build(deps): bump the angular group with 13 updates

[dependabot]

Bumps the angular group with 13 updates:

Package	From	To
@angular/animations	19.2.6	20.3.1
@angular/cdk	19.2.9	20.2.4
@angular/common	19.2.6	20.3.1
@angular/compiler	19.2.6	20.3.1
@angular/core	19.2.6	20.3.1
@angular/forms	19.2.6	20.3.1
@angular/material	19.2.9	20.2.4
@angular/material-date-fns-adapter	19.2.9	20.2.4
@angular/platform-browser	19.2.6	20.3.1
@angular/platform-browser-dynamic	19.2.6	20.3.1
@angular/router	19.2.6	20.3.1
@angular/cli	19.2.14	20.3.2
@angular/compiler-cli	19.2.6	20.3.1

Updates @angular/animations from 19.2.6 to 20.3.1

Release notes

Sourced from @​angular/animations's releases.

20.3.1

compiler

Commit	Description
	Add support for aria-invalid (#63748)

compiler-cli

Commit	Description
	only bind inputs that are part of microsyntax to a structural directive (#52453)
	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Description
	prevent animation events from being cleaned up on destroy (#63414)
	Prevent leave animations on a move operation (#63745)

migrations

Commit	Description
	fix route-lazy-loading migration (#63818)

20.3.0

Commit	Description
	remove refresh button from transfer state tab (#63592)

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63636)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

For more information please see: GHSA-68x2-mx4q-78m7

... (truncated)

Changelog

Sourced from @​angular/animations's changelog.

20.3.1 (2025-09-17)

compiler

Commit	Type	Description
7fb5a8087e	fix	Add support for aria-invalid (#63748)

compiler-cli

Commit	Type	Description
8843707919	fix	only bind inputs that are part of microsyntax to a structural directive (#52453)
38c9921ff3	fix	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Type	Description
802dbcc2a0	fix	prevent animation events from being cleaned up on destroy (#63414)
3ec8a5c753	fix	Prevent leave animations on a move operation (#63745)

migrations

Commit	Type	Description
6e54bdfdcb	fix	fix route-lazy-loading migration (#63818)

18.2.14 (2025-09-10)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

  (cherry picked from commit 8bf80c9d2314b4f2bcf3df83ae01552a6fc49834)

core

Commit	Type	Description
9d1fb33f5e	fix	introduce BootstrapContext for improved server bootstrapping (#63640)

... (truncated)

Commits

• 7a7725e refactor(core): Update tests for zoneless by default (#63672)
• ed50120 refactor(animations): remove dependency on @angular/common (#63248)
• 9a27c5b build: rename defaults2.bzl to defaults.bzl (#63384)
• ec8cd3e refactor(animations): optimize resolveTimeExpression (#62927)
• fa8d8b8 build: migrate all npm packages to use new rules_js based npm_package rule (#...
• cbc258e build: remove ts_project_interop infrastructure (#62908)
• 793ff35 build: move http_server and generate_api_docs into defaults2.bzl (#62878)
• 9766116 refactor(animations): deprecate the animations package (#62795)
• 8bf97d1 build: remove all usages of the interop_deps attr for ts_project and ng_proje...
• 23d5877 build: migrate to new toolchain usage for api goldens (#62688)
• Additional commits viewable in compare view

Updates @angular/cdk from 19.2.9 to 20.2.4

Release notes

Sourced from @​angular/cdk's releases.

20.2.4

material

Commit	Description
	tabs: attach content inside the zone (#31868)

20.2.3

material

Commit	Description
	progress-bar: avoid CSP issues due to buffer dots (#31818)
	slider: incorrect indicator transform origin in M3 (#31834)

cdk

Commit	Description
	drag-drop: allow axis lock to be reset (#31829)

20.2.2

No release notes provided.

20.2.1

material

Commit	Description
	datepicker: add visible labels to calendar buttons (#31777)
	sort: error if signal is bound to disabled input (#31776)

cdk

Commit	Description
	tree: resolve memory leak (#31754)

20.2.0

cdk-experimental

Commit	Description
	toolbar: add toolbar directive and demo (#31676)
	tree: add nav mode (#31460)
	tree: use shared example classes (#31494)
	ui-patterns: add label control (#31459)
	ui-patterns: add popup behavior (#31550)
	ui-patterns: create List behavior (#31601)
	ui-patterns: toolbar and toolbar widget (#31670)
	ui-patterns: toolbar ui pattern tests (#31688)
	listbox: make CdkOption public (#31588)
	radio-group: fix activedescendant example (#31499)

material

Commit	Description
	core: add an m2-theme API to define system vars (#31616)
	table: accept undefined sort and paginator (#31269)

... (truncated)

Changelog

Sourced from @​angular/cdk's changelog.

