build(deps): bump zone.js from 0.15.1 to 0.16.3

[dependabot]

Bumps zone.js from 0.15.1 to 0.16.3.

Changelog

Sourced from zone.js's changelog.

0.16.3 (2026-09-02)

• docs(zone.js): point the Bluebird link at the project repo (731c838)
• fix(zone.js): preserve accessor and non-enumerable event listener options (4c4a705), closes #54142 #54142 #70431
• ci: add Alan as a zone.js reviewer (5553699)
• fix(zone.js): guard against null handle when detecting refreshable timers (36c2197), closes #70044
• fix(zone.js): vitest patching of describe/it curried calls (e23541b), closes #69748
• fix(zone.js): harden zoneSymbolEventNames and patches against proto key (2d33fd5)
• fix(zone.js): harden zoneSymbolEventNames against proto key (defense-in-depth) (fd7c2da)
• fix(zone.js): avoid type error on custom object rejection with rejection property (fa75800)
• fix(zone.js): validate __Zone_symbol_prefix to prevent DOM clobbering attacks (e50f504)

0.16.2 (2026-05-06)

• feat(zone.js): support vitest patching in zone.js/testing (#68395) (62c6e3b), closes #68395 #68395
• fix(zone.js): allow draining microtasks in Promise.then (through flag) (fc6a7ee), closes angular#45273 angular#44446 angular#55590 angular#51328

0.16.1 (2026-02-18)

• fix(zone.js): support passthrough of Promise.try API (fc557f0), closes #67057

0.16.0 (2025-11-19)

• fix(zone.js): Support jasmine v6 (48abe00)
• fix(zone.js): waitForAsync should pass args to the test function (#61755) (3c216c1), closes #61755 #61717 #61755
• refactor(zone.js): Add internal implementation for auto ticking fakeAsync (#62135) (0a827f9), closes #62135 #62135
• refactor(zone.js): Improve missing proxy zone error for jest imported (#64497) (ced2fa5), closes #64497 #47603 #64497
• refactor(zone.js): remove legacy browser support (#63511) (2e46596), closes #63511 #63511
• refactor(zone.js): remove unused jasmine globalerror monkey patching. (#63077) (9aef481), closes #63077 #63072 #63077
• test(zone.js): refactor tests to remove usage of shelljs (#64042) (422a3b9), closes #64042 #64042

BREAKING CHANGE

• IE/Non-Chromium Edge are not supported anymore.

Commits

• 124bf44 release: cut the zone.js-0.16.3 release
• 4c4a705 fix(zone.js): preserve accessor and non-enumerable event listener options
• 9cf7b44 build: remove explicit strict options
• 731c838 docs(zone.js): point the Bluebird link at the project repo
• 444b465 build: update cross-repo angular dependencies
• c2d4070 build: update all non-major dependencies
• 1426f5e build: update cross-repo angular dependencies
• 671d8d3 build: update all non-major dependencies
• c18261f build: enable stableTypeOrdering tsconfig flag
• 732e505 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• Additional commits viewable in compare view

[yogeshchoudhary147]

@dependabot recreate

[yogeshchoudhary147]

Closing — zone.js 0.16.x is ahead of what @angular/core@20.3.x supports (peer dep is ~0.15.0). Will reopen once Angular ships support for 0.16.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.