chore(deps): bump the npm-version-updates group across 1 directory with 26 updates

[dependabot]

Bumps the npm-version-updates group with 26 updates in the / directory:

Package	From	To
@angular/common	22.0.2	22.1.5
@angular/compiler	22.0.2	22.1.5
@angular/core	22.0.2	22.1.5
@angular/platform-browser	22.0.2	22.1.5
@angular/router	22.0.2	22.1.5
zone.js	0.15.1	0.16.3
@angular-eslint/builder	22.0.0	22.3.0
@angular/build	22.0.4	22.1.7
@angular/cli	22.0.4	22.1.7
@angular/compiler-cli	22.0.2	22.1.5
@commitlint/config-conventional	20.5.3	21.2.2
@eslint/js	9.39.4	10.0.1
@ngx-env/builder	21.0.1	22.0.0
@playwright/test	1.61.1	1.63.0
@types/jasmine	5.1.15	6.0.0
@types/node	22.20.0	26.4.1
angular-eslint	22.0.0	22.3.0
autoprefixer	10.5.2	10.5.5
eslint	9.39.4	10.10.0
jasmine-core	5.9.0	7.0.2
karma-jasmine-html-reporter	2.1.0	2.3.0
knip	5.88.1	6.34.0
prettier	3.8.4	3.9.6
typescript	6.0.3	7.0.2
typescript-eslint	8.62.0	8.69.0
globals	16.5.0	17.12.0

Updates @angular/common from 22.0.2 to 22.1.5

Release notes

Sourced from @​angular/common's releases.

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description
	avoid writing to name input on ControlValueAccessor

migrations

Commit	Description
	skip tsconfig files of non-Angular projects

platform-server

Commit	Description
	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Description
	avoid view transitions when the user agent provides one

22.1.4

common

Commit	Description
	avoid prototype member collisions
	use locale NaN symbol in number formatting

compiler

Commit	Description
	scope animations declared in minified nested rules

compiler-cli

Commit	Description
	default template diagnostic related message source file to template
	Produce correct tcb expression for optional chaining
	retain metadata for strict standalone errors

core

Commit	Description
	avoid prototype member collisions
	explicitly reject foreign components in JIT mode
	preserve namespace for dynamic component hosts

... (truncated)

Commits

• 4340a63 fix(router): avoid view transitions when the user agent provides one
• e8378df fix(common): use locale NaN symbol in number formatting
• 60a874c fix(common): avoid prototype member collisions
• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• b3c78a5 fix(common): preserve literal key union in KeyValuePipe.transform()
• 0cd635e fix(http): cancel oversized fetch response bodies
• 4f7e998 fix(http): always decode JSON responses as UTF-8
• ac3728e fix(http): avoid aborting completed requests in FetchBackend
• f99e916 refactor(common): modernize directive tests to rely on whenStable
• 32af9b5 fix(http): strip RFC 6265 DQUOTE characters and handle URIError in parseCooki...
• Additional commits viewable in compare view

Updates @angular/compiler from 22.0.2 to 22.1.5

Release notes

Sourced from @​angular/compiler's releases.

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description
	avoid writing to name input on ControlValueAccessor

migrations

Commit	Description
	skip tsconfig files of non-Angular projects

platform-server

Commit	Description
	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Description
	avoid view transitions when the user agent provides one

22.1.4

common

Commit	Description
	avoid prototype member collisions
	use locale NaN symbol in number formatting

compiler

Commit	Description
	scope animations declared in minified nested rules

compiler-cli

Commit	Description
	default template diagnostic related message source file to template
	Produce correct tcb expression for optional chaining
	retain metadata for strict standalone errors

core

Commit	Description
	avoid prototype member collisions
	explicitly reject foreign components in JIT mode
	preserve namespace for dynamic component hosts

... (truncated)

Commits

• c65d378 fix(core): validate SVG animation attributes outside the SVG namespace
• 60f8a78 refactor(core): defer foreign component rendering to post-update pass
• 079a846 fix(compiler-cli): Produce correct tcb expression for optional chaining
• 05c7c72 fix(compiler): scope animations declared in minified nested rules
• df00ed2 refactor(compiler-cli): add compiler option for enabling source locations
• 83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
• eb0d62e Revert "fix(compiler): preserve &ngsp; between sibling control flow blocks"
• 94f0b9a fix(compiler): preserve &ngsp; between sibling control flow blocks
• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• 6f9a64e fix(compiler): remove namespaced MathML script elements
• Additional commits viewable in compare view

Updates @angular/core from 22.0.2 to 22.1.5

Release notes

Sourced from @​angular/core's releases.

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description
	avoid writing to name input on ControlValueAccessor

migrations

Commit	Description
	skip tsconfig files of non-Angular projects

platform-server

Commit	Description
	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Description
	avoid view transitions when the user agent provides one

22.1.4

common

Commit	Description
	avoid prototype member collisions
	use locale NaN symbol in number formatting

compiler

Commit	Description
	scope animations declared in minified nested rules

compiler-cli

Commit	Description
	default template diagnostic related message source file to template
	Produce correct tcb expression for optional chaining
	retain metadata for strict standalone errors

core

Commit	Description
	avoid prototype member collisions
	explicitly reject foreign components in JIT mode
	preserve namespace for dynamic component hosts

... (truncated)

Commits

• ed2e401 fix(core): don't fail NgModule checks for a pipe that extends a base class
• c65d378 fix(core): validate SVG animation attributes outside the SVG namespace
• 4340a63 fix(router): avoid view transitions when the user agent provides one
• d1ccf02 build: update cross-repo angular dependencies
• 17b7c1f docs: add NG0991 error page and document rxResource's completion contract
• d85288d fix(migrations): skip tsconfig files of non-Angular projects
• 2ceeb27 fix(core): cancel stale debounce timers to prevent timer leaks
• 43aaeae fix(forms): avoid writing to name input on ControlValueAccessor
• 8d23b95 build: remove explicit strict options
• 9340d69 docs(core): repoint or drop dead jsperf links in the render3 notes
• Additional commits viewable in compare view

Updates @angular/platform-browser from 22.0.2 to 22.1.5

Release notes

Sourced from @​angular/platform-browser's releases.

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description
	avoid writing to name input on ControlValueAccessor

migrations

Commit	Description
	skip tsconfig files of non-Angular projects

platform-server

Commit	Description
	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Description
	avoid view transitions when the user agent provides one

22.1.4

common

Commit	Description
	avoid prototype member collisions
	use locale NaN symbol in number formatting

compiler

Commit	Description
	scope animations declared in minified nested rules

compiler-cli

Commit	Description
	default template diagnostic related message source file to template
	Produce correct tcb expression for optional chaining
	retain metadata for strict standalone errors

core

Commit	Description
	avoid prototype member collisions
	explicitly reject foreign components in JIT mode
	preserve namespace for dynamic component hosts

... (truncated)

Commits

• 7546b7a fix(core): throw coded RuntimeErrors instead of crashing when hydration/rende...
• 3ddcb1a fix(platform-browser): disallow event handler attributes in Meta
• 1e53aa0 refactor: correct typos in comments, docs, and error messages
• 640460d fix(platform-browser): throw a descriptive error when insertBefore reference ...
• f51080b refactor(platform-browser): modernize DOM renderer tests
• fb6b354 fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP
• c0eaaed refactor(core): cleanup Meta service
• c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
• 806a3ad docs: add NG05200 error reference page for SANITIZATION_UNSAFE_SCRIPT
• d579eca feat(compiler): Disable '--global-' error outside of g3 (#68846)
• Additional commits viewable in compare view

Updates @angular/router from 22.0.2 to 22.1.5

Release notes

Sourced from @​angular/router's releases.

