[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@angular/animations (source)	21.2.17 → 22.2.3
@angular/compiler-cli (source)	21.2.17 → 22.2.3
@angular/forms (source)	21.2.17 → 22.2.3
@angular/platform-browser (source)	21.2.17 → 22.2.3
@angular/platform-browser-dynamic (source)	21.2.17 → 22.2.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

angular/angular (@​angular/animations)

v22.2.3

Compare Source

common

Commit	Type	Description
fafec77b5d	fix	harden param encoding against prototype pollution

compiler

Commit	Type	Description
54f3de517c	fix	check @boundary blocks in the control flow content projection diagnostic
5e50658fd2	fix	compare the operand in ReadTemporaryExpr.isEquivalent
b6f9cc5d70	fix	do not scope comments placed inside of a selector
35a02f8097	fix	harden JIT against prototype pollution
08075e8aa0	fix	support dots in class binding names
c7a72c2bf2	fix	support popover property bindings

compiler-cli

Commit	Type	Description
fa21d083fe	fix	inline tcb when depending on local directive

core

Commit	Type	Description
b5208f9fc3	fix	avoid deleting idle bucket created during another bucket's drain
90af679c3b	fix	do not swallow compilation errors in computeStandaloneComponentScope
eca5fa4665	fix	don't crash initEventReplay when two apps share an APP_ID
e59a2303df	fix	error when destroying embedded view with animations
a23941fe75	fix	keep activeConsumer and currentInjector constant using Store helper
913ae7421f	fix	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Type	Description
cc515b8b23	perf	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Type	Description
d04f214d04	fix	normalize .d.ts paths in output migration field IDs

router

Commit	Type	Description
f9a4f751f0	fix	check abort signal state on subscribe

v22.2.2

Compare Source

compiler

Commit	Type	Description
fa63bfad14	fix	avoid leaking ::ng-deep detection state between rules
5744e7575c	fix	avoid prototype lookups when resolving entities
97e57157e4	fix	correctly match directives on <ng-template> nested in various namespaces
0474258a5a	fix	ignore @let declarations in the control flow content projection diagnostic
725ffcf4fa	fix	match namespaced root nodes of control flow blocks against ng-content tag selectors
5ff83c11fe	fix	strip script elements regardless of namespace

compiler-cli

Commit	Type	Description
01949c53a6	fix	don't mark constructor parameter properties as inherited
f43c63f70c	perf	optimize missing directive extended checks

core

Commit	Type	Description
095644168e	fix	defer afterRenderEffect sequences registered while hooks run
a312520447	fix	strip reserved character from translations
74bc86d8b2	fix	untrack onError handler to prevent signal write exceptions

forms

Commit	Type	Description
b0710b8db6	fix	don't crash when control is missing in setUpValidators
ef0359676c	fix	skip class bindings for orphaned fields
c91a8c429d	fix	use Object.is when comparing control bindings in signal forms
6cd3a8a929	fix	write a pending debounced value when its control is destroyed

language-service

Commit	Type	Description
6c44a9ecc5	fix	add strictUnclaimedEventNames to angularCompilerOptions schema

router

Commit	Type	Description
576df28471	fix	fall back when serializing protocol-relative URLs
e0137cbfde	fix	remove the navigate event abort listener once it fires
fc91c725a0	fix	reset internal state on error handler redirect after state commit

v22.2.1

Compare Source

common

Commit	Type	Description
ad2f291ba0	fix	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Type	Description
0ecaf8e7ab	fix	add explicit return types to generated functions
c451a3b98d	fix	avoid incorrectly stripping parentheses in template pipeline
bbc556daa9	fix	avoid stripping parentheses from some expressions

compiler-cli

Commit	Type	Description
fe9ebf5bf5	fix	support extendedConfigCache in readConfiguration

core

Commit	Type	Description
21851fc3a3	fix	add debugName on afterRenderEffect
7c634ecec4	fix	block dangerous data: and vbscript: URLs in URL sanitizer
9aeef8df6f	fix	extend data: URL allowlist for non-executable MIME types
f5e8edc5a6	fix	include signal and component name in NG0600 error message
88614a5407	fix	render error boundary fallbacks after HMR

