…guration

The version was incorrect.

Checking out the repo is not needed for these actions.

(cherry picked from commit 4d345b5)

…ross `package.json` files

This removed warnings during the releases

(cherry picked from commit a19dc73)

…vider

The Playwright browser provider in Vitest now uses the `CHROME_BIN` environment variable as the executable path if it's set, removing the restriction that it must contain 'rules_browsers'.

This is useful in CI environments to ensure a specific browser binary is used for testing in CI.

Closes #32697

(cherry picked from commit f190263)

See associated pull request for more information.

When `autoCsp` reads an `index.html` with CRLF line endings, it generates hashes based on the CRLF content. However, the transformed file is always written with LF line endings, causing CSP violations.

This commit ensures that script content line endings are normalized to LF before hashing to match the output file.

Closes #32709

(cherry picked from commit 6324133)

In i18n static output builds, requests for assets made during prerendering (e.g., via `HttpClient`) include the locale's `baseHref`. However, the in-memory asset mapping used by the patched server-side `fetch` did not account for this `baseHref`, causing assets to fail to resolve.

Closes #32713

(cherry picked from commit f30f890)

The `ng add` command would previously resolve the package version from the
registry multiple times during execution. This change updates the package
identifier with the exact version from the manifest once it has
been fetched from the registry, preventing subsequent redundant lookups.
Additionally, the already-parsed package identifier is now passed directly
to the package manager's `getManifest` method.

(cherry picked from commit ad0fd5f)

Addresses https://github.com/angular/angular-cli/security/code-scanning/94

(cherry picked from commit a09f27a)

This updates the major version of `aspect_rules_js`.

The `ng add` command would previously always add a caret (`^`) prefix
to the resolved package version, even if the user explicitly requested
an exact version. This change ensures that the exact version is preserved
in the package identifier if requested, while maintaining the caret
prefix for general requests to ensure consistent behavior with package
managers.

(cherry picked from commit b5fb457)

See associated pull request for more information.

…ndencies based on host requirements

Complex range specifiers that include shell special characters (e.g., '>', '<') can be misinterpreted when not quoted. This change ensures that version ranges are enclosed in quotes when needed to prevent such issues.

(cherry picked from commit 598a690)

See associated pull request for more information.

See associated pull request for more information.

See associated pull request for more information.

…rom the e2e runner

This logger was unused.

(cherry picked from commit 231f579)

This package has been updated and fixed.

(cherry picked from commit f74717a)

…workers

Worker processes used for prerendering and route extraction now inherit `process.env`. This ensures that any custom environment variables required
by the application are available during the server-side rendering process.

Closes #32730

(cherry picked from commit 839c725)