20.2.4 "v20.2.4 release" (2025-09-17)

material

Commit	Type	Description
e7a0c19d0	fix	tabs: attach content inside the zone (#31868)

21.0.0-next.3 "red-envelope" (2025-09-11)

Breaking Changes

material

• • MatCommonModule has been removed.
  • GranularSanityChecks has been removed.
  • MATERIAL_SANITY_CHECKS has been removed.
  • SanityChecks has been removed.

cdk-experimental

Commit	Type	Description
f137183858	fix	accordion: removes inert attribute from accordion trigger (#31817)

material

Commit	Type	Description
931ac3c1c7	fix	chips: Adjust trailing icon opacity based on chip state (#31828)
c832533062	fix	core: remove MatCommonModule (#31813)
878700d10a	fix	progress-bar: avoid CSP issues due to buffer dots (#31818)
5a1a0ba4e6	fix	select: ensure proper highlighting on selection (#31789)
e0a35c52d5	fix	slider: incorrect indicator transform origin in M3 (#31834)

cdk

Commit	Type	Description
54f641e330	fix	drag-drop: allow axis lock to be reset (#31829)

20.2.3 "tango-heels" (2025-09-11)

cdk

Commit	Type	Description
442d4ca6b7	fix	drag-drop: allow axis lock to be reset (#31829)

material

Commit	Type	Description
ec33bf8eba	fix	progress-bar: avoid CSP issues due to buffer dots (#31818)
9a68265302	fix	slider: incorrect indicator transform origin in M3 (#31834)

... (truncated)

Commits

• 80c7e76 release: cut the v20.2.4 release
• 1fa0315 build: update pnpm to v10.17.0 (#31884)
• 741db87 build: lock file maintenance (#31886)
• 4bb552b build: update cross-repo angular dependencies (#31883)
• 6ec252d build: update pnpm to v10.16.1 (#31771)
• 3f6020b build: enable minimumReleaseAge to mitigate dependency chain attacks (#31880)
• e7a0c19 fix(material/tabs): attach content inside the zone (#31868)
• bdb4636 build: update Stackblitz examples (#31847)
• dde1fd2 build: update cross-repo angular dependencies (#31878)
• f24b8ac build: update cross-repo angular dependencies (#31861)
• Additional commits viewable in compare view

Updates @angular/common from 19.2.6 to 20.3.1

Release notes

Sourced from @​angular/common's releases.

20.3.1

compiler

Commit	Description
	Add support for aria-invalid (#63748)

compiler-cli

Commit	Description
	only bind inputs that are part of microsyntax to a structural directive (#52453)
	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Description
	prevent animation events from being cleaned up on destroy (#63414)
	Prevent leave animations on a move operation (#63745)

migrations

Commit	Description
	fix route-lazy-loading migration (#63818)

20.3.0

Commit	Description
	remove refresh button from transfer state tab (#63592)

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63636)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

For more information please see: GHSA-68x2-mx4q-78m7

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

20.3.1 (2025-09-17)

compiler

Commit	Type	Description
7fb5a8087e	fix	Add support for aria-invalid (#63748)

compiler-cli

Commit	Type	Description
8843707919	fix	only bind inputs that are part of microsyntax to a structural directive (#52453)
38c9921ff3	fix	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Type	Description
802dbcc2a0	fix	prevent animation events from being cleaned up on destroy (#63414)
3ec8a5c753	fix	Prevent leave animations on a move operation (#63745)

migrations

Commit	Type	Description
6e54bdfdcb	fix	fix route-lazy-loading migration (#63818)

18.2.14 (2025-09-10)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

  (cherry picked from commit 8bf80c9d2314b4f2bcf3df83ae01552a6fc49834)

core

Commit	Type	Description
9d1fb33f5e	fix	introduce BootstrapContext for improved server bootstrapping (#63640)

... (truncated)

Commits

• 423cc17 refactor(common): trim undefined from locale data. (#63520)
• b05552f docs: add documentation for NG02802 warning about HttpTransferCache headers (...
• 1b7f530 build: add a noDuplicateEnumValue rule (#63483)
• 7a7725e refactor(core): Update tests for zoneless by default (#63672)
• b549cd2 refactor(bazel): reduce build deps (#63348)
• e8d9bc5 refactor(http): rework the HttpEvent union to improve narrowing. (#63267)
• 705b94b refactor: remove TODOs which have been corrected (#63421)
• 9a27c5b build: rename defaults2.bzl to defaults.bzl (#63384)
• 10b0927 refactor: various build and import specificer fixes for strict deps (#63324)
• 38b9b79 build: move from using WORKSPACE to MODULE.bazel (#63249)
• Additional commits viewable in compare view

Updates @angular/compiler from 19.2.6 to 20.3.1

Release notes

Sourced from @​angular/compiler's releases.

