build(deps): bump @tootallnate/once and @angular/cli

[dependabot]

Removes @tootallnate/once. It's no longer used after updating ancestor dependency @angular/cli. These dependencies need to be updated together.

Removes @tootallnate/once

Updates @angular/cli from 12.2.18 to 21.2.12

Release notes

Sourced from @​angular/cli's releases.

21.2.12

@​angular/build

Commit	Description
	ignore virtual esbuild paths with (disabled):

21.2.11

@​angular/cli

Commit	Description
	robustly parse npm manifest from array

@​angular/ssr

Commit	Description
	allow all hosts in common engine rendering options to prevent validation errors
	remove stateful flag from URL_PARAMETER_REGEXP

21.2.10

@​angular/cli

Commit	Description
	restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit	Description
	add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

Commit	Description
	fix broken img ref in ai-tutor
	introduce initial package manager workspace awareness
	remove standalone true ref in ai tutor

@​angular/ssr

Commit	Description
	introduce trustProxyHeaders option to safely validate and sanitize proxy headers
	add support for configuring trusted proxy headers via environment variable
	decode route segments when building and matching route tree
	use router to normalize URLs for comparison

21.2.8

@​angular/cli

Commit	Description
	dynamically resolve project Angular CLI executable inside MCP tools
	ignore EBADF file system errors during MCP project scan
	use headless option in MCP test tool

@​angular-devkit/build-angular

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

21.2.12 (2026-05-20)

@​angular/build

Commit	Type	Description
cbad57579	fix	ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

Deprecations

@​angular-devkit/build-angular

• Webpack builders in build-angular are deprecated. Use @​angular/build builders instead.

@​angular-devkit/build-webpack

• Webpack builders in build-webpack are deprecated. Use @​angular/build builders instead.

@​angular/ssr

• CommonEngine APIs are deprecated in favor of AngularNodeAppEngine or AngularAppEngine.

@​ngtools/webpack

• @​ngtools/webpack loader and plugin are deprecated. Use @​angular/build instead.

@​schematics/angular

Commit	Type	Description
b2f7a038b	feat	conditionally install istanbul coverage provider for Vitest migration
d227e6985	feat	migrate fake async to Vitest fake timers
d2aa9ede5	feat	migrate fakeAsync's flush behavior when used in beforeEach
c9f408153	feat	set up fake timers in beforeEach instead of beforeAll
8d0805dd1	feat	update TSConfig globals during karma to vitest migration
aed407db8	fix	defer karma config deletion in Karma to Vitest migration
7fb59eaa6	fix	use service decorator in ng generate

@​angular/cli

Commit	Type	Description
58c0978f6	feat	add support for Node.js 26.0.0
ff88f491d	fix	restrict MCP workspace access to allowed client roots during resolution

... (truncated)

Commits

• 9dcef4d release: cut the v21.2.12 release
• feec5bf refactor(@​angular/build): add missing OutputFile import
• 48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
• cbad575 fix(@​angular/build): ignore virtual esbuild paths with (disabled):
• 6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
• 00e3663 release: cut the v21.2.11 release
• eafe1a7 fix(@​angular/ssr): allow all hosts in common engine rendering options to prev...
• 7a116a8 fix(@​angular/ssr): remove stateful flag from URL_PARAMETER_REGEXP
• a7705fb build: update cross-repo angular dependencies
• 453ed5b build: update github/codeql-action action to v4.35.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.