Bump the angular group across 1 directory with 20 updates by dependabot[bot] · Pull Request #204 · translate-agent/webapp

dependabot · 2026-09-08T17:58:48Z

Bumps the angular group with 20 updates in the / directory:

Package	From	To
@angular/animations	`19.0.4`	`22.1.5`
@angular/cdk	`19.0.4`	`22.1.5`
@angular/common	`19.0.4`	`22.1.5`
@angular/compiler	`19.0.4`	`22.1.5`
@angular/core	`19.0.4`	`22.1.5`
@angular/forms	`19.0.4`	`22.1.5`
@angular/material	`19.0.4`	`22.1.5`
@angular/platform-browser	`19.0.4`	`22.1.5`
@angular/platform-browser-dynamic	`19.0.4`	`22.1.5`
@angular/router	`19.0.4`	`22.1.5`
rxjs	`7.8.1`	`7.8.2`
zone.js	`0.15.0`	`0.16.3`
@angular-devkit/build-angular	`19.0.5`	`22.1.7`
@angular-eslint/builder	`19.8.1`	`22.2.0`
@angular-eslint/eslint-plugin	`19.8.1`	`22.2.0`
@angular-eslint/eslint-plugin-template	`19.8.1`	`22.2.0`
@angular-eslint/schematics	`19.8.1`	`22.2.0`
@angular-eslint/template-parser	`19.8.1`	`22.2.0`
@angular/cli	`19.0.5`	`22.1.7`
@angular/compiler-cli	`19.0.4`	`22.1.5`

Updates @angular/animations from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/animations's releases.

22.1.5

compiler-cli

Commit Description

check uninvoked signal aliases in extended diagnostic

core

Commit Description

cancel stale debounce timers to prevent timer leaks

don't fail NgModule checks for a pipe that extends a base class

validate SVG animation attributes outside the SVG namespace

forms

Commit Description

avoid writing to name input on ControlValueAccessor

migrations

Commit Description

skip tsconfig files of non-Angular projects

platform-server

Commit Description

resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description

avoid view transitions when the user agent provides one

22.1.4

common

Commit Description

avoid prototype member collisions

use locale NaN symbol in number formatting

compiler

Commit Description

scope animations declared in minified nested rules

compiler-cli

Commit Description

default template diagnostic related message source file to template

Produce correct tcb expression for optional chaining

retain metadata for strict standalone errors

core

Commit Description

avoid prototype member collisions

explicitly reject foreign components in JIT mode

preserve namespace for dynamic component hosts

... (truncated)

Commits

4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
d9620e0 fix(animations): detect object trigger values with Object.hasOwn
3d0067a refactor(animations): remove outdated comment
861d37e build: update minimum supported Node.js versions
a7dab60 refactor(core): use the @Service decorator where possible.
b8d3f36 feat(compiler-cli): add support for Node.js 26.0.0
6672192 test: remove duplicate tests (#67518)
d550bf7 build: update minimum supported Node.js versions
81cabc1 feat(core): add support for TypeScript 6
abb1794 refactor(core): mark VERSION exports as pure for better tree-shaking
Additional commits viewable in compare view

Updates @angular/cdk from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/cdk's releases.

22.1.5

aria

Commit Description

combobox: popup not closing when focus leaves it (#33697)

menu: focus not moved into menu if items are delayed (#33743)

multiple

Commit Description

add forms to cdk peer dependencies (#33666)

22.1.4

material

Commit Description

sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

cdk

Commit Description

table: show a real error message instead of a crash when a table column is missing (#33698)

22.1.3

multiple

Commit Description

account for shadow dom in aria directives (#33691)

22.1.2

material

Commit Description

datepicker: actions overflowing at some screen sizes with touch UI (#33645)

form-field: update view when the control is swapped out (#33636)

cdk

Commit Description

a11y: move focus to root if there are no focusable elements in focus trap (#33654)

aria

Commit Description

combobox: empty aria-controls when the popup widget has no id (#33635)

multiple

Commit Description

tokens specified in wrong category (#33660)

22.1.1

material

Commit Description

... (truncated)

Changelog

Sourced from @angular/cdk's changelog.