20.3.1

compiler

Commit	Description
	Add support for aria-invalid (#63748)

compiler-cli

Commit	Description
	only bind inputs that are part of microsyntax to a structural directive (#52453)
	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Description
	prevent animation events from being cleaned up on destroy (#63414)
	Prevent leave animations on a move operation (#63745)

migrations

Commit	Description
	fix route-lazy-loading migration (#63818)

20.3.0

Commit	Description
	remove refresh button from transfer state tab (#63592)

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63636)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

For more information please see: GHSA-68x2-mx4q-78m7

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

20.3.1 (2025-09-17)

compiler

Commit	Type	Description
7fb5a8087e	fix	Add support for aria-invalid (#63748)

compiler-cli

Commit	Type	Description
8843707919	fix	only bind inputs that are part of microsyntax to a structural directive (#52453)
38c9921ff3	fix	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Type	Description
802dbcc2a0	fix	prevent animation events from being cleaned up on destroy (#63414)
3ec8a5c753	fix	Prevent leave animations on a move operation (#63745)

migrations

Commit	Type	Description
6e54bdfdcb	fix	fix route-lazy-loading migration (#63818)

18.2.14 (2025-09-10)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

  (cherry picked from commit 8bf80c9d2314b4f2bcf3df83ae01552a6fc49834)

core

Commit	Type	Description
9d1fb33f5e	fix	introduce BootstrapContext for improved server bootstrapping (#63640)

... (truncated)

Commits

• 7fb5a80 fix(compiler): Add support for aria-invalid (#63748)
• 5f5828f refactor(core): dispatch enter and leave animations at the right times (#63710)
• 479a919 fix(compiler): fixes regression with event parsing and animate prefix (#63470)
• d7b6045 fix(compiler): fixes animations on elements with structural directives (#63390)
• 9a27c5b build: rename defaults2.bzl to defaults.bzl (#63384)
• a28672f fix(compiler): Keep paraenthesis in Nullish + Boolean expression. (#63292)
• 7b51728 fix(compiler): fixes animation event host bindings not firing (#63217)
• 19ed12c fix(compiler): error when ng-content fallback has translated children (#63156)
• 557e6fe fix(compiler): incorrect source span for expression AST inside template attri...
• d9f0e6b Revert "feat(platform-browser): Add IsolatedShadowDom encapsulation method (#...
• Additional commits viewable in compare view

Updates @angular/core from 19.2.6 to 20.3.1

Release notes

Sourced from @​angular/core's releases.

20.3.1

compiler

Commit	Description
	Add support for aria-invalid (#63748)

compiler-cli

Commit	Description
	only bind inputs that are part of microsyntax to a structural directive (#52453)
	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Description
	prevent animation events from being cleaned up on destroy (#63414)
	Prevent leave animations on a move operation (#63745)

migrations

Commit	Description
	fix route-lazy-loading migration (#63818)

20.3.0

Commit	Description
	remove refresh button from transfer state tab (#63592)

core

Commit	Description
	introduce BootstrapContext for improved server bootstrapping (#63636)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

For more information please see: GHSA-68x2-mx4q-78m7

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

20.3.1 (2025-09-17)

compiler

Commit	Type	Description
7fb5a8087e	fix	Add support for aria-invalid (#63748)

compiler-cli

Commit	Type	Description
8843707919	fix	only bind inputs that are part of microsyntax to a structural directive (#52453)
38c9921ff3	fix	signal not invoked diagnostic not raised when input has same name in template (#63754)

core

Commit	Type	Description
802dbcc2a0	fix	prevent animation events from being cleaned up on destroy (#63414)
3ec8a5c753	fix	Prevent leave animations on a move operation (#63745)

migrations

Commit	Type	Description
6e54bdfdcb	fix	fix route-lazy-loading migration (#63818)

18.2.14 (2025-09-10)

Breaking Changes

core

• The server-side bootstrapping process has been changed to eliminate the reliance on a global platform injector.

  Before:

  const bootstrap = () => bootstrapApplication(AppComponent, config);

  After:

  const bootstrap = (context: BootstrapContext) =>
    bootstrapApplication(AppComponent, config, context);

  A schematic is provided to automatically update main.server.ts files to pass the BootstrapContext to the bootstrapApplication call.

  In addition, getPlatform() and destroyPlatform() will now return null and be a no-op respectively when running in a server environment.

  (cherry picked from commit 8bf80c9d2314b4f2bcf3df83ae01552a6fc49834)

core

Commit	Type	Description
9d1fb33f5e	fix	introduce BootstrapContext for improved server bootstrapping (#63640)

... (truncated)

Commits

• 79a818b build: update cross-repo angular dependencies (#63877)
• dcdca98 refactor(core): remove usages of Promise.withResolvers (#63856)
• 423cc17 refactor(common): trim undefined from locale data. (#63520)
• dd6e1c3 refactor(core): prevent input migration from introducing a breaking change (#...
• 6e54bdf fix(migrations): fix route-lazy-loading migration (#63818)
• 0afd9c5 refactor(core): swap dev/prod error handling order in injector for tree-shaki...
• c80d9ba docs: update doc to clear up difference between toObservable/ `outputToObse...
• 4a23f6e refactor(core): wrap checkNoChanges body in if (ngDevMode) for better tre...
• 5fd0082 refactor(compiler-cli): Add a diagnostic to detect forbiden invocations of re...
• c8d3439 refactor(core): Reorganize and cleanup animations code (#63775)
• Additional commits viewable in compare view

Updates @angular/forms from 19.2.6 to 20.3.1

Release notes

Sourced from @​angular/forms's releases.

20.3.1

compiler

Commit	Description
	Add support for aria-invalid (#63748)

compiler-cli

Commit	Description
	only bind inputs that are part of microsyntax to a structural directive (

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud