Bump ngx-mask from 13.1.15 to 13.2.2

[dependabot]

Bumps ngx-mask from 13.1.15 to 13.2.2.

Changelog

Sourced from ngx-mask's changelog.

22.0.2(2026-07-20)

Feature

• Secure date input (#1574) — hiddenInput now conceals day/month digits too (d/M tokens), not just X-typed placeholder digits; e.g. mask="d0/M0/0000" with [hiddenInput]="true" displays **/**/2024 while the form control keeps the real date

Fix

• Fix (#1488) — the caret-shift-past-separator fix for overflowing leadZeroDateTime date/time fields now works for any date/time mask (M0/00, Hh:m0, etc.), not only the flagship d0/M0/0000
• Fix (#1634) — separator masks with outputTransformFn no longer emit the raw formatted display string on blur; the blur-time leadZero reformat now routes through the same transform pipeline as every typing-time emission, so FormControl keeps receiving the transformed (e.g. numeric) value
• Fix (#1633) — setDisabledState now writes the native disabled DOM property synchronously; an initially-disabled FormControl no longer briefly (or persistently) leaves the native input enabled due to the deferred queueMicrotask write racing Angular Forms' synchronous init
• Regression coverage (#1632) — added unit and Cypress tests locking in that retyping into a keepCharacterPositions slot cleared by Backspace (e.g. date mask d0/M0/0000) fills from the first typed keystroke; already fixed by prior keepCharacterPositions corrections, no source change needed

22.0.0(2026-07-03)

Feature

• Angular 22 support (#1617) — built and tested against Angular 22.0.5
• All dependencies updated to their latest versions (exact pins)
• Custom named mask aliases (#1376, #1091) — provideNgxMask({ maskAliases: { PHONE_BR: '(00) 00000-0000' } }), works in directive and pipe, supports || multi-masks
• Banking typing mode (#733, #1414, #1315) — opt-in typeFromDecimals config: digits type from the decimal end, ATM style (5 → 0.05 → 0.57 → 5.73)
• Default value on blur (#1435) — defaultValueOnBlur input/config: empty inputs receive a masked fallback on blur without marking the form dirty
• Configuration docs overhaul (#1529) — explicit standalone vs environment vs NgModule setup guide in USAGE/README

Fix

• Fix (#1250) — typing a second decimal marker is rejected as a no-op instead of mangling the value (123,456,789.20 stays intact)
• Fix (#1590) — showMaskTyped skeleton render no longer echoes '' into the model during programmatic writes, fixing lost initial values in nested custom form controls
• Pin (#1593) — integer-part deletion keeping the decimal part and caret is now covered by dedicated regression tests (behavior fixed in 21.1.0)
• Fix (#1513) — leadZeroDateTime no longer injects a spurious zero into months for year-first masks (0000-M0-d0: 19901221 → 1990-12-21)

Breaking

• Requires Angular 22 (peerDependencies: ^22.0.0) and Node.js ≥ 22.22.3 / ≥ 24.15.0 / ≥ 26

21.1.0(2026-07-02)

Feature

• Add CPF_CNPJ_ALPHA alphanumeric CNPJ mask (PR #1592)
• Signal Forms ([formField]) fully supported: initial values, disabled schema, dynamic masks, validation — verified equivalent to Reactive and Template-driven across all mask types

Fix

• Fix (#1601) — relax FormValueControl surface; no more conflicts with native required/readonly
• Fix (#1560) — onChange no longer fires during writeValue; programmatic setValue/patchValue keeps the form pristine
• Fix (#1532) — separator mask without explicit precision no longer throws toFixed() RangeError
• Fix (#1607, #1614) — directive no longer overrides FormControl disabled state on init; initially-disabled controls stay disabled
• Fix (#1355, #1578) — deleting the leading digit of a separator value no longer collapses remaining zeros (1,000,000 → 000,000, consistent for all lengths)
• Fix (#1512) — an explicitly bound empty [specialCharacters]="[]" is respected instead of silently falling back to defaults

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)