Skip to content

chore(deps): bump @angular/router from 22.1.8 to 22.2.3 in /src - #798

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/angular/router-22.2.3
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/src/angular/router-22.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @angular/router from 22.1.8 to 22.2.3.

Release notes

Sourced from @​angular/router's releases.

22.2.3

common

Commit Description
fix - fafec77b5d harden param encoding against prototype pollution

compiler

Commit Description
fix - 54f3de517c check @boundary blocks in the control flow content projection diagnostic
fix - 5e50658fd2 compare the operand in ReadTemporaryExpr.isEquivalent
fix - b6f9cc5d70 do not scope comments placed inside of a selector
fix - 35a02f8097 harden JIT against prototype pollution
fix - 08075e8aa0 support dots in class binding names
fix - c7a72c2bf2 support popover property bindings

compiler-cli

Commit Description
fix - fa21d083fe inline tcb when depending on local directive

core

Commit Description
fix - b5208f9fc3 avoid deleting idle bucket created during another bucket's drain
fix - 90af679c3b do not swallow compilation errors in computeStandaloneComponentScope
fix - eca5fa4665 don't crash initEventReplay when two apps share an APP_ID
fix - e59a2303df error when destroying embedded view with animations
fix - a23941fe75 keep activeConsumer and currentInjector constant using Store helper
fix - 913ae7421f skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit Description
perf - cc515b8b23 use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit Description
fix - d04f214d04 normalize .d.ts paths in output migration field IDs

router

Commit Description
fix - f9a4f751f0 check abort signal state on subscribe

22.2.2

compiler

Commit Description
fix - fa63bfad14 avoid leaking ::ng-deep detection state between rules
fix - 5744e7575c avoid prototype lookups when resolving entities
fix - 97e57157e4 correctly match directives on <ng-template> nested in various namespaces
fix - 0474258a5a ignore @let declarations in the control flow content projection diagnostic
fix - 725ffcf4fa match namespaced root nodes of control flow blocks against ng-content tag selectors
fix - 5ff83c11fe strip script elements regardless of namespace

... (truncated)

Commits
  • dcb29a9 docs: fix @​param names that don't match their parameters
  • f9a4f75 fix(router): check abort signal state on subscribe
  • 7bc6a1b refactor(router): Remove canLoad from 1p Router
  • e0137cb fix(router): remove the navigate event abort listener once it fires
  • fc91c72 fix(router): reset internal state on error handler redirect after state commit
  • 576df28 fix(router): fall back when serializing protocol-relative URLs
  • d98ee02 docs(router): note that shouldReuseRoute doesn't rerun guards and resolvers
  • e9bf52a fix(router): require outlets to match a route before processing child segments
  • 83abee3 Revert "fix(router): fall back when serializing protocol-relative URLs"
  • 3b6796f fix(router): reject duplicate outlets in production builds
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@socket-security

socket-security Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​angular/​router@​22.1.8 ⏵ 22.2.3100 +1100 +3177 +196 -1100

View full report

Bumps [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) from 22.1.8 to 22.2.3.
- [Release notes](https://github.com/angular/angular/releases)
- [Commits](https://github.com/angular/angular/commits/v22.2.3/packages/router)

---
updated-dependencies:
- dependency-name: "@angular/router"
  dependency-version: 22.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/src/angular/router-22.2.3 branch from c1cb3e7 to 41b1c68 Compare October 27, 2026 17:40

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants