Skip to content

chore(deps): bump @angular/router from 22.2.0 to 22.2.3 - #826

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/router-22.2.3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/router-22.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @angular/router from 22.2.0 to 22.2.3.

Release notes

Sourced from @​angular/router's releases.

22.2.3

common

Commit Description
fix - fafec77b5d harden param encoding against prototype pollution

compiler

Commit Description
fix - 54f3de517c check @boundary blocks in the control flow content projection diagnostic
fix - 5e50658fd2 compare the operand in ReadTemporaryExpr.isEquivalent
fix - b6f9cc5d70 do not scope comments placed inside of a selector
fix - 35a02f8097 harden JIT against prototype pollution
fix - 08075e8aa0 support dots in class binding names
fix - c7a72c2bf2 support popover property bindings

compiler-cli

Commit Description
fix - fa21d083fe inline tcb when depending on local directive

core

Commit Description
fix - b5208f9fc3 avoid deleting idle bucket created during another bucket's drain
fix - 90af679c3b do not swallow compilation errors in computeStandaloneComponentScope
fix - eca5fa4665 don't crash initEventReplay when two apps share an APP_ID
fix - e59a2303df error when destroying embedded view with animations
fix - a23941fe75 keep activeConsumer and currentInjector constant using Store helper
fix - 913ae7421f skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit Description
perf - cc515b8b23 use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit Description
fix - d04f214d04 normalize .d.ts paths in output migration field IDs

router

Commit Description
fix - f9a4f751f0 check abort signal state on subscribe

22.2.2

compiler

Commit Description
fix - fa63bfad14 avoid leaking ::ng-deep detection state between rules
fix - 5744e7575c avoid prototype lookups when resolving entities
fix - 97e57157e4 correctly match directives on <ng-template> nested in various namespaces
fix - 0474258a5a ignore @let declarations in the control flow content projection diagnostic
fix - 725ffcf4fa match namespaced root nodes of control flow blocks against ng-content tag selectors
fix - 5ff83c11fe strip script elements regardless of namespace

... (truncated)

Commits
  • dcb29a9 docs: fix @​param names that don't match their parameters
  • f9a4f75 fix(router): check abort signal state on subscribe
  • 7bc6a1b refactor(router): Remove canLoad from 1p Router
  • e0137cb fix(router): remove the navigate event abort listener once it fires
  • fc91c72 fix(router): reset internal state on error handler redirect after state commit
  • 576df28 fix(router): fall back when serializing protocol-relative URLs
  • d98ee02 docs(router): note that shouldReuseRoute doesn't rerun guards and resolvers
  • e9bf52a fix(router): require outlets to match a route before processing child segments
  • 83abee3 Revert "fix(router): fall back when serializing protocol-relative URLs"
  • 3b6796f fix(router): reject duplicate outlets in production builds
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) from 22.2.0 to 22.2.3.
- [Release notes](https://github.com/angular/angular/releases)
- [Commits](https://github.com/angular/angular/commits/v22.2.3/packages/router)

---
updated-dependencies:
- dependency-name: "@angular/router"
  dependency-version: 22.2.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like @angular/router is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/angular/router-22.2.3 branch October 21, 2026 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants