WEB-818: Update non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@angular/animations (source)	20.3.17 → 20.3.18
@angular/common (source)	20.3.17 → 20.3.18
@angular/forms (source)	20.3.17 → 20.3.18
@angular/localize	20.3.17 → 20.3.18
@angular/platform-browser (source)	20.3.17 → 20.3.18
@angular/platform-browser-dynamic (source)	20.3.17 → 20.3.18
@angular/router (source)	20.3.17 → 20.3.18
qs	6.15.0 → 6.15.1
tar	7.5.11 → 7.5.13
tinymce (source)	8.3.2 → 8.4.0
zone.js (source, changelog)	0.15.1 → 0.16.1

---

Release Notes

angular/angular (@​angular/animations)

v20.3.18

Compare Source

compiler

Commit	Type	Description
02fbf08890	fix	disallow translations of iframe src

core

Commit	Type	Description
72126f9a08	fix	sanitize translated attribute bindings with interpolations
626bc8bc20	fix	sanitize translated form attributes

ljharb/qs (qs)

v6.15.1

Compare Source

• [Fix] parse: parameterLimit: Infinity with throwOnLimitExceeded: true silently drops all parameters
• [Deps] update @ljharb/eslint-config
• [Dev Deps] update @ljharb/eslint-config, iconv-lite
• [Tests] increase coverage

isaacs/node-tar (tar)

v7.5.13

Compare Source

v7.5.12

Compare Source

tinymce/tinymce (tinymce)

v8.4.0

Compare Source

Added

• New view_show option to display a specified view on initialization. #TINY-11967
• New errorHandler option for dropzone dialog components. #TINY-13420
• The noneditable feature can now be disabled with the new allow_noneditable option. #TINY-10121
• Editor option content_id for uniquely identifying the edited document. #TINY-13379
• New table_default_header_rows and table_default_header_cols options to set the default header size for new tables #TINY-13391

Improved

• The file upload feature of link and image dialogs now provide feedback when an unsupported file type is selected. #TINY-13420
• Directionality buttons now only appear active when directionality is set on the selected block. #TINY-13337
• Directionality buttons now always toggle the directionality attribute on selected blocks. #TINY-13337

Changed

• The border-color style with multiple rgb colors would be compressed into border incorrectly #TINY-13393
• Element Path now uses the ARIA-role "group" with an aria-label #TINY-13338

Fixed

• Now link dialog allows uploading empty files. #TINY-13421
• The link dialog now allows uploading empty files. #TINY-13421
• Bundled content CSS is now loaded into preview iframes. #TINY-13190
• Attempting to remove a link after a contentEditable="false" element was not possible. #TINY-13108
• Some formatting was not applied to items in multilevel list. #TINY-13324
• Dialogs did not retain focus when using the block/unblock API. #TINY-12918
• Setting width via Table Properties did not apply when table_style_by_css was false. #TINY-12797

Security

• Updated DOMPurify version to 3.3.2. #TINY-14180

angular/angular (zone.js)

v0.16.1

Compare Source

• fix(zone.js): support passthrough of Promise.try API (fc557f0), closes #​67057

v0.16.0

Compare Source

• fix(zone.js): Support jasmine v6 (48abe00)
• fix(zone.js): waitForAsync should pass args to the test function (#​61755) (3c216c1), closes #​61755 #​61717 #​61755
• refactor(zone.js): Add internal implementation for auto ticking fakeAsync (#​62135) (0a827f9), closes #​62135 #​62135
• refactor(zone.js): Improve missing proxy zone error for jest imported (#​64497) (ced2fa5), closes #​64497 #​47603 #​64497
• refactor(zone.js): remove legacy browser support (#​63511) (2e46596), closes #​63511 #​63511
• refactor(zone.js): remove unused jasmine globalerror monkey patching. (#​63077) (9aef481), closes #​63077 #​63072 #​63077
• test(zone.js): refactor tests to remove usage of shelljs (#​64042) (422a3b9), closes #​64042 #​64042

BREAKING CHANGE

• IE/Non-Chromium Edge are not supported anymore.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: mifosx-web-app@1.0.0
npm error Found: @angular/core@20.3.17
npm error node_modules/@angular/core
npm error   @angular/core@"20.3.17" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @angular/core@"20.3.18" from @angular/animations@20.3.18
npm error node_modules/@angular/animations
npm error   @angular/animations@"20.3.18" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-04-13T02_41_58_662Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-04-13T02_41_58_662Z-debug-0.log