chore(deps): bump the all-dependencies group across 1 directory with 22 updates by dependabot[bot] · Pull Request #336 · SCAI-BIO/kitsune

dependabot · 2026-06-26T13:56:25Z

Bumps the all-dependencies group with 21 updates in the /client directory:

Package	From	To
@angular/animations	`21.2.11`	`22.0.3`
@angular/cdk	`21.2.9`	`22.0.2`
@angular/common	`21.2.11`	`22.0.3`
@angular/compiler	`21.2.11`	`22.0.3`
@angular/core	`21.2.11`	`22.0.3`
@angular/forms	`21.2.11`	`22.0.3`
@angular/material	`21.2.9`	`22.0.2`
@angular/platform-browser	`21.2.11`	`22.0.3`
@angular/platform-browser-dynamic	`21.2.11`	`22.0.3`
@angular/router	`21.2.11`	`22.0.3`
keycloak-angular	`21.0.0`	`22.0.0`
papaparse	`5.5.3`	`5.5.4`
uuid	`14.0.0`	`14.0.1`
@angular/build	`21.2.9`	`22.0.4`
@angular/cli	`21.2.9`	`22.0.4`
@angular/compiler-cli	`21.2.11`	`22.0.3`
@vitest/browser-playwright	`4.1.5`	`4.1.9`
angular-eslint	`21.3.1`	`22.0.0`
eslint	`9.39.4`	`10.5.0`
typescript	`5.9.3`	`6.0.3`
typescript-eslint	`8.59.1`	`8.62.0`

Updates @angular/animations from 21.2.11 to 22.0.3

Release notes

Sourced from @angular/animations's releases.

22.0.3

compiler

Commit Description

account for NgModule dependencies in JIT-compiled partial declarations

remove unused import breaking CI in 22.0.x

compiler-cli

Commit Description

report diagnostic instead of crashing on malformed host binding

core

Commit Description

avoid uncaught promise errors in injectAsync prefetching

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

upgrade

Commit Description

support model() signals in downgradeComponent

22.0.2

common

Commit Description

escape anchor fragment in shadow DOM name selector

skip transfer cache for uncacheable HTTP traffic (#69316)

compiler

Commit Description

restrict possible event handler check to property names longer than 2 characters

core

Commit Description

avoid caching missing locale data

escape overlapping comment delimiters in escapeCommentText

guard against DOM clobbering in declareExperimentalWebMcpTool

preserve leave animation for sibling instances sharing a TNode

prevent unsubscribe during emit from throwing off other listeners

treat iframe credentialless as security-sensitive

detect existing signal dependency without checking all producer links

http

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/animations's changelog.

22.0.3 (2026-06-25)

compiler

Commit Type Description

f90c20df40 fix account for NgModule dependencies in JIT-compiled partial declarations

f4f7f3755c fix remove unused import breaking CI in 22.0.x

compiler-cli

Commit Type Description

06d854929c fix report diagnostic instead of crashing on malformed host binding

core

Commit Type Description

2799304259 fix avoid uncaught promise errors in injectAsync prefetching

http

Commit Type Description

8cdc202dfc fix prevent caching of responses with Set-Cookie headers

service-worker

Commit Type Description

b4a5a2fb4e fix preserve referrer in asset requests

a16f9b2263 fix preserve referrer policy in asset requests

upgrade

Commit Type Description

bcc648f4b6 fix support model() signals in downgradeComponent

22.1.0-next.1 (2026-06-17)

common

Commit Type Description

a69e56df71 fix escape anchor fragment in shadow DOM name selector

compiler

Commit Type Description

417a4071a7 fix restrict possible event handler check to property names longer than 2 characters

core

Commit Type Description

98f42eaaae fix avoid caching missing locale data

ea1a3ed64c fix escape overlapping comment delimiters in escapeCommentText

8cf7731468 fix guard against DOM clobbering in declareExperimentalWebMcpTool

6b5616b2c7 fix preserve leave animation for sibling instances sharing a TNode

28cb15a2bb fix prevent unsubscribe during emit from throwing off other listeners

0152e3cbdf fix treat iframe credentialless as security-sensitive

327744ac17 perf detect existing signal dependency without checking all producer links

... (truncated)

Commits

a97d5ec build: update minimum supported Node.js versions
ad717df refactor(core): use the @Service decorator where possible.
b8d3f36 feat(compiler-cli): add support for Node.js 26.0.0
6672192 test: remove duplicate tests (#67518)
d550bf7 build: update minimum supported Node.js versions
See full diff in compare view

Updates @angular/cdk from 21.2.9 to 22.0.2

Release notes

Sourced from @angular/cdk's releases.

22.0.2

material

Commit Description

bottom-sheet: ensure animation event comes from container

chips: correct focus management on chip destruction (#33329)

chips: wrong padding when chip only has edit icon (#33407)

grid-list: always validate colspan

stepper: validate animation durations

cdk

Commit Description

layout: avoid CSS injection attacks in media matcher

platform: account for composedPath error during event replay (#33409)

multiple

Commit Description

improve dark theme visibility in menu, overlay, and portal examples (#33367)

22.0.1

youtube-player

Commit Description

avoid errors with clobbered variables

validate ID before attaching them to placeholder

material

Commit Description

dialog: ignore clicks on aria-disabled close buttons (#33373)

timepicker: do not allow intervals less than a second (#33354)

cdk

Commit Description

a11y: avoid prototype conflicts in id generator (#33356)

clipboard: avoid infinite attempt loop (#33366)

aria

Commit Description

combobox: avoid error for synthetic events (#33360)

combobox: prevent re-dispatching keyboard event on control target change (#33362)

tree: recursive textDirection getter (#33337)

22.0.0

aria

Commit Description

accordion: introduce accordion harness (#33046)

combobox: add test harnesses (#33194)

combobox: migrate simple-combobox directly into primary entrypoints (#33206)

grid: add test harnesses (#33081)

... (truncated)

Changelog

Sourced from @angular/cdk's changelog.

22.0.2 "plastic lion" (2026-06-17)

cdk

Commit Type Description

e8f3419060 fix layout: avoid CSS injection attacks in media matcher

9dc2b2b2ed fix platform: account for composedPath error during event replay (#33409)

material

Commit Type Description

fb4478bff3 fix bottom-sheet: ensure animation event comes from container

e4f7f3498b fix chips: correct focus management on chip destruction (#33329)

766b7aceee fix chips: wrong padding when chip only has edit icon (#33407)

ebca801ee5 fix grid-list: always validate colspan

30942bcd36 fix stepper: validate animation durations

multiple

Commit Type Description

2995797ded fix improve dark theme visibility in menu, overlay, and portal examples (#33367)

22.1.0-next.0 "argon-pineapple" (2026-06-10)

No user facing changes in this release

22.0.1 "argon-apple" (2026-06-10)

aria

Commit Type Description

7581b0592 fix combobox: avoid error for synthetic events (#33360)

1c4706155 fix combobox: prevent re-dispatching keyboard event on control target change (#33362)

96e9ce10c fix tree: recursive textDirection getter (#33337)

cdk

Commit Type Description

629aea403 fix a11y: avoid prototype conflicts in id generator (#33356)

49aeb676c fix clipboard: avoid infinite attempt loop (#33366)

material

Commit Type Description

d7a8cb963 fix dialog: ignore clicks on aria-disabled close buttons (#33373)

bde3c7621 fix timepicker: do not allow intervals less than a second (#33354)

youtube-player

Commit Type Description

d75a22d69 fix avoid errors with clobbered variables

fe0a96ce6 fix validate ID before attaching them to placeholder

... (truncated)

Commits

9b9d0ea release: cut the v22.0.2 release
7b54e95 build: update cross-repo angular dependencies (#33398)
b77a829 docs(google-maps): Document the behavior of using the clusterClick output in ...
605f200 build: update pnpm to v10.34.3 (#33392)
0309150 build: lock file maintenance (#33406)
9dc2b2b fix(cdk/platform): account for composedPath error during event replay (#33409)
766b7ac fix(material/chips): wrong padding when chip only has edit icon (#33407)
f7170b9 build: fix build failure (#33408)
e4f7f34 fix(material/chips): correct focus management on chip destruction (#33329)
9ad7964 build: update review config (#33394)
Additional commits viewable in compare view

Updates @angular/common from 21.2.11 to 22.0.3

Release notes

Sourced from @angular/common's releases.

22.0.3

compiler

Commit Description

account for NgModule dependencies in JIT-compiled partial declarations

remove unused import breaking CI in 22.0.x

compiler-cli

Commit Description

report diagnostic instead of crashing on malformed host binding

core

Commit Description

avoid uncaught promise errors in injectAsync prefetching

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

upgrade

Commit Description

support model() signals in downgradeComponent

22.0.2

common

Commit Description

escape anchor fragment in shadow DOM name selector

skip transfer cache for uncacheable HTTP traffic (#69316)

compiler

Commit Description

restrict possible event handler check to property names longer than 2 characters

core

Commit Description

avoid caching missing locale data

escape overlapping comment delimiters in escapeCommentText

guard against DOM clobbering in declareExperimentalWebMcpTool

preserve leave animation for sibling instances sharing a TNode

prevent unsubscribe during emit from throwing off other listeners

treat iframe credentialless as security-sensitive

detect existing signal dependency without checking all producer links

http

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/common's changelog.

22.0.3 (2026-06-25)

compiler

Commit Type Description

f90c20df40 fix account for NgModule dependencies in JIT-compiled partial declarations

f4f7f3755c fix remove unused import breaking CI in 22.0.x

compiler-cli

Commit Type Description

06d854929c fix report diagnostic instead of crashing on malformed host binding

core

Commit Type Description

2799304259 fix avoid uncaught promise errors in injectAsync prefetching

http

Commit Type Description

8cdc202dfc fix prevent caching of responses with Set-Cookie headers

service-worker

Commit Type Description

b4a5a2fb4e fix preserve referrer in asset requests

a16f9b2263 fix preserve referrer policy in asset requests

upgrade

Commit Type Description

bcc648f4b6 fix support model() signals in downgradeComponent

22.1.0-next.1 (2026-06-17)

common

Commit Type Description

a69e56df71 fix escape anchor fragment in shadow DOM name selector

compiler

Commit Type Description

417a4071a7 fix restrict possible event handler check to property names longer than 2 characters

core

Commit Type Description

98f42eaaae fix avoid caching missing locale data

ea1a3ed64c fix escape overlapping comment delimiters in escapeCommentText

8cf7731468 fix guard against DOM clobbering in declareExperimentalWebMcpTool

6b5616b2c7 fix preserve leave animation for sibling instances sharing a TNode

28cb15a2bb fix prevent unsubscribe during emit from throwing off other listeners

0152e3cbdf fix treat iframe credentialless as security-sensitive

327744ac17 perf detect existing signal dependency without checking all producer links

... (truncated)

Commits

cd8f472 docs: add documentation for HttpClient response body size limit and related e...
8cdc202 fix(http): prevent caching of responses with Set-Cookie headers
6867f77 fix(http): distinguish repeated transfer cache params
6c1f3e9 fix(common): skip transfer cache for uncacheable HTTP traffic (#69316)
7ef1399 fix(http): skip transfer cache for fetch credentialed requests (#69316)
94ea403 fix(common): escape anchor fragment in shadow DOM name selector
2dd65d2 fix(http): pass down the reportUploadProgress and reportDownloadProgress ...
1bd5a56 docs: deprecate XHR support for server-side rendering in HTTP docs and recomm...
3c2892c fix(common): prevent prototype pollution in formatDateTime
c4b5fa3 fix(common): escape CSS string-terminating characters in escapeCssUrl
Additional commits viewable in compare view

Updates @angular/compiler from 21.2.11 to 22.0.3

Release notes

Sourced from @angular/compiler's releases.

22.0.3

compiler

Commit Description

account for NgModule dependencies in JIT-compiled partial declarations

remove unused import breaking CI in 22.0.x

compiler-cli

Commit Description

report diagnostic instead of crashing on malformed host binding

core

Commit Description

avoid uncaught promise errors in injectAsync prefetching

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

upgrade

Commit Description

support model() signals in downgradeComponent

22.0.2

common

Commit Description

escape anchor fragment in shadow DOM name selector

skip transfer cache for uncacheable HTTP traffic (#69316)

compiler

Commit Description

restrict possible event handler check to property names longer than 2 characters

core

Commit Description

avoid caching missing locale data

escape overlapping comment delimiters in escapeCommentText

guard against DOM clobbering in declareExperimentalWebMcpTool

preserve leave animation for sibling instances sharing a TNode

prevent unsubscribe during emit from throwing off other listeners

treat iframe credentialless as security-sensitive

detect existing signal dependency without checking all producer links

http

| Commit | Description |

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

22.0.3 (2026-06-25)

compiler

Commit Type Description

f90c20df40 fix account for NgModule dependencies in JIT-compiled partial declarations

