build(deps-dev): bump @angular/common, @angular/build, @angular/platform-browser and @angular/platform-browser-dynamic by dependabot[bot] · Pull Request #2534 · device-management-toolkit/ui-toolkit-angular

dependabot · 2026-08-03T16:50:15Z

Bumps @angular/common, @angular/build, @angular/platform-browser and @angular/platform-browser-dynamic. These dependencies needed to be updated together.
Updates @angular/common from 21.2.18 to 22.1.0

Release notes

Sourced from @angular/common's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

set current tnode in foreign component instruction on reuse

forms

Commit Description

add utility to assert that value is a field tree

http

Commit Description

add options to allow caching of credentialed and non-cacheable HTTP requests

enable xsrf for root-provided HttpClient

match header values exactly when deleting

preserve immutability of materialized clones

skip transfer cache for fetch credentialed requests (#69017)

deprecate jsonp support

language-service

Commit Description

compile non-exported classes if standalone (#68454)

Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @angular/common's changelog.

22.1.0 (2026-07-29)

Deprecations

http

HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description

1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description

af5e4e1131 feat Add an error for --global-foo cases (#68846)

d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)

f98547675c feat Namespace CSS variables to the app (#68846)

8c8b2f7783 feat Support css var namespacing in properties (#68846)

292199aa4d fix permissive whitespace parsing in default never blocks

25c744c4d0 fix support foreign components defined outside top-level scope

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

aeb55c8bc1 fix allow passing uninvoked signals as foreign component props

7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description

124ba10ead feat add custom set option to linkedSignal

eab4847a8b feat Adds deep linking from Performance panel to DevTools

091456a214 fix account for namespaces in host binding sanitization (#69558)

b3748e9fe4 fix correct container anchor collection order to match DOM layout

11b206b919 fix introduce disposal mechanism for Angular views in foreign @content

56607967db fix introduce logical-only containers for foreign content

23cf1a828b fix sanitize host bindings on concrete hosts (#69558)

0c07356c5c fix set current tnode in foreign component instruction on reuse

forms

Commit Type Description

bbbd357bd2 fix add utility to assert that value is a field tree

http

Commit Type Description

e3630c23c5 feat add options to allow caching of credentialed and non-cacheable HTTP requests

ec16a3d6c6 fix enable xsrf for root-provided HttpClient

39e362eea5 fix match header values exactly when deleting

be46ca8696 fix preserve immutability of materialized clones

c0cbd46bd7 fix skip transfer cache for fetch credentialed requests (#69017)

af04e266cc refactor deprecate jsonp support

language-service

| Commit | Type | Description |

... (truncated)

Commits

79a37f3 refactor(common): replaces the deprecated positional subscribe arguments wi...
6dcb534 refactor(common): remove duplicate helper function
ec16a3d fix(http): enable xsrf for root-provided HttpClient
39e362e fix(http): match header values exactly when deleting
be46ca8 fix(http): preserve immutability of materialized clones
d14696e fix(common): preserve crossorigin on image preloads
3192dcc fix(http): prevent transfer cache key collisions
359fb50 fix(common): avoid prototype lookups in date format caches
6d043f8 fix(http): prevent interceptor signal reads from leaking into calling reactiv...
c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
Additional commits viewable in compare view

Updates @angular/build from 21.2.19 to 22.1.2

Release notes

Sourced from @angular/build's releases.

22.1.2

@angular/cli

Commit Description

add packages with built-in schematics to devDependencies only

@angular/build

Commit Description

prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1

@angular/cli

Commit Description

support npm 12 metadata array and error formats

@angular/build

Commit Description

rewrite paths from sandboxed execroots when running under Bazel

22.1.0

@angular/cli

Commit Description

abort and guide manual mitigation when updating catalog packages

prevent Yarn registry environment variable override

remove algoliasearch dependency and support latest docs versions

resolve correct registry name when using npm alias syntax during update

respect client-side release age settings during update resolution

revert package.json changes if installation tasks fail during update

robustly parse npm manifest from array

@schematics/angular

Commit Description

update ai-config to include Angular MCP server config

remove unused spec tsconfig outDir

@angular-devkit/core

Commit Description

deprecate stringToFileBuffer and fileBufferToString

@angular/build

Commit Description

add built-in SQLite cache store fallback

emit debug ids for stable subresource integrity hashes

enable chunk optimization for server builds

migrate advanced optimization Babel plugins to oxc-parser + magic-string

migrate i18n inliner to oxc-parser + magic-string

share persistent build cache across git worktrees

add bounded timeout to vitest executor disposal

... (truncated)

Changelog

Sourced from @angular/build's changelog.

22.1.2 (2026-07-30)

@angular/cli

Commit Type Description

57db27ea91 fix add packages with built-in schematics to devDependencies only

@angular/build

Commit Type Description

baed978885 fix prevent IIFE wrapper interleaving for adjacent classes in minified files

22.1.1 (2026-07-30)

@angular/cli

Commit Type Description

ab971a8543 fix support npm 12 metadata array and error formats

@angular/build

Commit Type Description

db24220fb8 fix rewrite paths from sandboxed execroots when running under Bazel

22.2.0-next.0 (2026-07-30)

@angular/cli

Commit Type Description

e148a8df93 fix support npm 12 metadata array and error formats

@angular/build

Commit Type Description

6469b5f1f5 fix rewrite paths from sandboxed execroots when running under Bazel

... (truncated)

Commits

bccc749 release: cut the v22.1.2 release
57db27e fix(@angular/cli): add packages with built-in schematics to devDependencies only
baed978 fix(@angular/build): prevent IIFE wrapper interleaving for adjacent classes i...
dde9aed build: update cross-repo angular dependencies
51efbd8 build: update github/codeql-action action to v4.37.4
6c15ac8 ci: add branch tracking comments to dev-infra GitHub actions
5d92c65 release: cut the v22.1.1 release
e30e18a build: update dependency webpack to v5.109.2
46d42d8 build: update dependency oxc-parser to v0.142.0
9ccb475 build: update bazel dependencies
Additional commits viewable in compare view

Updates @angular/platform-browser from 21.2.18 to 22.1.0

Release notes

Sourced from @angular/platform-browser's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

set current tnode in foreign component instruction on reuse

forms

Commit Description

add utility to assert that value is a field tree

http

Commit Description

add options to allow caching of credentialed and non-cacheable HTTP requests

enable xsrf for root-provided HttpClient

match header values exactly when deleting

preserve immutability of materialized clones

skip transfer cache for fetch credentialed requests (#69017)

deprecate jsonp support

language-service

Commit Description

compile non-exported classes if standalone (#68454)

Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @angular/platform-browser's changelog.

22.1.0 (2026-07-29)

Deprecations

http

HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description

1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description

af5e4e1131 feat Add an error for --global-foo cases (#68846)

d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)

f98547675c feat Namespace CSS variables to the app (#68846)

8c8b2f7783 feat Support css var namespacing in properties (#68846)

292199aa4d fix permissive whitespace parsing in default never blocks

25c744c4d0 fix support foreign components defined outside top-level scope

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

aeb55c8bc1 fix allow passing uninvoked signals as foreign component props

7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description

124ba10ead feat add custom set option to linkedSignal

eab4847a8b feat Adds deep linking from Performance panel to DevTools

091456a214 fix account for namespaces in host binding sanitization (#69558)

b3748e9fe4 fix correct container anchor collection order to match DOM layout

11b206b919 fix introduce disposal mechanism for Angular views in foreign @content

56607967db fix introduce logical-only containers for foreign content

23cf1a828b fix sanitize host bindings on concrete hosts (#69558)

0c07356c5c fix set current tnode in foreign component instruction on reuse

forms

Commit Type Description

bbbd357bd2 fix add utility to assert that value is a field tree

http

Commit Type Description

e3630c23c5 feat add options to allow caching of credentialed and non-cacheable HTTP requests

ec16a3d6c6 fix enable xsrf for root-provided HttpClient

39e362eea5 fix match header values exactly when deleting

be46ca8696 fix preserve immutability of materialized clones

c0cbd46bd7 fix skip transfer cache for fetch credentialed requests (#69017)

af04e266cc refactor deprecate jsonp support

language-service

| Commit | Type | Description |

... (truncated)

Commits

fb6b354 fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP
c0eaaed refactor(core): cleanup Meta service
c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
806a3ad docs: add NG05200 error reference page for SANITIZATION_UNSAFE_SCRIPT
d579eca feat(compiler): Disable '--global-' error outside of g3 (#68846)
8c8b2f7 feat(compiler): Support css var namespacing in properties (#68846)
f985476 feat(compiler): Namespace CSS variables to the app (#68846)
ea17725 docs: add error guide for NG05102
dead64f docs: add error guide for NG05101
6f56202 docs: fix typos in source code comments
Additional commits viewable in compare view

Updates @angular/platform-browser-dynamic from 21.2.18 to 22.1.0

Release notes

Sourced from @angular/platform-browser-dynamic's releases.

22.1.0

common

Commit Description

skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Description

Add an error for --global-foo cases (#68846)

Disable '--global-' error outside of g3 (#68846)

Namespace CSS variables to the app (#68846)

Support css var namespacing in properties (#68846)

permissive whitespace parsing in default never blocks

support foreign components defined outside top-level scope

support foreign components inside control flow blocks (#69674)

do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Description

allow passing uninvoked signals as foreign component props

support import aliases in foreignImports (#68674)

core

Commit Description

add custom set option to linkedSignal

Adds deep linking from Performance panel to DevTools

account for namespaces in host binding sanitization (#69558)

correct container anchor collection order to match DOM layout

introduce disposal mechanism for Angular views in foreign @content

introduce logical-only containers for foreign content

sanitize host bindings on concrete hosts (#69558)

set current tnode in foreign component instruction on reuse

forms

Commit Description

add utility to assert that value is a field tree

http

Commit Description

add options to allow caching of credentialed and non-cacheable HTTP requests

enable xsrf for root-provided HttpClient

match header values exactly when deleting

preserve immutability of materialized clones

skip transfer cache for fetch credentialed requests (#69017)

deprecate jsonp support

language-service

Commit Description

compile non-exported classes if standalone (#68454)

Typecheck templates which would require inline typecheck blocks (#68454)

... (truncated)

Changelog

Sourced from @angular/platform-browser-dynamic's changelog.

22.1.0 (2026-07-29)

Deprecations

http

HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit Type Description

1ad6824d0d fix skip transfer cache for uncacheable HTTP traffic (#69017)

compiler

Commit Type Description

af5e4e1131 feat Add an error for --global-foo cases (#68846)

d579ecaf73 feat Disable '--global-' error outside of g3 (#68846)

f98547675c feat Namespace CSS variables to the app (#68846)

8c8b2f7783 feat Support css var namespacing in properties (#68846)

292199aa4d fix permissive whitespace parsing in default never blocks

25c744c4d0 fix support foreign components defined outside top-level scope

5bd00add07 fix support foreign components inside control flow blocks (#69674)

2e442f7876 perf do not emit tag name when control flow root is foreign component (#69674)

compiler-cli

Commit Type Description

aeb55c8bc1 fix allow passing uninvoked signals as foreign component props

7c60a98b3c fix support import aliases in foreignImports (#68674)

core

Commit Type Description

124ba10ead feat add custom set option to linkedSignal

eab4847a8b feat Adds deep linking from Performa...
Description has been truncated

…orm-browser and @angular/platform-browser-dynamic Bumps [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common), [@angular/build](https://github.com/angular/angular-cli), [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) and [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic). These dependencies needed to be updated together. Updates `@angular/common` from 21.2.18 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/common) Updates `@angular/build` from 21.2.19 to 22.1.2 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.19...v22.1.2) Updates `@angular/platform-browser` from 21.2.18 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.18 to 22.1.0 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.1.0/packages/platform-browser-dynamic) --- updated-dependencies: - dependency-name: "@angular/common" dependency-version: 22.1.0 dependency-type: direct:development - dependency-name: "@angular/build" dependency-version: 22.1.2 dependency-type: direct:development - dependency-name: "@angular/platform-browser" dependency-version: 22.1.0 dependency-type: direct:development - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 22.1.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-03T17:31:01Z

Superseded by #2535.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 3, 2026

dependabot Bot closed this Aug 3, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/multi-0cc23f6ab4 branch August 3, 2026 17:31

Navigation Menu

Uh oh!

build(deps-dev): bump @angular/common, @angular/build, @angular/platform-browser and @angular/platform-browser-dynamic - #2534

build(deps-dev): bump @angular/common, @angular/build, @angular/platform-browser and @angular/platform-browser-dynamic#2534
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-0cc23f6ab4

dependabot Bot commented on behalf of github Aug 3, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	Add an error for --global-foo cases (#68846)
	Disable '--global-' error outside of g3 (#68846)
	Namespace CSS variables to the app (#68846)
	Support css var namespacing in properties (#68846)
	permissive whitespace parsing in default never blocks
	support foreign components defined outside top-level scope
	support foreign components inside control flow blocks (#69674)
	do not emit tag name when control flow root is foreign component (#69674)

Commit	Description
	allow passing uninvoked signals as foreign component props
	support import aliases in foreignImports (#68674)

Commit	Description
	add custom set option to linkedSignal
	Adds deep linking from Performance panel to DevTools
	account for namespaces in host binding sanitization (#69558)
	correct container anchor collection order to match DOM layout
	introduce disposal mechanism for Angular views in foreign `@content`
	introduce logical-only containers for foreign content
	sanitize host bindings on concrete hosts (#69558)
	set current tnode in foreign component instruction on reuse

Commit	Description
	add options to allow caching of credentialed and non-cacheable HTTP requests
	enable xsrf for root-provided HttpClient
	match header values exactly when deleting
	preserve immutability of materialized clones
	skip transfer cache for fetch credentialed requests (#69017)
	deprecate jsonp support

Commit	Description
	compile non-exported classes if standalone (#68454)
	Typecheck templates which would require inline typecheck blocks (#68454)

Commit	Type	Description
af5e4e1131	feat	Add an error for --global-foo cases (#68846)
d579ecaf73	feat	Disable '--global-' error outside of g3 (#68846)
f98547675c	feat	Namespace CSS variables to the app (#68846)
8c8b2f7783	feat	Support css var namespacing in properties (#68846)
292199aa4d	fix	permissive whitespace parsing in default never blocks
25c744c4d0	fix	support foreign components defined outside top-level scope
5bd00add07	fix	support foreign components inside control flow blocks (#69674)
2e442f7876	perf	do not emit tag name when control flow root is foreign component (#69674)

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#68674)

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
eab4847a8b	feat	Adds deep linking from Performance panel to DevTools
091456a214	fix	account for namespaces in host binding sanitization (#69558)
b3748e9fe4	fix	correct container anchor collection order to match DOM layout
11b206b919	fix	introduce disposal mechanism for Angular views in foreign `@content`
56607967db	fix	introduce logical-only containers for foreign content
23cf1a828b	fix	sanitize host bindings on concrete hosts (#69558)
0c07356c5c	fix	set current tnode in foreign component instruction on reuse

Commit	Type	Description
e3630c23c5	feat	add options to allow caching of credentialed and non-cacheable HTTP requests
ec16a3d6c6	fix	enable xsrf for root-provided HttpClient
39e362eea5	fix	match header values exactly when deleting
be46ca8696	fix	preserve immutability of materialized clones
c0cbd46bd7	fix	skip transfer cache for fetch credentialed requests (#69017)
af04e266cc	refactor	deprecate jsonp support

Commit	Description
	abort and guide manual mitigation when updating catalog packages
	prevent Yarn registry environment variable override
	remove algoliasearch dependency and support latest docs versions
	resolve correct registry name when using npm alias syntax during update
	respect client-side release age settings during update resolution
	revert package.json changes if installation tasks fail during update
	robustly parse npm manifest from array

Commit	Description
	update ai-config to include Angular MCP server config
	remove unused spec tsconfig outDir

Commit	Description
	add built-in SQLite cache store fallback
	emit debug ids for stable subresource integrity hashes
	enable chunk optimization for server builds
	migrate advanced optimization Babel plugins to oxc-parser + magic-string
	migrate i18n inliner to oxc-parser + magic-string
	share persistent build cache across git worktrees
	add bounded timeout to vitest executor disposal

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 3, 2026

22.1.0

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0 (2026-07-29)

Deprecations

http

common

compiler

compiler-cli

core

forms

http

language-service

22.1.2

@​angular/cli

@​angular/build

22.1.1

@​angular/cli

@​angular/build

22.1.0

@​angular/cli

@​schematics/angular

@​angular-devkit/core

@​angular/build

22.1.2 (2026-07-30)

@​angular/cli

@​angular/build

22.1.1 (2026-07-30)

@​angular/cli

@​angular/build

22.2.0-next.0 (2026-07-30)

@​angular/cli

@​angular/build

22.1.0

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0 (2026-07-29)

Deprecations

http

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0

common

compiler

compiler-cli

core

forms

http

language-service

22.1.0 (2026-07-29)

Deprecations

http

common

compiler

compiler-cli

core

Uh oh!

dependabot Bot commented on behalf of github Aug 3, 2026

Uh oh!

Reviewers

Assignees

Labels

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@schematics/angular`

`@angular-devkit/core`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`

`@angular/cli`

`@angular/build`