This commit fixes a number of typos in tests.

(cherry picked from commit a8465d4)

Migrate the handling of THIRD_PARTY_LICENSES.txt.golden in the SSR npm package from using `bazel_skylib`'s `diff_test` and `write_file` rules to `aspect_bazel_lib`'s `write_source_file` rule. This simplifies the Bazel configuration for managing the golden license file.

(cherry picked from commit eca8236)

…ternal packages (#31721)

The current bundle logic removes the `@angular/localize` polyfill if i18n inline is active. However, i18n inlining is not applied on external packages (e.g. during `ng serve` for prebundled dependencies)

This causes an issue at runtime execution of the packages which are external and depend on localization.

With this change the `@angular/localize` polyfill is retained when external packages is truthy.

(cherry picked from commit 38c2200)

…ec files

Updates the  files in both application and library schematics to specifically include  instead of . This ensures that only test specification files are processed for testing, preventing unintended inclusion of other TypeScript files.

(cherry picked from commit 5b0afb3)

…defined after errors

Addresses an issue where  could become `ɵgetOrCreateAngularServerApp` undefined after an error, leading to subsequent rendering failures.

This change modifies the HMR process to include a timestamp when loading. This ensures the server application is always re-evaluated, preventing stale application states.

Closes #31671

Previously, encoded query parameters caused a mismatch between the requested URL and the reconstructed URL, leading to a redirect loop. This change ensures both URLs are decoded before comparison.

Closes #31881

(cherry picked from commit 61a027d)

This commit addresses an issue where prerendering with i18n and a `routesFile` could lead to infinite redirect loops or failure to prerender `index.html`.

The previous `urlJoin` utility was replaced with more robust URL manipulation functions (`joinUrlParts`, `addTrailingSlash`, `stripLeadingSlash`) to ensure that paths are correctly constructed, especially when dealing with base hrefs and locale subpaths. This ensures that routes from the `routesFile` are correctly joined with the base href, preventing malformed URLs that cause the redirection issues.

Closes #31877

(cherry picked from commit 0fe572e)

… redirects

This commit ensures that redirects correctly account for the X-Forwarded-Prefix header and APP_BASE_HREF, preventing incorrect redirect loops or invalid URLs when running behind a proxy or with a base href.

Closes #31902

(cherry picked from commit 4dac5f2)

Also updates `zod` to v4.1.13.

Backport of #32042

…25.2

This is a port of PR #32227 to the 20.3.x branch.

This fixes a performance regression. See: #31350 (comment)

Addresses GHSA-8qq5-rm4j-mr97