chore(deps): update angular monorepo to v22

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@angular/common (source)	^21.2.13 → ^22.0.0
@angular/compiler (source)	^21.2.13 → ^22.0.0
@angular/compiler-cli (source)	^21.2.13 → ^22.0.0
@angular/core (source)	^21.2.13 → ^22.0.0
@angular/platform-browser (source)	^21.2.13 → ^22.0.0
@angular/platform-browser-dynamic (source)	^21.2.13 → ^22.0.0

---

Release Notes

angular/angular (@​angular/common)

v22.2.1

Compare Source

common

Commit	Type	Description
ad2f291ba0	fix	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Type	Description
0ecaf8e7ab	fix	add explicit return types to generated functions
c451a3b98d	fix	avoid incorrectly stripping parentheses in template pipeline
bbc556daa9	fix	avoid stripping parentheses from some expressions

compiler-cli

Commit	Type	Description
fe9ebf5bf5	fix	support extendedConfigCache in readConfiguration

core

Commit	Type	Description
21851fc3a3	fix	add debugName on afterRenderEffect
7c634ecec4	fix	block dangerous data: and vbscript: URLs in URL sanitizer
9aeef8df6f	fix	extend data: URL allowlist for non-executable MIME types
f5e8edc5a6	fix	include signal and component name in NG0600 error message
88614a5407	fix	render error boundary fallbacks after HMR

http

Commit	Type	Description
6dee7fe91c	fix	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Type	Description
928dcfd258	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
568d6a83a2	fix	do not copy URL-sized objects into every route snapshot
a6e6097b3d	fix	fall back when serializing protocol-relative URLs
8b6dd5e947	fix	limit absolute redirects from redirect functions
3b6796f1ab	fix	reject duplicate outlets in production builds
e9bf52aa03	fix	require outlets to match a route before processing child segments
d23932f2fd	fix	set initial blocking resource input synchronously on activation
14793bfe4b	perf	do not retain UrlTree instances in RouterLink

v22.2.0

Compare Source

compiler

Commit	Type	Description
48a0fd6e8a	feat	allow template to access private props
a4f1a94948	fix	do not encapsulate nested selectors if parent contains ::ng-deep
d0d7f57e08	fix	scope nested CSS rules

compiler-cli

Commit	Type	Description
312e1d8089	feat	add strictUnclaimedEventNames option to catch misspelled output bindings
7d9f55da11	feat	scope type-checking of keyed defer blocks
2e2c426e76	fix	deduplicate deferred imports across multiple blocks

core

Commit	Type	Description
f6afb807c1	feat	add ErrorBoundary programmatic APIs (#​70463)
05c4d5a835	feat	add utility for testing directives
bd9b45b5cc	feat	allow reading Injector from a view or content query
91a2bf8425	feat	support annotations in WebMCP tool declarations
af2c7e386d	fix	cancel leave animations in nested views during list reordering
de5889ec4f	fix	support function and signal bindings in animate.enter and animate.leave
a8233232f5	fix	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Type	Description
d5e8b1ef7a	feat	allow permanent hidden fields in signal forms
6e299da8cf	feat	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Type	Description
f4a5650ed9	feat	add support for @boundary blocks (#​70463)

router

Commit	Type	Description
2720362818	feat	add containsTree as public API
b65dea4f03	feat	allow throwing RedirectCommand to trigger redirects
3064f3f1dc	feat	expose router resources in public API
7137a41223	feat	stabilize auto cleanup injectors feature
094bce9e3d	fix	determine blocking state solely by resource loading status
6f5a4a06c2	fix	expose reload method on ActivatedRoute resources
2c6c67bee6	fix	maintain frozen state on rollback until resource loading completes
2dcdf9aae6	fix	mark router_resource module-level symbols as side-effect free

v22.1.8

Compare Source

common

Commit	Type	Description
850db9d999	fix	remove abort listener on the abort path too in httpResource

compiler

Commit	Type	Description
4e5f4c38a7	fix	add return type to pure functions
02e83dc288	fix	avoid hitting TypeScript limits if template has many translations
024ebe668c	fix	do not copy expression type into output AST variables
b3c5824bd6	fix	guard unverified ctor parameter types in class metadata

compiler-cli

Commit	Type	Description
fe671d9024	fix	output function return types in linker

core

Commit	Type	Description
d7d5401cd5	fix	don't use plain objects as maps for jsaction data
c3e8f29b3f	fix	ensure references are cleared from idle scheduler
9b854f6e76	fix	loosen return types for arrow functions in generated code
cfa8967683	fix	wait for app stability before cleaning up dehydrated views

forms

Commit	Type	Description
78c7ab3926	fix	create controls before listeners

platform-server

Commit	Type	Description
330083f250	fix	preserve Unicode whitespace in ServerXhr URLs

router

Commit	Type	Description
2cab6f5964	fix	avoid dense elements allocation for numeric URL keys

v22.1.7

Compare Source

compiler

Commit	Type	Description
5e632b639f	fix	wrap @for collection expression before appending non-null assertion

core

Commit	Type	Description
ec48c8305c	fix	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Type	Description
6555c4ee1e	fix	mark control as dirty before setting its value in FVC interop

v22.1.6

Compare Source

compiler

Commit	Type	Description
cbb8702143	fix	namespace @property declarations

compiler-cli

Commit	Type	Description
aea121e532	fix	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Type	Description
c19b948ef8	fix	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Type	Description
d20a379583	fix	avoid sourcemap corruption during domino path substitution

router

Commit	Type	Description
95c01e9cde	fix	keep detached route subtree contexts isolated and intact

v22.1.5

Compare Source

compiler-cli

Commit	Type	Description
d90698dae7	fix	check uninvoked signal aliases in extended diagnostic

core

Commit	Type	Description
2ceeb27078	fix	cancel stale debounce timers to prevent timer leaks
ed2e401d2d	fix	don't fail NgModule checks for a pipe that extends a base class
c65d378bb4	fix	validate SVG animation attributes outside the SVG namespace

forms

Commit	Type	Description
43aaeaec29	fix	avoid writing to name input on ControlValueAccessor

migrations

Commit	Type	Description
d85288d75f	fix	skip tsconfig files of non-Angular projects

platform-server

Commit	Type	Description
3b8723ce3d	fix	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Type	Description
4340a63c52	fix	avoid view transitions when the user agent provides one

v22.1.4

Compare Source

common

Commit	Type	Description
60a874c3fb	fix	avoid prototype member collisions
e8378dfeab	fix	use locale NaN symbol in number formatting

compiler

Commit	Type	Description
05c7c725a5	fix	scope animations declared in minified nested rules

compiler-cli

Commit	Type	Description
afe8499a14	fix	default template diagnostic related message source file to template
079a846263	fix	Produce correct tcb expression for optional chaining
55eeb46418	fix	retain metadata for strict standalone errors

core

Commit	Type	Description
3da35cbab9	fix	avoid prototype member collisions
b199bdfa2a	fix	explicitly reject foreign components in JIT mode
9a8e4826b9	fix	preserve namespace for dynamic component hosts
7c752d4815	fix	prevent TransferState prototype pollution
7546b7a805	fix	throw coded RuntimeErrors instead of crashing when hydration/rendering can't find an expected DOM node

forms

Commit	Type	Description
c8eb7f0056	fix	use dot-access for readonly rule configuration

language-service

Commit	Type	Description
93d7f718d2	fix	honor quote style preference when generating imports

migrations

Commit	Type	Description
85c8829ac1	fix	preserve registerLocaleData calls in standalone bootstrap migration

platform-server

Commit	Type	Description
71e52d1396	fix	avoid stripping unicode whitespace during url resolution

v22.1.3

Compare Source

animations

Commit	Type	Description
d9620e0f1b	fix	detect object trigger values with Object.hasOwn

common

Commit	Type	Description
b3c78a5081	fix	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Type	Description
94f0b9a371	fix	preserve &ngsp; between sibling control flow blocks

core

Commit	Type	Description
afe529cb2d	fix	accept readonly arrays for setClassMetadata decorators
2c72fe3797	fix	allow readonly arrays in RawScopeInfoFromDecorator
ef2ce9a098	fix	expose debuggableFn for non-computed signal graph nodes
7bcce260f5	fix	prevent orphaned requestIdleCallback handle from re-entrant scheduling
44137117b3	fix	replace all hasOwnProperty usages with Object.hasOwn
85f12a5a13	fix	stop running further effects once one destroys the view mid-flush
c04931c88b	fix	throw a descriptive error instead of crashing when a hydration node is missing
601d1f6576	fix	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Type	Description
83450d2924	fix	report forbidden 2way bindings on when FormField is applied
5cb4ea7e35	fix	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Type	Description
0cd635e9e2	fix	cancel oversized fetch response bodies

language-server

Commit	Type	Description
14fbe04612	fix	recover project for external templates in solution-style workspaces

platform-browser

Commit	Type	Description
3ddcb1a101	fix	disallow event handler attributes in Meta
640460d606	fix	throw a descriptive error when insertBefore reference node is missing

router

Commit	Type	Description
abe019d505	fix	pass correct component to canDeactivate for named outlets in componentless parent routes

v22.1.2

Compare Source

compiler

Commit	Type	Description
76dff307b4	fix	Generate correct expression for optional chaning.
6f9a64e6f5	fix	remove namespaced MathML script elements

compiler-cli

Commit	Type	Description
e9660b1801	fix	correctly resolve symbol for SafePropertyRead in chained optional navigation
ec6deea513	fix	record class extends clause references in DeferredSymbolTracker

core

Commit	Type	Description
0df9d5eb65	fix	ensure i18n_util hasOwnProperty checks are safe for property renaming
4d985a179e	fix	incorrect loop in defer blocks
7b40456792	fix	reject prefixed SVG script hosts

forms

Commit	Type	Description
3b5c798072	fix	keep radio inputs in sync when values change

http

Commit	Type	Description
4f7e9987fa	fix	always decode JSON responses as UTF-8

router

Commit	Type	Description
2f82601662	fix	limit protocol-relative URL handling to serialization

v22.1.1

Compare Source

core

Commit	Type	Description
aa6d3189c1	fix	initialize hydration triggers after late runtime activation
deecb301c8	fix	warn when style property bindings receive invalid values

http

Commit	Type	Description
ac3728e79f	fix	avoid aborting completed requests in FetchBackend
688a0a7118	fix	respect content-type charset in fetch backend text decoder
a13b968451	fix	run root interceptors in the terminal request chain
32af9b525e	fix	strip RFC 6265 DQUOTE characters and handle URIError in parseCookieValue

v22.1.0

Compare Source

Deprecations

http

• HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit	Type	Description
1ad6824d0d	fix	skip transfer cache for uncacheable HTTP traffic (#​69017)

compiler

Commit	Type	Description
af5e4e1131	feat	Add an error for --global-foo cases (#​68846)
d579ecaf73	feat	Disable '--global-' error outside of g3 (#​68846)
f98547675c	feat	Namespace CSS variables to the app (#​68846)
8c8b2f7783	feat	Support css var namespacing in properties (#​68846)
292199aa4d	fix	permissive whitespace parsing in default never blocks
25c744c4d0	fix	support foreign components defined outside top-level scope
5bd00add07	fix	support foreign components inside control flow blocks (#​69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#​69674)

compiler-cli

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#​68674)

core

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
eab4847a8b	feat	Adds deep linking from Performance panel to DevTools
091456a214	fix	account for namespaces in host binding sanitization (#​69558)
b3748e9fe4	fix	correct container anchor collection order to match DOM layout
11b206b919	fix	introduce disposal mechanism for Angular views in foreign @content
56607967db	fix	introduce logical-only containers for foreign content
23cf1a828b	fix	sanitize host bindings on concrete hosts (#​69558)
0c07356c5c	fix	set current tnode in foreign component instruction on reuse

forms

Commit	Type	Description
bbbd357bd2	fix	add utility to assert that value is a field tree

http

Commit	Type	Description
[e363

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

\n\n## Beta npm build\n\nMaintainers can publish this PR to npm for fast testing.\n\nComment `/publish-beta` after the PR checks are green.\n\nThe workflow will:\n- publish a prerelease package on the `beta` tag\n- add a pinned `pr-35` dist-tag for this exact PR build\n- update this comment with the install command\n\nSecurity note: beta publish is only enabled for branches inside this repository.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​angular/​platform-browser-dynamic@​21.2.13 ⏵ 22.2.1				+48
	@​angular/​platform-browser@​21.2.13 ⏵ 22.2.1	+23
	@​angular/​compiler-cli@​21.2.13 ⏵ 22.2.1	+20
	@​angular/​compiler@​21.2.13 ⏵ 22.2.1	+21	+20
	@​angular/​core@​21.2.13 ⏵ 22.2.1	+19	+26		-1
	@​angular/​common@​21.2.13 ⏵ 22.2.1		+50

View full report

[cursor]

Stale comment

Risk: high. This PR upgrades the Angular monorepo from v21 to v22 (major version with breaking changes), so it exceeds the low-risk approval threshold. Cursor Bugbot was not present on this run; human review is required before merge.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}

[cursor]

Stale comment

Risk: medium. This major Angular monorepo upgrade (v21→v22) exceeds the low-risk approval threshold, so I am not approving. Cursor Bugbot was not present; CI build checks passed. Human review from riderx (already requested) is needed before merge.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}

[cursor]

Stale comment

Risk: medium. This major Angular monorepo upgrade (v21→v22) exceeds the low-risk approval threshold, and build checks failed. Not approving. riderx is already requested for human review.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}

[cursor]

Stale comment

Risk: medium. This major Angular monorepo upgrade (v21→v22) exceeds the low-risk approval threshold, so I am not approving. Cursor Bugbot was not present on this run; build checks failed. riderx is already requested for human review.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}

[cursor]

Risk: medium. This major Angular monorepo upgrade (v21→v22) exceeds the low-risk approval threshold, so I am not approving. Cursor Bugbot was not present; build checks failed. riderx is already requested for human review.

  

_{Sent by Cursor Approval Agent: Pull Request Approver External}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 142970e2-40bc-4fcf-a200-728448e73a59

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}