[dependabot]

Bumps the npm-deps group with 18 updates in the /application/backup-app directory:

Package	From	To
@angular/animations	20.3.1	22.2.3
@angular/common	20.3.1	22.2.3
@angular/compiler	20.3.1	22.2.3
@angular/core	20.3.1	22.2.3
@angular/forms	20.3.1	22.2.3
@angular/platform-browser	20.3.1	22.2.3
@angular/platform-browser-dynamic	20.3.1	22.2.3
@angular/platform-server	20.3.1	22.2.3
@angular/router	20.3.1	22.2.3
@angular/ssr	20.3.40	22.2.2
@microsoft/signalr	9.0.6	10.0.11
zone.js	0.15.1	0.16.3
@angular-devkit/build-angular	20.3.2	21.2.27
@angular/cli	20.3.2	22.2.2
@angular/compiler-cli	20.3.1	22.2.3
@types/express	5.0.3	5.0.6
@types/node	24.5.2	26.6.5
typescript	5.9.2	7.0.2

Updates @angular/animations from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/animations's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• d0a748c docs(animations): stop the query() usage notes truncating at a code sample
• 732e505 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• c73a001 fix(animations): detect object trigger values with Object.hasOwn
• 1b13db7 refactor(animations): remove outdated comment
• 861d37e build: update minimum supported Node.js versions
• a7dab60 refactor(core): use the @Service decorator where possible.
• b8d3f36 feat(compiler-cli): add support for Node.js 26.0.0
• 6672192 test: remove duplicate tests (#67518)
• d550bf7 build: update minimum supported Node.js versions
• 81cabc1 feat(core): add support for TypeScript 6
• Additional commits viewable in compare view

Updates @angular/common from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/common's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• dcb29a9 docs: fix @​param names that don't match their parameters
• fafec77 fix(common): harden param encoding against prototype pollution
• ad2f291 fix(common): let NgOptimizedImage pass a [srcset] binding through when srcset...
• 6dee7fe fix(http): forward reportProgress of httpResource as `reportDownloadProgr...
• 270abc9 docs(docs-infra): throw on absolute links in @​see tags
• b9de99d fix(common): remove abort listener on the abort path too in httpResource
• 1bc7e3c refactor(core): use native Promise.withResolvers() in remaining tests
• 0bdbbcf fix(docs-infra): only read a deprecation version from the start of the tag
• af26a8c fix(router): avoid view transitions when the user agent provides one
• 7596548 fix(common): use locale NaN symbol in number formatting
• Additional commits viewable in compare view

Updates @angular/compiler from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/compiler's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• 54f3de5 fix(compiler): check @boundary blocks in the control flow content projectio...
• 5e50658 fix(compiler): compare the operand in ReadTemporaryExpr.isEquivalent
• 35a02f8 fix(compiler): harden JIT against prototype pollution
• b6f9cc5 fix(compiler): do not scope comments placed inside of a selector
• 08075e8 fix(compiler): support dots in class binding names
• c7a72c2 fix(compiler): support popover property bindings
• 5ff83c1 fix(compiler): strip script elements regardless of namespace
• 6fa2b08 refactor(compiler): remove img/video src attribute from the URL security cont...
• fa63bfa fix(compiler): avoid leaking ::ng-deep detection state between rules
• 725ffcf fix(compiler): match namespaced root nodes of control flow blocks against ng-...
• Additional commits viewable in compare view

Updates @angular/core from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/core's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• 90af679 fix(core): do not swallow compilation errors in computeStandaloneComponentScope
• eca5fa4 fix(core): don't crash initEventReplay when two apps share an APP_ID
• cc515b8 perf(forms): use addEventListener to avoid unconditional CD scheduling on blur
• dcb29a9 docs: fix @​param names that don't match their parameters
• d04f214 fix(migrations): normalize .d.ts paths in output migration field IDs
• 51ce6e5 docs: use consistent headers in best-practices.md
• e59a230 fix(core): error when destroying embedded view with animations
• 08075e8 fix(compiler): support dots in class binding names
• 913ae74 fix(core): skip nested tick from onMicrotaskEmpty while a tick is running
• b5208f9 fix(core): avoid deleting idle bucket created during another bucket's drain
• Additional commits viewable in compare view

Updates @angular/forms from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/forms's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• cc515b8 perf(forms): use addEventListener to avoid unconditional CD scheduling on blur
• dcb29a9 docs: fix @​param names that don't match their parameters
• 276248f docs(forms): document that minDate and maxDate expect UTC dates
• 26279ed test(forms): cover the deprecated disabled signatures
• 206f541 docs(forms): use the when option in disabled examples
• db91010 fix(docs-infra): stop generating member anchors that do not exist
• c91a8c4 fix(forms): use Object.is when comparing control bindings in signal forms
• b0710b8 fix(forms): don't crash when control is missing in setUpValidators
• 6a96a40 refactor(forms): modernize value accessor integration tests
• ef03596 fix(forms): skip class bindings for orphaned fields
• Additional commits viewable in compare view

Updates @angular/platform-browser from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/platform-browser's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• 1663b5e docs(platform-browser): link the styling guide from the namespacing APIs (#70...
• 6298b30 refactor(platform-browser): type async animation renderer
• 2d68c17 refactor(core): use native Promise.withResolvers() in remaining test files
• ab0cfda refactor(platform-browser): type shadow DOM renderer fields
• 1bc7e3c refactor(core): use native Promise.withResolvers() in remaining tests
• 83f7695 fix(core): throw coded RuntimeErrors instead of crashing when hydration/rende...
• 6f9a6be fix(platform-browser): disallow event handler attributes in Meta
• d35c17d refactor: correct typos in comments, docs, and error messages
• 1cb3d60 fix(platform-browser): throw a descriptive error when insertBefore reference ...
• ec372d6 refactor(platform-browser): modernize DOM renderer tests
• Additional commits viewable in compare view

Updates @angular/platform-browser-dynamic from 20.3.1 to 22.2.3

Release notes

Sourced from @​angular/platform-browser-dynamic's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.t... Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.