f4f7f3755c fix remove unused import breaking CI in 22.0.x

compiler-cli

Commit Type Description

06d854929c fix report diagnostic instead of crashing on malformed host binding

core

Commit Type Description

2799304259 fix avoid uncaught promise errors in injectAsync prefetching

http

Commit Type Description

8cdc202dfc fix prevent caching of responses with Set-Cookie headers

service-worker

Commit Type Description

b4a5a2fb4e fix preserve referrer in asset requests

a16f9b2263 fix preserve referrer policy in asset requests

upgrade

Commit Type Description

bcc648f4b6 fix support model() signals in downgradeComponent

22.1.0-next.1 (2026-06-17)

common

Commit Type Description

a69e56df71 fix escape anchor fragment in shadow DOM name selector

compiler

Commit Type Description

417a4071a7 fix restrict possible event handler check to property names longer than 2 characters

core

Commit Type Description

98f42eaaae fix avoid caching missing locale data

ea1a3ed64c fix escape overlapping comment delimiters in escapeCommentText

8cf7731468 fix guard against DOM clobbering in declareExperimentalWebMcpTool

6b5616b2c7 fix preserve leave animation for sibling instances sharing a TNode

28cb15a2bb fix prevent unsubscribe during emit from throwing off other listeners

0152e3cbdf fix treat iframe credentialless as security-sensitive

327744ac17 perf detect existing signal dependency without checking all producer links

... (truncated)

Commits

f4f7f37 fix(compiler): remove unused import breaking CI in 22.0.x
f90c20d fix(compiler): account for NgModule dependencies in JIT-compiled partial decl...
489d170 refactor(compiler): desable the legacy template syntax
39001be refactor(compiler): Move the attribute comment to the HTML AST
74f2b91 refactor(compiler): correct TcbInvalidReferenceOp initializer
b32ee7c fix(core): treat iframe credentialless as security-sensitive
f309727 refactor(compiler): Collect in-element comments
6f11719 fix(compiler): restrict possible event handler check to property names longer...
8bb3947 refactor: optimize dom security schema lookups
4645850 refactor(compiler): Remove 80 char limit on AbstractEmitterVisitor
Additional commits viewable in compare view

Updates @angular/core from 21.2.11 to 22.0.3

Release notes

Sourced from @angular/core's releases.

22.0.3

compiler

Commit Description

account for NgModule dependencies in JIT-compiled partial declarations

remove unused import breaking CI in 22.0.x

compiler-cli

Commit Description

report diagnostic instead of crashing on malformed host binding

core

Commit Description

avoid uncaught promise errors in injectAsync prefetching

http

Commit Description

prevent caching of responses with Set-Cookie headers

service-worker

Commit Description

preserve referrer in asset requests

preserve referrer policy in asset requests

upgrade

Commit Description

support model() signals in downgradeComponent

22.0.2

common

Commit Description

escape anchor fragment in shadow DOM name selector

skip transfer cache for uncacheable HTTP traffic (#69316)

compiler

Commit Description

restrict possible event handler check to property names longer than 2 characters

core

Commit Description

avoid caching missing locale data

escape overlapping comment delimiters in escapeCommentText

guard against DOM clobbering in declareExperimentalWebMcpTool

preserve leave animation for sibling instances sharing a TNode

prevent unsubscribe during emit from throwing off other listeners

treat iframe credentialless as security-sensitive

detect existing signal dependency without checking...
Description has been truncated

