Bump minimatch and @angular-devkit/build-angular in /example-app

[dependabot]

Bumps minimatch to 3.1.5 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates minimatch from 3.1.2 to 3.1.5

Commits

• 7bba978 3.1.5
• bd25942 docs: add warning about ReDoS
• 1a9c27c fix partial matching of globstar patterns
• 1a2e084 3.1.4
• ae24656 update lockfile
• b100374 limit recursion for **, improve perf considerably
• 26ffeaa lockfile update
• 9eca892 lock node version to 14
• 00c323b 3.1.3
• 30486b2 update CI matrix and actions
• Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 14.2.9 to 21.2.10

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.10

@​angular/cli

Commit	Description
	restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit	Description
	add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

Commit	Description
	fix broken img ref in ai-tutor
	introduce initial package manager workspace awareness
	remove standalone true ref in ai tutor

@​angular/ssr

Commit	Description
	introduce trustProxyHeaders option to safely validate and sanitize proxy headers
	add support for configuring trusted proxy headers via environment variable
	decode route segments when building and matching route tree
	use router to normalize URLs for comparison

21.2.8

@​angular/cli

Commit	Description
	dynamically resolve project Angular CLI executable inside MCP tools
	ignore EBADF file system errors during MCP project scan
	use headless option in MCP test tool

@​angular-devkit/build-angular

Commit	Description
	ensure route has leading slash in prerender builder
	fix app-shell route format and

@​angular/build

Commit	Description
	use rootDir for HMR component updates path resolution
	validate V8 coverage support for browsers in Vitest

21.2.7

@​angular/cli

Commit	Description
	handle missing package manager during analytics initialization

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.10 (2026-05-06)

@​angular/cli

Commit	Type	Description
bb8611913	fix	restrict MCP workspace access to allowed client roots during resolution

19.2.25 (2026-04-30)

@​angular-devkit/build-angular

Commit	Type	Description
49ae0ad2d	fix	upgrade postcss to 8.5.12

@​angular/build

Commit	Type	Description
2d53feca5	fix	update esbuild to 0.28.0

@​angular/ssr

Commit	Type	Description
02ce8bf26	fix	introduce trustProxyHeaders option to safely validate and sanitize proxy headers

22.0.0-next.7 (2026-04-29)

@​angular/cli

Commit	Type	Description
0572df064	fix	fix broken img ref in ai-tutor
d6121b5e8	fix	introduce initial package manager workspace awareness
48eab1fc0	fix	remove standalone true ref in ai tutor

@​schematics/angular

Commit	Type	Description

... (truncated)

Commits

• 64cbd62 release: cut the v21.2.10 release
• 6f26f4f build: lock file maintenance
• 111dcc3 refactor(@​angular/cli): re-add resolveModule for find examples tool
• 5418ebb build: update cross-repo angular dependencies
• a2c8029 refactor: configure Gemini reviewer to ignore lockfile and changelog
• 7130c92 refactor(@​angular/cli): integrate MCP roots into Host abstraction
• bb86119 fix(@​angular/cli): restrict MCP workspace access to allowed client roots duri...
• 564b108 release: cut the v21.2.9 release
• dbda92b build: update cross-repo angular dependencies
• 828c175 build: update pnpm to v10.33.2
• Additional commits viewable in compare view