build(deps): bump @angular/common from 21.0.8 to 21.2.19

[dependabot]

Bumps @angular/common from 21.0.8 to 21.2.19.

Release notes

Sourced from @​angular/common's releases.

21.2.19

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params
	enable xsrf for root-provided HttpClient

platform-server

Commit	Description
	update domino to latest version

21.2.18

compiler-cli

Commit	Description
	update babel dependencies to latest v7

core

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

21.2.17

common

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Description
	sanitize two-way properties

core

Commit	Description

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.19 (2026-07-29)

compiler

Commit	Type	Description
e2660c3dee	fix	disallow i18n event attributes
7b884f585a	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
948a8d6831	fix	distinguish repeated transfer cache params
9949dccce1	fix	enable xsrf for root-provided HttpClient

platform-server

Commit	Type	Description
f34a93c946	fix	update domino to latest version

22.1.0 (2026-07-29)

Deprecations

http

• HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit	Type	Description
1ad6824d0d	fix	skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit	Type	Description
af5e4e1131	feat	Add an error for --global-foo cases (#68846)
d579ecaf73	feat	Disable '--global-' error outside of g3 (#68846)
f98547675c	feat	Namespace CSS variables to the app (#68846)
8c8b2f7783	feat	Support css var namespacing in properties (#68846)
292199aa4d	fix	permissive whitespace parsing in default never blocks
25c744c4d0	fix	support foreign components defined outside top-level scope
5bd00add07	fix	support foreign components inside control flow blocks (#69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#68674)

core

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
eab4847a8b	feat	Adds deep linking from Performance panel to DevTools
091456a214	fix	account for namespaces in host binding sanitization (#69558)
b3748e9fe4	fix	correct container anchor collection order to match DOM layout

... (truncated)

Commits

• 948a8d6 fix(http): distinguish repeated transfer cache params
• 9949dcc fix(http): enable xsrf for root-provided HttpClient
• 91df739 fix(http): prevent caching of responses with Set-Cookie headers
• 86a56dc fix(common): Limits date format string length
• bcb1b7e fix(http): preserve empty referrer option in HttpRequest
• a810a31 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
• bc55749 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
• d846326 fix(common): skip transfer cache for uncacheable HTTP traffic
• e245d40 fix(http): skip transfer cache for fetch credentialed requests
• f6d8e64 fix(common): only strip a literal /index.html suffix from URLs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.