http

Commit	Type	Description
6dee7fe91c	fix	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Type	Description
928dcfd258	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
568d6a83a2	fix	do not copy URL-sized objects into every route snapshot
a6e6097b3d	fix	fall back when serializing protocol-relative URLs
8b6dd5e947	fix	limit absolute redirects from redirect functions
3b6796f1ab	fix	reject duplicate outlets in production builds
e9bf52aa03	fix	require outlets to match a route before processing child segments
d23932f2fd	fix	set initial blocking resource input synchronously on activation
14793bfe4b	perf	do not retain UrlTree instances in RouterLink

v22.2.0

Compare Source

compiler

Commit	Type	Description
48a0fd6e8a	feat	allow template to access private props
a4f1a94948	fix	do not encapsulate nested selectors if parent contains ::ng-deep
d0d7f57e08	fix	scope nested CSS rules

compiler-cli

Commit	Type	Description
312e1d8089	feat	add strictUnclaimedEventNames option to catch misspelled output bindings
7d9f55da11	feat	scope type-checking of keyed defer blocks
2e2c426e76	fix	deduplicate deferred imports across multiple blocks

core

Commit	Type	Description
f6afb807c1	feat	add ErrorBoundary programmatic APIs (#​70463)
05c4d5a835	feat	add utility for testing directives
bd9b45b5cc	feat	allow reading Injector from a view or content query
91a2bf8425	feat	support annotations in WebMCP tool declarations
af2c7e386d	fix	cancel leave animations in nested views during list reordering
de5889ec4f	fix	support function and signal bindings in animate.enter and animate.leave
a8233232f5	fix	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Type	Description
d5e8b1ef7a	feat	allow permanent hidden fields in signal forms
6e299da8cf	feat	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Type	Description
f4a5650ed9	feat	add support for @boundary blocks (#​70463)

router

Commit	Type	Description
2720362818	feat	add containsTree as public API
b65dea4f03	feat	allow throwing RedirectCommand to trigger redirects
3064f3f1dc	feat	expose router resources in public API
7137a41223	feat	stabilize auto cleanup injectors feature
094bce9e3d	fix	determine blocking state solely by resource loading status
6f5a4a06c2	fix	expose reload method on ActivatedRoute resources
2c6c67bee6	fix	maintain frozen state on rollback until resource loading completes
2dcdf9aae6	fix	mark router_resource module-level symbols as side-effect free

v22.1.8

Compare Source

common

Commit	Type	Description
850db9d999	fix	remove abort listener on the abort path too in httpResource

compiler

Commit	Type	Description
4e5f4c38a7	fix	add return type to pure functions
02e83dc288	fix	avoid hitting TypeScript limits if template has many translations
024ebe668c	fix	do not copy expression type into output AST variables
b3c5824bd6	fix	guard unverified ctor parameter types in class metadata

compiler-cli

Commit	Type	Description
fe671d9024	fix	output function return types in linker

core

Commit	Type	Description
d7d5401cd5	fix	don't use plain objects as maps for jsaction data
c3e8f29b3f	fix	ensure references are cleared from idle scheduler
9b854f6e76	fix	loosen return types for arrow functions in generated code
cfa8967683	fix	wait for app stability before cleaning up dehydrated views

forms

Commit	Type	Description
78c7ab3926	fix	create controls before listeners

platform-server

Commit	Type	Description
330083f250	fix	preserve Unicode whitespace in ServerXhr URLs

router

Commit	Type	Description
2cab6f5964	fix	avoid dense elements allocation for numeric URL keys

v22.1.7

Compare Source

compiler

Commit	Type	Description
5e632b639f	fix	wrap @for collection expression before appending non-null assertion

core

Commit	Type	Description
ec48c8305c	fix	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Type	Description
6555c4ee1e	fix	mark control as dirty before setting its value in FVC interop

v22.1.6

Compare Source

compiler

Commit	Type	Description
cbb8702143	fix	namespace @property declarations

compiler-cli

Commit	Type	Description
aea121e532	fix	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Type	Description
c19b948ef8	fix	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Type	Description
d20a379583	fix	avoid sourcemap corruption during domino path substitution

router

Commit	Type	Description
95c01e9cde	fix	keep detached route subtree contexts isolated and intact

v22.1.5

Compare Source

compiler-cli

Commit	Type	Description
d90698dae7	fix	check uninvoked signal aliases in extended diagnostic