…22 updates Bumps the all-dependencies group with 21 updates in the /client directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `21.2.11` | `22.0.3` | | [@angular/cdk](https://github.com/angular/components) | `21.2.9` | `22.0.2` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `21.2.11` | `22.0.3` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `21.2.11` | `22.0.3` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `21.2.11` | `22.0.3` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `21.2.11` | `22.0.3` | | [@angular/material](https://github.com/angular/components) | `21.2.9` | `22.0.2` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `21.2.11` | `22.0.3` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `21.2.11` | `22.0.3` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `21.2.11` | `22.0.3` | | [keycloak-angular](https://github.com/mauriciovigolo/keycloak-angular) | `21.0.0` | `22.0.0` | | [papaparse](https://github.com/mholt/PapaParse) | `5.5.3` | `5.5.4` | | [uuid](https://github.com/uuidjs/uuid) | `14.0.0` | `14.0.1` | | [@angular/build](https://github.com/angular/angular-cli) | `21.2.9` | `22.0.4` | | [@angular/cli](https://github.com/angular/angular-cli) | `21.2.9` | `22.0.4` | | [@angular/compiler-cli](https://github.com/angular/angular/tree/HEAD/packages/compiler-cli) | `21.2.11` | `22.0.3` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.5` | `4.1.9` | | [angular-eslint](https://github.com/angular-eslint/angular-eslint/tree/HEAD/packages/angular-eslint) | `21.3.1` | `22.0.0` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `10.5.0` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.59.1` | `8.62.0` | Updates `@angular/animations` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/animations) Updates `@angular/cdk` from 21.2.9 to 22.0.2 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.9...v22.0.2) Updates `@angular/common` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/common) Updates `@angular/compiler` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/compiler) Updates `@angular/core` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/core) Updates `@angular/forms` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/forms) Updates `@angular/material` from 21.2.9 to 22.0.2 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@v21.2.9...v22.0.2) Updates `@angular/platform-browser` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/platform-browser-dynamic) Updates `@angular/router` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/router) Updates `keycloak-angular` from 21.0.0 to 22.0.0 - [Release notes](https://github.com/mauriciovigolo/keycloak-angular/releases) - [Commits](mauriciovigolo/keycloak-angular@v21.0.0...v22.0.0) Updates `papaparse` from 5.5.3 to 5.5.4 - [Release notes](https://github.com/mholt/PapaParse/releases) - [Changelog](https://github.com/mholt/PapaParse/blob/master/CHANGELOG.md) - [Commits](mholt/PapaParse@5.5.3...5.5.4) Updates `uuid` from 14.0.0 to 14.0.1 - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v14.0.0...v14.0.1) Updates `@angular/build` from 21.2.9 to 22.0.4 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v22.0.4) Updates `@angular/cli` from 21.2.9 to 22.0.4 - [Release notes](https://github.com/angular/angular-cli/releases) - [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md) - [Commits](angular/angular-cli@v21.2.9...v22.0.4) Updates `@angular/compiler-cli` from 21.2.11 to 22.0.3 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/v22.0.3/packages/compiler-cli) Updates `@vitest/browser-playwright` from 4.1.5 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/browser-playwright) Updates `angular-eslint` from 21.3.1 to 22.0.0 - [Release notes](https://github.com/angular-eslint/angular-eslint/releases) - [Changelog](https://github.com/angular-eslint/angular-eslint/blob/main/packages/angular-eslint/CHANGELOG.md) - [Commits](https://github.com/angular-eslint/angular-eslint/commits/v22.0.0/packages/angular-eslint) Updates `eslint` from 9.39.4 to 10.5.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v10.5.0) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `typescript-eslint` from 8.59.1 to 8.62.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.0/packages/typescript-eslint) Updates `vitest` from 4.1.5 to 4.1.9 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.9/packages/vitest) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/cdk" dependency-version: 22.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/common" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/compiler" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/core" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/forms" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/material" dependency-version: 22.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/platform-browser" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/platform-browser-dynamic" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/router" dependency-version: 22.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: keycloak-angular dependency-version: 22.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: papaparse dependency-version: 5.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: uuid dependency-version: 14.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: "@angular/build" dependency-version: 22.0.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/cli" dependency-version: 22.0.4 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@angular/compiler-cli" dependency-version: 22.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies - dependency-name: angular-eslint dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: eslint dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: all-dependencies - dependency-name: typescript-eslint dependency-version: 8.62.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-dependencies - dependency-name: vitest dependency-version: 4.1.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the all-dependencies group across 1 directory with 22 updates#336

chore(deps): bump the all-dependencies group across 1 directory with 22 updates#336
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/client/all-dependencies-77604e3d3f

dependabot Bot commented on behalf of github Jun 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Commit	Description
	account for NgModule dependencies in JIT-compiled partial declarations
	remove unused import breaking CI in 22.0.x

Commit	Description
	preserve referrer in asset requests
	preserve referrer policy in asset requests

Commit	Description
	escape anchor fragment in shadow DOM name selector
	skip transfer cache for uncacheable HTTP traffic (#69316)

Commit	Description
	avoid caching missing locale data
	escape overlapping comment delimiters in escapeCommentText
	guard against DOM clobbering in declareExperimentalWebMcpTool
	preserve leave animation for sibling instances sharing a TNode
	prevent unsubscribe during emit from throwing off other listeners
	treat iframe credentialless as security-sensitive
	detect existing signal dependency without checking all producer links

Commit	Type	Description
f90c20df40	fix	account for NgModule dependencies in JIT-compiled partial declarations
f4f7f3755c	fix	remove unused import breaking CI in 22.0.x

