build(deps): bump @angular/platform-browser-dynamic from 16.2.12 to 20.0.7

[dependabot]

Bumps @angular/platform-browser-dynamic from 16.2.12 to 20.0.7.

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

19.2.25

platform-server

Commit	Description
	throw on suspicious URLs and restrict protocol-relative URLs
	update domino to latest version

19.2.24

compiler

Commit	Description
	prevent namespaced SVG elements from being stripped

19.2.23

common

Commit	Description
	add upper bounds for digitsInfo
	sanitize placeholder

compiler

Commit	Description
	normalize tag names with custom namespaces in DomElementSchemaRegistry
	sanitize dynamic href and xlink:href bindings on SVG a elements
	strip namespaced SVG script elements during template compilation

core

Commit	Description
	reject script element as a dynamic component host
	sanitize meta selectors
	support prefix-insensitive DOM schema lookups and compile-time i18n attribute validation
	synchronize core sanitization schema with compiler
	wrap i18n dynamic element property updates in active index states

http

Commit	Description
	exclude withCredentials requests from transfer cache
	skip TransferCache for cookie-bearing requests by default

platform-server

Commit	Description
	normalize path parsing in ServerPlatformLocation
	secure location and document initialization against SSRF and path hijack

service-worker

Commit	Description
	preserve redirect policy on reconstructed asset requests
	Preserves explicit 'credentials: omit' in asset requests
	Preserves HTTP cache mode in asset group requests

... (truncated)

Changelog

Sourced from @​angular/platform-browser-dynamic's changelog.

20.0.7 (2025-07-09)

compiler-cli

Commit	Type	Description
2c18043240	fix	use proper name for diagnostic type (#62479)

20.0.6 (2025-07-01)

20.0.5 (2025-06-25)

compiler-cli

Commit	Type	Description
de0d525ad7	fix	add suggestion when pipe is missing (#62146)
3eb5a79a83	fix	handle initializer APIs wrapped in type casts (#62203)

core

Commit	Type	Description
a2e6f317a7	fix	allow to set a resource in an error state (#62253)
4c00238a69	fix	avoid injecting ErrorHandler from a destroyed injector (#61886)
369f03ad7f	fix	unable to retrieve defer blocks in tests when component injects ViewContainerRef (#62156)

router

Commit	Type	Description
65c59dd796	fix	handle scrollRestoration error in restricted environments (#62186)

upgrade

Commit	Type	Description
144c429230	fix	Make zoneless work with hybrid apps (#61660)

20.0.4 (2025-06-18)

core

Commit	Type	Description
e343cdfb86	fix	Fixes template outlet hydration (#62012)
67f657e4a3	fix	inject APP_ID before injector is destroyed (#61885)
ae212b51ee	fix	Wrap ErrorEvent with no error property (#62081)

migrations

Commit	Type	Description
82bf9848a1	fix	more robust trailing comma removal in unused imports migration (#62118)

... (truncated)

Commits

• 31e3eb2 build: migrate to use web test runner rules (#62294)
• f201df9 build: migrate to using new jasmine_test (#62106)
• 8564cf4 build: replace all ng_package with new rule from rules_angular (#61862)
• 4fa2762 build: rework benchmarks and examples in modules/ to new optimization rule
• 968bbe9 build: migrate platform-browser and platform-browser-dynamic package to use r...
• 88c70eb refactor(platform-browser): replace platform-browser-dynamic with `platfor...
• 30e0812 fix(core): update min Node.js support to 20.19, 22.12, and 24.0 (#61500)
• 3433021 build: move private testing helpers outside platform-browser/testing (#61476)
• bc2cab7 refactor(platform-browser): Deprecate the platform-browser-dynamic package ...
• 1b4b44e refactor: add explicit types for exports relying on inferred call return type...
• Additional commits viewable in compare view

[devin-ai-integration]

@dependabot rebase

[dependabot]

Sorry, only users with push access can use that command.

[behnam-oneschema]

@dependabot recreate