[dependabot]

Bumps the npm-minor-patch group with 25 updates in the / directory:

Package	From	To
lefthook	2.2.1	2.2.2
@angular/animations	22.2.2	22.2.3
@angular/aria	22.2.2	22.2.4
@angular/cdk	22.2.2	22.2.4
@angular/common	22.2.2	22.2.3
@angular/compiler	22.2.2	22.2.3
@angular/core	22.2.2	22.2.3
@angular/forms	22.2.2	22.2.3
@angular/platform-browser	22.2.2	22.2.3
@angular/router	22.2.2	22.2.3
@tauri-apps/api	2.12.3	2.12.4
@tauri-apps/plugin-dialog	2.8.2	2.8.3
@tauri-apps/plugin-fs	2.7.0	2.7.1
@tauri-apps/plugin-opener	2.7.1	2.7.2
katex	0.19.0	0.19.1
marked	18.1.0	18.1.1
ngx-markdown	22.1.0	22.1.1
@angular/build	22.2.2	22.2.4
@angular/cli	22.2.2	22.2.4
@angular/compiler-cli	22.2.2	22.2.3
jsdom	30.1.2	30.1.3
vitest	5.0.3	5.0.5
@tauri-apps/cli	2.12.2	2.12.4
mermaid	12.1.0	12.2.0
sass	1.105.1	1.106.1

Updates lefthook from 2.2.1 to 2.2.2

Release notes

Sourced from lefthook's releases.

v2.2.2

Changelog

• 4aeffd72a6e3ea846c2054cffd6294c943fd7fbb fix: cleanup only current stash hash (#1597)
• db62412c82ddac71cf536e60e50edb2826624870 packaging: add support for android (#1591)
• e3fa81b1f01881829ef95e37211da7923a4fd6df refactor(filter): simplify mimetype matching (#1596)

Changelog

Sourced from lefthook's changelog.

2.2.2

• fix: cleanup only current stash hash (#1597) by @​mrexox
• refactor: simplify mimetype matching (#1596) by @​scop
• packaging: add support for android (#1591) by @​mrexox

Commits

• eb4e504 2.2.2: keep backups for worktree flows and release android NPM package
• 4aeffd7 fix: cleanup only current stash hash (#1597)
• e3fa81b refactor(filter): simplify mimetype matching (#1596)
• db62412 packaging: add support for android (#1591)
• See full diff in compare view

Attestation changes

This version has no provenance attestation, while the previous version (2.2.1) was attested. Review the package versions before updating.

Updates @angular/animations from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/animations's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

Commits

• See full diff in compare view

Updates @angular/aria from 22.2.2 to 22.2.4

Release notes

Sourced from @​angular/aria's releases.

22.2.4

material

Commit	Description
	datepicker: increse specificity of period button styles (#33970)
	datepicker: update parse error with signal forms when value stays null (#33951)

aria

Commit	Description
	combobox: error when popup is destroyed before first change detection (#33974)

22.2.3

material

Commit	Description
	chips: implement touch-target pattern/styles on chip component (#33614)

cdk

Commit	Description
	a11y: treat inert elements as non-focusable (#33846)

Changelog

Sourced from @​angular/aria's changelog.

22.2.4 "titanium-trousers" (2026-10-21)

aria

Commit	Type	Description
14d931161	fix	combobox: error when popup is destroyed before first change detection (#33974)

material

Commit	Type	Description
3f2b67450	fix	datepicker: increse specificity of period button styles (#33970)
feb80c272	fix	datepicker: update parse error with signal forms when value stays null (#33951)

22.3.0-next.2 "rhenium-roundabout" (2026-10-14)

cdk

Commit	Type	Description
92b97f6fb	fix	a11y: treat inert elements as non-focusable (#33846)

material

Commit	Type	Description
c0207b5d8	fix	chips: implement touch-target pattern/styles on chip component (#33614)

22.2.3 "rhenium-rotor" (2026-10-14)

cdk

Commit	Type	Description
a307978dc	fix	a11y: treat inert elements as non-focusable (#33846)

material

Commit	Type	Description
e0c2d4df7	fix	chips: implement touch-target pattern/styles on chip component (#33614)

22.3.0-next.1 "calcium-crown" (2026-10-07)

cdk

Commit	Type	Description
cc3829f62	fix	drag-drop: remove old prefixes for fullscreen elements
84a2366bb	fix	drag-drop: use consistent touch coordinates for bounded dragging (#33928)
f6c2a193e	fix	overlay: remove old prefixes for fullscreen elements

material

Commit	Type	Description

... (truncated)

Commits

• e28b22e release: cut the v22.2.4 release
• b0e612e docs: convert version picker to signals (#33909)
• 3621592 docs: resolve guide and doc items in the router (#33895)
• b2cb602 docs: cross-fade between pages with view transitions (#33888)
• 8793a4c build: update pnpm to v11.28.6 (#33942)
• 3cf48c5 build: update dependency rules_nodejs to v6.7.6 (#33941)
• 220a9df build: update actions/upload-artifact action to v7.0.2 (#33940)
• 3f2b674 fix(material/datepicker): increse specificity of period button styles (#33970)
• 14d9311 fix(aria/combobox): error when popup is destroyed before first change detecti...
• feb80c2 fix(material/datepicker): update parse error with signal forms when value sta...
• Additional commits viewable in compare view

Updates @angular/cdk from 22.2.2 to 22.2.4

Release notes

Sourced from @​angular/cdk's releases.

22.2.4

material

Commit	Description
	datepicker: increse specificity of period button styles (#33970)
	datepicker: update parse error with signal forms when value stays null (#33951)

aria

Commit	Description
	combobox: error when popup is destroyed before first change detection (#33974)

22.2.3

material

Commit	Description
	chips: implement touch-target pattern/styles on chip component (#33614)

cdk

Commit	Description
	a11y: treat inert elements as non-focusable (#33846)

Changelog

Sourced from @​angular/cdk's changelog.

22.2.4 "titanium-trousers" (2026-10-21)

aria

Commit	Type	Description
14d931161	fix	combobox: error when popup is destroyed before first change detection (#33974)

material

Commit	Type	Description
3f2b67450	fix	datepicker: increse specificity of period button styles (#33970)
feb80c272	fix	datepicker: update parse error with signal forms when value stays null (#33951)

22.3.0-next.2 "rhenium-roundabout" (2026-10-14)

cdk

Commit	Type	Description
92b97f6fb	fix	a11y: treat inert elements as non-focusable (#33846)

material

Commit	Type	Description
c0207b5d8	fix	chips: implement touch-target pattern/styles on chip component (#33614)

22.2.3 "rhenium-rotor" (2026-10-14)

cdk

Commit	Type	Description
a307978dc	fix	a11y: treat inert elements as non-focusable (#33846)

material

Commit	Type	Description
e0c2d4df7	fix	chips: implement touch-target pattern/styles on chip component (#33614)

22.3.0-next.1 "calcium-crown" (2026-10-07)

cdk

Commit	Type	Description
cc3829f62	fix	drag-drop: remove old prefixes for fullscreen elements
84a2366bb	fix	drag-drop: use consistent touch coordinates for bounded dragging (#33928)
f6c2a193e	fix	overlay: remove old prefixes for fullscreen elements

material

Commit	Type	Description

... (truncated)

Commits

• e28b22e release: cut the v22.2.4 release
• b0e612e docs: convert version picker to signals (#33909)
• 3621592 docs: resolve guide and doc items in the router (#33895)
• b2cb602 docs: cross-fade between pages with view transitions (#33888)
• 8793a4c build: update pnpm to v11.28.6 (#33942)
• 3cf48c5 build: update dependency rules_nodejs to v6.7.6 (#33941)
• 220a9df build: update actions/upload-artifact action to v7.0.2 (#33940)
• 3f2b674 fix(material/datepicker): increse specificity of period button styles (#33970)
• 14d9311 fix(aria/combobox): error when popup is destroyed before first change detecti...
• feb80c2 fix(material/datepicker): update parse error with signal forms when value sta...
• Additional commits viewable in compare view

Updates @angular/common from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/common's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

Commits

• dcb29a9 docs: fix @​param names that don't match their parameters
• fafec77 fix(common): harden param encoding against prototype pollution
• See full diff in compare view

Updates @angular/compiler from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/compiler's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

Commits

• 54f3de5 fix(compiler): check @boundary blocks in the control flow content projectio...
• 5e50658 fix(compiler): compare the operand in ReadTemporaryExpr.isEquivalent
• 35a02f8 fix(compiler): harden JIT against prototype pollution
• b6f9cc5 fix(compiler): do not scope comments placed inside of a selector
• 08075e8 fix(compiler): support dots in class binding names
• c7a72c2 fix(compiler): support popover property bindings
• See full diff in compare view

Updates @angular/core from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/core's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

Commits

• 90af679 fix(core): do not swallow compilation errors in computeStandaloneComponentScope
• eca5fa4 fix(core): don't crash initEventReplay when two apps share an APP_ID
• cc515b8 perf(forms): use addEventListener to avoid unconditional CD scheduling on blur
• dcb29a9 docs: fix @​param names that don't match their parameters
• d04f214 fix(migrations): normalize .d.ts paths in output migration field IDs
• 51ce6e5 docs: use consistent headers in best-practices.md
• e59a230 fix(core): error when destroying embedded view with animations
• 08075e8 fix(compiler): support dots in class binding names
• 913ae74 fix(core): skip nested tick from onMicrotaskEmpty while a tick is running
• b5208f9 fix(core): avoid deleting idle bucket created during another bucket's drain
• Additional commits viewable in compare view

Updates @angular/forms from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/forms's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

Commits

• cc515b8 perf(forms): use addEventListener to avoid unconditional CD scheduling on blur
• dcb29a9 docs: fix @​param names that don't match their parameters
• 276248f docs(forms): document that minDate and maxDate expect UTC dates
• 26279ed test(forms): cover the deprecated disabled signatures
• 206f541 docs(forms): use the when option in disabled examples
• See full diff in compare view

Updates @angular/platform-browser from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/platform-browser's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

Commits

• See full diff in compare view

Updates @angular/router from 22.2.2 to 22.2.3

Release notes

Sourced from @​angular/router's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description