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description
	avoid writing to name input on ControlValueAccessor

migrations

Commit	Description
	skip tsconfig files of non-Angular projects

platform-server

Commit	Description
	resolve HTTP(S) URLs without authority as relative during SSR

router

Commit	Description
	avoid view transitions when the user agent provides one

22.1.4

common

Commit	Description
	avoid prototype member collisions
	use locale NaN symbol in number formatting

compiler

Commit	Description
	scope animations declared in minified nested rules

compiler-cli

Commit	Description
	default template diagnostic related message source file to template
	Produce correct tcb expression for optional chaining
	retain metadata for strict standalone errors

core

Commit	Description
	avoid prototype member collisions
	explicitly reject foreign components in JIT mode
	preserve namespace for dynamic component hosts

... (truncated)

Commits

• 4340a63 fix(router): avoid view transitions when the user agent provides one
• c84079e refactor(router): add component input binding support for router resources
• 5dfe753 refactor(router): replace internal any types
• d2e3bac refactor(router): add support for blocking router resources
• 84a210e refactor(router): add support for non-blocking router resources (#70211)
• 95d1311 refactor(router): rename activated route injector feature to resource feature...
• abe019d fix(router): pass correct component to canDeactivate for named outlets in com...
• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• 223f25f Revert "fix(router): limit protocol-relative URL handling to serialization"
• dc8c071 refactor(router): Create transactional router resource
• Additional commits viewable in compare view

Updates zone.js from 0.15.1 to 0.16.3

Changelog

Sourced from zone.js's changelog.

0.16.3 (2026-09-02)

• docs(zone.js): point the Bluebird link at the project repo (731c838)
• fix(zone.js): preserve accessor and non-enumerable event listener options (4c4a705), closes #54142 #54142 #70431
• ci: add Alan as a zone.js reviewer (5553699)
• fix(zone.js): guard against null handle when detecting refreshable timers (36c2197), closes #70044
• fix(zone.js): vitest patching of describe/it curried calls (e23541b), closes #69748
• fix(zone.js): harden zoneSymbolEventNames and patches against proto key (2d33fd5)
• fix(zone.js): harden zoneSymbolEventNames against proto key (defense-in-depth) (fd7c2da)
• fix(zone.js): avoid type error on custom object rejection with rejection property (fa75800)
• fix(zone.js): validate __Zone_symbol_prefix to prevent DOM clobbering attacks (e50f504)

0.16.2 (2026-05-06)

• feat(zone.js): support vitest patching in zone.js/testing (#68395) (62c6e3b), closes #68395 #68395
• fix(zone.js): allow draining microtasks in Promise.then (through flag) (fc6a7ee), closes angular#45273 angular#44446 angular#55590 angular#51328

0.16.1 (2026-02-18)

• fix(zone.js): support passthrough of Promise.try API (fc557f0), closes #67057

0.16.0 (2025-11-19)

• fix(zone.js): Support jasmine v6 (48abe00)
• fix(zone.js): waitForAsync should pass args to the test function (#61755) (3c216c1), closes #61755 #61717 #61755
• refactor(zone.js): Add internal implementation for auto ticking fakeAsync (#62135) (0a827f9), closes #62135 #62135
• refactor(zone.js): Improve missing proxy zone error for jest imported (#64497) (ced2fa5), closes #64497 #47603 #64497
• refactor(zone.js): remove legacy browser support (#63511) (2e46596), closes #63511 #63511
• refactor(zone.js): remove unused jasmine globalerror monkey patching. (#63077) (9aef481), closes #63077 #63072 #63077
• test(zone.js): refactor tests to remove usage of shelljs (#64042) (422a3b9), closes #64042 #64042

BREAKING CHANGE

• IE/Non-Chromium Edge are not supported anymore.

Commits

• 124bf44 release: cut the zone.js-0.16.3 release
• 4c4a705 fix(zone.js): preserve accessor and non-enumerable event listener options
• 9cf7b44 build: remove explicit strict options
• 731c838 docs(zone.js): point the Bluebird link at the project repo
• 444b465 build: update cross-repo angular dependencies
• c2d4070 build: update all non-major dependencies
• 1426f5e build: update cross-repo angular dependencies
• 671d8d3 build: update all non-major dependencies
• c18261f build: enable stableTypeOrdering tsconfig flag
• 732e505 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• Additional commits viewable in compare view

Updates @angular-eslint/builder from 22.0.0 to 22.3.0

Release notes

Sourced from @​angular-eslint/builder's releases.

v22.3.0

22.3.0 (2026-09-07)

🚀 Features

• eslint-plugin: [use-injectable-provided-in] add allowProvidedInNull option (#3152)
• eslint-plugin: [inject-at-top] add additionalInjectFunctions option (#3169)
• eslint-plugin: [reactive-context-must-read-signal] add new rule (#3090)

🩹 Fixes

• update dependency @​angular/compiler to v22.1.4 (#3163)
• update dependency eslint to v10.9.1 (#3157)
• update typescript-eslint packages to v8.68.0 (#3158)
• eslint-plugin: [no-implicit-take-until-destroyed] report methods also called outside DI context (#3164)
• eslint-plugin: [prefer-signal-model] skip inputs with transform option (#3050)
• eslint-plugin: [prefer-signal-model] don't report when input and output types differ (#3089)
• eslint-plugin: [reactive-context-must-read-signal] improve getter and function detection (#3175)

❤️ Thank You

• Anas B.
• Guillaume DROUARD
• James Henry @​JamesHenry
• Omar Jimenez @​omy13
• xonaib @​xonaib
• Zonaib Bokhari @​xonaib

v22.2.0

22.2.0 (2026-08-30)

🚀 Features

• eslint-plugin: add allowExplicitOnPush option, auto-remove explicit OnPush when false (#3153)

🩹 Fixes

• update dependency @​angular/compiler to v22.1.2 (#3117)
• update typescript-eslint packages to v8.67.0 (#3110)
• update dependency eslint to v10.8.1 (#3142)
• update dependency @​angular/compiler to v22.1.3 (#3148)
• update dependency eslint to v10.9.0 (#3151)
• remove unused @​angular/cli peer and report Angular major mismatches at runtime (#3154)
• eslint-plugin: [no-duplicates-in-metadata-arrays] cover @Component providers, viewProviders and styleUrls (#3121)
• eslint-plugin-template: [valid-aria] validate each token of a token list (#3128)
• eslint-plugin-template: [prefer-static-string-properties] escape the fixed attribute value (#3135)

❤️ Thank You

• AI-JamesHenry @​AI-JamesHenry

... (truncated)

Changelog

Sourced from @​angular-eslint/builder's changelog.

22.3.0 (2026-09-07)

This was a version bump only for builder to align it with other projects, there were no code changes.

22.2.0 (2026-08-30)

🩹 Fixes

• remove unused @​angular/cli peer and report Angular major mismatches at runtime (#3154)

❤️ Thank You

• AI-JamesHenry @​AI-JamesHenry

22.1.0 (2026-07-12)

This was a version bump only for builder to align it with other projects, there were no code changes.

Commits

• 473cee7 chore(release): publish 22.3.0
• 24da203 chore(release): publish 22.2.0
• 9121daf fix: remove unused @​angular/cli peer and report Angular major mismatches at r...
• a666e1b chore(release): publish 22.1.0
• 578bf35 chore(repo): migrate to nx 23 (#3108)
• 5c12bad chore: fix formatting
• See full diff in compare view

Updates @angular/build from 22.0.4 to 22.1.7

Release notes

Sourced from @​angular/build's releases.

22.1.7

@​angular/cli

Commit	Description
	isolate temporary package installations from parent Yarn workspace

@​angular/build

Commit	Description
	add splitting option to unit-test builder
	enable code splitting for vitest browser tests
	fail build and exclude routes when prerendering fails
	keep dev-server Vite cache worktree-local
	preserve binary values in the SQLite cache store

@​angular/ssr

Commit	Description
	decode pathname when constructing server asset path
	ensure public directory containment in CommonEngine

22.1.6

@​angular/build

Commit	Description
	ignore side-effect annotations in unit test builds
	batch prerender routes and share in-memory server bundles

@​angular/ssr

Commit	Description
	abort web request signal when node request is aborted

22.1.5

@​schematics/angular

Commit	Description
	transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/cli

Commit	Description
	enforce MCP roots in get_best_practices tool
	handle errors from isAllowedWorkspacePath in best-practices tool
	throw on out-of-roots workspace in best-practices tool

@​angular/build

Commit	Description
	correct misleading error message for top-level await
	disable code splitting for unit test builds
	preserve integrity and crossorigin in autoCsp loader
	traverse AST with iterative post-order walker in i18n inliner

22.1.4

<...

Description has been truncated