Commit	Type	Description
b4a5a2fb4e	fix	preserve referrer in asset requests
a16f9b2263	fix	preserve referrer policy in asset requests

Commit	Type	Description
98f42eaaae	fix	avoid caching missing locale data
ea1a3ed64c	fix	escape overlapping comment delimiters in escapeCommentText
8cf7731468	fix	guard against DOM clobbering in declareExperimentalWebMcpTool
6b5616b2c7	fix	preserve leave animation for sibling instances sharing a TNode
28cb15a2bb	fix	prevent unsubscribe during emit from throwing off other listeners
0152e3cbdf	fix	treat iframe credentialless as security-sensitive
327744ac17	perf	detect existing signal dependency without checking all producer links

Commit	Description
	bottom-sheet: ensure animation event comes from container
	chips: correct focus management on chip destruction (#33329)
	chips: wrong padding when chip only has edit icon (#33407)
	grid-list: always validate colspan
	stepper: validate animation durations

Commit	Description
	layout: avoid CSS injection attacks in media matcher
	platform: account for composedPath error during event replay (#33409)

Commit	Description
	avoid errors with clobbered variables
	validate ID before attaching them to placeholder

Commit	Description
	dialog: ignore clicks on aria-disabled close buttons (#33373)
	timepicker: do not allow intervals less than a second (#33354)

Commit	Description
	a11y: avoid prototype conflicts in id generator (#33356)
	clipboard: avoid infinite attempt loop (#33366)

Commit	Description
	combobox: avoid error for synthetic events (#33360)
	combobox: prevent re-dispatching keyboard event on control target change (#33362)
	tree: recursive textDirection getter (#33337)

Commit	Description
	accordion: introduce accordion harness (#33046)
	combobox: add test harnesses (#33194)
	combobox: migrate simple-combobox directly into primary entrypoints (#33206)
	grid: add test harnesses (#33081)

Commit	Type	Description
e8f3419060	fix	layout: avoid CSS injection attacks in media matcher
9dc2b2b2ed	fix	platform: account for composedPath error during event replay (#33409)

Commit	Type	Description
fb4478bff3	fix	bottom-sheet: ensure animation event comes from container
e4f7f3498b	fix	chips: correct focus management on chip destruction (#33329)
766b7aceee	fix	chips: wrong padding when chip only has edit icon (#33407)
ebca801ee5	fix	grid-list: always validate colspan
30942bcd36	fix	stepper: validate animation durations

Commit	Type	Description
7581b0592	fix	combobox: avoid error for synthetic events (#33360)
1c4706155	fix	combobox: prevent re-dispatching keyboard event on control target change (#33362)
96e9ce10c	fix	tree: recursive textDirection getter (#33337)

Commit	Type	Description
629aea403	fix	a11y: avoid prototype conflicts in id generator (#33356)
49aeb676c	fix	clipboard: avoid infinite attempt loop (#33366)

Commit	Type	Description
d7a8cb963	fix	dialog: ignore clicks on aria-disabled close buttons (#33373)
bde3c7621	fix	timepicker: do not allow intervals less than a second (#33354)

Commit	Type	Description
d75a22d69	fix	avoid errors with clobbered variables
fe0a96ce6	fix	validate ID before attaching them to placeholder

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

22.0.3

compiler

compiler-cli

core

http

service-worker

upgrade

22.0.2

common

compiler

core

http

22.0.3 (2026-06-25)

compiler

compiler-cli

core

http

service-worker

upgrade

22.1.0-next.1 (2026-06-17)

common

compiler

core

22.0.2

material

cdk

multiple

22.0.1

youtube-player

material

cdk

aria

22.0.0

aria

22.0.2 "plastic lion" (2026-06-17)

cdk

material

multiple

22.1.0-next.0 "argon-pineapple" (2026-06-10)

22.0.1 "argon-apple" (2026-06-10)

aria

cdk

material

youtube-player

22.0.3

compiler

compiler-cli

core

http

service-worker

upgrade

22.0.2

common

compiler

core

http

22.0.3 (2026-06-25)

compiler

compiler-cli

core

http

service-worker

upgrade

22.1.0-next.1 (2026-06-17)

common

compiler

core

22.0.3

compiler

compiler-cli

core

http

service-worker

upgrade

22.0.2

common

dependabot Bot commented on behalf of github Jun 26, 2026 •

edited

Loading