app/dependabot: bump the prod-deps group in /angular with 16 updates

[dependabot]

Bumps the prod-deps group in /angular with 16 updates:

Package	From	To
@angular/animations	18.2.6	21.0.6
@angular/common	18.2.6	21.0.6
@angular/compiler	18.2.6	21.0.6
@angular/core	18.2.6	21.0.6
@angular/material	18.2.6	21.0.5
@angular/forms	18.2.6	21.0.6
@angular/platform-browser	18.2.6	21.0.6
@angular/platform-browser-dynamic	18.2.6	21.0.6
@angular/router	18.2.6	21.0.6
@ngrx/entity	18.0.2	21.0.1
@ngrx/store	18.0.2	21.0.1
@ngrx/store-devtools	18.0.2	21.0.1
angular-oauth2-oidc	17.0.2	20.0.2
rxjs	7.8.1	7.8.2
tslib	2.7.0	2.8.1
zone.js	0.14.10	0.16.0

Updates @angular/animations from 18.2.6 to 21.0.6

Release notes

Sourced from @​angular/animations's releases.

21.0.6

core

Commit	Description
	throw better errors for potential circular references
	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Description
	pass field directive to class config
	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Description
	avoid interpolation highlighting inside @​let
	Prevent language service from crashing on suggestion diagnostic errors

Breaking Changes

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

21.0.5

core

Commit	Description
	avoid false-positive deprecation when using InjectionToken with factory only

forms

... (truncated)

Changelog

Sourced from @​angular/animations's changelog.

21.0.6 (2025-12-17)

Breaking Changes (affecting only experimental features)

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

core

Commit	Type	Description
4c8fb3631d	fix	throw better errors for potential circular references
48492524ea	fix	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Type	Description
81772b420d	feat	pass field directive to class config
729b96476b	refactor	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Type	Description
e0694df3ec	fix	avoid interpolation highlighting inside @​let
5047be4bc1	fix	Prevent language service from crashing on suggestion diagnostic errors

21.1.0-next.3 (2025-12-11)

... (truncated)

Commits

• 3bed9f0 build: format md files
• a4fe078 refactor(common): remove unused import (#64699)
• 70332b0 fix(core): pass element removal property through in all locations (#64565)
• 2b257b3 fix(animations): account for Element.animate exceptions (#64506)
• dde5bad fix(core): prevent animations renderer from impacting animate.leave (#63921)
• c357650 refactor(core): Update tests for zoneless by default (#63668)
• 021ead5 refactor(animations): remove dependency on @angular/common (#63248)
• 2fcafb6 build: rename defaults2.bzl to defaults.bzl (#63383)
• ec8cd3e refactor(animations): optimize resolveTimeExpression (#62927)
• fa8d8b8 build: migrate all npm packages to use new rules_js based npm_package rule (#...
• Additional commits viewable in compare view

Updates @angular/common from 18.2.6 to 21.0.6

Release notes

Sourced from @​angular/common's releases.

21.0.6

core

Commit	Description
	throw better errors for potential circular references
	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Description
	pass field directive to class config
	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Description
	avoid interpolation highlighting inside @​let
	Prevent language service from crashing on suggestion diagnostic errors

Breaking Changes

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

21.0.5

core

Commit	Description
	avoid false-positive deprecation when using InjectionToken with factory only

forms

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.0.6 (2025-12-17)

Breaking Changes (affecting only experimental features)

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

core

Commit	Type	Description
4c8fb3631d	fix	throw better errors for potential circular references
48492524ea	fix	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Type	Description
81772b420d	feat	pass field directive to class config
729b96476b	refactor	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Type	Description
e0694df3ec	fix	avoid interpolation highlighting inside @​let
5047be4bc1	fix	Prevent language service from crashing on suggestion diagnostic errors

21.1.0-next.3 (2025-12-11)

... (truncated)

Commits

• feed89e ci: reformat files
• 6d9d2b8 refactor(common): remove redundant providedIn: 'root' from injection tokens
• 288238a refactor(core): correct all typeof ngDevMode comparison patterns introduced...
• 56418b1 docs: add documentation for HTTP_TRANSFER_CACHE_ORIGIN_MAP
• 20474d3 fix(http): enable XSRF protection for same-origin absolute URLs
• 3240d85 fix(http): prevent XSRF token leakage to protocol-relative URLs
• 6de8926 refactor(core): add debug name to resource (#64172)
• 00ffe91 refactor(common): removes unused NgModuleFactory config in NgComponentOutlet
• 8765b66 docs: add reference to Built-in Pipes in multiple pipe files
• ab98e71 fix(common): remove placeholder image listeners once view is removed
• Additional commits viewable in compare view

Updates @angular/compiler from 18.2.6 to 21.0.6

Release notes

Sourced from @​angular/compiler's releases.

