[dependabot]

Bumps the angular group with 7 updates in the / directory:

Package	From	To
@angular/common	22.2.1	22.2.4
@angular/compiler	22.2.1	22.2.4
@angular/compiler-cli	22.2.1	22.2.4
@angular/core	22.2.1	22.2.4
@angular/platform-browser	22.2.1	22.2.4
ng-packagr	22.2.4	22.2.5
tslib	2.8.1	2.9.1

Updates @angular/common from 22.2.1 to 22.2.4

Release notes

Sourced from @​angular/common's releases.

22.2.4

compiler

Commit	Description
	avoid treating attributes with object prototype names as being translated
	default to Eager change detection for pre-v22 libraries in JIT
	report errors for malformed template literal interpolations
	skip escaped characters when looking for comments in expressions

compiler-cli

Commit	Description
	require @​jridgewell/sourcemap-codec 1.6.0 or later

core

Commit	Description
	avoid mutating shared ICU case queue during i18n hydration
	avoid reloading a resource when params is unchanged
	catch view effect errors in targeted change detection mode
	check every i18n attribute translation for ICUs
	guard against integer overflow in i18n
	improve the warning for bindings on elements inside ICU expressions
	keep prototype-named keys in getTransferState
	avoid reading linked signal debug names in production
	guard i18n insertion assertion with ngDevMode

forms

Commit	Description
	annotate field context helpers with this: void
	don't crash when formControlName has no matching control
	reject unsupported updateOn in SignalFormControl
	match multi-select identities in a single pass

http

Commit	Description
	account for multiple cache control headers

language-service

Commit	Description
	resolve symbols for inputs with restricted access

migrations

Commit	Description
	migrate static string and array ngClass bindings to class

router

Commit	Description
	don't intercept downloads with the Navigation API
	drop null query params in createUrlTreeFromSnapshot
	escape colons in parenthesized primary child segments
	properly handle redirects during traversal navigations with Navigation API

... (truncated)

Commits

• 8c4e267 build(docs-infra): move framework API doc generation targets under //adev
• b9761c8 test(http): add XSRF specs for backslash and whitespace URLs
• 2251098 fix(http): account for multiple cache control headers
• 6f2fb3d docs: update the initializer fn entries.
• dcb29a9 docs: fix @​param names that don't match their parameters
• fafec77 fix(common): harden param encoding against prototype pollution
• See full diff in compare view

Updates @angular/compiler from 22.2.1 to 22.2.4

Release notes

Sourced from @​angular/compiler's releases.

22.2.4

compiler

Commit	Description
	avoid treating attributes with object prototype names as being translated
	default to Eager change detection for pre-v22 libraries in JIT
	report errors for malformed template literal interpolations
	skip escaped characters when looking for comments in expressions

compiler-cli

Commit	Description
	require @​jridgewell/sourcemap-codec 1.6.0 or later

core

Commit	Description
	avoid mutating shared ICU case queue during i18n hydration
	avoid reloading a resource when params is unchanged
	catch view effect errors in targeted change detection mode
	check every i18n attribute translation for ICUs
	guard against integer overflow in i18n
	improve the warning for bindings on elements inside ICU expressions
	keep prototype-named keys in getTransferState
	avoid reading linked signal debug names in production
	guard i18n insertion assertion with ngDevMode

forms

Commit	Description
	annotate field context helpers with this: void
	don't crash when formControlName has no matching control
	reject unsupported updateOn in SignalFormControl
	match multi-select identities in a single pass

http

Commit	Description
	account for multiple cache control headers

language-service

Commit	Description
	resolve symbols for inputs with restricted access

migrations

Commit	Description
	migrate static string and array ngClass bindings to class

router

Commit	Description
	don't intercept downloads with the Navigation API
	drop null query params in createUrlTreeFromSnapshot
	escape colons in parenthesized primary child segments
	properly handle redirects during traversal navigations with Navigation API

... (truncated)

Commits

• 00229e1 fix(compiler): skip escaped characters when looking for comments in expressions
• 4e4df4a fix(compiler): report errors for malformed template literal interpolations
• 646e972 fix(language-service): resolve symbols for inputs with restricted access
• bc600a2 fix(compiler): avoid treating attributes with object prototype names as being...
• 04fb6d5 refactor(compiler): remove redundant 0.x version checks
• 1a7ebad fix(compiler): default to Eager change detection for pre-v22 libraries in JIT
• 54f3de5 fix(compiler): check @boundary blocks in the control flow content projectio...
• 5e50658 fix(compiler): compare the operand in ReadTemporaryExpr.isEquivalent
• 35a02f8 fix(compiler): harden JIT against prototype pollution
• b6f9cc5 fix(compiler): do not scope comments placed inside of a selector
• Additional commits viewable in compare view

Updates @angular/compiler-cli from 22.2.1 to 22.2.4

Release notes

Sourced from @​angular/compiler-cli's releases.

22.2.4

compiler

Commit	Description
	avoid treating attributes with object prototype names as being translated
	default to Eager change detection for pre-v22 libraries in JIT
	report errors for malformed template literal interpolations
	skip escaped characters when looking for comments in expressions

compiler-cli

Commit	Description
	require @​jridgewell/sourcemap-codec 1.6.0 or later

core

Commit	Description
	avoid mutating shared ICU case queue during i18n hydration
	avoid reloading a resource when params is unchanged
	catch view effect errors in targeted change detection mode
	check every i18n attribute translation for ICUs
	guard against integer overflow in i18n
	improve the warning for bindings on elements inside ICU expressions
	keep prototype-named keys in getTransferState
	avoid reading linked signal debug names in production
	guard i18n insertion assertion with ngDevMode

forms

Commit	Description
	annotate field context helpers with this: void
	don't crash when formControlName has no matching control
	reject unsupported updateOn in SignalFormControl
	match multi-select identities in a single pass

http

Commit	Description
	account for multiple cache control headers

language-service

Commit	Description
	resolve symbols for inputs with restricted access

migrations

Commit	Description
	migrate static string and array ngClass bindings to class

router

Commit	Description
	don't intercept downloads with the Navigation API
	drop null query params in createUrlTreeFromSnapshot
	escape colons in parenthesized primary child segments
	properly handle redirects during traversal navigations with Navigation API

... (truncated)

Commits

• e16acdc build: lock file maintenance
• 4e4df4a fix(compiler): report errors for malformed template literal interpolations
• 646e972 fix(language-service): resolve symbols for inputs with restricted access
• 4b82200 fix(compiler-cli): require @​jridgewell/sourcemap-codec 1.6.0 or later
• 54f3de5 fix(compiler): check @boundary blocks in the control flow content projectio...
• fa21d08 fix(compiler-cli): inline tcb when depending on local directive
• 6fa2b08 refactor(compiler): remove img/video src attribute from the URL security cont...
• f43c63f perf(compiler-cli): optimize missing directive extended checks
• 725ffcf fix(compiler): match namespaced root nodes of control flow blocks against ng-...
• 0474258 fix(compiler): ignore @let declarations in the control flow content project...
• Additional commits viewable in compare view

Updates @angular/core from 22.2.1 to 22.2.4

Release notes

Sourced from @​angular/core's releases.

22.2.4

compiler

Commit	Description
	avoid treating attributes with object prototype names as being translated
	default to Eager change detection for pre-v22 libraries in JIT
	report errors for malformed template literal interpolations
	skip escaped characters when looking for comments in expressions

compiler-cli

Commit	Description
	require @​jridgewell/sourcemap-codec 1.6.0 or later

core

Commit	Description
	avoid mutating shared ICU case queue during i18n hydration
	avoid reloading a resource when params is unchanged
	catch view effect errors in targeted change detection mode
	check every i18n attribute translation for ICUs
	guard against integer overflow in i18n
	improve the warning for bindings on elements inside ICU expressions
	keep prototype-named keys in getTransferState
	avoid reading linked signal debug names in production
	guard i18n insertion assertion with ngDevMode

forms

Commit	Description
	annotate field context helpers with this: void
	don't crash when formControlName has no matching control
	reject unsupported updateOn in SignalFormControl
	match multi-select identities in a single pass

http

Commit	Description
	account for multiple cache control headers

language-service

Commit	Description
	resolve symbols for inputs with restricted access

migrations

Commit	Description
	migrate static string and array ngClass bindings to class

router

Commit	Description
	don't intercept downloads with the Navigation API
	drop null query params in createUrlTreeFromSnapshot
	escape colons in parenthesized primary child segments
	properly handle redirects during traversal navigations with Navigation API

... (truncated)

