build(deps-dev): bump @angular/core from 20.3.25 to 20.3.27

[dependabot]

Bumps @angular/core from 20.3.25 to 20.3.27.

Release notes

Sourced from @​angular/core's releases.

20.3.27

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params

platform-server

Commit	Description
	update domino to latest version

20.3.26

compiler-cli

Commit	Description
	update babel dependencies to latest v7

core

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

Changelog

Sourced from @​angular/core's changelog.

20.3.27 (2026-07-29)

compiler

Commit	Type	Description
5dbcd0ee16	fix	disallow i18n event attributes
db0d4a1a39	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
a64e2883e9	fix	distinguish repeated transfer cache params

platform-server

Commit	Type	Description
6f80cca0b8	fix	update domino to latest version

22.0.8 (2026-07-22)

common

Commit	Type	Description
c0368f2278	fix	preserve crossorigin on image preloads

core

Commit	Type	Description
8616ba9db6	fix	ensure SVG animation attributeName is checked case-insensitively

forms

Commit	Type	Description
d302c7ab83	fix	ensure pending status propagates to the root form in signal forms

http

Commit	Type	Description
9d40f8aefe	fix	prevent transfer cache key collisions

migrations

Commit	Type	Description
388daea2fc	fix	correctly migrate ngClass with mixed space-separated keys
bb39cda648	fix	preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit	Type	Description
91e33aa1de	fix	avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

• db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
• 5dbcd0e fix(compiler): disallow i18n event attributes
• 8eb7aea fix(core): reject dynamic script host elements
• 26831d0 fix(core): avoid caching missing locale data
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[amir-ba]

decision-ready PR review

[amir-ba]

�]8;id=md-jm68e7;https://github.com/telekom/scale/pull/2540�https://github.com/telekom/scale/pull/2540�]8;;��]8;;� bumps @angular/core �]8;;�
(20.3.25 → 20.3.27). Policy: components-angular is deprecated and may only receive security fixes.
Please confirm this is a security update by adding a security label or linking the CVE/security
advisory. If confirmed, maintainers will verify on the PR branch with: git fetch && gh pr checkout
2540 && yarn install && yarn workspace @telekom/scale-components-angular build && yarn workspace
@telekom/scale-components build && yarn workspace @telekom/scale-components test --spec && yarn
workspace @telekom/scale-visual-tests test:ci -u. If not a security fix, recommend closing or
deferring the PR.