chore(deps): update npm packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@angular/build	22.2.2 → 22.2.3
@angular/cdk	22.2.2 → 22.2.3
@angular/common (source)	22.2.2 → 22.2.3
@angular/compiler (source)	22.2.2 → 22.2.3
@angular/compiler-cli (source)	22.2.2 → 22.2.3
@angular/core (source)	22.2.2 → 22.2.3
@angular/forms (source)	22.2.2 → 22.2.3
@angular/platform-browser (source)	22.2.2 → 22.2.3
@angular/router (source)	22.2.2 → 22.2.3
@playwright/test (source)	1.64.0 → 1.64.1
postcss-import	17.0.0 → 17.0.1
sass	1.105.1 → 1.105.2

---

Release Notes

angular/angular-cli (@​angular/build)

v22.2.3

Compare Source

@​angular/cli

Commit	Type	Description
3158e865f	fix	accept multi-digit array indices in ng config
bcff0e76a	fix	keep ng version working when the package manager is not installed
5570c91d2	fix	resolve package name in npm workspace members

@​schematics/angular

Commit	Type	Description
881865f36	fix	keep the workspace build version in the use-application-builder migration

@​angular-devkit/schematics

Commit	Type	Description
cf1f3b9d4	fix	avoid stack overflow when chaining many rules

@​angular/build

Commit	Type	Description
1d477d6bc	fix	add CSP nonce to stylesheet and modulepreload link elements
fbe208f83	fix	always use AOT when extracting i18n messages
c1c4216a6	fix	coalesce external watcher directories to avoid macOS FSEvents limit
792990bc2	fix	disable Vitest fsModuleCache in unit-test builder
82439399c	fix	ensure Sass importers return global Promise instances
a818de415	fix	keep Vite server file watcher disabled in Vitest watch mode
91bad469e	fix	sort discovered unit-test files for deterministic builds
e84db4af7	fix	use module.registerHooks() for in-memory ESM loader
a428021b7	perf	avoid invalidating Angular diagnostic cache on stylesheet change
b0ac394a0	perf	resolve asset patterns concurrently with bounded concurrency

@​angular/ssr

Commit	Type	Description
bd09b98fc	fix	preserve preload metadata for nested empty-path routes
a92546892	fix	preserve query parameters on relative route redirects
a2b86cc94	fix	resolve relative redirects against the parent route

angular/components (@​angular/cdk)

v22.2.3

Compare Source

cdk

Commit	Type	Description
a307978dc	fix	a11y: treat inert elements as non-focusable (#​33846)

material

Commit	Type	Description
e0c2d4df7	fix	chips: implement touch-target pattern/styles on chip component (#​33614)

angular/angular (@​angular/common)

v22.2.3

Compare Source

common

Commit	Type	Description
fafec77b5d	fix	harden param encoding against prototype pollution

compiler

Commit	Type	Description
54f3de517c	fix	check @boundary blocks in the control flow content projection diagnostic
5e50658fd2	fix	compare the operand in ReadTemporaryExpr.isEquivalent
b6f9cc5d70	fix	do not scope comments placed inside of a selector
35a02f8097	fix	harden JIT against prototype pollution
08075e8aa0	fix	support dots in class binding names
c7a72c2bf2	fix	support popover property bindings

compiler-cli

Commit	Type	Description
fa21d083fe	fix	inline tcb when depending on local directive

core

Commit	Type	Description
b5208f9fc3	fix	avoid deleting idle bucket created during another bucket's drain
90af679c3b	fix	do not swallow compilation errors in computeStandaloneComponentScope
eca5fa4665	fix	don't crash initEventReplay when two apps share an APP_ID
e59a2303df	fix	error when destroying embedded view with animations
a23941fe75	fix	keep activeConsumer and currentInjector constant using Store helper
913ae7421f	fix	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Type	Description
cc515b8b23	perf	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Type	Description
d04f214d04	fix	normalize .d.ts paths in output migration field IDs

router

Commit	Type	Description
f9a4f751f0	fix	check abort signal state on subscribe

microsoft/playwright (@​playwright/test)

v1.64.1

Compare Source

Bug Fixes

• #​43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #​43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

postcss/postcss-import (postcss-import)

v17.0.1

Compare Source

• Don't hoist empty @layer statements that follow @layer blocks (#​613)
• Handle uppercase/mixed-case @import and @layer declarations (#​615)

sass/dart-sass (sass)

v1.105.2

Compare Source

Node.js Embedded Host

• Fix a deadlock when the async compiler fails to start.

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​angular/​compiler-cli@​22.2.2 ⏵ 22.2.3			+1	+1
	npm/​@​angular/​build@​22.2.2 ⏵ 22.2.3			+1
	npm/​postcss-import@​17.0.0 ⏵ 17.0.1	+1		+1
	npm/​sass@​1.105.1 ⏵ 1.105.2				-1
	npm/​@​playwright/​test@​1.64.0 ⏵ 1.64.1

View full report