Commits

• 31b13fc build: update cross-repo angular dependencies
• 6c631a5 feat(migrations): migrate static string and array ngClass bindings to class
• 84a398b fix(core): improve the warning for bindings on elements inside ICU expressions
• 8c4e267 build(docs-infra): move framework API doc generation targets under //adev
• 0206e52 refactor(core): move @​defer hydrate trigger registration inside binding check
• 3c1fed1 docs(core): say that value() throws in the resource error state
• d3c7274 fix(core): catch view effect errors in targeted change detection mode
• c1b8b0a perf(core): avoid reading linked signal debug names in production
• b8102eb fix(core): check every i18n attribute translation for ICUs
• 3f8574a build: update cross-repo angular dependencies
• Additional commits viewable in compare view

Updates @angular/platform-browser from 22.2.1 to 22.2.4

Release notes

Sourced from @​angular/platform-browser's releases.

22.2.4

compiler

Commit	Description
	avoid treating attributes with object prototype names as being translated
	default to Eager change detection for pre-v22 libraries in JIT
	report errors for malformed template literal interpolations
	skip escaped characters when looking for comments in expressions

compiler-cli

Commit	Description
	require @​jridgewell/sourcemap-codec 1.6.0 or later

core

Commit	Description
	avoid mutating shared ICU case queue during i18n hydration
	avoid reloading a resource when params is unchanged
	catch view effect errors in targeted change detection mode
	check every i18n attribute translation for ICUs
	guard against integer overflow in i18n
	improve the warning for bindings on elements inside ICU expressions
	keep prototype-named keys in getTransferState
	avoid reading linked signal debug names in production
	guard i18n insertion assertion with ngDevMode

forms

Commit	Description
	annotate field context helpers with this: void
	don't crash when formControlName has no matching control
	reject unsupported updateOn in SignalFormControl
	match multi-select identities in a single pass

http

Commit	Description
	account for multiple cache control headers

language-service

Commit	Description
	resolve symbols for inputs with restricted access

migrations

Commit	Description
	migrate static string and array ngClass bindings to class

router

Commit	Description
	don't intercept downloads with the Navigation API
	drop null query params in createUrlTreeFromSnapshot
	escape colons in parenthesized primary child segments
	properly handle redirects during traversal navigations with Navigation API

... (truncated)

Commits

• 8c4e267 build(docs-infra): move framework API doc generation targets under //adev
• 1663b5e docs(platform-browser): link the styling guide from the namespacing APIs (#70...
• 6298b30 refactor(platform-browser): type async animation renderer
• See full diff in compare view

Updates ng-packagr from 22.2.4 to 22.2.5

Release notes

Sourced from ng-packagr's releases.

22.2.5

Bug Fixes

• ng-packagr: enable dts tree-shaking and optimize dts bundling (5a53b9a), closes #3471

Changelog

Sourced from ng-packagr's changelog.

22.2.5 (2026-10-23)

Bug Fixes

• ng-packagr: enable dts tree-shaking and optimize dts bundling (5a53b9a), closes #3471

Commits

• d04c51f release: cut 22.2.5
• 5a53b9a fix(ng-packagr): enable dts tree-shaking and optimize dts bundling
• See full diff in compare view

Updates tslib from 2.8.1 to 2.9.1

Release notes

Sourced from tslib's releases.

tslib 2.9.1

What's Changed

• Update dependencies by @​jakebailey in microsoft/tslib#283
• Switch to new release pipeline by @​jakebailey in microsoft/tslib#289
• Port content mapper changes to rewriteRelativeImportExtension by @​andrewbranch in microsoft/tslib#295
• Stop requiring an ignored lockfile in release workflows by @​jakebailey in microsoft/tslib#296
• Bump tslib to 2.9.0 by @​typescript-automation[bot] in microsoft/tslib#297
• Stop running tests in the Azure release pipeline by @​jakebailey in microsoft/tslib#298
• Bump tslib to 2.9.1 by @​typescript-automation[bot] in microsoft/tslib#299

Full Changelog: microsoft/tslib@v2.8.1...v2.9.1

Commits

• f167789 Bump tslib to 2.9.1 (#299)
• 5d4a32e Stop running tests in the Azure release pipeline (#298)
• 8d6f9cd Bump tslib to 2.9.0 (#297)
• 8fe15be Stop requiring an ignored lockfile in release workflows (#296)
• 430ef31 Port content mapper changes to rewriteRelativeImportExtension (#295)
• 6ac5f2b Switch to new release pipeline (#289)
• 12bd8a7 Update dependencies (#283)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for tslib since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions