Skip to content

build(deps): bump @angular/core from 22.1.4 to 22.2.1 - #86

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/core-22.1.6
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/core-22.1.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @angular/core from 22.1.4 to 22.2.1.

Release notes

Sourced from @​angular/core's releases.

22.2.1

common

Commit Description
fix - ad2f291ba0 let NgOptimizedImage pass a [srcset] binding through when srcset optimization is disabled

compiler

Commit Description
fix - 0ecaf8e7ab add explicit return types to generated functions
fix - c451a3b98d avoid incorrectly stripping parentheses in template pipeline
fix - bbc556daa9 avoid stripping parentheses from some expressions

compiler-cli

Commit Description
fix - fe9ebf5bf5 support extendedConfigCache in readConfiguration

core

Commit Description
fix - 21851fc3a3 add debugName on afterRenderEffect
fix - 7c634ecec4 block dangerous data: and vbscript: URLs in URL sanitizer
fix - 9aeef8df6f extend data: URL allowlist for non-executable MIME types
fix - f5e8edc5a6 include signal and component name in NG0600 error message
fix - 88614a5407 render error boundary fallbacks after HMR

http

Commit Description
fix - 6dee7fe91c forward reportProgress of httpResource as reportDownloadProgress

platform-server

Commit Description
fix - 928dcfd258 reject protocol-relative paths in resolveUrl

router

Commit Description
fix - 568d6a83a2 do not copy URL-sized objects into every route snapshot
fix - a6e6097b3d fall back when serializing protocol-relative URLs
fix - 8b6dd5e947 limit absolute redirects from redirect functions
fix - 3b6796f1ab reject duplicate outlets in production builds
fix - e9bf52aa03 require outlets to match a route before processing child segments
fix - d23932f2fd set initial blocking resource input synchronously on activation
perf - 14793bfe4b do not retain UrlTree instances in RouterLink

22.2.0

compiler

Commit Description
feat - 48a0fd6e8a allow template to access private props
fix - a4f1a94948 do not encapsulate nested selectors if parent contains ::ng-deep
fix - d0d7f57e08 scope nested CSS rules

compiler-cli

... (truncated)

Commits
  • 78d0648 docs: add the missing inject import to the inject migration examples
  • 14daa09 docs: rewrite the RouterTestingModule migration README
  • d0ea72b docs: correct the RouterTestingModule schematic description
  • 6040d24 Revert "fix(core): block dangerous data: and vbscript: URLs in URL sanitizer"
  • 69a5e19 Revert "fix(core): extend data: URL allowlist for non-executable MIME types"
  • d33f2d0 refactor(core): show the enclosing component in the NG0502 hydration error
  • 9aeef8d fix(core): extend data: URL allowlist for non-executable MIME types
  • 7c634ec fix(core): block dangerous data: and vbscript: URLs in URL sanitizer
  • f34b87b refactor(migrations): remove unused skipped inputs set
  • a8528d4 docs: align the service migration README with the schematic
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@O2sa O2sa left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved because all CI checks passed.

@dependabot dependabot Bot changed the title build(deps): bump @angular/core from 22.1.4 to 22.1.6 build(deps): bump @angular/core from 22.1.4 to 22.2.1 Oct 3, 2026
Bumps [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) from 22.1.4 to 22.2.1.
- [Release notes](https://github.com/angular/angular/releases)
- [Commits](https://github.com/angular/angular/commits/v22.2.1/packages/core)

---
updated-dependencies:
- dependency-name: "@angular/core"
  dependency-version: 22.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/angular/core-22.1.6 branch from 058a9b1 to c99fef4 Compare October 3, 2026 22:37
@dependabot @github

dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't parse your pnpm-lock.yaml. Because of this, Dependabot cannot update this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant