build(deps): bump @angular/core from 20.3.5 to 20.3.27 in /samples/client/petstore/typescript-angular-v20-provided-in-root

[dependabot]

Bumps @angular/core from 20.3.5 to 20.3.27.

Release notes

Sourced from @​angular/core's releases.

20.3.27

compiler

Commit	Description
	disallow i18n event attributes
	restrict possible event handler check to property names longer than 2 characters

http

Commit	Description
	distinguish repeated transfer cache params

platform-server

Commit	Description
	update domino to latest version

20.3.26

compiler-cli

Commit	Description
	update babel dependencies to latest v7

core

Commit	Description
	avoid caching missing locale data
	reject dynamic script host elements

http

Commit	Description
	prevent caching of responses with Set-Cookie headers

service-worker

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

20.3.25

common

Commit	Description
	Limits date format string length
	skip transfer cache for uncacheable HTTP traffic
	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Description
	sanitize two-way properties

core

Commit	Description
	harden TransferState restoration against DOM clobbering

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

20.3.27 (2026-07-29)

compiler

Commit	Type	Description
5dbcd0ee16	fix	disallow i18n event attributes
db0d4a1a39	fix	restrict possible event handler check to property names longer than 2 characters

http

Commit	Type	Description
a64e2883e9	fix	distinguish repeated transfer cache params

platform-server

Commit	Type	Description
6f80cca0b8	fix	update domino to latest version

22.0.8 (2026-07-22)

common

Commit	Type	Description
c0368f2278	fix	preserve crossorigin on image preloads

core

Commit	Type	Description
8616ba9db6	fix	ensure SVG animation attributeName is checked case-insensitively

forms

Commit	Type	Description
d302c7ab83	fix	ensure pending status propagates to the root form in signal forms

http

Commit	Type	Description
9d40f8aefe	fix	prevent transfer cache key collisions

migrations

Commit	Type	Description
388daea2fc	fix	correctly migrate ngClass with mixed space-separated keys
bb39cda648	fix	preserve NgClass import on partial migration

22.0.7 (2026-07-15)

common

Commit	Type	Description
91e33aa1de	fix	avoid prototype lookups in date format caches

compiler

... (truncated)

Commits

• db0d4a1 fix(compiler): restrict possible event handler check to property names longer...
• 5dbcd0e fix(compiler): disallow i18n event attributes
• 8eb7aea fix(core): reject dynamic script host elements
• 26831d0 fix(core): avoid caching missing locale data
• ca48b47 fix(core): validate lowercase SVG animation attribute names (#69270)
• 1a62130 fix(common): use cryptographically secure SHA-256 for transfer cache key gene...
• 49368c1 fix(platform-server): harden platform location origin validation during SSR
• 566ad05 fix(common): skip transfer cache for uncacheable HTTP traffic
• 768a349 fix(core): harden TransferState restoration against DOM clobbering
• 7ae6381 test(compiler-cli): align ngtsc sanitization expectations with modern DOM sch...
• Additional commits viewable in compare view

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.