[dependabot]

Bumps @angular/forms from 21.2.25 to 22.2.3.

Release notes

Sourced from @​angular/forms's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• cc515b8 perf(forms): use addEventListener to avoid unconditional CD scheduling on blur
• dcb29a9 docs: fix @​param names that don't match their parameters
• 276248f docs(forms): document that minDate and maxDate expect UTC dates
• 26279ed test(forms): cover the deprecated disabled signatures
• 206f541 docs(forms): use the when option in disabled examples
• db91010 fix(docs-infra): stop generating member anchors that do not exist
• c91a8c4 fix(forms): use Object.is when comparing control bindings in signal forms
• b0710b8 fix(forms): don't crash when control is missing in setUpValidators
• 6a96a40 refactor(forms): modernize value accessor integration tests
• ef03596 fix(forms): skip class bindings for orphaned fields
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[hansi-codes]

🟡 Tier B · Needs changes before merging

The Angular version mismatch leaves the dependency tree incompatible and needs correction before merging.

Updates the Angular Forms dependency to 22.2.3 and refreshes the lockfile to that release. The other Angular framework packages remain on the 21.2 line.

Verdict	New comments	Fixed	Still open
🛑 Changes requested	1	0	0

	Finding	Where
🟠	Keep Angular package majors aligned	package.json:17

Fix with agent prompt

### Issue 1
package.json:17
**Keep Angular package majors aligned**

Angular Forms 22.2.3 declares exact peer dependencies on @angular/common, @angular/core, and @angular/platform-browser 22.2.3, while this manifest still pins those packages to 21.2.x. That leaves npm unable to resolve a compatible dependency tree for `npm ci` and mixes incompatible Angular runtime packages; upgrade the Angular packages together or keep Forms on 21.2.x.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

📂 Walkthrough · 2

File	Change
package.json	Bumps @angular/forms from 21.2.25 to 22.2.3.
package-lock.json	Locks @angular/forms at 22.2.3, including its Angular 22 peer requirements.

---

_{Reviewed dd7b105 · Details · Comment @hansi-codes review to re-run, or mention @hansi-codes with a question.}

[hansi-codes]

🟡 Tier B · 1 blocking finding to address. Summary

[hansi-codes]

Keep Angular package majors aligned

Angular Forms 22.2.3 declares exact peer dependencies on @angular/common, @angular/core, and @angular/platform-browser 22.2.3, while this manifest still pins those packages to 21.2.x. That leaves npm unable to resolve a compatible dependency tree for npm ci and mixes incompatible Angular runtime packages; upgrade the Angular packages together or keep Forms on 21.2.x.

Prompt To Fix With AI

This is a comment left during a code review.
Path: package.json
Line: 17

Comment:
**Keep Angular package majors aligned**

Angular Forms 22.2.3 declares exact peer dependencies on @angular/common, @angular/core, and @angular/platform-browser 22.2.3, while this manifest still pins those packages to 21.2.x. That leaves npm unable to resolve a compatible dependency tree for `npm ci` and mixes incompatible Angular runtime packages; upgrade the Angular packages together or keep Forms on 21.2.x.

---

For each issue above, determine whether it is valid and should be fixed. If so, fix it directly.

_{🟠 Major · bug · Reply if this doesn't apply.}