DOM clobbering

... (truncated)

Sourced from @​angular/common's changelog.

20.3.27 (2026-07-29)

compiler

Commit	Type	Description
5dbcd0ee16	fix	disallow i18n event attributes
db0d4a1a39	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
a64e2883e9	fix	distinguish repeated transfer cache params

platform-server

Commit	Type	Description
6f80cca0b8	fix	update domino to latest version

22.0.8 (2026-07-22)

common

Commit	Type	Description
c0368f2278	fix	preserve crossorigin on image preloads

core

Commit	Type	Description
8616ba9db6	fix	ensure SVG animation attributeName is checked case-insensitively

forms

Commit	Type	Description
d302c7ab83	fix	ensure pending status propagates to the root form in signal forms

http

Commit	Type	Description
9d40f8aefe	fix	prevent transfer cache key collisions

migrations

Commit	Type	Description
388daea2fc	fix	correctly migrate ngClass with mixed space-separated keys
bb39cda648	fix	preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit	Type	Description
91e33aa1de	fix	avoid prototype lookups in date format caches

compiler

... (truncated)

• a64e288 fix(http): distinguish repeated transfer cache params
• b963f61 fix(http): prevent caching of responses with Set-Cookie headers
• 06be298 fix(http): preserve empty referrer option in HttpRequest
• 9f443bc fix(common): Limits date format string length
• fa940e1 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
• 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
• 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
• e2ef1ce fix(http): skip transfer cache for fetch credentialed requests
• 3d135ce fix(common): add upper bounds for digitsInfo
• 39a4b4c fix(common): sanitize placeholder
• Additional commits viewable in compare view

This version was pushed to npm by google-wombot, a new releaser for @​angular/common since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.