See associated pull request for more information.

Closes #31787 as a pr takeover

See associated pull request for more information.

See associated pull request for more information.

See associated pull request for more information.

(cherry picked from commit 1b4a950)

See associated pull request for more information.

See associated pull request for more information.

Updates the Stackblitz examples to the latest stable version of Angular.

(cherry picked from commit 48e1b35)

The tabs run their animation events outside the zone which means that attaching the content as a result will be outside the zone as well. These changes bring it back into the zone to ensure that things like error handling work correctly.

Fixes #31867.

(cherry picked from commit a2906dd)

…31880)

This change configures pnpm's `minimumReleaseAge` setting to 1 day (1440 minutes). This is a security measure to mitigate dependency chain attacks, where malicious actors publish a new version of a dependency with malicious code and then trick users into updating to it before it can be discovered and reported.

By delaying the adoption of new releases, we reduce the window of opportunity for such attacks. The list of excluded packages contains trusted and frequently updated dependencies from the Angular team, which are considered safe to use without this delay.

(cherry picked from commit d6b459d)

See associated pull request for more information.

See associated pull request for more information.

Closes #31882 as a pr takeover

Co-authored-by: Angular Robot <[email protected]>

See associated pull request for more information.

pnpm v10.17.0 adds support for wildcards in 'minimumReleaseAgeExclude'. This simplifies the configuration by allowing the use of '@angular-devkit/*' and '@angular/*' instead of listing each package individually.

(cherry picked from commit 3e154ea)