build(deps): bump the npm-dependencies group across 1 directory with 15 updates

[dependabot]

Bumps the npm-dependencies group with 15 updates in the / directory:

Package	From	To
@angular/common	22.0.2	22.1.7
@angular/compiler	22.0.2	22.1.7
@angular/core	22.0.2	22.1.7
@angular/forms	22.0.2	22.1.7
@angular/platform-browser	22.0.2	22.1.7
@angular/router	22.0.2	22.1.7
@fontsource/dm-mono	5.2.7	5.3.0
@fontsource/dm-sans	5.2.8	5.3.0
wrangler	4.99.0	4.133.0
@angular/build	22.0.3	22.1.8
@angular/cli	22.0.3	22.1.8
@angular/compiler-cli	22.0.2	22.1.7
@playwright/test	1.61.1	1.63.0
typescript	6.0.3	7.0.2
zone.js	0.16.2	0.16.3

Updates @angular/common from 22.0.2 to 22.1.7

Release notes

Sourced from @​angular/common's releases.

22.1.7

compiler

Commit	Description
	wrap @for collection expression before appending non-null assertion

core

Commit	Description
	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Description
	mark control as dirty before setting its value in FVC interop

22.1.6

compiler

Commit	Description
	namespace @property declarations

compiler-cli

Commit	Description
	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Description
	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Description
	avoid sourcemap corruption during domino path substitution

router

Commit	Description
	keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description

... (truncated)

Commits

• 6da6d7a refactor(core): use native Promise.withResolvers() in remaining tests
• 237be1f fix(docs-infra): only read a deprecation version from the start of the tag
• 4340a63 fix(router): avoid view transitions when the user agent provides one
• e8378df fix(common): use locale NaN symbol in number formatting
• 60a874c fix(common): avoid prototype member collisions
• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• b3c78a5 fix(common): preserve literal key union in KeyValuePipe.transform()
• 0cd635e fix(http): cancel oversized fetch response bodies
• 4f7e998 fix(http): always decode JSON responses as UTF-8
• ac3728e fix(http): avoid aborting completed requests in FetchBackend
• Additional commits viewable in compare view

Updates @angular/compiler from 22.0.2 to 22.1.7

Release notes

Sourced from @​angular/compiler's releases.

22.1.7

compiler

Commit	Description
	wrap @for collection expression before appending non-null assertion

core

Commit	Description
	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Description
	mark control as dirty before setting its value in FVC interop

22.1.6

compiler

Commit	Description
	namespace @property declarations

compiler-cli

Commit	Description
	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Description
	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Description
	avoid sourcemap corruption during domino path substitution

router

Commit	Description
	keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description

... (truncated)

Commits

• 7b7b203 refactor(compiler): remove write-only collections from template pipeline phases
• 8a837f6 Revert "fix(compiler): wrap @for collection expression before appending non...
• 5e632b6 fix(compiler): wrap @for collection expression before appending non-null as...
• cbb8702 fix(compiler): namespace @property declarations
• dfe7be4 refactor(compiler): emit any as type argument for ɵɵInjectableDeclaration
• c65d378 fix(core): validate SVG animation attributes outside the SVG namespace
• 60f8a78 refactor(core): defer foreign component rendering to post-update pass
• 079a846 fix(compiler-cli): Produce correct tcb expression for optional chaining
• 05c7c72 fix(compiler): scope animations declared in minified nested rules
• df00ed2 refactor(compiler-cli): add compiler option for enabling source locations
• Additional commits viewable in compare view

Updates @angular/core from 22.0.2 to 22.1.7

Release notes

Sourced from @​angular/core's releases.

