fix(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@angular/build	22.1.8 → 22.2.0
@angular/cdk	22.1.7 → 22.2.0
@angular/cli	22.1.8 → 22.2.0
@angular/common (source)	22.1.7 → 22.2.0
@angular/common (source)	21.2.23 → 21.2.24
@angular/compiler (source)	22.1.7 → 22.2.0
@angular/compiler (source)	21.2.23 → 21.2.24
@angular/compiler-cli (source)	22.1.7 → 22.2.0
@angular/compiler-cli (source)	21.2.23 → 21.2.24
@angular/core (source)	22.1.7 → 22.2.0
@angular/core (source)	21.2.23 → 21.2.24
@angular/forms (source)	22.1.7 → 22.2.0
@angular/material	22.1.7 → 22.2.0
@angular/platform-browser (source)	22.1.7 → 22.2.0
@angular/platform-browser (source)	21.2.23 → 21.2.24
@angular/router (source)	22.1.7 → 22.2.0
jsdom	30.1.0 → 30.1.1
ng-packagr	22.1.1 → 22.2.1
oxfmt (source)	0.68.0 → 0.70.0
oxlint (source)	1.83.0 → 1.85.0
pnpm (source)	12.4.2 → 12.6.0

---

Release Notes

angular/angular-cli (@​angular/build)

v22.2.0

Compare Source

Deprecations

@​angular/build

• The splitting option in the unit-test builder is deprecated as it is no longer needed with Vitest 5.

  Disabling code splitting is no longer necessary with Vitest 5, as the issue where shared-module exports were uninitialized in class-field initializers under JSDOM has been resolved.

@​angular/cli

Commit	Type	Description
41555dfb3	feat	add --root command line option to mcp command
6e7f809a7	perf	skip eager yargs help message formatting during command execution

@​angular/build

Commit	Type	Description
ad8271320	feat	migrate Angular Linker to oxc-parser and magic-string
175273931	feat	Support splitting browser and server stats jsonfiles for easier consumption
fe2f180fd	fix	add automatic corruption recovery in SQLite cache store
675f1f527	fix	avoid pure comment pattern in oxc transform
d396324b4	fix	default preloadInitial to false when serviceWorker is enabled
7e5510e46	fix	disable linker internal source mapping in OXC linker
8504cfffc	fix	disable root config extension for inline test project
ee3041325	fix	ensure chokidar watcher is ready before returning
54d712f57	fix	ensure parent directory exists in SQLite cache store
80acd6236	fix	execute setup file hooks for each spec file when coverage is enabled
978351af7	fix	include inline component stylesheets in referenced watch files
f47f77f5f	fix	only compile included test files in unit-test builder
72dc9677c	fix	pass load cache to compiler plugin and escape extension regex in polyfills
701bde481	fix	preserve duplicate bundle filenames across output file types
e4111ae81	fix	prevent memory leaks in parallel compilation and caches
31c045639	fix	prevent stale bundler caching and correctly resolve load cache
bad31421c	fix	prevent syntax corruption in linker and oxc transform
0d9851600	fix	recursively ignore output and cache paths in watch mode
040bc21ec	fix	scope Sass package resolution caching for stylesheets in node_modules
1fc273279	fix	support parenthesized expressions in oxc linker
b423bc39c	fix	use chokidar watcher when followSymlinks is enabled
87551ad5c	perf	avoid encoding intermediate source maps before remapping
6ee559ca9	perf	bypass worker dispatch for files without transform candidates
0589edd9c	perf	consolidate component stylesheet bundling with shared load result cache
482f6d8aa	perf	decouple diagnostic type checking from build start
a877aa7eb	perf	implement SharedArrayBuffer translation dictionaries for zero-copy worker access
f1cc95943	perf	implement sliding-window batching and worker translation eviction
d97c8857c	perf	key Sass package resolutions without containing URL qualification
5cd20e141	perf	only reset Sass worker pool caches when stylesheet files change
1c00edce0	perf	optimize sourcemap stripping and loading with buffer fast path
0ba4d8e29	perf	reduce watcher debounce latency for faster incremental rebuilds
a6ef9cfbe	perf	replace watchpack with @​parcel/watcher and chokidar
4d11a1334	perf	selectively compress large entries in SQLite cache store
0a137f98d	perf	share sass directory and resolution caches across stylesheets
f4dad31cc	perf	unify Oxc linking and optimization AST traversal passes
2b85529e8	perf	use iterative post-order AST traversal for OXC transforms
ecbcd87b8	perf	use native sass-embedded compiler daemon
ce83ac0e8	perf	use size-weighted task heuristics in i18n inliner
d11a663e7	perf	verify cache metadata before reading file and eliminate sqlite read-locks
66bd6bd1e	refactor	deprecate splitting option in unit-test builder

@​angular/ssr

Commit	Type	Description
23e3d44a7	perf	pre-compile critical CSS plans at build time

v22.1.9

Compare Source

@​schematics/angular

Commit	Type	Description
b94dabdb7	fix	update @​types/node to a version vitest 5 accepts

@​angular-devkit/core

Commit	Type	Description
5aaad0a13	fix	name the unknown option in a schema validation error

@​angular/build

Commit	Type	Description
bfec8bac4	fix	support standard JavaScript MIME types and case insensitivity in auto-CSP

angular/components (@​angular/cdk)

v22.2.0: 22.2.0

Compare Source

material-luxon-adapter

Commit	Description
	add option to set zone (#​33579)

material

Commit	Description
	icon: add material symbol classes automatically (#​33750)
	menu: add disabledInteractive input to MatMenuItem (#​33693)
	core: generate Material Symbols in schematic (#​33797)
	form-field: support signal forms in MatFormFieldControl
	icon: false positive in font detection (#​33805)
	menu: allow focus to land on disabledInteractive items (#​33749)

cdk

Commit	Description
	overlay: temporarily hide getAttachedOverlays (#​33854)
	testing: account for new DirectiveFixture API (#​33771)
	testing: use directive fixture onDestroy (#​33793)

aria

Commit	Description
	menu: make MenuItem value optional (#​33715)

multiple

Commit	Description
	export aria injection tokens to support custom subclasses (#​33607)
	include material symbols in selectors (#​33754)
	replace hasOwnProperty with Object.hasOwn (#​33843)

v22.1.8

Compare Source

aria

Commit	Type	Description
377256d87	fix	accordion: ensure right attribute is set when used as a host directive (#​33839)

angular/angular (@​angular/common)

v22.2.0

Compare Source

compiler

Commit	Type	Description
48a0fd6e8a	feat	allow template to access private props
a4f1a94948	fix	do not encapsulate nested selectors if parent contains ::ng-deep
d0d7f57e08	fix	scope nested CSS rules

compiler-cli

Commit	Type	Description
312e1d8089	feat	add strictUnclaimedEventNames option to catch misspelled output bindings
7d9f55da11	feat	scope type-checking of keyed defer blocks
2e2c426e76	fix	deduplicate deferred imports across multiple blocks

core

Commit	Type	Description
f6afb807c1	feat	add ErrorBoundary programmatic APIs (#​70463)
05c4d5a835	feat	add utility for testing directives
bd9b45b5cc	feat	allow reading Injector from a view or content query
91a2bf8425	feat	support annotations in WebMCP tool declarations
af2c7e386d	fix	cancel leave animations in nested views during list reordering
de5889ec4f	fix	support function and signal bindings in animate.enter and animate.leave
a8233232f5	fix	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Type	Description
d5e8b1ef7a	feat	allow permanent hidden fields in signal forms
6e299da8cf	feat	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Type	Description
f4a5650ed9	feat	add support for @boundary blocks (#​70463)

router

Commit	Type	Description
2720362818	feat	add containsTree as public API
b65dea4f03	feat	allow throwing RedirectCommand to trigger redirects
3064f3f1dc	feat	expose router resources in public API
7137a41223	feat	stabilize auto cleanup injectors feature
094bce9e3d	fix	determine blocking state solely by resource loading status
6f5a4a06c2	fix	expose reload method on ActivatedRoute resources
2c6c67bee6	fix	maintain frozen state on rollback until resource loading completes
2dcdf9aae6	fix	mark router_resource module-level symbols as side-effect free

v22.1.8

Compare Source

common

Commit	Type	Description
850db9d999	fix	remove abort listener on the abort path too in httpResource

compiler

Commit	Type	Description
4e5f4c38a7	fix	add return type to pure functions
02e83dc288	fix	avoid hitting TypeScript limits if template has many translations
024ebe668c	fix	do not copy expression type into output AST variables
b3c5824bd6	fix	guard unverified ctor parameter types in class metadata

compiler-cli

Commit	Type	Description
fe671d9024	fix	output function return types in linker

core

Commit	Type	Description
d7d5401cd5	fix	don't use plain objects as maps for jsaction data
c3e8f29b3f	fix	ensure references are cleared from idle scheduler
9b854f6e76	fix	loosen return types for arrow functions in generated code
cfa8967683	fix	wait for app stability before cleaning up dehydrated views

forms

Commit	Type	Description
78c7ab3926	fix	create controls before listeners

platform-server

Commit	Type	Description
330083f250	fix	preserve Unicode whitespace in ServerXhr URLs

router

Commit	Type	Description
2cab6f5964	fix	avoid dense elements allocation for numeric URL keys

jsdom/jsdom (jsdom)

v30.1.1

Compare Source

ng-packagr/ng-packagr (ng-packagr)

v22.2.1

Compare Source

v22.2.0

Compare Source

Bug Fixes

• ng-packagr: name the unknown option in a schema validation error (1ab153a), closes #​2226
• ng-packagr: only reject a parallel index.ts when it is imported (b633e1f)
• ng-packagr: scope Sass package resolution caching for stylesheets in node_modules (80c0ce8)

oxc-project/oxc (oxfmt)

v0.70.0: oxfmt v0.70.0

Compare Source

🚀 Features

• 415b742 oxlint,oxfmt: Do not discover nested config in Vite+ mode (#​26763) (leaysgur)

v0.69.0

Compare Source

oxc-project/oxc (oxlint)

v1.85.0

Compare Source

v1.84.0

Compare Source

pnpm/pnpm (pnpm)

v12.6.0: pnpm 12.6

Compare Source

pnpm 12.6.0 ships with automatic dependency deduplication, relocatable node_modules, package.yaml manifest editing, and --save-types support.

Minor Changes

• autoDedupe deduplicates compatible dependency versions during installation #​7258. Enable it in pnpm-workspace.yaml or use pnpm install --auto-dedupe or pnpm add --auto-dedupe. Frozen installs leave the lockfile unchanged.

• pnpm install, pnpm run, and pnpm exec on macOS and Linux now reuse a node_modules directory and bin shims that moved or were copied together with their project #​6937. The first command after the move checks the tree and records its new location, so project commands in node_modules/.bin keep working.

• pnpm add --save-types saves available @types/* packages in devDependencies alongside registry dependencies #​3868. Packages that declare bundled TypeScript types are skipped. Set saveTypes: true in pnpm-workspace.yaml to enable this by default.

• package.yaml manifests can now be updated by pnpm add, pnpm update, pnpm remove, pnpm pkg, pnpm link, pnpm set-script, and pnpm version #​2008. Existing comments and key order are preserved.

• Catalog entries can now use the file: and link: protocols #​8642. A relative path or bare path in an entry, such as ./tarballs/foo.tgz, is measured from the directory holding pnpm-workspace.yaml.

• pnpm tasks status lists running and waiting tasks in each concurrency group, and waiting tasks now take available slots in arrival order with higher priority tasks going first #​15208. If workspaces use different limits for the same group, a later task can take a free slot that earlier tasks cannot use. A package script named tasks takes precedence; use pnpm pm tasks status when that script exists.

• pnpm cache prune deletes registry metadata cache directories that this version of pnpm can no longer read #​15046. pnpm cache prune --dry-run lists what it would delete without removing anything.

• macosBackup.excludeModulesDir and macosBackup.excludeStoreDir on macOS can now exclude newly created modules, virtual-store, and package-store directories from Time Machine #​6440. Set either to true in global configuration or using the PNPM_CONFIG_MACOS_BACKUP_EXCLUDE_MODULES_DIR and PNPM_CONFIG_MACOS_BACKUP_EXCLUDE_STORE_DIR environment variables.

• pnpm add --tilde is now an alias for --save-prefix=~ #​12863. The Yarn -T shorthand is not supported.

• progress setting and --no-progress option now turn off dependency and download progress lines #​14065. Warnings, lifecycle output, and the dependency summary are still printed.

Patch Changes

Security

• POSIX bin shims now take cygpath and wslpath from the system default path on Cygwin, MSYS2, and WSL2 so a dependency cannot redirect another package's shim #​14866.

• pnpm install warnings no longer carry the text of a package's deprecation notice, naming only the deprecated package and version #​15099. A deprecation warning names the newest non-deprecated version when one exists, and control characters and line separators are stripped from package identifiers and warnings.

• pnpm install and other commands that report configuration warnings now warn when environment variables in project .npmrc credentials are ignored #​15051.

Installing packages

• pnpm install --frozen-lockfile now succeeds when an optional dependency was unresolvable and skipped by the install that wrote the lockfile #​3960.

• pnpm install --frozen-lockfile no longer installs dependencies of projects removed from pnpm-workspace.yaml #​15248. Missing local tarballs used only by those projects no longer fail the install.

• pnpm ci now empties node_modules before installing in a project that declares a clean script #​15276.

• pnpm install --force now re-imports every package into the virtual store #​15030 and removes obsolete dependency links inside virtual-store packages when their dependencies change #​15039.

• preinstall script for the root project now runs before dependencies are resolved and linked #​3760.

• pnpm install now runs pnpm:devPreinstall when the root project uses package.yaml #​15168.

• pnpm install now enforces the root project's engines.node range when engineStrict is enabled #​3016.

• pnpm install now uses the running Node.js when devEngines.runtime declares a range without onFail: download #​15230.

• pnpm install no longer hangs when a git dependency is fetched over SSH and ssh prompts for a passphrase or host key confirmation, running ssh in batch mode instead #​2227.

• pnpm install now installs git-hosted dependencies without preparing them when their builds are explicitly denied by allowBuilds #​10522.

• pnpm install now reuses an in-flight tarball download when another resolution of the same archive still needs its package.json #​15037.

• pnpm install --prod no longer downloads registry packages that only a devDependency reaches #​881.

• pnpm install --no-runtime --frozen-lockfile with nodeLinker: hoisted no longer fails on repeated runs with a broken lockfile #​15212.

Resolving and linking dependencies

• pnpm install and pnpm update now resolve a dependency range to the newest matching version that is not deprecated #​15128.

• pnpm add <pkg> without a version now uses the catalog entry when the workspace already catalogs that package #​14865.

• pnpm install now links workspace dependencies declared with plain version ranges when excludeLinksFromLockfile and linkWorkspacePackages are enabled #​15133.

• pnpm install now resolves local tarball dependencies whose absolute file: paths contain .. consistently and skips reinstallation on repeat installs #​15190.

• pnpm install now installs dependencies when a custom resolver returns a local or git-hosted tarball without a manifest #​15016.

• pnpm.overrides entries written as a bare path, such as ./local-dep, are now measured from the directory holding pnpm-workspace.yaml #​11131.

• pnpm update --no-save no longer bypasses version-scoped overrides when a dependency selector specifies a version #​14923.

• pnpm peers check and strict peer dependency checks no longer reject compatible versions from named registries #​15225.

• pnpm outdated and pnpm update --interactive --latest now include named-registry dependencies such as work:2.1.0 and preserve their registry prefix #​15226.

• Workspace projects selected by hoistPattern or publicHoistPattern are now hoisted on every install #​3642.

• Workspace packages with SemVer build metadata are no longer skipped when they match the requested range and have the same version precedence as the registry package #​2812.

• Sped up pnpm dedupe and pnpm install in projects with many convergence overrides by checking overrides concurrently #​15175.

• minimumReleaseAge is no longer skipped for packages served by registries returning matching ETags for abbreviated and full package metadata #​14925.

Running scripts and tasks

• pnpm run signal handling no longer delivers a redundant second SIGINT to child scripts on Ctrl+C in a terminal, and properly forwards termination signals when running non-interactively without a terminal #​7374.

• pnpm run and pnpm exec in workspaces with sharedWorkspaceLockfile: false now verify dependencies in the selected projects rather than expecting a root workspace state #​15272.

• pnpm test now forwards --filter arguments to the test script when the option follows the shortcut #​15217.

• Recursive runs now start scripts matched by a /pattern/ selector in parallel within workspaceConcurrency #​14933.

• pnpm deploy, pnpm rebuild, pnpm rb, and pnpm setup now prefer a package.json script of the same name #​14976.

• modulesDir custom directory names now support executable lookup and CommonJS plugin resolution across pnpm run, pnpm exec, pnpm version hooks, and lifecycle scripts #​3604.

• pnpm install-test now accepts --no-bail directly and in recursive runs [#​3777](https://redirect.github.com/pnpm/pnpm

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on sunday,before 4am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.