Bump @angular/common from 20.3.3 to 20.3.27 in /editor

[dependabot]

Bumps @angular/common from 20.3.3 to 20.3.27.

Release notes

Sourced from @​angular/common's releases.

20.3.27

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params

platform-server

Commit	Description
	update domino to latest version

20.3.26

compiler-cli

Commit	Description
	update babel dependencies to latest v7

core

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

20.3.25

common

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Description
	sanitize two-way properties

core

Commit	Description
	harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

20.3.27 (2026-07-29)

compiler

Commit	Type	Description
5dbcd0ee16	fix	disallow i18n event attributes
db0d4a1a39	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
a64e2883e9	fix	distinguish repeated transfer cache params

platform-server

Commit	Type	Description
6f80cca0b8	fix	update domino to latest version

20.3.26 (2026-07-08)

compiler-cli

Commit	Type	Description
406aaa31e6	fix	update babel dependencies to latest v7

core

Commit	Type	Description
26831d0cbd	fix	avoid caching missing locale data
8eb7aea08b	fix	reject dynamic script host elements

http

Commit	Type	Description
b963f61028	fix	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Type	Description

... (truncated)

Commits

• a64e288 fix(http): distinguish repeated transfer cache params
• b963f61 fix(http): prevent caching of responses with Set-Cookie headers
• 06be298 fix(http): preserve empty referrer option in HttpRequest
• 9f443bc fix(common): Limits date format string length
• fa940e1 fix(http): Rejects non-HTTP(S) URLs in JSONP requests
• 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
• 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
• e2ef1ce fix(http): skip transfer cache for fetch credentialed requests
• 3d135ce fix(common): add upper bounds for digitsInfo
• 39a4b4c fix(common): sanitize placeholder
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[uldisrudzitis]

@dependabot rebase