21.0.6

core

Commit	Description
	throw better errors for potential circular references
	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Description
	pass field directive to class config
	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Description
	avoid interpolation highlighting inside @​let
	Prevent language service from crashing on suggestion diagnostic errors

Breaking Changes

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

21.0.5

core

Commit	Description
	avoid false-positive deprecation when using InjectionToken with factory only

forms

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

21.0.6 (2025-12-17)

Breaking Changes (affecting only experimental features)

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

core

Commit	Type	Description
4c8fb3631d	fix	throw better errors for potential circular references
48492524ea	fix	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Type	Description
81772b420d	feat	pass field directive to class config
729b96476b	refactor	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Type	Description
e0694df3ec	fix	avoid interpolation highlighting inside @​let
5047be4bc1	fix	Prevent language service from crashing on suggestion diagnostic errors

21.1.0-next.3 (2025-12-11)

... (truncated)

Commits

• feed89e ci: reformat files
• 31b9090 refactor(compiler): remove unnecessary sanitization for safe attributes
• 534b1b5 Revert "refactor(compiler): remove unnecessary sanitization for safe attributes"
• b8cb6cd refactor(compiler): remove unnecessary sanitization for safe attributes
• f901cc9 perf(compiler): chain query creation instructions
• 017672f refactor(compiler): Generate the controlCreate instruction after the native...
• 78fd159 fix(compiler): prevent XSS via SVG animation attributeName and MathML/SVG URLs
• 279824c refactor(compiler): remove interpolation-related symbols
• 0053186 refactor(compiler): remove container blocks config
• ecea909 fix(compiler): don't choke on unbalanced parens in declaration block
• Additional commits viewable in compare view

Updates @angular/core from 18.2.6 to 21.0.6

Release notes

Sourced from @​angular/core's releases.

21.0.6

core

Commit	Description
	throw better errors for potential circular references
	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Description
	pass field directive to class config
	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Description
	avoid interpolation highlighting inside @​let
	Prevent language service from crashing on suggestion diagnostic errors

Breaking Changes

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

21.0.5

core

Commit	Description
	avoid false-positive deprecation when using InjectionToken with factory only

forms

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

21.0.6 (2025-12-17)

Breaking Changes (affecting only experimental features)

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

core

Commit	Type	Description
4c8fb3631d	fix	throw better errors for potential circular references
48492524ea	fix	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Type	Description
81772b420d	feat	pass field directive to class config
729b96476b	refactor	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Type	Description
e0694df3ec	fix	avoid interpolation highlighting inside @​let
5047be4bc1	fix	Prevent language service from crashing on suggestion diagnostic errors

21.1.0-next.3 (2025-12-11)

... (truncated)

Commits

• 4849252 fix(core): use mutable ResponseInit type for RESPONSE_INIT token
• a4d2de8 Revert "fix(core): explicitly cast signal node value to String"
• 0eb623c fix(core): explicitly cast signal node value to String
• dc0aae9 docs: add section about reactive contexts
• feed89e ci: reformat files
• 0a5fd6b refactor(core): conditionally include debug names based on ngDevMode
• 31b9090 refactor(compiler): remove unnecessary sanitization for safe attributes
• 69b089a docs: Adds documentation for the NG0919 error
• 534b1b5 Revert "refactor(compiler): remove unnecessary sanitization for safe attributes"
• 4c8fb36 fix(core): throw better errors for potential circular references
• Additional commits viewable in compare view

Updates @angular/material from 18.2.6 to 21.0.5

Release notes

Sourced from @​angular/material's releases.

21.0.5

No release notes provided.

21.0.4

material

Commit	Description
	form-field: outline being thrown off by Tailwind (#32513)
	schematics: combine style resets (#32496)
	slide-toggle: Fix a11y issues by hiding label when it has no content. (#32480)
	tooltip: remove explicit usePopover (#32528)

cdk

Commit	Description
	testing: Skip task tracking if zone patches aren't present (#32544)

aria

Commit	Description
	tabs: disabled tab selection

multiple

Commit	Description
	type issues when importing Aria directives (#32561)
	use focus-visible for focus indicator (#32514)

21.0.3

material

Commit	Description
	core: default secondary color for focus indicator (#32491)
	datepicker: value reset when invalid value is entered using signal forms (#32485)
	table: fixed layout not working (#32494)

cdk

Commit	Description
	menu: allow user to pass selector for transform origin (#32462)
	overlay: error when attempting to attach disposed overlay (#32489)

21.0.2

material

Commit	Description
	datepicker: do not re-assign the same forms value (#32447)
	timepicker: valueChanges emitting on init (#32434)

aria

Commit	Description
	menu: focus flicker bug
	menu: update api goldens (#32463)
	menu: update unit tests to use ngMenuContent

... (truncated)

Changelog

Sourced from @​angular/material's changelog.

