build(deps): bump @angular/common from 21.0.8 to 21.2.20

[dependabot]

Bumps @angular/common from 21.0.8 to 21.2.20.

Release notes

Sourced from @​angular/common's releases.

21.2.20

core

Commit	Description
	sanitize host bindings on concrete hosts

http

Commit	Description
	match header values exactly when deleting
	preserve immutability of materialized clones
	run root interceptors in the terminal request chain

21.2.19

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params
	enable xsrf for root-provided HttpClient

platform-server

Commit	Description
	update domino to latest version

21.2.18

compiler-cli

Commit	Description
	update babel dependencies to latest v7

core

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

21.2.17

common

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.20 (2026-08-12)

core

Commit	Type	Description
6afe6fa781	fix	sanitize host bindings on concrete hosts

http

Commit	Type	Description
fec5977df4	fix	match header values exactly when deleting
e33d69a71c	fix	preserve immutability of materialized clones
caf616670f	fix	run root interceptors in the terminal request chain

21.2.19 (2026-07-29)

compiler

Commit	Type	Description
e2660c3dee	fix	disallow i18n event attributes
7b884f585a	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
948a8d6831	fix	distinguish repeated transfer cache params
9949dccce1	fix	enable xsrf for root-provided HttpClient

platform-server

Commit	Type	Description
f34a93c946	fix	update domino to latest version

21.2.18 (2026-07-08)

compiler-cli

Commit	Type	Description
8d22cc953b	fix	update babel dependencies to latest v7

core

Commit	Type	Description
6bcce117fb	fix	avoid caching missing locale data
5a693bafcd	fix	reject dynamic script host elements

http

Commit	Type	Description
91df739b80	fix	prevent caching of responses with Set-Cookie headers

service-worker

| Commit | Type | Description |

... (truncated)

Commits

• caf6166 fix(http): run root interceptors in the terminal request chain
• fec5977 fix(http): match header values exactly when deleting
• e33d69a fix(http): preserve immutability of materialized clones
• 948a8d6 fix(http): distinguish repeated transfer cache params
• 9949dcc fix(http): enable xsrf for root-provided HttpClient
• 91df739 fix(http): prevent caching of responses with Set-Cookie headers
• 86a56dc fix(common): Limits date format string length
• bcb1b7e fix(http): preserve empty referrer option in HttpRequest
• a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
• bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: fd36aadc-14a9-43fd-8714-3b140b6c21cd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}