b697145 build: update dependency bazel to v8.6.0

Author: Angular Builds

fesm2022/_validation-chunk.mjs

@@ -6,9 +6,11 @@ const INVALID_PREFIX_REGEX = /^[/\\]{2}|(?:^|[/\\])\.\.?(?:[/\\]|$)/;
 function getFirstHeaderValue(value) {
   return value?.toString().split(',', 1)[0]?.trim();
 }
-function validateRequest(request, allowedHosts) {
+function validateRequest(request, allowedHosts, disableHostCheck) {
   validateHeaders(request);
-  validateUrl(new URL(request.url), allowedHosts);
+  if (!disableHostCheck) {
+    validateUrl(new URL(request.url), allowedHosts);
+  }
 }
 function validateUrl(url, allowedHosts) {
   const {

fesm2022/_validation-chunk.mjs.map

@@ -1450,6 +1450,7 @@ function normalizeLocale(locale) {
 
 class AngularAppEngine {
   static ɵallowStaticRouteRender = false;
+  static ɵdisableAllowedHostsCheck = false;
   static ɵhooks = new Hooks();
   manifest = getAngularAppEngineManifest();
   allowedHosts;
@@ -1460,18 +1461,27 @@ class AngularAppEngine {
   }
   async handle(request, requestContext) {
     const allowedHost = this.allowedHosts;
+    const disableAllowedHostsCheck = AngularAppEngine.ɵdisableAllowedHostsCheck;
     try {
-      validateRequest(request, allowedHost);
+      validateRequest(request, allowedHost, disableAllowedHostsCheck);
     } catch (error) {
       return this.handleValidationError(request.url, error);
     }
     const {
       request: securedRequest,
       onError: onHeaderValidationError
-    } = cloneRequestAndPatchHeaders(request, allowedHost);
+    } = disableAllowedHostsCheck ? {
+      request,
+      onError: null
+    } : cloneRequestAndPatchHeaders(request, allowedHost);
     const serverApp = await this.getAngularServerAppForRequest(securedRequest);
     if (serverApp) {
-      return Promise.race([onHeaderValidationError.then(error => this.handleValidationError(securedRequest.url, error)), serverApp.handle(securedRequest, requestContext)]);
+      const promises = [];
+      if (onHeaderValidationError) {
+        promises.push(onHeaderValidationError.then(error => this.handleValidationError(securedRequest.url, error)));
+      }
+      promises.push(serverApp.handle(securedRequest, requestContext));
+      return Promise.race(promises);
     }
     if (this.supportedLocales.length > 1) {
       return this.redirectBasedOnAcceptLanguage(request);

fesm2022/ssr.mjs

@@ -1,6 +1,6 @@
 {
   "name": "@angular/ssr",
-  "version": "22.0.0-next.0+sha-6a1471b",
+  "version": "22.0.0-next.0+sha-b697145",
   "description": "Angular server side rendering utilities",
   "type": "module",
   "license": "MIT",

fesm2022/ssr.mjs.map

@@ -86,6 +86,14 @@ declare class AngularAppEngine {
      * @private
      */
     static ɵallowStaticRouteRender: boolean;
+    /**
+     * A flag to enable or disable the allowed hosts check.
+     *
+     * Typically used during development to avoid the allowed hosts check.
+     *
+     * @private
+     */
+    static ɵdisableAllowedHostsCheck: boolean;
     /**
      * Hooks for extending or modifying the behavior of the server application.
      * These hooks are used by the Angular CLI when running the development server and

package.json

@@ -1 +1 @@
-Fri Feb 27 2026 18:03:45 GMT+0000 (Coordinated Universal Time)
+Sat Feb 28 2026 02:05:34 GMT+0000 (Coordinated Universal Time)