Merge branch 'angular:main' into menu-inlined

Author: adolgachev

.bazelignore

@@ -47,6 +47,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: 'Upload to code-scanning'
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
         with:
           sarif_file: results.sarif

.github/workflows/scorecard.yml

@@ -49,7 +49,7 @@ groups:
       - >
         contains_any_globs(files, [
           '.bazel_fix_commands.json',
-          '.bazelignore',
+          'REPO.bazel',
           '.bazelrc',
           '.bazelversion',
           '.firebaserc',

.pullapprove.yml

@@ -1,3 +1,33 @@
+<a name="21.0.5"></a>
+# 21.0.5 "plastic-deer" (2025-12-18)
+
+<!-- CHANGELOG SPLIT MARKER -->
+
+<a name="21.1.0-next.3"></a>
+# 21.1.0-next.3 "lego scooter" (2025-12-17)
+### aria
+| Commit | Type | Description |
+| -- | -- | -- |
+| [ebb1c176f2](https://github.com/angular/components/commit/ebb1c176f2f4909acad41c8bbbb87e023c9a0b99) | fix | **tabs:** disabled tab selection |
+### cdk
+| Commit | Type | Description |
+| -- | -- | -- |
+| [dd40f25a03](https://github.com/angular/components/commit/dd40f25a03337765d09ea43f89d0baf3ba6b84a8) | fix | **testing:** Skip task tracking if zone patches aren't present ([#32544](https://github.com/angular/components/pull/32544)) |
+### material
+| Commit | Type | Description |
+| -- | -- | -- |
+| [0669de57f2](https://github.com/angular/components/commit/0669de57f2eb0b80b418545ab5a8d9725c1c8f51) | fix | **form-field:** outline being thrown off by Tailwind ([#32513](https://github.com/angular/components/pull/32513)) |
+| [a364de5d01](https://github.com/angular/components/commit/a364de5d01c46fe94bd44813b0e584f4b80aa7bc) | fix | **schematics:** combine style resets ([#32496](https://github.com/angular/components/pull/32496)) |
+| [204788b945](https://github.com/angular/components/commit/204788b9458a24145cce55cc3744b0bc793fbb0f) | fix | **slide-toggle:** Fix a11y issues by hiding label when it has no content. ([#32480](https://github.com/angular/components/pull/32480)) |
+| [cdcae54a47](https://github.com/angular/components/commit/cdcae54a471906dbccdfbe905520eea855bebc23) | fix | **tooltip:** remove explicit usePopover ([#32528](https://github.com/angular/components/pull/32528)) |
+### multiple
+| Commit | Type | Description |
+| -- | -- | -- |
+| [e63c5648e8](https://github.com/angular/components/commit/e63c5648e8b08931435c087a12d20305d385f5bc) | fix | type issues when importing Aria directives ([#32561](https://github.com/angular/components/pull/32561)) |
+| [d4e104ab7f](https://github.com/angular/components/commit/d4e104ab7fba5b3ff9762d937bffae56a0c5b437) | fix | use focus-visible for focus indicator ([#32514](https://github.com/angular/components/pull/32514)) |
+
+<!-- CHANGELOG SPLIT MARKER -->
+
 <a name="21.1.0-next.2"></a>
 # 21.1.0-next.2 "plastic-monkey" (2025-12-10)
 ### cdk

CHANGELOG.md

@@ -1,5 +1,6 @@
 # Developer guide: getting your environment set up
-1. Make sure you have both `node` and `pnpm@9` installed.
+
+1. Make sure you have both `node` and `pnpm` installed.
    We recommend using `nvm` to manage your node versions.
 2. If you are on Windows, see [the extra steps needed for contributing on Windows](#windows)
 3. Fork the `angular/components` repo on GitHub.
@@ -8,13 +9,13 @@
    and `<your-username>` for your fork. Also see the [team git shortcuts](https://github.com/angular/components/wiki/Team-git----bash-shortcuts).
 5. From the root of the project, run `pnpm i` to install the dependencies.
 
-
 To build angular/components in release mode, run `pnpm build`. The output can be found under `dist/releases`.
 
 To bring up a local server, run `pnpm dev-app`. This will automatically watch for changes
 and rebuild. The browser should refresh automatically when changes are made.
 
 ### Running tests
+
 To run unit tests, run `pnpm test <target>`. The `target` can be either a short name (e.g. `pnpm test button`) or an explicit path `pnpm test src/cdk/stepper`.
 To run the e2e tests, run `pnpm e2e`.
 To run lint, run `pnpm lint`.
@@ -23,6 +24,7 @@ You can debug unit tests by running `pnpm test` with the `--debug` option. This
 manually connect a browser to the Karma server.
 
 ### Getting Packages from Build Artifacts
+
 Each CI run for a Pull Request stores the built Angular packages as
 [build artifacts](https://circleci.com/docs/2.0/artifacts). The artifacts are not guaranteed to be
 available as a long-term distribution mechanism, but they are guaranteed to be available around the
@@ -32,6 +34,7 @@ You can access the artifacts for a specific CI run by going to the workflow page
 `upload_release_packages` job and then switching to the "Artifacts" tab.
 
 #### Archives for each Package
+
 On the "Artifacts" tab, there is a list of links to compressed archives for Angular packages. The
 archive names are of the format `<package-name>-pr<pr-number>-<sha>.tgz` (for example
 `material-pr12345-a1b2c3d.tgz`).
@@ -49,6 +52,7 @@ to point to the artifact URLs and then run `pnpm` to install the packages:
 ```
 
 #### Download all Packages
+
 In addition to the individual package archives, a `.tgz` file including all packages is also
 available (named `all-pr<pr-number>-<sha>.tgz`). This can be used if one prefers to download all
 packages locally and test them by either of the following ways:
@@ -57,14 +61,14 @@ packages locally and test them by either of the following ways:
 2. Directly copy the local uncompressed package directories into the `node_modules/` directory
    of a project.
 
-
 ### Approving public API changes
+
 If you're making changes to a public API, they need to be propagated to our public API golden files.
 To save the changes you can run `pnpm approve-api <target>` and to review the changes, you can look
 at the file under `goldens/<package>/<entry-point>.api.md`.
 
-
 ### Disabling Git hooks
+
 If your development workflow does not intend the commit message validation to run automatically
 when commits are being created, or if you do not want to run the formatter upon `git commit`, you
 can disable any installed Git hooks by setting `HUSKY=0` in your shell environment. e.g.
@@ -85,7 +89,7 @@ without requiring secrets to be committed.
 
 The following variables are currently used in the dev-app:
 
-* `GOOGLE_MAPS_KEY` - Optional key for the Google Maps API.
+- `GOOGLE_MAPS_KEY` - Optional key for the Google Maps API.
 
 For example, you can store a personal development Google Maps API key for the
 dev-app within your `.bashrc` or `.zshrc` file.

DEV_ENVIRONMENT.md

@@ -10,11 +10,11 @@ bazel_dep(name = "aspect_rules_js", version = "2.8.3")
 bazel_dep(name = "rules_pkg", version = "1.1.0")
 bazel_dep(name = "tar.bzl", version = "0.7.0")
 bazel_dep(name = "aspect_bazel_lib", version = "2.22.0")
-bazel_dep(name = "aspect_rules_esbuild", version = "0.24.0")
+bazel_dep(name = "aspect_rules_esbuild", version = "0.25.0")
 bazel_dep(name = "aspect_rules_jasmine", version = "2.0.2")
 bazel_dep(name = "platforms", version = "1.0.0")
-bazel_dep(name = "aspect_rules_ts", version = "3.8.0")
-bazel_dep(name = "bazel_skylib", version = "1.8.2")
+bazel_dep(name = "aspect_rules_ts", version = "3.8.1")
+bazel_dep(name = "bazel_skylib", version = "1.9.0")
 bazel_dep(name = "rules_browsers")
 git_override(
     module_name = "rules_browsers",
@@ -56,10 +56,15 @@ rules_ts_ext.deps(
 use_repo(rules_ts_ext, **{"npm_typescript": "components_npm_typescript"})
 
 node = use_extension("@rules_nodejs//nodejs:extensions.bzl", "node")
-node.toolchain(node_version = "22.12.0")
+node.toolchain(node_version_from_nvmrc = "//:.nvmrc")
 use_repo(node, "nodejs_toolchains")
 
 pnpm = use_extension("@aspect_rules_js//npm:extensions.bzl", "pnpm")
+pnpm.pnpm(
+    name = "pnpm",
+    pnpm_version = "10.26.0",
+    pnpm_version_integrity = "sha512-Oz9scl6+cSUGwKsa1BM8+GsfS2h+/85iqbOLTXLjlUJC5kMZD8UfoWQpScc19APevUT1yw7dZXq+Y6i2p+HkAg==",
+)
 use_repo(pnpm, "pnpm")
 
 npm = use_extension("@aspect_rules_js//npm:extensions.bzl", "npm")
@@ -159,7 +164,6 @@ npm.npm_translate_lock(
         ],
     },
     pnpm_lock = "//:pnpm-lock.yaml",
-    verify_node_modules_ignored = "//:.bazelignore",
 )
 use_repo(npm, "npm")