core

Commit	Type	Description
2ceeb27078	fix	cancel stale debounce timers to prevent timer leaks
ed2e401d2d	fix	don't fail NgModule checks for a pipe that extends a base class
c65d378bb4	fix	validate SVG animation attributes outside the SVG namespace

forms

Commit	Type	Description
43aaeaec29	fix	avoid writing to name input on ControlValueAccessor

migrations

Commit	Type	Description
d85288d75f	fix	skip tsconfig files of non-Angular projects

platform-server

Commit	Type	Description
3b8723ce3d	fix	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Type	Description
4340a63c52	fix	avoid view transitions when the user agent provides one

v22.1.4

Compare Source

common

Commit	Type	Description
60a874c3fb	fix	avoid prototype member collisions
e8378dfeab	fix	use locale NaN symbol in number formatting

compiler

Commit	Type	Description
05c7c725a5	fix	scope animations declared in minified nested rules

compiler-cli

Commit	Type	Description
afe8499a14	fix	default template diagnostic related message source file to template
079a846263	fix	Produce correct tcb expression for optional chaining
55eeb46418	fix	retain metadata for strict standalone errors

core

Commit	Type	Description
3da35cbab9	fix	avoid prototype member collisions
b199bdfa2a	fix	explicitly reject foreign components in JIT mode
9a8e4826b9	fix	preserve namespace for dynamic component hosts
7c752d4815	fix	prevent TransferState prototype pollution
7546b7a805	fix	throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit	Type	Description
c8eb7f0056	fix	use dot-access for readonly rule configuration

language-service

Commit	Type	Description
93d7f718d2	fix	honor quote style preference when generating imports

migrations

Commit	Type	Description
85c8829ac1	fix	preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit	Type	Description
71e52d1396	fix	avoid stripping unicode whitespace during url resolution

v22.1.3

Compare Source

animations

Commit	Type	Description
d9620e0f1b	fix	detect object trigger values with Object.hasOwn

common

Commit	Type	Description
b3c78a5081	fix	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Type	Description
94f0b9a371	fix	preserve &ngsp; between sibling control flow blocks

core

Commit	Type	Description
afe529cb2d	fix	accept readonly arrays for setClassMetadata decorators
2c72fe3797	fix	allow readonly arrays in RawScopeInfoFromDecorator
ef2ce9a098	fix	expose debuggableFn for non-computed signal graph nodes
7bcce260f5	fix	prevent orphaned requestIdleCallback handle from re-entrant scheduling
44137117b3	fix	replace all hasOwnProperty usages with Object.hasOwn
85f12a5a13	fix	stop running further effects once one destroys the view mid-flush
c04931c88b	fix	throw a descriptive error instead of crashing when a hydration node is missing
601d1f6576	fix	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Type	Description
83450d2924	fix	report forbidden 2way bindings on when FormField is applied
5cb4ea7e35	fix	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Type	Description
0cd635e9e2	fix	cancel oversized fetch response bodies

language-server

Commit	Type	Description
14fbe04612	fix	recover project for external templates in solution-style workspaces

platform-browser

Commit	Type	Description
3ddcb1a101	fix	disallow event handler attributes in Meta
640460d606	fix	throw a descriptive error when insertBefore reference node is missing

router

Commit	Type	Description
abe019d505	fix	pass correct component to canDeactivate for named outlets in componentless parent routes

v22.1.2

Compare Source

compiler

Commit	Type	Description
76dff307b4	fix	Generate correct expression for optional chaning.
6f9a64e6f5	fix	remove namespaced MathML script elements

compiler-cli

Commit	Type	Description
e9660b1801	fix	correctly resolve symbol for SafePropertyRead in chained optional navigation
ec6deea513	fix	record class extends clause references in DeferredSymbolTracker

core

Commit	Type	Description
0df9d5eb65	fix	ensure i18n_util hasOwnProperty checks are safe for property renaming
4d985a179e	fix	incorrect loop in defer blocks

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every 2nd week starting on the 2 week of the year before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: ui/package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: @bitwarden/splunk-ui@1.0.0
npm error Found: @angular/core@21.2.17
npm error node_modules/@angular/core
npm error   @angular/core@"21.2.17" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @angular/core@"22.2.3" from @angular/animations@22.2.3
npm error node_modules/@angular/animations
npm error   @angular/animations@"22.2.3" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-10-22T16_58_59_593Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-22T16_58_59_593Z-debug-0.log