22.1.7

compiler

Commit	Description
	wrap @for collection expression before appending non-null assertion

core

Commit	Description
	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Description
	mark control as dirty before setting its value in FVC interop

22.1.6

compiler

Commit	Description
	namespace @property declarations

compiler-cli

Commit	Description
	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Description
	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Description
	avoid sourcemap corruption during domino path substitution

router

Commit	Description
	keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description

... (truncated)

Commits

• 5ffc381 docs: add the missing heading to the effects guide
• 16c8064 test(core): reduce fakeAsync usage in animation tests
• 8509045 build: update cross-repo angular dependencies
• fd8412c test(core): fix view injector integration spec
• 0e64124 test(core): remove redundant change detection configuration
• 023d172 test(core): reduce fakeAsync usage in tests
• ec48c83 fix(core): return null when getDirectiveMetadata is called with null or undef...
• b9e903c docs: add CommonModule guidance to AI best practices
• 6da6d7a refactor(core): use native Promise.withResolvers() in remaining tests
• e3fb44d test(core): remove redundant change detection configuration
• Additional commits viewable in compare view

Updates @angular/forms from 22.0.2 to 22.1.7

Release notes

Sourced from @​angular/forms's releases.

22.1.7

compiler

Commit	Description
	wrap @for collection expression before appending non-null assertion

core

Commit	Description
	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Description
	mark control as dirty before setting its value in FVC interop

22.1.6

compiler

Commit	Description
	namespace @property declarations

compiler-cli

Commit	Description
	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Description
	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Description
	avoid sourcemap corruption during domino path substitution

router

Commit	Description
	keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description

... (truncated)

Commits

• f73f059 docs: fix API links that point at missing member anchors
• 6555c4e fix(forms): mark control as dirty before setting its value in FVC interop
• 376b71e docs(forms): document what required() considers empty
• 14d6999 docs(forms): close the unterminated code fences in the compatForm docs
• 5dabf81 test(forms): migrate integration tests to zoneless scheduling
• 6da6d7a refactor(core): use native Promise.withResolvers() in remaining tests
• 3bc03fa test(forms): remove redundant change detection configuration
• cc05dea test(forms): Add utility functions and update test files to use them
• f302736 refactor(core): use native Promise.withResolvers() in tests
• 43aaeae fix(forms): avoid writing to name input on ControlValueAccessor
• Additional commits viewable in compare view

Updates @angular/platform-browser from 22.0.2 to 22.1.7

Release notes

Sourced from @​angular/platform-browser's releases.

22.1.7

compiler

Commit	Description
	wrap @for collection expression before appending non-null assertion

core

Commit	Description
	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Description
	mark control as dirty before setting its value in FVC interop

22.1.6

compiler

Commit	Description
	namespace @property declarations

compiler-cli

Commit	Description
	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Description
	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Description
	avoid sourcemap corruption during domino path substitution

router

Commit	Description
	keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description

... (truncated)

Commits

• 6da6d7a refactor(core): use native Promise.withResolvers() in remaining tests
• 7546b7a fix(core): throw coded RuntimeErrors instead of crashing when hydration/rende...
• 3ddcb1a fix(platform-browser): disallow event handler attributes in Meta
• 1e53aa0 refactor: correct typos in comments, docs, and error messages
• 640460d fix(platform-browser): throw a descriptive error when insertBefore reference ...
• f51080b refactor(platform-browser): modernize DOM renderer tests
• fb6b354 fix(platform-browser): prevent ReDoS in SOURCEMAP_URL_REGEXP
• c0eaaed refactor(core): cleanup Meta service
• c1829f6 docs(docs-infra): Add build-time validation for API and guide links using rou...
• 806a3ad docs: add NG05200 error reference page for SANITIZATION_UNSAFE_SCRIPT
• Additional commits viewable in compare view

Updates @angular/router from 22.0.2 to 22.1.7

Release notes

Sourced from @​angular/router's releases.

22.1.7

compiler

Commit	Description
	wrap @for collection expression before appending non-null assertion

core

Commit	Description
	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Description
	mark control as dirty before setting its value in FVC interop

22.1.6

compiler

Commit	Description
	namespace @property declarations

compiler-cli

Commit	Description
	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Description
	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Description
	avoid sourcemap corruption during domino path substitution

router

Commit	Description
	keep detached route subtree contexts isolated and intact

22.1.5

compiler-cli

Commit	Description
	check uninvoked signal aliases in extended diagnostic

core

Commit	Description
	cancel stale debounce timers to prevent timer leaks
	don't fail NgModule checks for a pipe that extends a base class
	validate SVG animation attributes outside the SVG namespace

forms

Commit	Description

... (truncated)

Commits

• f73f059 docs: fix API links that point at missing member anchors
• e0e1f5f docs(router): update scroll restoration example
• a205de9 test(router): remove redundant change detection configuration
• 6da6d7a refactor(core): use native Promise.withResolvers() in remaining tests
• 95c01e9 fix(router): keep detached route subtree contexts isolated and intact
• 4340a63 fix(router): avoid view transitions when the user agent provides one
• c84079e refactor(router): add component input binding support for router resources
• 5dfe753 refactor(router): replace internal any types
• d2e3bac refactor(router): add support for blocking router resources
• 84a210e refactor(router): add support for non-blocking router resources (#70211)
• Additional commits viewable in compare view

Updates @fontsource/dm-mono from 5.2.7 to 5.3.0

Commits

• See full diff in compare view

Updates @fontsource/dm-sans from 5.2.8 to 5.3.0

Commits

• See full diff in compare view

Updates wrangler from 4.99.0 to 4.133.0

Release notes

Sourced from wrangler's releases.

wrangler@4.133.0

Minor Changes

• #15600 bac0c6a Thanks @​podonnell-dev! - Add placement configuration for Previews

  You can now configure placement in the previews block. Preview-specific placement overrides the top-level placement configuration for Preview Defaults and deployments.

• #15600 bac0c6a Thanks @​podonnell-dev! - Improve onboarding guidance for Previews (when previews block is missing from configuration file)

  When a local previews block is absent, Wrangler writes the Preview Base configuration to the local config file. When no Preview Base configuration exists, Wrangler prints a placeholder configuration derived from production bindings and warns against reusing production binding configuration.

Patch Changes

• #15483 71b6f10 Thanks @​tpmmorris! - Align Local Explorer Workflow instance status requests with production

  Local Explorer and Wrangler local mode now use the production-compatible status request field for pausing, resuming, restarting, and terminating Workflow instances. Direct Local Explorer API consumers must replace the previous action field with status.

  Successful Local Explorer status updates now return the production-compatible instance status and response timestamp instead of the local-only result.success acknowledgement.

• #15665 ad23e6e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260915.1	^5.20260916.1
  workerd	1.20260915.1	1.20260916.1

• #15655 be2437a Thanks @​WillTaylorDev! - Send exports with Worker Preview deployments

  wrangler preview dropped the exports block from deployment requests. Durable Objects reached through ctx.exports had no Preview namespace, and cache settings for each entrypoint were lost too.

• Updated dependencies [71b6f10, ad23e6e, 6f3d7b5]:

  • miniflare@5.20260916.0-alpha

wrangler@4.132.0

Minor Changes

• #14587 76c0ce6 Thanks @​MattieTK! - Categorise the positional path argument to wrangler deploy and wrangler versions upload in command telemetry

  Command telemetry now records a coarse category for the entry-point/assets positional (wrangler deploy <path>) under sanitizedArgs.path, so we can understand whether people pass a file, a directory, or a relational reference such as . or ../example. The possible values are file, directory, current-dir, parent-relative, and not-found, or null when no positional is provided. The raw path is never sent — only the category.

• #15597 a83d7ac Thanks @​skepticfx! - Configure application-wide logs for experimental Durable Object-managed Containers

  Set containers[].observability.enabled or containers[].observability.logs.enabled when using scheduling_policy: "durable_object". Normal deployments create missing applications and update explicitly configured log settings without a Container rollout. Omitted settings preserve the application configuration; root Worker observability is not inherited for this policy.

  Version uploads may initialize missing applications but preserve existing settings. Deploying or rolling back Worker versions also preserves existing application settings, and --containers-rollout=none skips their updates.

• #15597 a83d7ac Thanks @​skepticfx! - Support per-image build options for experimental Durable Object-managed Containers

... (truncated)

Commits

• f4229f1 Version Packages (#15657)
• 4a19314 [wrangler] Wait for Preview URL propagation in E2E (#15686)
• a8d14ba WC-5834 [wrangler] previews: fix e2e tests (#15683)
• bac0c6a [wrangler] Guide Preview configuration onboarding (#15600)
• 71b6f10 [miniflare] Align workflow status endpoint schema with production (#15483)
• be2437a WC-5802 [wrangler] Send exports with Worker Preview deployments (#15655)
• bbf2f79 Version Packages (#15634)
• 7db596c Bump the workerd-and-workers-types group across 1 directory with 2 updates (#...
• a83d7ac CC-8364 Support Durable Object container settings and exports (#15597)
• 74bf083 [deploy-helpers] Extract Worker startup profiling from Wrangler (#15612)
• Additional commits viewable in compare view

Updates @angular/build from 22.0.3 to 22.1.8

Release notes

Sourced from @​angular/build's releases.

22.1.8

@​angular/build

Commit	Description
	disable strictPort when port 0 is used in dev-server
	avoid full JSON parsing when updating sourcemap ignore list
	read rendered module length once per module in chunk optimizer (#34045)

22.1.7

@​angular/cli

Commit	Description
	isolate temporary package installations from parent Yarn workspace

@​angular/build

Commit	Description
	add splitting option to unit-test builder
	enable code splitting for vitest browser tests
	fail build and exclude routes when prerendering fails
	keep dev-server Vite cache worktree-local
	preserve binary values in the SQLite cache store

@​angular/ssr

Commit	Description
	decode pathname when constructing server asset path
	ensure public directory containment in CommonEngine

22.1.6

@​angular/build

Commit	Description
	ignore side-effect annotations in unit test builds
	batch prerender routes and share in-memory server bundles

@​angular/ssr

Commit	Description
	abort web request signal when node request is aborted

22.1.5

@​schematics/angular

Commit	Description
	transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/cli

Commit	Description
	enforce MCP roots in get_best_practices tool
	handle errors from isAllowedWorkspacePath in best-practices tool
	throw on out-of-roots workspace in best-practices tool

@​angular/build

... (truncated)

Changelog

Sourced from @​angular/build's changelog.

22.1.8 (2026-09-10)

@​angular/build

Commit	Type	Description
a6e30fa378	fix	disable strictPort when port 0 is used in dev-server
35a5d4aa49	perf	avoid full JSON parsing when updating sourcemap ignore list
48cc43cbf2	perf	read rendered module length once per module in chunk optimizer (#34045)

22.2.0-next.6 (2026-09-02)

@​angular/cli

Commit	Type	Description
b37c93329	fix	isolate temporary package installations from parent Yarn workspace

@​angular/build

Commit	Type	Description
4b8c62a8f	fix	add splitting option to unit-test builder
51565d4bc	fix	enable code splitting for vitest browser tests
5b850fdfc	fix	fail build and exclude routes when prerendering fails
dfa7f03a9	fix	keep dev-server Vite cache worktree-local
135662d9a	fix	preserve binary values in the SQLite cache store
701bde481	fix	preserve duplicate bundle filenames across output file types
6ee559ca9	perf	bypass worker dispatch for files without transform candidates
2b85529e8	perf	use iterative post-order AST traversal for OXC transforms
ecbcd87b8	perf	use native sass-embedded compiler daemon
ce83ac0e8	perf	use size-weighted task heuristics in i18n inliner

@​angular/ssr

Commit	Type	Description
4fa81d403	fix	decode pathname when constructing server asset path
bb72145f9	fix	ensure public directory containment in CommonEngine

22.1.7 (2026-09-02)

... (truncated)

Commits