chore(deps): bump the angular-security group across 2 directories with 1 update by dependabot[bot] · Pull Request #1904 · ionic-team/starters

dependabot · 2026-10-04T20:53:45Z

Bumps the angular-security group with 1 update in the /angular-standalone/base directory: @angular/router.
Bumps the angular-security group with 1 update in the /angular/base directory: @angular/router.

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @angular/router's releases.

22.2.0

compiler

Commit Description

allow template to access private props

do not encapsulate nested selectors if parent contains ::ng-deep

scope nested CSS rules

compiler-cli

Commit Description

add strictUnclaimedEventNames option to catch misspelled output bindings

scope type-checking of keyed defer blocks

deduplicate deferred imports across multiple blocks

core

Commit Description

add ErrorBoundary programmatic APIs (#70463)

add utility for testing directives

allow reading Injector from a view or content query

support annotations in WebMCP tool declarations

cancel leave animations in nested views during list reordering

support function and signal bindings in animate.enter and animate.leave

update FakeNavigation to match WHATWG HTML spec

forms

Commit Description

allow permanent hidden fields in signal forms

hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit Description

add support for @boundary blocks (#70463)

router

Commit Description

add containsTree as public API

allow throwing RedirectCommand to trigger redirects

expose router resources in public API

stabilize auto cleanup injectors feature

determine blocking state solely by resource loading status

expose reload method on ActivatedRoute resources

maintain frozen state on rollback until resource loading completes

mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

fix(vscode-extension): Support inlay hint in inline templates (c11920da48)

fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)

fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)

feat(language-service): add support for @boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

52c33bc refactor(router): clean up route resource implementation and test helpers
5af6121 fix(router): avoid dense elements allocation for numeric URL keys
954f6af test(router): Fix broken test
6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
51f056f docs(router): clarify route resource parameters
f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
f825c9b docs: fix API links that point at missing member anchors
2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
4380e68 docs(router): update scroll restoration example
Additional commits viewable in compare view

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @angular/router's releases.

22.2.0

compiler

Commit Description

allow template to access private props

do not encapsulate nested selectors if parent contains ::ng-deep

scope nested CSS rules

compiler-cli

Commit Description

add strictUnclaimedEventNames option to catch misspelled output bindings

scope type-checking of keyed defer blocks

deduplicate deferred imports across multiple blocks

core

Commit Description

add ErrorBoundary programmatic APIs (#70463)

add utility for testing directives

allow reading Injector from a view or content query

support annotations in WebMCP tool declarations

cancel leave animations in nested views during list reordering

support function and signal bindings in animate.enter and animate.leave

update FakeNavigation to match WHATWG HTML spec

forms

Commit Description

allow permanent hidden fields in signal forms

hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit Description

add support for @boundary blocks (#70463)

router

Commit Description

add containsTree as public API

allow throwing RedirectCommand to trigger redirects

expose router resources in public API

stabilize auto cleanup injectors feature

determine blocking state solely by resource loading status

expose reload method on ActivatedRoute resources

maintain frozen state on rollback until resource loading completes

mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

fix(vscode-extension): Support inlay hint in inline templates (c11920da48)

fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)

fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)

feat(language-service): add support for @boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

52c33bc refactor(router): clean up route resource implementation and test helpers
5af6121 fix(router): avoid dense elements allocation for numeric URL keys
954f6af test(router): Fix broken test
6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
51f056f docs(router): clarify route resource parameters
f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
f825c9b docs: fix API links that point at missing member anchors
2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
4380e68 docs(router): update scroll restoration example
Additional commits viewable in compare view

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @angular/router's releases.

22.2.0

compiler

Commit Description

allow template to access private props

do not encapsulate nested selectors if parent contains ::ng-deep

scope nested CSS rules

compiler-cli

Commit Description

add strictUnclaimedEventNames option to catch misspelled output bindings

scope type-checking of keyed defer blocks

deduplicate deferred imports across multiple blocks

core

Commit Description

add ErrorBoundary programmatic APIs (#70463)

add utility for testing directives

allow reading Injector from a view or content query

support annotations in WebMCP tool declarations

cancel leave animations in nested views during list reordering

support function and signal bindings in animate.enter and animate.leave

update FakeNavigation to match WHATWG HTML spec

forms

Commit Description

allow permanent hidden fields in signal forms

hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit Description

add support for @boundary blocks (#70463)

router

Commit Description

add containsTree as public API

allow throwing RedirectCommand to trigger redirects

expose router resources in public API

stabilize auto cleanup injectors feature

determine blocking state solely by resource loading status

expose reload method on ActivatedRoute resources

maintain frozen state on rollback until resource loading completes

mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

fix(vscode-extension): Support inlay hint in inline templates (c11920da48)

fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)

fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)

feat(language-service): add support for @boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

52c33bc refactor(router): clean up route resource implementation and test helpers
5af6121 fix(router): avoid dense elements allocation for numeric URL keys
954f6af test(router): Fix broken test
6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
51f056f docs(router): clarify route resource parameters
f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
f825c9b docs: fix API links that point at missing member anchors
2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
4380e68 docs(router): update scroll restoration example
Additional commits viewable in compare view

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @angular/router's releases.

