Skip to content

chore(deps): bump the npm-dependencies group across 1 directory with 35 updates#764

Merged
imnotjames merged 1 commit into
developfrom
dependabot/npm_and_yarn/frontend/npm-dependencies-95eced0f10
Apr 22, 2026
Merged

chore(deps): bump the npm-dependencies group across 1 directory with 35 updates#764
imnotjames merged 1 commit into
developfrom
dependabot/npm_and_yarn/frontend/npm-dependencies-95eced0f10

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-dependencies group with 35 updates in the /frontend directory:

Package From To
@angular/animations 21.2.7 21.2.9
@angular/cdk 21.2.6 21.2.7
@angular/cdk-experimental 21.2.6 21.2.7
@angular/common 21.2.7 21.2.9
@angular/compiler 21.2.7 21.2.9
@angular/core 21.2.7 21.2.9
@angular/forms 21.2.7 21.2.9
@angular/platform-browser 21.2.7 21.2.9
@angular/platform-browser-dynamic 21.2.7 21.2.9
@angular/router 21.2.7 21.2.9
@angular/service-worker 21.2.7 21.2.9
@embedpdf/pdfium 2.14.0 2.14.1
@embedpdf/snippet 2.14.0 2.14.1
@jsverse/transloco 8.2.1 8.3.0
@tanstack/angular-query-experimental 5.96.2 5.99.2
dompurify 3.4.0 3.4.1
ngx-extended-pdf-viewer 26.0.0 26.0.7
primeng 21.1.5 21.1.6
uuid 11.1.0 14.0.0
@analogjs/vite-plugin-angular 2.4.0 2.4.10
@analogjs/vitest-angular 2.4.0 2.4.10
@angular-devkit/architect 0.2102.6 0.2102.7
@angular-devkit/schematics 21.2.6 21.2.7
@angular/build 21.2.6 21.2.7
@angular/cli 21.2.6 21.2.7
@angular/compiler-cli 21.2.7 21.2.9
@types/node 25.5.2 25.6.0
@vitest/coverage-v8 4.1.2 4.1.5
eslint 10.2.0 10.2.1
jsdom 29.0.1 29.0.2
msw 2.12.14 2.13.4
postcss 8.5.8 8.5.10
stylelint 17.6.0 17.8.0
typescript-eslint 8.58.0 8.59.0
vitest 4.1.2 4.1.5

Updates @angular/animations from 21.2.7 to 21.2.9

Release notes

Sourced from @​angular/animations's releases.

21.2.9

core

Commit Description
fix - f603d4714f escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description
fix - 540536c386 add CSP nonce support to JsonpClientBackend
fix - 63a857b874 Don't on Passthru outside of reactive context

platform-server

Commit Description
fix - e0b5078cf2 prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description
fix - 684e9fd53d normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description
fix - 2c6781071f error for type parameter declarations

core

Commit Description
fix - 82192deda9 handle missing serialized container hydration data
fix - 057cc6d09d remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description
fix - 7797671257 get quick info at local var location to align with TS semantics and support type narrowing
Changelog

Sourced from @​angular/animations's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description
e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description
684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

  • The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.
    • TypeScript versions older than 6.0 are no longer supported.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

  • This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

  • The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description
2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description
7f9450219f feat Adds warning for prefetch without main defer trigger
ab061a7610 fix error for type parameter declarations
9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description
a0aa8304cd feat bootstrap via ApplicationRef with config
9c55fcb3e6 feat de-duplicate host directives
8fe025f514 feat drop support for TypeScript 5.9
77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits

Updates @angular/cdk from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/cdk's releases.

21.2.7

material

Commit Description
fix - 5954c4594c sort: deprecate MatSortHeaderIntl and hide from docs (#33089)
Changelog

Sourced from @​angular/cdk's changelog.

21.2.7 "carbon-jetski" (2026-04-16)

material

Commit Type Description
5954c4594c fix sort: deprecate MatSortHeaderIntl and hide from docs (#33089)

22.0.0-next.4 "paper cup" (2026-04-08)

Breaking Changes

multiple

    • A bunch of constructors that with rest arguments have been removed. If you were extending Material/CDK components, you may have to update your super calls accordingly.

material

Commit Type Description
07c2d002de fix core: address sass compiler warnings (#33040)
ab21f78b12 fix select: wrong transform origin when opening upwards inside another overlay (#33032)

multiple

Commit Type Description
ce4c2c0a11 fix remove empty constructors (#33048)

Commits

Updates @angular/cdk-experimental from 21.2.6 to 21.2.7

Release notes

Sourced from @​angular/cdk-experimental's releases.

21.2.7

material

Commit Description
fix - 5954c4594c sort: deprecate MatSortHeaderIntl and hide from docs (#33089)
Changelog

Sourced from @​angular/cdk-experimental's changelog.

