build: update cross-repo angular dependencies (21.2.x)

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@angular/common (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/compiler (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/compiler-cli (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/core (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/forms (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/localize	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/ng-dev	1c95e84 → 11a725d					devDependencies	digest
@angular/platform-browser (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/platform-browser-dynamic (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/platform-server (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
@angular/router (source)	21.2.8 → 21.2.9					pnpm.catalog.default	patch
devinfra	ba726e7 → 680d70f					git_override	digest
rules_angular	6c36180 → c85cdb4					git_override	digest
rules_browsers	652b57c → a9e504a					git_override	digest
rules_sass	b5ddaa8 → dfb7515					git_override	digest

🔡 If you wish to disable git hash updates, add ":disableDigestUpdates" to the extends array in your config.

---

• If you want to rebase/retry this PR, check this box

---

Release Notes

angular/angular (@​angular/common)

v21.2.9

Compare Source

core

Commit	Type	Description
f603d4714f	fix	escape forward slashes in transfer state to prevent crawler indexing

http

Commit	Type	Description
540536c386	fix	add CSP nonce support to JsonpClientBackend
63a857b874	fix	Don't on Passthru outside of reactive context

platform-server

Commit	Type	Description
e0b5078cf2	fix	prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit	Type	Description
684e9fd53d	fix	normalize multiple leading slashes in URL parser