22.2.0

compiler

Commit Description

allow template to access private props

do not encapsulate nested selectors if parent contains ::ng-deep

scope nested CSS rules

compiler-cli

Commit Description

add strictUnclaimedEventNames option to catch misspelled output bindings

scope type-checking of keyed defer blocks

deduplicate deferred imports across multiple blocks

core

Commit Description

add ErrorBoundary programmatic APIs (#70463)

add utility for testing directives

allow reading Injector from a view or content query

support annotations in WebMCP tool declarations

cancel leave animations in nested views during list reordering

support function and signal bindings in animate.enter and animate.leave

update FakeNavigation to match WHATWG HTML spec

forms

Commit Description

allow permanent hidden fields in signal forms

hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit Description

add support for @boundary blocks (#70463)

router

Commit Description

add containsTree as public API

allow throwing RedirectCommand to trigger redirects

expose router resources in public API

stabilize auto cleanup injectors feature

determine blocking state solely by resource loading status

expose reload method on ActivatedRoute resources

maintain frozen state on rollback until resource loading completes

mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

fix(vscode-extension): Support inlay hint in inline templates (c11920da48)

fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)

fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)

feat(language-service): add support for @boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

52c33bc refactor(router): clean up route resource implementation and test helpers
5af6121 fix(router): avoid dense elements allocation for numeric URL keys
954f6af test(router): Fix broken test
6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
51f056f docs(router): clarify route resource parameters
f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
f825c9b docs: fix API links that point at missing member anchors
2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
4380e68 docs(router): update scroll restoration example
Additional commits viewable in compare view

…h 1 update Bumps the angular-security group with 1 update in the /angular-standalone/base directory: [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router). Bumps the angular-security group with 1 update in the /angular/base directory: [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router). Updates `@angular/router` from 22.1.7 to 22.2.0 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.0/packages/router) Updates `@angular/router` from 22.1.7 to 22.2.0 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.0/packages/router) Updates `@angular/router` from 22.1.7 to 22.2.0 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.0/packages/router) Updates `@angular/router` from 22.1.7 to 22.2.0 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.2.0/packages/router) --- updated-dependencies: - dependency-name: "@angular/router" dependency-version: 22.2.0 dependency-type: direct:production dependency-group: angular-security - dependency-name: "@angular/router" dependency-version: 22.2.0 dependency-type: direct:production dependency-group: angular-security ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-22T15:35:16Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot requested a review from a team as a code owner October 4, 2026 20:53

dependabot Bot removed the request for review from a team October 4, 2026 20:53

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 4, 2026

dependabot Bot requested a review from brandyscarney October 4, 2026 20:53

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/base/angular-security-1044049466 branch from 208cb87 to 5c22720 Compare October 6, 2026 17:33

dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/base/angular-security-1044049466 branch from 5c22720 to 9032e20 Compare October 14, 2026 07:59

ShaneK mentioned this pull request Oct 22, 2026

chore(angular): update to Angular 22.2 and Vitest 5 #1912

Merged

1 of 2 tasks

dependabot Bot closed this Oct 22, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/angular/base/angular-security-1044049466 branch October 22, 2026 15:35

Navigation Menu

Repository navigation

chore(deps): bump the angular-security group across 2 directories with 1 update - #1904

chore(deps): bump the angular-security group across 2 directories with 1 update#1904
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/base/angular-security-1044049466

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

Commit	Description
	add strictUnclaimedEventNames option to catch misspelled output bindings
	scope type-checking of keyed defer blocks
	deduplicate deferred imports across multiple blocks

Commit	Description
	add ErrorBoundary programmatic APIs (#70463)
	add utility for testing directives
	allow reading `Injector` from a view or content query
	support annotations in WebMCP tool declarations
	cancel leave animations in nested views during list reordering
	support function and signal bindings in animate.enter and animate.leave
	update FakeNavigation to match WHATWG HTML spec

Commit	Description
	allow permanent hidden fields in signal forms
	hard-code `readOnlyHint` and `untrustedContentHint` for WebMCP implicit signal forms

Commit	Description
	add containsTree as public API
	allow throwing RedirectCommand to trigger redirects
	expose router resources in public API
	stabilize auto cleanup injectors feature
	determine blocking state solely by resource loading status
	expose reload method on ActivatedRoute resources
	maintain frozen state on rollback until resource loading completes
	mark router_resource module-level symbols as side-effect free

Conversation

dependabot Bot commented on behalf of github Oct 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

22.2.0

compiler

compiler-cli

core

forms

language-service

router

VSCode Extension: 22.2.0

22.2.0

compiler

compiler-cli

core

forms

language-service

router

VSCode Extension: 22.2.0

22.2.0

compiler

compiler-cli

core

forms

language-service

router

VSCode Extension: 22.2.0

22.2.0

compiler

compiler-cli

core

forms

language-service

router

VSCode Extension: 22.2.0

Uh oh!

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 4, 2026 •

edited

Loading