[dependabot]

Bumps @angular/router from 21.2.25 to 22.2.3.

Release notes

Sourced from @​angular/router's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• dcb29a9 docs: fix @​param names that don't match their parameters
• f9a4f75 fix(router): check abort signal state on subscribe
• 7bc6a1b refactor(router): Remove canLoad from 1p Router
• e0137cb fix(router): remove the navigate event abort listener once it fires
• fc91c72 fix(router): reset internal state on error handler redirect after state commit
• 576df28 fix(router): fall back when serializing protocol-relative URLs
• d98ee02 docs(router): note that shouldReuseRoute doesn't rerun guards and resolvers
• e9bf52a fix(router): require outlets to match a route before processing child segments
• 83abee3 Revert "fix(router): fall back when serializing protocol-relative URLs"
• 3b6796f fix(router): reject duplicate outlets in production builds
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[hansi-codes]

🟡 Tier B · Needs changes before merging

The dependency mismatch prevents CI from installing the project dependencies.

This PR upgrades @angular/router from 21.2.25 to 22.2.3 and updates the npm lockfile to match. The other Angular framework dependencies remain on version 21.2.25.

Verdict	New comments	Fixed	Still open
🛑 Changes requested	1	0	0

	Finding	Where
🟠	Keep the router compatible with the Angular 21 packages	package.json:20

Fix with agent prompt

### Issue 1
package.json:20
**Keep the router compatible with the Angular 21 packages**

`@angular/router@22.2.3` declares exact peer dependencies on `@angular/common`, `@angular/core`, and `@angular/platform-browser` at 22.2.3, but this project still pins them to 21.2.25. As a result, the CI `npm ci` step fails with a peer dependency resolution error; upgrade the Angular packages together or keep the router on 21.x.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

📂 Walkthrough · 2

File	Change
package.json	Bumps the declared @angular/router dependency to 22.2.3.
package-lock.json	Updates the locked @angular/router package to 22.2.3.

---

_{Reviewed cdb15d7 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟡 Tier B · 1 blocking finding to address. Summary

[hansi-codes]

Keep the router compatible with the Angular 21 packages

@angular/router@22.2.3 declares exact peer dependencies on @angular/common, @angular/core, and @angular/platform-browser at 22.2.3, but this project still pins them to 21.2.25. As a result, the CI npm ci step fails with a peer dependency resolution error; upgrade the Angular packages together or keep the router on 21.x.

Prompt To Fix With AI

This is a comment left during a code review.
Path: package.json
Line: 20

Comment:
**Keep the router compatible with the Angular 21 packages**

`@angular/router@22.2.3` declares exact peer dependencies on `@angular/common`, `@angular/core`, and `@angular/platform-browser` at 22.2.3, but this project still pins them to 21.2.25. As a result, the CI `npm ci` step fails with a peer dependency resolution error; upgrade the Angular packages together or keep the router on 21.x.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

_{🟠 Major · bug · Reply if this doesn't apply.}