21.0.5 "plastic-deer" (2025-12-18)

21.1.0-next.3 "lego scooter" (2025-12-17)

aria

Commit	Type	Description
ebb1c176f2	fix	tabs: disabled tab selection

cdk

Commit	Type	Description
dd40f25a03	fix	testing: Skip task tracking if zone patches aren't present (#32544)

material

Commit	Type	Description
0669de57f2	fix	form-field: outline being thrown off by Tailwind (#32513)
a364de5d01	fix	schematics: combine style resets (#32496)
204788b945	fix	slide-toggle: Fix a11y issues by hiding label when it has no content. (#32480)
cdcae54a47	fix	tooltip: remove explicit usePopover (#32528)

multiple

Commit	Type	Description
e63c5648e8	fix	type issues when importing Aria directives (#32561)
d4e104ab7f	fix	use focus-visible for focus indicator (#32514)

21.1.0-next.2 "plastic-monkey" (2025-12-10)

cdk

Commit	Type	Description
439d1f92a8	feat	table: add virtual scrolling support
67f213a351	fix	a11y: add @angular/platform-browser to peer dependencies (#32471)
789274f423	fix	menu: allow user to pass selector for transform origin (#32462)
52720a3688	fix	overlay: error when attempting to attach disposed overlay (#32489)

material

Commit	Type	Description
ed7e1dab2f	fix	core: default secondary color for focus indicator (#32491)
29a8a2fddc	fix	datepicker: value reset when invalid value is entered using signal forms (#32485)
1fab386620	fix	table: fixed layout not working (#32494)

21.0.3 "plastic-moose" (2025-12-10)

cdk

... (truncated)

Commits

• 8ff6ffc release: cut the v21.0.5 release
• 2f35755 release: cut the v21.0.4 release
• c929692 build: migrate Bazel ignore rules from .bazelignore to REPO.bazel (#32562)
• a3380e9 build: update cross-repo angular dependencies (#32547)
• 4d2a716 fix(cdk/testing): Skip task tracking if zone patches aren't present (#32544)
• ecfe310 fix(multiple): type issues when importing Aria directives (#32561)
• d313920 fix(material/slide-toggle): Fix a11y issues by hiding label when it has no co...
• 92260e6 docs(aria/tree): improve disabled ui (#32548)
• e45fb73 refactor: cleanup remaining signal primitive usages (#32549)
• 687789e build: set up public-api files for aria (#32535)
• Additional commits viewable in compare view

Updates @angular/forms from 18.2.6 to 21.0.6

Release notes

Sourced from @​angular/forms's releases.

21.0.6

core

Commit	Description
	throw better errors for potential circular references
	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Description
	pass field directive to class config
	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Description
	avoid interpolation highlighting inside @​let
	Prevent language service from crashing on suggestion diagnostic errors

Breaking Changes

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

21.0.5

core

Commit	Description
	avoid false-positive deprecation when using InjectionToken with factory only

forms

... (truncated)

Changelog

Sourced from @​angular/forms's changelog.

21.0.6 (2025-12-17)

Breaking Changes (affecting only experimental features)

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

core

Commit	Type	Description
4c8fb3631d	fix	throw better errors for potential circular references
48492524ea	fix	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Type	Description
81772b420d	feat	pass field directive to class config
729b96476b	refactor	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Type	Description
e0694df3ec	fix	avoid interpolation highlighting inside @​let
5047be4bc1	fix	Prevent language service from crashing on suggestion diagnostic errors

21.1.0-next.3 (2025-12-11)

... (truncated)

Commits

• feed89e ci: reformat files
• 729b964 refactor(forms): rename field to fieldTree in FieldContext and ValidationError
• 5afb1eb docs(forms): improve JSDoc for Signal Forms Schema types
• 3151c05 refactor(forms): add signal forms to the type tests
• 45e967b refactor(forms): convert Signal Forms errors to use RuntimeError
• 81772b4 feat(forms): pass field directive to class config
• 4fd2b72 fix(forms): fix signal forms type error
• cbb1017 fix(forms): allow resetting with empty string
• 6d74755 fix(forms): Reuse key in parent in compat structure
• f254ff4 feat(forms): expose element on signal forms Field directive
• Additional commits viewable in compare view

Updates @angular/platform-browser from 18.2.6 to 21.0.6

Release notes

Sourced from @​angular/platform-browser's releases.

21.0.6

core

Commit	Description
	throw better errors for potential circular references
	use mutable ResponseInit type for RESPONSE_INIT token

forms

Commit	Description
	pass field directive to class config
	rename field to fieldTree in FieldContext and ValidationError

language-service

Commit	Description
	avoid interpolation highlighting inside @​let
	Prevent language service from crashing on suggestion diagnostic errors

Breaking Changes

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picked from commit 348f149e8b06d6885f54bac4cf03a9481a8b19b7)

• (cherry picked from commit ae0c59028a2f393ea5716bf222db2c38e7a3989f)

21.0.5

core

Commit	Description
	avoid false-positive deprecation when using InjectionToken with factory only

forms

... (truncated)

Changelog

Sourced from @​angular/platform-browser's changelog.

21.0.6 (2025-12-17)

Breaking Changes (affecting only experimental features)

forms

• The shape of SignalFormsConfig.classes has changed

  Previously each function in the classes map took a FieldState. Now it takes a Field directive.

  For example if you previously had:

  provideSignalFormsConfig({
    classes: {
      'my-valid': (state) => state.valid()
    }
  })
  

  You would need to update to:

  provideSignalFormsConfig({
    classes: {
      'my-valid': ({state}) => state().valid()
    }
  })
  

  (cherry picke...

  Description has been truncated