chore(deps-dev): bump @angular/core from 20.3.14 to 21.0.3 (#1277)

Bumps
[@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core)
from 20.3.14 to 21.0.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/releases"><code>@​angular/core</code>'s
releases</a>.</em></p>
<blockquote>
<h2>21.0.3</h2>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5a80a48e962f72825050202198b32abbfee66714"><img
src="https://img.shields.io/badge/5a80a48e96-fix-green" alt="fix -
5a80a48e96" /></a></td>
<td>avoid allocating an object for signals in production mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1f1856e897e0a10e2ca6d934c80fd69d1ac06210"><img
src="https://img.shields.io/badge/1f1856e897-fix-green" alt="fix -
1f1856e897" /></a></td>
<td>check that field radio button values are strings</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c3304c766131b031b736ee3fe2ec9c9a42fbe07"><img
src="https://img.shields.io/badge/8c3304c766-fix-green" alt="fix -
8c3304c766" /></a></td>
<td>run animation queue in environment injector context</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4bb085311e24966ef2dd673f23746988c449c7ff"><img
src="https://img.shields.io/badge/4bb085311e-fix-green" alt="fix -
4bb085311e" /></a></td>
<td>unable to inject viewProviders when host directive with providers is
present</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/609699ae1781a9160b0f474b7ebe0998221c0722"><img
src="https://img.shields.io/badge/609699ae17-perf-orange" alt="perf -
609699ae17" /></a></td>
<td>tree shake unused dynamic <code>[field]</code> binding instructions
(<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/65599">#65599</a>)</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6b4ab876e811b4e3a6f9617a2b379f62cf187403"><img
src="https://img.shields.io/badge/6b4ab876e8-feat-blue" alt="feat -
6b4ab876e8" /></a></td>
<td>Allows transforms on <code>FormUiControl</code> signals</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a5dbd4b382417fc111d6a622862a015c47027a41"><img
src="https://img.shields.io/badge/a5dbd4b382-fix-green" alt="fix -
a5dbd4b382" /></a></td>
<td>support dynamic <code>[field]</code> bindings (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/65599">#65599</a>)</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/20474d3f0fd7c64071add6e84acf720627e5c19b"><img
src="https://img.shields.io/badge/20474d3f0f-fix-green" alt="fix -
20474d3f0f" /></a></td>
<td>enable XSRF protection for same-origin absolute URLs</td>
</tr>
</tbody>
</table>
<h3>router</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/48b89f9fbe16acff8b2f3f37853e745ed43d3a32"><img
src="https://img.shields.io/badge/48b89f9fbe-fix-green" alt="fix -
48b89f9fbe" /></a></td>
<td>handle errors from view transition finished promise</td>
</tr>
</tbody>
</table>
<h2>21.0.2</h2>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/78fd159b78d32cb8b94891e3fc6013076d7838af"><img
src="https://img.shields.io/badge/78fd159b78-fix-green" alt="fix -
78fd159b78" /></a></td>
<td>prevent XSS via SVG animation <code>attributeName</code> and
MathML/SVG URLs</td>
</tr>
</tbody>
</table>
<h2>21.0.1</h2>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/39c577bc362b263896b38c9486131d4342b8f1a8"><img
src="https://img.shields.io/badge/39c577bc36-fix-green" alt="fix -
39c577bc36" /></a></td>
<td>do not type check native controls with ControlValueAccessor</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8d3a89a477e273b9b2223b6db775955e35105963"><img
src="https://img.shields.io/badge/8d3a89a477-fix-green" alt="fix -
8d3a89a477" /></a></td>
<td>escape angular control flow in jsdoc</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/bc34083d349a7d30efb43df97de0509fd85a1996"><img
src="https://img.shields.io/badge/bc34083d34-fix-green" alt="fix -
bc34083d34" /></a></td>
<td>ignore non-existent files</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/0ea1e071742a031d9afb7a39f8e23082cd88ca2e"><img
src="https://img.shields.io/badge/0ea1e07174-fix-green" alt="fix -
0ea1e07174" /></a></td>
<td>apply bootstrap-options migration to
<code>platformBrowserDynamic</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/70507b8c1ce733b8232a12fa45037ee219b5b102"><img
src="https://img.shields.io/badge/70507b8c1c-fix-green" alt="fix -
70507b8c1c" /></a></td>
<td>debug data causing memory leak for root effects</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a55482fca3b7e4f39d95f8ff236b6619e59b8190"><img
src="https://img.shields.io/badge/a55482fca3-fix-green" alt="fix -
a55482fca3" /></a></td>
<td>notify profiler events in case of errors</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/49ad7c650818ee7db321a24c89282dbf9bb250f3"><img
src="https://img.shields.io/badge/49ad7c6508-fix-green" alt="fix -
49ad7c6508" /></a></td>
<td>use injected <code>DOCUMENT</code> for <code>CSP_NONCE</code></td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/cc1ec099315b0f429d0b0f07c9b1bf686668db6b"><img
src="https://img.shields.io/badge/cc1ec09931-perf-orange" alt="perf -
cc1ec09931" /></a></td>
<td>avoid repeat searches for field directive</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Description</th>
</tr>
</thead>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/angular/angular/blob/main/CHANGELOG.md"><code>@​angular/core</code>'s
changelog</a>.</em></p>
<blockquote>
<h1>21.0.3 (2025-12-03)</h1>
<h3>compiler-cli</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/5a80a48e962f72825050202198b32abbfee66714">5a80a48e96</a></td>
<td>fix</td>
<td>avoid allocating an object for signals in production mode</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/1f1856e897e0a10e2ca6d934c80fd69d1ac06210">1f1856e897</a></td>
<td>fix</td>
<td>check that field radio button values are strings</td>
</tr>
</tbody>
</table>
<h3>core</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/8c3304c766131b031b736ee3fe2ec9c9a42fbe07">8c3304c766</a></td>
<td>fix</td>
<td>run animation queue in environment injector context</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/4bb085311e24966ef2dd673f23746988c449c7ff">4bb085311e</a></td>
<td>fix</td>
<td>unable to inject viewProviders when host directive with providers is
present</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/609699ae1781a9160b0f474b7ebe0998221c0722">609699ae17</a></td>
<td>perf</td>
<td>tree shake unused dynamic <code>[field]</code> binding instructions
(<a
href="https://redirect.github.com/angular/angular/pull/65599">#65599</a>)</td>
</tr>
</tbody>
</table>
<h3>forms</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/6b4ab876e811b4e3a6f9617a2b379f62cf187403">6b4ab876e8</a></td>
<td>feat</td>
<td>Allows transforms on <code>FormUiControl</code> signals</td>
</tr>
<tr>
<td><a
href="https://github.com/angular/angular/commit/a5dbd4b382417fc111d6a622862a015c47027a41">a5dbd4b382</a></td>
<td>fix</td>
<td>support dynamic <code>[field]</code> bindings (<a
href="https://redirect.github.com/angular/angular/pull/65599">#65599</a>)</td>
</tr>
</tbody>
</table>
<h3>http</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/20474d3f0fd7c64071add6e84acf720627e5c19b">20474d3f0f</a></td>
<td>fix</td>
<td>enable XSRF protection for same-origin absolute URLs</td>
</tr>
</tbody>
</table>
<h3>router</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/48b89f9fbe16acff8b2f3f37853e745ed43d3a32">48b89f9fbe</a></td>
<td>fix</td>
<td>handle errors from view transition finished promise</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>
<h1>21.0.2 (2025-12-01)</h1>
<h3>compiler</h3>
<table>
<thead>
<tr>
<th>Commit</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td><a
href="https://github.com/angular/angular/commit/78fd159b78d32cb8b94891e3fc6013076d7838af">78fd159b78</a></td>
<td>fix</td>
<td>prevent XSS via SVG animation <code>attributeName</code> and
MathML/SVG URLs</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/angular/angular/commit/609699ae1781a9160b0f474b7ebe0998221c0722"><code>609699a</code></a>
perf(core): tree shake unused dynamic <code>[field]</code> binding
instructions (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/65599">#65599</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/a5dbd4b382417fc111d6a622862a015c47027a41"><code>a5dbd4b</code></a>
fix(forms): support dynamic <code>[field]</code> bindings (<a
href="https://github.com/angular/angular/tree/HEAD/packages/core/issues/65599">#65599</a>)</li>
<li><a
href="https://github.com/angular/angular/commit/4bb085311e24966ef2dd673f23746988c449c7ff"><code>4bb0853</code></a>
fix(core): unable to inject viewProviders when host directive with
providers ...</li>
<li><a
href="https://github.com/angular/angular/commit/c2a8934d129a89d7ea2b404884e5411e91dba26b"><code>c2a8934</code></a>
Revert &quot;refactor(router): compress synchronous end to router
navigation to si...</li>
<li><a
href="https://github.com/angular/angular/commit/71362733cf7f451d213da0f5c9249cecbe50846a"><code>7136273</code></a>
refactor(router): compress synchronous end to router navigation to
single ope...</li>
<li><a
href="https://github.com/angular/angular/commit/8c3304c766131b031b736ee3fe2ec9c9a42fbe07"><code>8c3304c</code></a>
fix(core): run animation queue in environment injector context</li>
<li><a
href="https://github.com/angular/angular/commit/706d7620e8035f7cf85268caf2857eec887fe97e"><code>706d762</code></a>
build: update cross-repo angular dependencies</li>
<li><a
href="https://github.com/angular/angular/commit/78fd159b78d32cb8b94891e3fc6013076d7838af"><code>78fd159</code></a>
fix(compiler): prevent XSS via SVG animation <code>attributeName</code>
and MathML/SVG URLs</li>
<li><a
href="https://github.com/angular/angular/commit/a4084154f23296dd7e543f0c7f55ae2baf7245de"><code>a408415</code></a>
refactor(migrations): don't migration the server
<code>bootstrapApplicaiton</code> on zo...</li>
<li><a
href="https://github.com/angular/angular/commit/151616dd7ce9faa13f447c0747740172ef1f523b"><code>151616d</code></a>
refactor(core): show error message on signal error</li>
<li>Additional commits viewable in <a
href="https://github.com/angular/angular/commits/21.0.3/packages/core">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@angular/core&package-manager=npm_and_yarn&previous-version=20.3.14&new-version=21.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

packages/tanstack-query/package.json

@@ -41,7 +41,7 @@
     "@orpc/shared": "workspace:*"
   },
   "devDependencies": {
-    "@angular/core": "^20.3.12",
+    "@angular/core": "^21.0.3",
     "@tanstack/angular-query-experimental": "^5.90.12",
     "@tanstack/query-core": "^5.90.10",
     "@tanstack/react-query": "^5.90.10",