build(deps): bump @sigstore/core and @angular/cli

[dependabot]

Bumps @sigstore/core to 3.2.1 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates @sigstore/core from 1.1.0 to 3.2.1

Release notes

Sourced from @​sigstore/core's releases.

@​sigstore/core@​3.2.1

Patch Changes

• b5aa4f1: Apply UTF-8 encoding to payload type during PAE calculation

@​sigstore/core@​3.2.0

Minor Changes

• 8f736ef: Update the createPublicKey function to support base64-encoded keys

@​sigstore/core@​3.0.0

Major Changes

• 383e200: Drop support for node 18

@​sigstore/core@​2.0.0

Major Changes

• b78615b: Remove hash function in core package
• 2e58489: Drop support for node 16

Commits

• c1dc7d4 Version Packages (#1607)
• f074710 reject integratedTime w/o inclusionPromise (#1659)
• 7845532 OID certificate extension verification (#1658)
• b5aa4f1 proper utf-8 encoding in DSSE PAE (#1657)
• c7a34e0 clarify cert ID matching (#1656)
• 9858bd7 Upgrade TypeScript to 6.x (#1655)
• 8cef20d bump qs from 6.15.1 to 6.15.2 (#1654)
• aca341b bump @​sigstore/mock deps (#1653)
• 0855aca Pin all @​swc/core platform binaries as optionalDependencies (#1652)
• 44a374d Pin all @​swc/core platform binaries as optionalDependencies (#1650)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sigstore/core since your current version.

Updates @angular/cli from 18.2.20 to 22.0.5

Release notes

Sourced from @​angular/cli's releases.

22.0.5

@​schematics/angular

Commit	Description
	remove unused app tsconfig outDir

@​angular/cli

Commit	Description
	gracefully handle package manager errors in command handler
	respect release age policy in update bootstrapping logic

@​angular-devkit/build-angular

Commit	Description
	prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit	Description
	auto-inject localize/init in library unit tests
	inherit preserveSymlinks option from build target in unit-test builder
	load zone.js dynamically for library unit tests
	scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit	Description
	preserve response headers during redirect

22.0.4

@​angular/build

Commit	Description
	aggregate parallel worker performance timings on the main thread
	dispose builder result context early in non-watch mode

22.0.3

@​schematics/angular

Commit	Description
	remove default workspace vscode mcp.json configuration

22.0.2

@​angular/cli

Commit	Description
	support registry metadata fetching under bun package manager
	implement semaphore backpressure throttling in PackageManager

@​angular/build

Commit	Description
	implement semaphore backpressure throttling in JavaScriptTransformer

@​angular/ssr

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.5 (2026-07-01)

@​angular/cli

Commit	Type	Description
f099e641c	fix	gracefully handle package manager errors in command handler
cf033ec48	fix	respect release age policy in update bootstrapping logic

@​schematics/angular

Commit	Type	Description
862a38069	fix	remove unused app tsconfig outDir

@​angular-devkit/build-angular

Commit	Type	Description
f75085f4b	fix	prevent OS command injection in ssr-dev-server builder

@​angular/build

Commit	Type	Description
dfee1e7b1	fix	auto-inject localize/init in library unit tests
aba718403	fix	inherit preserveSymlinks option from build target in unit-test builder
7c0d9f03c	fix	load zone.js dynamically for library unit tests
4288e4452	fix	scope createRequire module resolution using paths to prevent parent paths

@​angular/ssr

Commit	Type	Description
5f774f891	fix	preserve response headers during redirect

21.2.18 (2026-07-01)

@​angular/cli

Commit	Type	Description
61a810ab6	fix	respect release age policy in update bootstrapping logic

@​angular/build

... (truncated)

Commits

• 85a2698 release: cut the v22.0.5 release
• 5c892ee build: update cross-repo angular dependencies
• 7848e8d build: lock file maintenance
• 862a380 fix(@​schematics/angular): remove unused app tsconfig outDir
• 4288e44 fix(@​angular/build): scope createRequire module resolution using paths to pre...
• 5f774f8 fix(@​angular/ssr): preserve response headers during redirect
• 7c0d9f0 fix(@​angular/build): load zone.js dynamically for library unit tests
• f75085f fix(@​angular-devkit/build-angular): prevent OS command injection in ssr-dev-s...
• f099e64 fix(@​angular/cli): gracefully handle package manager errors in command handler
• cf033ec fix(@​angular/cli): respect release age policy in update bootstrapping logic
• Additional commits viewable in compare view

[github-actions]

🔭🐙🐈 Test this branch here: https://db-ui.github.io/elements/review/dependabot-npm_and_yarn-multi-f5b06df1e5