21.2.7 "carbon-jetski" (2026-04-16)

material

Commit Type Description
5954c4594c fix sort: deprecate MatSortHeaderIntl and hide from docs (#33089)

22.0.0-next.4 "paper cup" (2026-04-08)

Breaking Changes

multiple

    • A bunch of constructors that with rest arguments have been removed. If you were extending Material/CDK components, you may have to update your super calls accordingly.

material

Commit Type Description
07c2d002de fix core: address sass compiler warnings (#33040)
ab21f78b12 fix select: wrong transform origin when opening upwards inside another overlay (#33032)

multiple

Commit Type Description
ce4c2c0a11 fix remove empty constructors (#33048)

Commits

Updates @angular/common from 21.2.7 to 21.2.9

Release notes

Sourced from @​angular/common's releases.

21.2.9

core

Commit Description
fix - f603d4714f escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description
fix - 540536c386 add CSP nonce support to JsonpClientBackend
fix - 63a857b874 Don't on Passthru outside of reactive context

platform-server

Commit Description
fix - e0b5078cf2 prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description
fix - 684e9fd53d normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description
fix - 2c6781071f error for type parameter declarations

core

Commit Description
fix - 82192deda9 handle missing serialized container hydration data
fix - 057cc6d09d remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description
fix - 7797671257 get quick info at local var location to align with TS semantics and support type narrowing
Changelog

Sourced from @​angular/common's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description
e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description
684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

  • The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.
    • TypeScript versions older than 6.0 are no longer supported.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

  • This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

  • The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description
2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description
7f9450219f feat Adds warning for prefetch without main defer trigger
ab061a7610 fix error for type parameter declarations
9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description
a0aa8304cd feat bootstrap via ApplicationRef with config
9c55fcb3e6 feat de-duplicate host directives
8fe025f514 feat drop support for TypeScript 5.9
77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits
  • 540536c fix(http): add CSP nonce support to JsonpClientBackend
  • 8102331 test(http): disable XSRF and mock location in HttpClient tests to avoid Domin...
  • See full diff in compare view

Updates @angular/compiler from 21.2.7 to 21.2.9

Release notes

Sourced from @​angular/compiler's releases.

21.2.9

core

Commit Description
fix - f603d4714f escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description
fix - 540536c386 add CSP nonce support to JsonpClientBackend
fix - 63a857b874 Don't on Passthru outside of reactive context

platform-server

Commit Description
fix - e0b5078cf2 prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description
fix - 684e9fd53d normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description
fix - 2c6781071f error for type parameter declarations

core

Commit Description
fix - 82192deda9 handle missing serialized container hydration data
fix - 057cc6d09d remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description
fix - 7797671257 get quick info at local var location to align with TS semantics and support type narrowing
Changelog

Sourced from @​angular/compiler's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description
e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description
684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

  • The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.
    • TypeScript versions older than 6.0 are no longer supported.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

  • This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

  • The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description
2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description
7f9450219f feat Adds warning for prefetch without main defer trigger
ab061a7610 fix error for type parameter declarations
9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description
a0aa8304cd feat bootstrap via ApplicationRef with config
9c55fcb3e6 feat de-duplicate host directives
8fe025f514 feat drop support for TypeScript 5.9
77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits
  • a4f3120 refactor(compiler): require a reference in DirectiveMeta
  • de533fe refactor(compiler-cli): move ClassPropertyMapping into compiler
  • ea1e34c refactor(compiler): move matchSource into base metadata
  • e40d378 fix(compiler): handle nested brackets in host object bindings
  • See full diff in compare view

Updates @angular/core from 21.2.7 to 21.2.9

Release notes

Sourced from @​angular/core's releases.

21.2.9

core

Commit Description
fix - f603d4714f escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description
fix - 540536c386 add CSP nonce support to JsonpClientBackend
fix - 63a857b874 Don't on Passthru outside of reactive context

platform-server

Commit Description
fix - e0b5078cf2 prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description
fix - 684e9fd53d normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description
fix - 2c6781071f error for type parameter declarations

core

Commit Description
fix - 82192deda9 handle missing serialized container hydration data
fix - 057cc6d09d remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description
fix - 7797671257 get quick info at local var location to align with TS semantics and support type narrowing
Changelog

Sourced from @​angular/core's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description
e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description
684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

  • The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.
    • TypeScript versions older than 6.0 are no longer supported.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

  • This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

  • The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description
2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description
7f9450219f feat Adds warning for prefetch without main defer trigger
ab061a7610 fix error for type parameter declarations
9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description
a0aa8304cd feat bootstrap via ApplicationRef with config
9c55fcb3e6 feat de-duplicate host directives
8fe025f514 feat drop support for TypeScript 5.9
77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits
  • 17cae6a docs: fix bootstraping link
  • f603d47 fix(core): escape forward slashes in transfer state to prevent crawler indexing
  • 05d9b97 build: update cross-repo angular dependencies
  • d4c8a9a refactor(compiler-cli): decouple SymbolBuilder from BoundTarget and minimize ...
  • 057cc6d fix(core): remove obsolete iOS cursor pointer hack in event delegation
  • c9f8f3a test(core): add missing import of ChangeDetectionStrategy in query_spec
  • 910dcb6 refactor(compiler-cli): decouple TemplateSymbolBuilder from ts.TypeChecker
  • 82192de fix(core): handle missing serialized container hydration data
  • 2ae0912 refactor(core): address review comments on NG0750 error message
  • e583f4c refactor(core): Add more detail to NG0750 error message
  • Additional commits viewable in compare view

Updates @angular/forms from 21.2.7 to 21.2.9

Release notes

Sourced from @​angular/forms's releases.

21.2.9

core

Commit Description
fix - f603d4714f escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description
fix - 540536c386 add CSP nonce support to JsonpClientBackend
fix - 63a857b874 Don't on Passthru outside of reactive context

platform-server

Commit Description
fix - e0b5078cf2 prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description
fix - 684e9fd53d normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description
fix - 2c6781071f error for type parameter declarations

core

Commit Description
fix - 82192deda9 handle missing serialized container hydration data
fix - 057cc6d09d remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit Description
fix - 7797671257 get quick info at local var location to align with TS semantics and support type narrowing
Changelog

Sourced from @​angular/forms's changelog.

21.2.9 (2026-04-15)

core

Commit Type Description
f603d4714f fix escape forward slashes in transfer state to prevent crawler indexing

http

Commit Type Description
540536c386 fix add CSP nonce support to JsonpClientBackend
63a857b874 fix Don't on Passthru outside of reactive context

platform-server

Commit Type Description
e0b5078cf2 fix prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Type Description
684e9fd53d fix normalize multiple leading slashes in URL parser

22.0.0-next.7 (2026-04-08)

Breaking Changes

core

  • The second arguement of appRef.bootstrap does not accept any anymore. Make sure the element you pass is not nullable.
    • TypeScript versions older than 6.0 are no longer supported.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponentFunction.
  • ComponentFactoryResolver and ComponentFactory are no longer available. Pass the component class directly to APIs that previously required a factory, such as ViewContainerRef.createComponent or use the standalone createComponent function.

platform-browser

  • This removes styles when they appear to no longer be used by an associated host. However other DOM on the page may still be affected by those styles if not leveraging ViewEncapsulation.Emulated or if those styles are used by elements outside of Angular, potentially causing other DOM to appear unstyled.

router

  • The currentSnapshot parameter in CanMatchFn and the canMatch method of the CanMatch interface is now required. While this was already the behavior of the Router at runtime, existing class implementations of CanMatch must now include the third argument to satisfy the interface.

compiler

Commit Type Description
2ce0e98f79 fix handle nested brackets in host object bindings

compiler-cli

Commit Type Description
7f9450219f feat Adds warning for prefetch without main defer trigger
ab061a7610 fix error for type parameter declarations
9218140348 fix resolve TCB mapping failure for safe property reads with as any

core

Commit Type Description
a0aa8304cd feat bootstrap via ApplicationRef with config
9c55fcb3e6 feat de-duplicate host directives
8fe025f514 feat drop support for TypeScript 5.9
77f1ca08e4 fix handle missing serialized container hydration data

... (truncated)

Commits
  • dc95814 docs: add documentation for NG1002
  • b0dc2fb docs(forms): clarify disabled FormArray value behavior
  • See full diff in compare view

Updates @angular/platform-browser from 21.2.7 to 21.2.9

Release notes

Sourced from @​angular/platform-browser's releases.

21.2.9

core

Commit Description
fix - f603d4714f escape forward slashes in transfer state to prevent crawler indexing

http

Commit Description
fix - 540536c386 add CSP nonce support to JsonpClientBackend
fix - 63a857b874 Don't on Passthru outside of reactive context

platform-server

Commit Description
fix - e0b5078cf2 prevent SSRF bypasses via protocol-relative and backslash URLs

router

Commit Description
fix - 684e9fd53d normalize multiple leading slashes in URL parser

21.2.8

compiler

Commit Description
fix - e40d378f3e handle nested brackets in host object bindings

compiler-cli

Commit Description

@balazs-szucs balazs-szucs left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think this should be good 👍

@imnotjames

Copy link
Copy Markdown
Contributor

@dependabot recreate

…35 updates

Dependabot couldn't find the original pull request head commit, d7dfff9.
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/npm-dependencies-95eced0f10 branch from d7dfff9 to fd2c7a9 Compare April 22, 2026 23:34

@imnotjames imnotjames left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can also confirm this seems to be working.

@imnotjames imnotjames merged commit 2baf07b into develop Apr 22, 2026
14 checks passed
@imnotjames imnotjames deleted the dependabot/npm_and_yarn/frontend/npm-dependencies-95eced0f10 branch April 22, 2026 23:49
github-merge-queue Bot pushed a commit that referenced this pull request Apr 25, 2026
…35 updates (#764)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dsmouse pushed a commit to dsmouse/grimmory that referenced this pull request May 11, 2026
…35 updates (grimmory-tools#764)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants