build(deps): bump the angular group with 12 updates

[dependabot]

Bumps the angular group with 12 updates:

Package	From	To
@angular/animations	22.2.0	22.2.1
@angular/common	22.2.0	22.2.1
@angular/compiler	22.2.0	22.2.1
@angular/core	22.2.0	22.2.1
@angular/forms	22.2.0	22.2.1
@angular/platform-browser	22.2.0	22.2.1
@angular/platform-browser-dynamic	22.2.0	22.2.1
@angular/router	22.2.0	22.2.1
@angular/build	22.2.0	22.2.1
@angular/cli	22.2.0	22.2.1
@angular/compiler-cli	22.2.0	22.2.1
@angular/language-service	22.2.0	22.2.1

Updates @angular/animations from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/animations's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• See full diff in compare view

Updates @angular/common from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/common's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• ad2f291 fix(common): let NgOptimizedImage pass a [srcset] binding through when srcset...
• 6dee7fe fix(http): forward reportProgress of httpResource as `reportDownloadProgr...
• 270abc9 docs(docs-infra): throw on absolute links in @​see tags
• See full diff in compare view

Updates @angular/compiler from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/compiler's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• c451a3b fix(compiler): avoid incorrectly stripping parentheses in template pipeline
• 82a930d refactor(compiler): cleanup complier flags
• bbc556d fix(compiler): avoid stripping parentheses from some expressions
• 0ecaf8e fix(compiler): add explicit return types to generated functions
• See full diff in compare view

Updates @angular/core from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/core's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• 78d0648 docs: add the missing inject import to the inject migration examples
• 14daa09 docs: rewrite the RouterTestingModule migration README
• d0ea72b docs: correct the RouterTestingModule schematic description
• 6040d24 Revert "fix(core): block dangerous data: and vbscript: URLs in URL sanitizer"
• 69a5e19 Revert "fix(core): extend data: URL allowlist for non-executable MIME types"
• d33f2d0 refactor(core): show the enclosing component in the NG0502 hydration error
• 9aeef8d fix(core): extend data: URL allowlist for non-executable MIME types
• 7c634ec fix(core): block dangerous data: and vbscript: URLs in URL sanitizer
• f34b87b refactor(migrations): remove unused skipped inputs set
• a8528d4 docs: align the service migration README with the schematic
• Additional commits viewable in compare view

Updates @angular/forms from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/forms's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• 2d68c17 refactor(core): use native Promise.withResolvers() in remaining test files
• See full diff in compare view

Updates @angular/platform-browser from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/platform-browser's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• 2d68c17 refactor(core): use native Promise.withResolvers() in remaining test files
• See full diff in compare view

Updates @angular/platform-browser-dynamic from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• See full diff in compare view

Updates @angular/router from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/router's releases.

22.2.1

common

Commit	Description
	let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit	Description
	add explicit return types to generated functions
	avoid incorrectly stripping parentheses in template pipeline
	avoid stripping parentheses from some expressions

compiler-cli

Commit	Description
	support extendedConfigCache in readConfiguration

core

Commit	Description
	add debugName on afterRenderEffect
	block dangerous data: and vbscript: URLs in URL sanitizer
	extend data: URL allowlist for non-executable MIME types
	include signal and component name in NG0600 error message
	render error boundary fallbacks after HMR

http

Commit	Description
	forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	fall back when serializing protocol-relative URLs
	limit absolute redirects from redirect functions
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	set initial blocking resource input synchronously on activation
	do not retain UrlTree instances in RouterLink

Commits

• e9bf52a fix(router): require outlets to match a route before processing child segments
• 83abee3 Revert "fix(router): fall back when serializing protocol-relative URLs"
• 3b6796f fix(router): reject duplicate outlets in production builds
• a6e6097 fix(router): fall back when serializing protocol-relative URLs
• 2d68c17 refactor(core): use native Promise.withResolvers() in remaining test files
• 8b6dd5e fix(router): limit absolute redirects from redirect functions
• d23932f fix(router): set initial blocking resource input synchronously on activation
• 568d6a8 fix(router): do not copy URL-sized objects into every route snapshot
• 14793bf perf(router): do not retain UrlTree instances in RouterLink
• 83cb045 docs(router): fix UrlHandlingStrategy guide link
• Additional commits viewable in compare view

Updates @angular/build from 22.2.0 to 22.2.1

Release notes

Sourced from @​angular/build's releases.

22.2.1

@​angular-devkit/schematics-cli

Commit	Description
	correctly parse inline boolean values in CLI options (#34201)

@​schematics/angular

Commit	Description
	add browsers option to angular.json during vitest browser provider ng-add

@​angular/cli

Commit	Description
	skip components with a change detection strategy in the zoneless migration tool

@​angular-devkit/architect

Commit	Description
	correctly parse inline boolean values in CLI options (#34201)

@​angular-devkit/build-angular

Commit	Description
	do not mark standalone expression statements as pure

@​angular/build

Commit	Description
	deduplicate spurious chokidar polling change events (#34188)
	encode script type in auto-CSP loader
	ensure @​angular/compiler is loaded for Vitest TestBed initialization
	preserve nested workspace path for git worktree cache
	prevent chokidar from scanning unimported node_modules in watch mode
	reset component updates on dev-server SSR page request
	serve emitted HTML assets in dev-server
	watchers outside the workspace via parcel didn't work
	avoid loading compiler-cli and typescript in js transform worker
	avoid sharding intermediate files under worker surplus in i18n inliner
	bound aggregate worker allocation across dominant files in i18n inliner
	bound concurrent worker allocation for dominant files in i18n inliner
	process batch locales sequentially in i18n inliner worker

Changelog

Sourced from @​angular/build's changelog.

22.2.1 (2026-10-01)

@​angular/cli

Commit	Type	Description
db053444e0	fix	skip components with a change detection strategy in the zoneless migration tool

@​schematics/angular

CommitDescription has been truncated