build: update cross-repo angular dependencies to v22.0.0-rc.2

[angular-robot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@angular/animations (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/build	22.0.0-rc.1 → 22.0.0-rc.2
@angular/cdk	22.0.0-rc.1 → 22.0.0-rc.2
@angular/cli	22.0.0-rc.1 → 22.0.0-rc.2
@angular/common (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/compiler (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/compiler-cli (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/core (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/forms (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/material	22.0.0-rc.1 → 22.0.0-rc.2
@angular/platform-browser (source)	22.0.0-rc.1 → 22.0.0-rc.2
@angular/router (source)	22.0.0-rc.1 → 22.0.0-rc.2

---

• If you want to rebase/retry this PR, check this box

---

Release Notes

angular/angular (@​angular/animations)

v22.0.0-rc.2

Compare Source

common

Commit	Type	Description
ae2cb00398	fix	add upper bounds for digitsInfo
7d1fbc170a	fix	sanitize placeholder

compiler

Commit	Type	Description
ab9154ab75	fix	normalize tag names with custom namespaces in DomElementSchemaRegistry (#​68868)
94d520fb67	fix	prevent namespaced SVG <style> elements from being stripped
6ff620a033	fix	sanitize dynamic href and xlink:href bindings on SVG a elements (#​68868)

core

Commit	Type	Description
61a48e99aa	fix	do not register dom triggers when defer blocks are in manual mode
a08e4fb93c	fix	normalize tag names in runtime i18n attribute security context lookup (#​68868)
b20f0fe078	fix	prevent rxResource from leaking a subscription
0d9a245345	fix	sanitize meta selectors

forms

Commit	Type	Description
3b4ef1e2ff	perf	avoid redundant invalidations in parser errors signal

http

Commit	Type	Description
618c850282	fix	exclude withCredentials requests from transfer cache
f7b3ed8db2	fix	Introduce a max buffer size for fetch requests on SSR
e6cfaf5672	fix	prevent httpResource from leaking a subscription
86390f2be4	fix	skip TransferCache for cookie-bearing requests by default

platform-server

Commit	Type	Description
28338a1ca4	fix	prevent SSRF bypasses via backslash URLs in HttpClient
95522526e4	fix	secure location and document initialization against SSRF and path hijack

service-worker

Commit	Type	Description
a02797d045	fix	Preserves explicit 'credentials: omit' in asset requests
d0c4951a9b	fix	Preserves HTTP cache mode in asset group requests

angular/angular-cli (@​angular/build)

v22.0.0-rc.2

Compare Source

@​angular-devkit/build-angular

Commit	Type	Description
c0f7bd833	fix	remove unconditional CORS wildcard from webpack dev-server

angular/components (@​angular/cdk)

v22.0.0-rc.2

Compare Source

cdk

Commit	Type	Description
aa42b7798	fix	table: expose rendered rows (#​33304)

multiple

Commit	Type	Description
a88904279	fix	prevent form submissions in aria directives (#​33297)

[gemini-code-assist]

Code Review

This pull request updates the dependencies @angular/cdk and @angular/material from version 22.0.0-rc.1 to 22.0.0-rc.2 in apps/code-of-conduct/package.json and updates the corresponding lockfile pnpm-lock.yaml. There are no review comments, and I have no additional feedback to provide.