22.1.5 "platinum-parachute" (2026-09-02)

aria

Commit Type Description

9a63c20b0 fix combobox: popup not closing when focus leaves it (#33697)

9ff8a7c42 fix menu: focus not moved into menu if items are delayed (#33743)

multiple

Commit Type Description

bef29a201 fix add forms to cdk peer dependencies (#33666)

22.2.0-next.3 "nickel-nanobot" (2026-08-26)

cdk

Commit Type Description

6956699a1 fix table: show a real error message instead of a crash when a table column is missing (#33698)

material

Commit Type Description

cacab5551 feat menu: add disabledInteractive input to MatMenuItem (#33693)

e0fd08c05 fix sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

22.1.4 "nickel-nose" (2026-08-26)

cdk

Commit Type Description

86971d660 fix table: show a real error message instead of a crash when a table column is missing (#33698)

material

Commit Type Description

2ea6f0e72 fix sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

22.2.0-next.2 "hydrogen-horse" (2026-08-19)

multiple

Commit Type Description

7dccecc78 fix account for shadow dom in aria directives (#33691)

... (truncated)

Commits

2044fee release: cut the v22.1.5 release
96b87fe test(multiple): remove most remaining fakeAsync usages (#33748)
9ff8a7c fix(aria/menu): focus not moved into menu if items are delayed (#33743)
bef29a2 fix(multiple): add forms to cdk peer dependencies (#33666)
a78de21 build: update github/codeql-action action to v4.37.9 (#33738)
c4e2541 build: update bazel dependencies (#33737)
2467126 build: update cross-repo angular dependencies (#33730)
9a63c20 fix(aria/combobox): popup not closing when focus leaves it (#33697)
16c5e69 release: cut the v22.1.4 release
86971d6 fix(cdk/table): show a real error message instead of a crash when a table col...
Additional commits viewable in compare view

Updates @angular/common from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/common's releases.

22.1.5

compiler-cli

Commit Description

check uninvoked signal aliases in extended diagnostic

core

Commit Description

cancel stale debounce timers to prevent timer leaks

don't fail NgModule checks for a pipe that extends a base class

validate SVG animation attributes outside the SVG namespace

forms

Commit Description

avoid writing to name input on ControlValueAccessor

migrations

Commit Description

skip tsconfig files of non-Angular projects

platform-server

Commit Description

resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description

avoid view transitions when the user agent provides one

22.1.4

common

Commit Description

avoid prototype member collisions

use locale NaN symbol in number formatting

compiler

Commit Description

scope animations declared in minified nested rules

compiler-cli

Commit Description

default template diagnostic related message source file to template

Produce correct tcb expression for optional chaining

retain metadata for strict standalone errors

core

Commit Description

avoid prototype member collisions

explicitly reject foreign components in JIT mode

preserve namespace for dynamic component hosts

... (truncated)

Commits

4340a63 fix(router): avoid view transitions when the user agent provides one
e8378df fix(common): use locale NaN symbol in number formatting
60a874c fix(common): avoid prototype member collisions
4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
b3c78a5 fix(common): preserve literal key union in KeyValuePipe.transform()
0cd635e fix(http): cancel oversized fetch response bodies
4f7e998 fix(http): always decode JSON responses as UTF-8
ac3728e fix(http): avoid aborting completed requests in FetchBackend
f99e916 refactor(common): modernize directive tests to rely on whenStable
32af9b5 fix(http): strip RFC 6265 DQUOTE characters and handle URIError in parseCooki...
Additional commits viewable in compare view

Updates @angular/compiler from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/compiler's releases.

22.1.5

compiler-cli

Commit Description

check uninvoked signal aliases in extended diagnostic

core

Commit Description

cancel stale debounce timers to prevent timer leaks

don't fail NgModule checks for a pipe that extends a base class

validate SVG animation attributes outside the SVG namespace

forms

Commit Description

avoid writing to name input on ControlValueAccessor

migrations

Commit Description

skip tsconfig files of non-Angular projects

platform-server

Commit Description

resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description

avoid view transitions when the user agent provides one

22.1.4

common

Commit Description

avoid prototype member collisions

use locale NaN symbol in number formatting

compiler

Commit Description

scope animations declared in minified nested rules

compiler-cli

Commit Description

default template diagnostic related message source file to template

Produce correct tcb expression for optional chaining

retain metadata for strict standalone errors

core

Commit Description

avoid prototype member collisions

explicitly reject foreign components in JIT mode

preserve namespace for dynamic component hosts

... (truncated)

Commits

c65d378 fix(core): validate SVG animation attributes outside the SVG namespace
60f8a78 refactor(core): defer foreign component rendering to post-update pass
079a846 fix(compiler-cli): Produce correct tcb expression for optional chaining
05c7c72 fix(compiler): scope animations declared in minified nested rules
df00ed2 refactor(compiler-cli): add compiler option for enabling source locations
83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
eb0d62e Revert "fix(compiler): preserve &ngsp; between sibling control flow blocks"
94f0b9a fix(compiler): preserve &ngsp; between sibling control flow blocks
4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
6f9a64e fix(compiler): remove namespaced MathML script elements
Additional commits viewable in compare view

Updates @angular/core from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/core's releases.

22.1.5

compiler-cli

Commit Description

check uninvoked signal aliases in extended diagnostic

core

Commit Description

cancel stale debounce timers to prevent timer leaks

don't fail NgModule checks for a pipe that extends a base class

validate SVG animation attributes outside the SVG namespace

forms

Commit Description

avoid writing to name input on ControlValueAccessor

migrations

Commit Description

skip tsconfig files of non-Angular projects

platform-server

Commit Description

resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description

avoid view transitions when the user agent provides one

22.1.4

common

Commit Description

avoid prototype member collisions

use locale NaN symbol in number formatting

compiler

Commit Description

scope animations declared in minified nested rules

compiler-cli

Commit Description

default template diagnostic related message source file to template

Produce correct tcb expression for optional chaining

retain metadata for strict standalone errors

core

Commit Description

avoid prototype member collisions

explicitly reject foreign components in JIT mode

preserve namespace for dynamic component hosts

... (truncated)

Commits

ed2e401 fix(core): don't fail NgModule checks for a pipe that extends a base class
c65d378 fix(core): validate SVG animation attributes outside the SVG namespace
4340a63 fix(router): avoid view transitions when the user agent provides one
d1ccf02 build: update cross-repo angular dependencies
17b7c1f docs: add NG0991 error page and document rxResource's completion contract
d85288d fix(migrations): skip tsconfig files of non-Angular projects
2ceeb27 fix(core): cancel stale debounce timers to prevent timer leaks
43aaeae fix(forms): avoid writing to name input on ControlValueAccessor
8d23b95 build: remove explicit strict options
9340d69 docs(core): repoint or drop dead jsperf links in the render3 notes
Additional commits viewable in compare view

Updates @angular/forms from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/forms's releases.

22.1.5

compiler-cli

Commit Description

check uninvoked signal aliases in extended diagnostic

core

Commit Description

cancel stale debounce timers to prevent timer leaks

don't fail NgModule checks for a pipe that extends a base class

validate SVG animation attributes outside the SVG namespace

forms

Commit Description

avoid writing to name input on ControlValueAccessor

migrations

Commit Description

skip tsconfig files of non-Angular projects

platform-server

Commit Description

resolve HTTP(S) URLs without authority as relative during SSR

router

Commit Description

avoid view transitions when the user agent provides one

22.1.4

common

Commit Description

avoid prototype member collisions

use locale NaN symbol in number formatting

compiler

Commit Description

scope animations declared in minified nested rules

compiler-cli

Commit Description

default template diagnostic related message source file to template

Produce correct tcb expression for optional chaining

retain metadata for strict standalone errors

core

Commit Description

avoid prototype member collisions

explicitly reject foreign components in JIT mode

preserve namespace for dynamic component hosts

... (truncated)

Commits

f302736 refactor(core): use native Promise.withResolvers() in tests
43aaeae fix(forms): avoid writing to name input on ControlValueAccessor
c8eb7f0 fix(forms): use dot-access for readonly rule configuration
787a8e9 refactor(forms): type async validator subscription
4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
3a82a16 docs: use transformedValue in `Forms | Custom Controls | Value transformati...
1e53aa0 refactor: correct typos in comments, docs, and error messages
5cb4ea7 fix(forms): warn in dev mode when ngModel cannot reach parent NgForm across c...
72e7664 refactor(forms): modernize Signal Forms tests
3b5c798 fix(forms): keep radio inputs in sync when values change
Additional commits viewable in compare view

Updates @angular/material from 19.0.4 to 22.1.5

Release notes

Sourced from @angular/material's releases.

22.1.5

aria

Commit Description

combobox: popup not closing when focus leaves it (#33697)

menu: focus not moved into menu if items are delayed (#33743)

multiple

Commit Description

add forms to cdk peer dependencies (#33666)

22.1.4

material

Commit Description

sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

cdk

Commit Description

table: show a real error message instead of a crash when a table column is missing (#33698)

22.1.3

multiple

Commit Description

account for shadow dom in aria directives (#33691)

22.1.2

material

Commit Description

datepicker: actions overflowing at some screen sizes with touch UI (#33645)

form-field: update view when the control is swapped out (#33636)

cdk

Commit Description

a11y: move focus to root if there are no focusable elements in focus trap (#33654)

aria

Commit Description

combobox: empty aria-controls when the popup widget has no id (#33635)

multiple

Commit Description

tokens specified in wrong category (#33660)

22.1.1

material

Commit Description

... (truncated)

Changelog

Sourced from @angular/material's changelog.

22.1.5 "platinum-parachute" (2026-09-02)

aria

Commit Type Description

9a63c20b0 fix combobox: popup not closing when focus leaves it (#33697)

9ff8a7c42 fix menu: focus not moved into menu if items are delayed (#33743)

multiple

Commit Type Description

bef29a201 fix add forms to cdk peer dependencies (#33666)

22.2.0-next.3 "nickel-nanobot" (2026-08-26)

cdk

Commit Type Description

6956699a1 fix table: show a real error message instead of a crash when a table column is missing (#33698)

material

Commit Type Description

cacab5551 feat menu: add disabledInteractive input to MatMenuItem (#33693)

e0fd08c05 fix sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

22.1.4 "nickel-nose" (2026-08-26)

cdk

Commit Type Description

86971d660 fix table: show a real error message instead of a crash when a table column is missing (#33698)

material

Commit Type Description

2ea6f0e72 fix sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

22.2.0-next.2 "hydrogen-horse" (2026-08-19)

multiple

Commit Type Description

7dccecc78 fix account for shadow dom in aria directives (#33691)

Bumps the angular group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `19.0.4` | `22.1.5` | | [@angular/cdk](https://github.com/angular/components) | `19.0.4` | `22.1.5` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `19.0.4` | `22.1.5` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `19.0.4` | `22.1.5` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `19.0.4` | `22.1.5` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `19.0.4` | `22.1.5` | | [@angular/material](https://github.com/angular/components) | `19.0.4` | `22.1.5` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `19.0.4` | `22.1.5` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `19.0.4` | `22.1.5` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `19.0.4` | `22.1.5` | | [rxjs](https://github.com/reactivex/rxjs) | `7.8.1` | `7.8.2` | | [zone.js](https://github.com/angular/angular/tree/HEAD/packages/zone.js) | `0.15.0` | `0.16.3` | | [@angular-devkit/build-angular](https://github.com/angular/angular-cli) | `19.0.5` | `22.1.7` | | [@angular-eslint/builder](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/builder) | `19.8.1` | `22.2.0` | | [@angular-eslint/eslint-plugin](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/eslint-plugin) | `19.8.1` | `22.2.0` | | [@angular-eslint/eslint-plugin-template](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/eslint-plugin-template) | `19.8.1` | `22.2.0` | | [@angular-eslint/schematics](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/schematics) | `19.8.1` | `22.2.0` | | [@angular-eslint/template-parser](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/template-parser) | `19.8.1` | `22.2.0` | | [@angular/cli](https://github.com/angular/angular-cli) | `19.0.5` | `22.1.7` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `19.0.4` | `22.1.5` | Updates `@angular/animations` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/animations) Updates `@angular/cdk` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@19.0.4...v22.1.5) Updates `@angular/common` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/common) Updates `@angular/compiler` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/compiler) Updates `@angular/core` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/core) Updates `@angular/forms` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/forms) Updates `@angular/material` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@19.0.4...v22.1.5) Updates `@angular/platform-browser` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/platform-browser-dynamic) Updates `@angular/router` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/router) Updates `rxjs` from 7.8.1 to 7.8.2 - [Release notes](https://github.com/reactivex/rxjs/releases) - [Changelog](https://github.com/ReactiveX/rxjs/blob/7.8.2/CHANGELOG.md) - [Commits](ReactiveX/rxjs@7.8.1...7.8.2) Updates `zone.js` from 0.15.0 to 0.16.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/packages/zone.js/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/zone.js-0.16.3/packages/zone.js) Updates `@angular-devkit/build-angular` from 19.0.5 to 22.1.7 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@19.0.5...v22.1.7) Updates `@angular-eslint/builder` from 19.8.1 to 22.2.0 - [Release notes](https://github.com/angular-eslint/angular-eslint/releases) - [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/builder/CHANGELOG.md) - [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.2.0/packages/builder) Updates `@angular-eslint/eslint-plugin` from 19.8.1 to 22.2.0 - [Release notes](https://github.com/angular-eslint/angular-eslint/releases) - [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.2.0/packages/eslint-plugin) Updates `@angular-eslint/eslint-plugin-template` from 19.8.1 to 22.2.0 - [Release notes](https://github.com/angular-eslint/angular-eslint/releases) - [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/eslint-plugin-template/CHANGELOG.md) - [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.2.0/packages/eslint-plugin-template) Updates `@angular-eslint/schematics` from 19.8.1 to 22.2.0 - [Release notes](https://github.com/angular-eslint/angular-eslint/releases) - [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/schematics/CHANGELOG.md) - [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.2.0/packages/schematics) Updates `@angular-eslint/template-parser` from 19.8.1 to 22.2.0 - [Release notes](https://github.com/angular-eslint/angular-eslint/releases) - [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/template-parser/CHANGELOG.md) - [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.2.0/packages/template-parser) Updates `@angular/cli` from 19.0.5 to 22.1.7 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@19.0.5...v22.1.7) Updates `@angular/compiler-cli` from 19.0.4 to 22.1.5 - [Release notes](https://github.com/angular/angular/releases) - [Commits](https://github.com/angular/angular/commits/v22.1.5/packages/compiler-cli) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/cdk" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/common" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/compiler" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/core" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/forms" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/material" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/platform-browser" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/router" dependency-version: 22.1.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: angular - dependency-name: rxjs dependency-version: 7.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: angular - dependency-name: zone.js dependency-version: 0.16.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: angular - dependency-name: "@angular-devkit/build-angular" dependency-version: 22.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular-eslint/builder" dependency-version: 22.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular-eslint/eslint-plugin" dependency-version: 22.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular-eslint/eslint-plugin-template" dependency-version: 22.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular-eslint/schematics" dependency-version: 22.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular-eslint/template-parser" dependency-version: 22.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/cli" dependency-version: 22.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular - dependency-name: "@angular/compiler-cli" dependency-version: 22.1.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: angular ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-09-08T17:59:34Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
@angular/platform-browser-dynamic@19.0.4 ⏵ 22.1.5			^-1
@angular-eslint/template-parser@22.2.0
@angular/platform-browser@19.0.4 ⏵ 22.1.5	⁺²²			^-1
@angular/animations@19.0.4 ⏵ 22.1.5
@angular-eslint/schematics@22.2.0
@angular/compiler-cli@19.0.4 ⏵ 22.1.5	⁺²⁰
@angular/router@19.0.4 ⏵ 22.1.5	⁺²¹			⁺¹
@angular/forms@19.0.4 ⏵ 22.1.5	⁺²¹
@angular/cli@19.0.5 ⏵ 22.1.7	⁺¹⁵		⁺¹	⁺¹
@angular/compiler@19.0.4 ⏵ 22.1.5	⁺²⁰	⁺⁴⁰
@angular/cdk@19.0.4 ⏵ 22.1.5				⁺²
@angular/core@19.0.4 ⏵ 22.1.5	⁺¹⁸	⁺⁵⁰	^-1
@angular/common@19.0.4 ⏵ 22.1.5	⁺¹	⁺⁶¹
@angular/material@19.0.4 ⏵ 22.1.5
@angular-devkit/build-angular@19.0.5 ⏵ 22.1.7	^-1		⁺¹	⁺¹
@angular-eslint/builder@22.2.0
rxjs@7.8.2
zone.js@0.15.0 ⏵ 0.16.3	⁺¹²			⁺⁴
@angular-eslint/eslint-plugin@22.2.0
@angular-eslint/eslint-plugin-template@22.2.0

View full report

socket-security · 2026-09-08T17:59:36Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → `npm/@angular-devkit/build-angular@22.1.7` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `lmdb` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → `npm/@angular-devkit/build-angular@22.1.7` → `npm/lmdb@3.5.6` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/lmdb@3.5.6`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `webpack` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: package.json → `npm/@angular-devkit/build-angular@22.1.7` → `npm/webpack@5.109.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/webpack@5.109.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026

Navigation Menu

Bump the angular group across 1 directory with 20 updates - #204

Bump the angular group across 1 directory with 20 updates#204
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular-e69379a693

dependabot Bot commented on behalf of github Sep 8, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 8, 2026

Uh oh!

socket-security Bot commented Sep 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

Commit	Description
	avoid prototype member collisions
	use locale NaN symbol in number formatting

Commit	Description
	default template diagnostic related message source file to template
	Produce correct tcb expression for optional chaining
	retain metadata for strict standalone errors

Commit	Description
	avoid prototype member collisions
	explicitly reject foreign components in JIT mode
	preserve namespace for dynamic component hosts

Commit	Description
	combobox: popup not closing when focus leaves it (#33697)
	menu: focus not moved into menu if items are delayed (#33743)

Commit	Description
	datepicker: actions overflowing at some screen sizes with touch UI (#33645)
	form-field: update view when the control is swapped out (#33636)

Commit	Type	Description
9a63c20b0	fix	combobox: popup not closing when focus leaves it (#33697)
9ff8a7c42	fix	menu: focus not moved into menu if items are delayed (#33743)

Commit	Type	Description
cacab5551	feat	menu: add disabledInteractive input to MatMenuItem (#33693)
e0fd08c05	fix	sidenav: prevent drawer from getting stuck when toggled rapidly (#33726)

Conversation

dependabot Bot commented on behalf of github Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

22.1.5

compiler-cli

core

forms

migrations

platform-server

router

22.1.4

common

compiler

compiler-cli

core

22.1.5

aria

multiple

22.1.4

material

cdk

22.1.3

multiple

22.1.2

material

cdk

aria

multiple

22.1.1

material

22.1.5 "platinum-parachute" (2026-09-02)

aria

multiple

22.2.0-next.3 "nickel-nanobot" (2026-08-26)

cdk

material

22.1.4 "nickel-nose" (2026-08-26)

cdk

material

22.2.0-next.2 "hydrogen-horse" (2026-08-19)

multiple

22.1.5

compiler-cli

core

forms

migrations

platform-server

router

22.1.4

common

compiler

compiler-cli

core

22.1.5

compiler-cli

core

forms

migrations

platform-server

router

22.1.4

common

compiler

compiler-cli

core

22.1.5

compiler-cli

core

forms

migrations

platform-server

router

22.1.4

common

compiler

compiler-cli

core

22.1.5

compiler-cli

core

dependabot Bot commented on behalf of github Sep 8, 2026 •

edited

Loading