Bump the angular group across 1 directory with 11 updates

[dependabot]

Bumps the angular group with 11 updates in the /frontend directory:

Package	From	To
@angular/cdk	22.1.1	22.1.3
@angular/cli	22.1.4	22.1.5
@angular/common	22.1.1	22.1.3
@angular/compiler	22.1.1	22.1.3
@angular/compiler-cli	22.1.1	22.1.3
@angular/core	22.1.1	22.1.3
@angular/elements	22.1.1	22.1.3
@angular/forms	22.1.1	22.1.3
@angular/platform-browser	22.1.1	22.1.3
@angular/router	22.1.1	22.1.3
@angular/language-service	22.1.1	22.1.3

Updates @angular/cdk from 22.1.1 to 22.1.3

Release notes

Sourced from @​angular/cdk's releases.

22.1.3

multiple

Commit	Description
	account for shadow dom in aria directives (#33691)

22.1.2

material

Commit	Description
	datepicker: actions overflowing at some screen sizes with touch UI (#33645)
	form-field: update view when the control is swapped out (#33636)

cdk

Commit	Description
	a11y: move focus to root if there are no focusable elements in focus trap (#33654)

aria

Commit	Description
	combobox: empty aria-controls when the popup widget has no id (#33635)

multiple

Commit	Description
	tokens specified in wrong category (#33660)

Changelog

Sourced from @​angular/cdk's changelog.

22.1.3 "hydrogen-harp" (2026-08-19)

multiple

Commit	Type	Description
72a496882	fix	account for shadow dom in aria directives (#33691)

22.2.0-next.1 "silver-can" (2026-08-12)

aria

Commit	Type	Description
c87e3a57e7	fix	combobox: empty aria-controls when the popup widget has no id (#33635)

cdk

Commit	Type	Description
f3e6276c96	fix	a11y: move focus to root if there are no focusable elements in focus trap (#33654)

material

Commit	Type	Description
c71383fe37	fix	datepicker: actions overflowing at some screen sizes with touch UI (#33645)
e9760b396b	fix	form-field: update view when the control is swapped out (#33636)

multiple

Commit	Type	Description
9582c5f301	fix	tokens specified in wrong category (#33660)

22.1.2 "aluminum-can" (2026-08-12)

aria

Commit	Type	Description
020f144928	fix	combobox: empty aria-controls when the popup widget has no id (#33635)

cdk

Commit	Type	Description
0074c836f2	fix	a11y: move focus to root if there are no focusable elements in focus trap (#33654)

material

Commit	Type	Description
8d67957e9c	fix	datepicker: actions overflowing at some screen sizes with touch UI (#33645)
b42eea5c73	fix	form-field: update view when the control is swapped out (#33636)

multiple

Commit	Type	Description
ef99839fd2	fix	tokens specified in wrong category (#33660)

... (truncated)

Commits

• 4e75d4d release: cut the v22.1.3 release
• 72a4968 fix(multiple): account for shadow dom in aria directives (#33691)
• f84767c docs(material/table): remove unnecessary template literals (#33543)
• 67f36e8 docs: update generated file names to the current style guide (#33656)
• 2343179 docs(aria/menu): fix doc string examples (#33686)
• aa72a57 build: update bazel dependencies (#33674)
• 486f928 build: update cross-repo angular dependencies (#33677)
• 043b288 test(cdk-experimental/scrolling): switch tests away from fakeAsync (#33685)
• fd561f2 docs(material/form-field): update form-field prefix suffix a11y docs (#33680)
• aa598a0 release: cut the v22.1.2 release
• Additional commits viewable in compare view

Updates @angular/cli from 22.1.4 to 22.1.5

Release notes

Sourced from @​angular/cli's releases.

22.1.5

@​schematics/angular

Commit	Description
	transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/cli

Commit	Description
	enforce MCP roots in get_best_practices tool
	handle errors from isAllowedWorkspacePath in best-practices tool
	throw on out-of-roots workspace in best-practices tool

@​angular/build

Commit	Description
	correct misleading error message for top-level await
	disable code splitting for unit test builds
	preserve integrity and crossorigin in autoCsp loader
	traverse AST with iterative post-order walker in i18n inliner

Changelog

Sourced from @​angular/cli's changelog.

22.1.5 (2026-08-19)

@​angular/cli

Commit	Type	Description
e672271f8	fix	enforce MCP roots in get_best_practices tool
a14916cc4	fix	handle errors from isAllowedWorkspacePath in best-practices tool
d6e1cddff	fix	throw on out-of-roots workspace in best-practices tool

@​schematics/angular

Commit	Type	Description
ba2b0e4c2	fix	transform fail() to expect.fail() in refactor-jasmine-vitest

@​angular/build

Commit	Type	Description
cba72902d	fix	correct misleading error message for top-level await
b4679998c	fix	disable code splitting for unit test builds
ff1d3565e	fix	preserve integrity and crossorigin in autoCsp loader
1fc1fb05c	perf	traverse AST with iterative post-order walker in i18n inliner

22.2.0-next.3 (2026-08-13)

@​angular/cli

Commit	Type	Description
7106676e6	fix	disable searching current directory for bare executable names on Windows
ecf8c0822	fix	serialize configuration as a single argv token in run_target strategies (#33657)
2e4dd90c3	perf	avoid eager module loading during global bootstrap

@​schematics/angular

Commit	Type	Description
1161e6c99	fix	generate CLAUDE.md for Claude Code instead of AGENTS.md
c536ae364	fix	import UrlSegment instead of subPath in guard generator

@​angular/build

Commit	Type	Description

... (truncated)

Commits

• 3954730 release: cut the v22.1.5 release
• 7b7064f build: update dependency listr2 to v11
• 262562d docs: mention Vitest instead of Karma in README template of schematic library...
• 712e74e build: lock file maintenance
• 93d9cff refactor(@​angular-devkit/schematics): add missing comma to reordered componen...
• 528114c refactor(@​angular-devkit/schematics): add consistent spacing and ordering
• cba7290 fix(@​angular/build): correct misleading error message for top-level await
• 0e36040 build: update pnpm to v11.22.0
• d01d2c6 build: update cross-repo angular dependencies
• ba2b0e4 fix(@​schematics/angular): transform fail() to expect.fail() in refactor-jasmi...
• Additional commits viewable in compare view

Updates @angular/common from 22.1.1 to 22.1.3

Release notes

Sourced from @​angular/common's releases.

22.1.3

animations

Commit	Description
	detect object trigger values with Object.hasOwn

common

Commit	Description
	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Description
	preserve &ngsp; between sibling control flow blocks

core

Commit	Description
	accept readonly arrays for setClassMetadata decorators
	allow readonly arrays in RawScopeInfoFromDecorator
	expose debuggableFn for non-computed signal graph nodes
	prevent orphaned requestIdleCallback handle from re-entrant scheduling
	replace all hasOwnProperty usages with Object.hasOwn
	stop running further effects once one destroys the view mid-flush
	throw a descriptive error instead of crashing when a hydration node is missing
	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Description
	report forbidden 2way bindings on when FormField is applied
	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Description
	cancel oversized fetch response bodies

language-server

Commit	Description
	recover project for external templates in solution-style workspaces

platform-browser

Commit	Description
	disallow event handler attributes in Meta
	throw a descriptive error when insertBefore reference node is missing

router

Commit	Description
	pass correct component to canDeactivate for named outlets in componentless parent routes

22.1.2

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

22.1.3 (2026-08-19)

animations

Commit	Type	Description
d9620e0f1b	fix	detect object trigger values with Object.hasOwn

common

Commit	Type	Description
b3c78a5081	fix	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Type	Description
94f0b9a371	fix	preserve &ngsp; between sibling control flow blocks

core

Commit	Type	Description
afe529cb2d	fix	accept readonly arrays for setClassMetadata decorators
2c72fe3797	fix	allow readonly arrays in RawScopeInfoFromDecorator
ef2ce9a098	fix	expose debuggableFn for non-computed signal graph nodes
7bcce260f5	fix	prevent orphaned requestIdleCallback handle from re-entrant scheduling
44137117b3	fix	replace all hasOwnProperty usages with Object.hasOwn
85f12a5a13	fix	stop running further effects once one destroys the view mid-flush
c04931c88b	fix	throw a descriptive error instead of crashing when a hydration node is missing
601d1f6576	fix	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Type	Description
83450d2924	fix	report forbidden 2way bindings on when FormField is applied
5cb4ea7e35	fix	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Type	Description
0cd635e9e2	fix	cancel oversized fetch response bodies

language-server

Commit	Type	Description
14fbe04612	fix	recover project for external templates in solution-style workspaces

platform-browser

Commit	Type	Description
3ddcb1a101	fix	disallow event handler attributes in Meta
640460d606	fix	throw a descriptive error when insertBefore reference node is missing

router

Commit	Type	Description
abe019d505	fix	pass correct component to canDeactivate for named outlets in componentless parent routes

... (truncated)

Commits

• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• b3c78a5 fix(common): preserve literal key union in KeyValuePipe.transform()
• 0cd635e fix(http): cancel oversized fetch response bodies
• 4f7e998 fix(http): always decode JSON responses as UTF-8
• See full diff in compare view

Updates @angular/compiler from 22.1.1 to 22.1.3

Release notes

Sourced from @​angular/compiler's releases.

22.1.3

animations

Commit	Description
	detect object trigger values with Object.hasOwn

common

Commit	Description
	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Description
	preserve &ngsp; between sibling control flow blocks

core

Commit	Description
	accept readonly arrays for setClassMetadata decorators
	allow readonly arrays in RawScopeInfoFromDecorator
	expose debuggableFn for non-computed signal graph nodes
	prevent orphaned requestIdleCallback handle from re-entrant scheduling
	replace all hasOwnProperty usages with Object.hasOwn
	stop running further effects once one destroys the view mid-flush
	throw a descriptive error instead of crashing when a hydration node is missing
	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Description
	report forbidden 2way bindings on when FormField is applied
	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Description
	cancel oversized fetch response bodies

language-server

Commit	Description
	recover project for external templates in solution-style workspaces

platform-browser

Commit	Description
	disallow event handler attributes in Meta
	throw a descriptive error when insertBefore reference node is missing

router

Commit	Description
	pass correct component to canDeactivate for named outlets in componentless parent routes

22.1.2

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

22.1.3 (2026-08-19)

animations

Commit	Type	Description
d9620e0f1b	fix	detect object trigger values with Object.hasOwn

common

Commit	Type	Description
b3c78a5081	fix	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Type	Description
94f0b9a371	fix	preserve &ngsp; between sibling control flow blocks

core

Commit	Type	Description
afe529cb2d	fix	accept readonly arrays for setClassMetadata decorators
2c72fe3797	fix	allow readonly arrays in RawScopeInfoFromDecorator
ef2ce9a098	fix	expose debuggableFn for non-computed signal graph nodes
7bcce260f5	fix	prevent orphaned requestIdleCallback handle from re-entrant scheduling
44137117b3	fix	replace all hasOwnProperty usages with Object.hasOwn
85f12a5a13	fix	stop running further effects once one destroys the view mid-flush
c04931c88b	fix	throw a descriptive error instead of crashing when a hydration node is missing
601d1f6576	fix	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Type	Description
83450d2924	fix	report forbidden 2way bindings on when FormField is applied
5cb4ea7e35	fix	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Type	Description
0cd635e9e2	fix	cancel oversized fetch response bodies

language-server

Commit	Type	Description
14fbe04612	fix	recover project for external templates in solution-style workspaces

platform-browser

Commit	Type	Description
3ddcb1a101	fix	disallow event handler attributes in Meta
640460d606	fix	throw a descriptive error when insertBefore reference node is missing

router

Commit	Type	Description
abe019d505	fix	pass correct component to canDeactivate for named outlets in componentless parent routes

... (truncated)

Commits

• 83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
• eb0d62e Revert "fix(compiler): preserve &ngsp; between sibling control flow blocks"
• 94f0b9a fix(compiler): preserve &ngsp; between sibling control flow blocks
• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• 6f9a64e fix(compiler): remove namespaced MathML script elements
• 76dff30 fix(compiler): Generate correct expression for optional chaning.
• See full diff in compare view

Updates @angular/compiler-cli from 22.1.1 to 22.1.3

Release notes

Sourced from @​angular/compiler-cli's releases.

22.1.3

animations

Commit	Description
	detect object trigger values with Object.hasOwn

common

Commit	Description
	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Description
	preserve &ngsp; between sibling control flow blocks

core

Commit	Description
	accept readonly arrays for setClassMetadata decorators
	allow readonly arrays in RawScopeInfoFromDecorator
	expose debuggableFn for non-computed signal graph nodes
	prevent orphaned requestIdleCallback handle from re-entrant scheduling
	replace all hasOwnProperty usages with Object.hasOwn
	stop running further effects once one destroys the view mid-flush
	throw a descriptive error instead of crashing when a hydration node is missing
	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Description
	report forbidden 2way bindings on when FormField is applied
	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Description
	cancel oversized fetch response bodies

language-server

Commit	Description
	recover project for external templates in solution-style workspaces

platform-browser

Commit	Description
	disallow event handler attributes in Meta
	throw a descriptive error when insertBefore reference node is missing

router

Commit	Description
	pass correct component to canDeactivate for named outlets in componentless parent routes

22.1.2

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/compiler-cli's changelog.

22.1.3 (2026-08-19)

animations

Commit	Type	Description
d9620e0f1b	fix	detect object trigger values with Object.hasOwn

common

Commit	Type	Description
b3c78a5081	fix	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Type	Description
94f0b9a371	fix	preserve &ngsp; between sibling control flow blocks

core

Commit	Type	Description
afe529cb2d	fix	accept readonly arrays for setClassMetadata decorators
2c72fe3797	fix	allow readonly arrays in RawScopeInfoFromDecorator
ef2ce9a098	fix	expose debuggableFn for non-computed signal graph nodes
7bcce260f5	fix	prevent orphaned requestIdleCallback handle from re-entrant scheduling
44137117b3	fix	replace all hasOwnProperty usages with Object.hasOwn
85f12a5a13	fix	stop running further effects once one destroys the view mid-flush
c04931c88b	fix	throw a descriptive error instead of crashing when a hydration node is missing
601d1f6576	fix	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Type	Description
83450d2924	fix	report forbidden 2way bindings on when FormField is applied
5cb4ea7e35	fix	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Type	Description
0cd635e9e2	fix	cancel oversized fetch response bodies

language-server

Commit	Type	Description
14fbe04612	fix	recover project for external templates in solution-style workspaces

platform-browser

Commit	Type	Description
3ddcb1a101	fix	disallow event handler attributes in Meta
640460d606	fix	throw a descriptive error when insertBefore reference node is missing

router

Commit	Type	Description
abe019d505	fix	pass correct component to canDeactivate for named outlets in componentless parent routes

... (truncated)

Commits

• 83450d2 fix(forms): report forbidden 2way bindings on when FormField is applied
• 4413711 fix(core): replace all hasOwnProperty usages with Object.hasOwn
• 1e53aa0 refactor: correct typos in comments, docs, and error messages
• 9d8aa3a refactor(compiler-cli): add error guide links to diagnostics
• e9660b1 fix(compiler-cli): correctly resolve symbol for SafePropertyRead in chained o...
• bb7f051 refactor(compiler): remove explicit strict: true
• ec6deea fix(compiler-cli): record class extends clause references in DeferredSymbolTr...
• 76dff30 fix(compiler): Generate correct expression for optional chaning.
• See full diff in compare view

Updates @angular/core from 22.1.1 to 22.1.3

Release notes

Sourced from @​angular/core's releases.

22.1.3

animations

Commit	Description
	detect object trigger values with Object.hasOwn

common

Commit	Description
	preserve literal key union in KeyValuePipe.transform()

compiler

Commit	Description
	preserve &ngsp; between sibling control flow blocks

core

Commit	Description
	accept readonly arrays for setClassMetadata decorators
	allow readonly arrays in RawScopeInfoFromDecorator
	expose debuggableFn for non-computed signal graph nodes
	prevent orphaned requestIdleCallback handle from re-entrant scheduling
	replace all hasOwnProperty usages with Object.hasOwn
	stop running further effects once one destroys the view mid-flush
	throw a descriptive error instead of crashing when a hydration node is missing
	throw NG0500 instead of a raw TypeError on element hydration mismatch

forms

Commit	Description
	report forbidden 2way bindings on when FormField is applied
	warn in dev mode when ngModel cannot reach parent NgForm across component boundary

http

Commit	Description
	cancel oversized fetch response bodies

language-server

Commit	Description

[github-actions]

Warning

Flaky specs

• rspec ./spec/features/work_packages/table/switch_types_spec.rb[1:1:1]
• rspec ./spec/features/workflows/edit_spec.rb[1:4:4]

🤖 Ask Copilot to investigate

Copy the prompt below into a new comment on this PR to delegate the investigation to GitHub Copilot. It will look into the flakiness and open a separate pull request with you as reviewer.

@copilot The following spec(s) are flaky in CI (first seen on PR #24932, linked for reference only):

- `rspec ./spec/features/work_packages/table/switch_types_spec.rb[1:1:1]`
- `rspec ./spec/features/workflows/edit_spec.rb[1:4:4]`

Treat this as a standalone task, unrelated to PR #24932. Create a new branch from origin/dev and open a new pull request targeting dev — do not stack it on PR #24932 or reuse that branch.

Follow the playbook in docs/development/testing/handling-flaky-tests/README.md to find the root cause and fix the underlying race — do not skip, delete, or weaken the spec to make it pass; disabling is a last resort per the playbook, and only with a bug ticket. Verify the fix by running the spec(s) repeatedly (e.g. `script/bulk_run_rspec --run-count 10`).

If you cannot reproduce the flake or are not confident in a fix after reasonable investigation, do not fabricate a change or skip the spec to force CI green. Instead, leave the pull request in draft and document what you tried, the suspected cause, and any leads in its description, then assign @dependabot[bot] to take over.

Once the fix is verified, title the PR after the spec(s) it fixes, and use the PR description to explain the root cause, how the change resolves it, and the before/after results. Label the PR `flaky-spec`, assign @dependabot[bot], and request a review from @dependabot[bot].
On every commit, set @dependabot[bot] as the sole co-author with a `Co-authored-by:` trailer (use their GitHub no-reply email so it links to their account), so it is traceable who dispatched the fix.