chore(deps): bump the npm-dependencies group across 1 directory with 30 updates

[dependabot]

Bumps the npm-dependencies group with 30 updates in the /booklore-ui directory:

Package	From	To
@angular/cdk	21.2.14	22.2.1
@angular/common	21.2.23	22.2.1
@angular/compiler	21.2.23	22.2.1
@angular/core	21.2.23	22.2.1
@angular/forms	21.2.23	22.2.1
@angular/platform-browser	21.2.23	22.2.1
@angular/router	21.2.23	22.2.1
@angular/service-worker	21.2.23	22.2.1
@primeuix/themes	2.0.3	3.0.1
dompurify	3.4.15	3.4.16
ng2-charts	10.0.0	11.0.0
ngx-extended-pdf-viewer	29.0.1	30.0.1
ngx-infinite-scroll	21.0.0	22.0.0
primeicons	7.0.0	8.0.2
primeng	21.1.10	22.1.2
uuid	11.1.1	14.0.2
ws	8.21.3	8.22.0
@analogjs/vite-plugin-angular	2.7.2	2.8.0
@analogjs/vitest-angular	2.7.2	2.8.0
@angular/build	21.2.24	22.2.1
@angular/cli	21.2.24	22.2.1
@angular/compiler-cli	21.2.23	22.2.1
@types/node	25.9.7	26.6.4
@vitest/coverage-v8	4.1.11	5.0.3
angular-eslint	21.4.0	22.5.0
eslint	10.10.0	10.12.0
jsdom	29.1.1	30.1.2
typescript	5.9.3	7.0.2
typescript-eslint	8.70.0	8.71.1
vitest	4.1.11	5.0.3

Updates @angular/cdk from 21.2.14 to 22.2.1

Release notes

Sourced from @​angular/cdk's releases.

22.2.1

material

Commit	Description
	icon: keep FuncIRI references on current origin (#33812)
	select: glitchy animation when legacy animations are enabled (#33874)

cdk

Commit	Description
	overlay: allow users to opt into closing on any URL change (#33893)

22.2.0

material-luxon-adapter

Commit	Description
	add option to set zone (#33579)

material

Commit	Description
	icon: add material symbol classes automatically (#33750)
	menu: add disabledInteractive input to MatMenuItem (#33693)
	core: generate Material Symbols in schematic (#33797)
	form-field: support signal forms in MatFormFieldControl
	icon: false positive in font detection (#33805)
	menu: allow focus to land on disabledInteractive items (#33749)

cdk

Commit	Description
	overlay: temporarily hide getAttachedOverlays (#33854)
	testing: account for new DirectiveFixture API (#33771)
	testing: use directive fixture onDestroy (#33793)

aria

Commit	Description
	menu: make MenuItem value optional (#33715)

multiple

Commit	Description
	export aria injection tokens to support custom subclasses (#33607)
	include material symbols in selectors (#33754)
	replace hasOwnProperty with Object.hasOwn (#33843)

22.2.0-rc.0

material-luxon-adapter

Commit	Description
	add option to set zone (#33579)

material

Commit	Description

... (truncated)

Changelog

Sourced from @​angular/cdk's changelog.

22.2.1 "tellurium-telescope" (2026-09-30)

cdk

Commit	Type	Description
1a434cdc8	fix	overlay: allow users to opt into closing on any URL change (#33893)

material

Commit	Type	Description
e06c8deed	fix	icon: keep FuncIRI references on current origin (#33812)
a7a31a674	fix	select: glitchy animation when legacy animations are enabled (#33874)

22.2.0 "rubidium-rollercoaster" (2026-09-23)

aria

Commit	Type	Description
cd9c7da8b	fix	menu: make MenuItem value optional (#33715)

cdk

Commit	Type	Description
0f6e8d656	fix	overlay: temporarily hide getAttachedOverlays (#33854)
3d30bf1b4	fix	testing: account for new DirectiveFixture API (#33771)
aad74d364	fix	testing: use directive fixture onDestroy (#33793)

material

Commit	Type	Description
5d64e397b	feat	icon: add material symbol classes automatically (#33750)
cacab5551	feat	menu: add disabledInteractive input to MatMenuItem (#33693)
b0019f844	fix	core: generate Material Symbols in schematic (#33797)
42c72bf2e	fix	form-field: support signal forms in MatFormFieldControl
fd3f02826	fix	icon: false positive in font detection (#33805)
d33df3168	fix	menu: allow focus to land on disabledInteractive items (#33749)

material-luxon-adapter

Commit	Type	Description
d3acf189e	feat	add option to set zone (#33579)

multiple

Commit	Type	Description
8d3da9ea3	feat	export aria injection tokens to support custom subclasses (#33607)
ab16b1fb9	fix	include material symbols in selectors (#33754)
67c4cfbc8	fix	replace hasOwnProperty with Object.hasOwn (#33843)

22.1.8 "rubidium-rhino" (2026-09-23)

aria

... (truncated)

Commits

• f41e439 release: cut the v22.2.1 release
• 1a434cd fix(cdk/overlay): allow users to opt into closing on any URL change (#33893)
• e06c8de fix(material/icon): keep FuncIRI references on current origin (#33812)
• 488e8a3 test(multiple): switch remaining tests away from fakeAsync (#33889)
• f9543da docs: type the external redirect guard (#33887)
• 8a2ffd1 docs: convert mat-form-field errors copy/example to signal forms (#33885)
• 5ebcf67 docs: bind route params to component inputs (#33884)
• 8f6d6ed build: update cross-repo angular dependencies (#33883)
• 785b068 refactor(cdk/overlay): use signal for attached overlays (#33882)
• a7a31a6 fix(material/select): glitchy animation when legacy animations are enabled (#...
• Additional commits viewable in compare view

Updates @angular/common from 21.2.23 to 22.2.1

Release notes

Sourced from @​angular/common's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

... (truncated)

Commits

• ad2f291 fix(common): let NgOptimizedImage pass a [srcset] binding through when srcset...
• 6dee7fe fix(http): forward reportProgress of httpResource as `reportDownloadProgr...
• 270abc9 docs(docs-infra): throw on absolute links in @​see tags
• b9de99d fix(common): remove abort listener on the abort path too in httpResource
• 1bc7e3c refactor(core): use native Promise.withResolvers() in remaining tests
• 0bdbbcf fix(docs-infra): only read a deprecation version from the start of the tag
• af26a8c fix(router): avoid view transitions when the user agent provides one
• 7596548 fix(common): use locale NaN symbol in number formatting
• 862a0c8 fix(common): avoid prototype member collisions
• 732e505 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• Additional commits viewable in compare view

Updates @angular/compiler from 21.2.23 to 22.2.1

Release notes

Sourced from @​angular/compiler's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

... (truncated)

Commits

• c451a3b fix(compiler): avoid incorrectly stripping parentheses in template pipeline
• 82a930d refactor(compiler): cleanup complier flags
• bbc556d fix(compiler): avoid stripping parentheses from some expressions
• 0ecaf8e fix(compiler): add explicit return types to generated functions
• 18edb1b fix(compiler): guard unverified ctor parameter types in class metadata
• 7a58550 fix(forms): create controls before listeners
• 949d66c refactor(compiler): add method to emitter context
• 710c2c7 fix(compiler): avoid hitting TypeScript limits if template has many translations
• 2f27d83 fix(core): loosen return types for arrow functions in generated code
• e20a92c fix(compiler): add return type to pure functions
• Additional commits viewable in compare view

Updates @angular/core from 21.2.23 to 22.2.1

Release notes

Sourced from @​angular/core's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

... (truncated)

Commits

• 78d0648 docs: add the missing inject import to the inject migration examples
• 14daa09 docs: rewrite the RouterTestingModule migration README
• d0ea72b docs: correct the RouterTestingModule schematic description
• 6040d24 Revert "fix(core): block dangerous data: and vbscript: URLs in URL sanitizer"
• 69a5e19 Revert "fix(core): extend data: URL allowlist for non-executable MIME types"
• d33f2d0 refactor(core): show the enclosing component in the NG0502 hydration error
• 9aeef8d fix(core): extend data: URL allowlist for non-executable MIME types
• 7c634ec fix(core): block dangerous data: and vbscript: URLs in URL sanitizer
• f34b87b refactor(migrations): remove unused skipped inputs set
• a8528d4 docs: align the service migration README with the schematic
• Additional commits viewable in compare view

Updates @angular/forms from 21.2.23 to 22.2.1

Release notes

Sourced from @​angular/forms's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

... (truncated)

Commits

• 2d68c17 refactor(core): use native Promise.withResolvers() in remaining test files
• 7a58550 fix(forms): create controls before listeners
• 82372fd docs(forms): name the default error factories in the signal validators
• f825c9b docs: fix API links that point at missing member anchors
• 15bfc1a fix(forms): mark control as dirty before setting its value in FVC interop
• 467b37b docs(forms): document what required() considers empty
• b9fb456 docs(forms): close the unterminated code fences in the compatForm docs
• 8ca879e refactor(forms): expose consequentialHint annotation
• 8afd85c test(forms): migrate integration tests to zoneless scheduling
• 1bc7e3c refactor(core): use native Promise.withResolvers() in remaining tests
• Additional commits viewable in compare view

Updates @angular/platform-browser from 21.2.23 to 22.2.1

Release notes

Sourced from @​angular/platform-browser's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

... (truncated)

Commits

• 2d68c17 refactor(core): use native Promise.withResolvers() in remaining test files
• ab0cfda refactor(platform-browser): type shadow DOM renderer fields
• 1bc7e3c refactor(core): use native Promise.withResolvers() in remaining tests
• 83f7695 fix(core): throw coded RuntimeErrors instead of crashing when hydration/rende...
• 6f9a6be fix(platform-browser): disallow event handle...

  Description has been truncated

[github-actions]

Frontend Test Results

0 tests   - 452   0 ✅  - 452   0s ⏱️ -2s
0 suites  -  23   0 💤 ±  0 
0 files    -   1   0 ❌ ±  0 

Results for commit 683b514. ± Comparison against base commit 01b3407.

[github-actions]

Backend Test Results

  465 files  ±0    465 suites  ±0   2m 40s ⏱️ ±0s
3 374 tests ±0  3 359 ✅ ±0  15 💤 ±0  0 ❌ ±0 
3 431 runs  ±0  3 416 ✅ ±0  15 💤 ±0  0 ❌ ±0 

Results for commit 683b514. ± Comparison against base commit 01b3407.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.