chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
@angular-devkit/build-angular	devDependencies	pin	^22.1.8 → 22.2.2
@angular-eslint/builder (source)	devDependencies	pin	^22.1.0 → 22.5.0
@angular/build	devDependencies	pin	^22.1.8 → 22.2.2
@angular/cli	devDependencies	pin	^22.1.8 → 22.2.2
@angular/compiler-cli (source)	devDependencies	pin	^22.1.6 → 22.2.1
@angular/platform-browser-dynamic (source)	devDependencies	pin	^22.0.0 → 22.2.3
@fundamental-ngx/ui5-webcomponents (source)	peerDependencies	minor	^0.59.1 || ^0.64.0 → ^0.59.1 || ^0.64.0 || ^0.65.0
@fundamental-ngx/ui5-webcomponents-fiori (source)	peerDependencies	minor	^0.59.1 || ^0.64.0 → ^0.59.1 || ^0.64.0 || ^0.65.0
ng-packagr	devDependencies	pin	^22.1.1 → 22.1.1
typescript (source)	devDependencies	pin	~6.0.0 → 6.0.3
typescript-eslint (source)	devDependencies	pin	^8.33.0 → 8.70.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

angular/angular (@​angular/platform-browser-dynamic)

v22.2.3

Compare Source

common

Commit	Type	Description
fafec77b5d	fix	harden param encoding against prototype pollution

compiler

Commit	Type	Description
54f3de517c	fix	check @boundary blocks in the control flow content projection diagnostic
5e50658fd2	fix	compare the operand in ReadTemporaryExpr.isEquivalent
b6f9cc5d70	fix	do not scope comments placed inside of a selector
35a02f8097	fix	harden JIT against prototype pollution
08075e8aa0	fix	support dots in class binding names
c7a72c2bf2	fix	support popover property bindings

compiler-cli

Commit	Type	Description
fa21d083fe	fix	inline tcb when depending on local directive

core

Commit	Type	Description
b5208f9fc3	fix	avoid deleting idle bucket created during another bucket's drain
90af679c3b	fix	do not swallow compilation errors in computeStandaloneComponentScope
eca5fa4665	fix	don't crash initEventReplay when two apps share an APP_ID
e59a2303df	fix	error when destroying embedded view with animations
a23941fe75	fix	keep activeConsumer and currentInjector constant using Store helper
913ae7421f	fix	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Type	Description
cc515b8b23	perf	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Type	Description
d04f214d04	fix	normalize .d.ts paths in output migration field IDs

router

Commit	Type	Description
f9a4f751f0	fix	check abort signal state on subscribe

v22.2.2

Compare Source

compiler

Commit	Type	Description
fa63bfad14	fix	avoid leaking ::ng-deep detection state between rules
5744e7575c	fix	avoid prototype lookups when resolving entities
97e57157e4	fix	correctly match directives on <ng-template> nested in various namespaces
0474258a5a	fix	ignore @let declarations in the control flow content projection diagnostic
725ffcf4fa	fix	match namespaced root nodes of control flow blocks against ng-content tag selectors
5ff83c11fe	fix	strip script elements regardless of namespace

compiler-cli

Commit	Type	Description
01949c53a6	fix	don't mark constructor parameter properties as inherited
f43c63f70c	perf	optimize missing directive extended checks

core

Commit	Type	Description
095644168e	fix	defer afterRenderEffect sequences registered while hooks run
a312520447	fix	strip reserved character from translations
74bc86d8b2	fix	untrack onError handler to prevent signal write exceptions

forms

Commit	Type	Description
b0710b8db6	fix	don't crash when control is missing in setUpValidators
ef0359676c	fix	skip class bindings for orphaned fields
c91a8c429d	fix	use Object.is when comparing control bindings in signal forms
6cd3a8a929	fix	write a pending debounced value when its control is destroyed

language-service

Commit	Type	Description
6c44a9ecc5	fix	add strictUnclaimedEventNames to angularCompilerOptions schema

router

Commit	Type	Description
576df28471	fix	fall back when serializing protocol-relative URLs
e0137cbfde	fix	remove the navigate event abort listener once it fires
fc91c725a0	fix	reset internal state on error handler redirect after state commit

SAP/fundamental-ngx (@​fundamental-ngx/ui5-webcomponents)

v0.65.0

Compare Source

Bug Fixes

• btp: emit aria-selected only for treeitem role in navigation (#​14535) (2f6f61d)

• core, platform: refactor Core Table (#​14542) (b9aa4ee)

• core, platform: update multi-combobox tokens and reset selected flags on programmatic selectedItems change (#​13553) (#​14506) (e8114b6)

• core,platform: correct combobox leave behavior and popover sync (#​14536) (f7bf434)

• core: add Home/End keyboard support for menu navigation (#​14537) (3abcd53)

• core: align mobile combobox selection with approve and cancel lifecycle (#​14571) (1a3cdaf)

• core: correctly update popover position in case of dom changes (#​14559) (9719ff1)

• core: emit datetime picker dateChange events (#​14544) (c88ec42)

• core: preserve free-text value in combobox when autoComplete is disabled (#​14582) (9eb692c), closes #​14576

• core: preserve month during multi-date selection (#​14554) (e142444)

• core: prevent avatar-group width cache corruption when hidden via display:none (#​14539) (4e21ed9)

• core: prevent duplicate combobox selection propagation (#​14556) (23b7cdf)

• core: remove duplicate icon CSS import (#​14540) (eecb31e)

• core: restore dynamic page subheader pin functionality (#​14530) (b8b1cb7)

• core: synchronize multi-combobox token and option selection (#​14558) (4aafd85)

• docs: disable Angular persistent cache to avoid LMDB crash (#​14543) (#​14547) (c031e01)

• docs: externalize unused ngx-markdown KaTeX dependency (#​14553) (4e69327)

• platform: handle table settings dialog dismissal (#​14517) (f6e2f54)

• platform: harden icon-tab-bar stackContent active-tab fix (#​14501) (#​14505) (7519483)

• platform: make fdp-button ButtonModel setters update rendered state (#​14513) (b4dfb26)

• platform: migrate table settings dialog close handling (#​14518) (ed71a54)

• platform: platform table cell title performance improvements (#​14548) (13e703d)

• feat(core)!: mark avatar group placement change as breaking (#​14567) (5849baa), closes #​14567

Features

• agents: add docs-auditor Claude Code agent for stale pattern detection (#​14564) (2f6b6e1)
• btp: add Indication tags, sticky area and sticky item to BTP Vertical Navigation (#​14511) (df141f7)
• core: avatar group feature requests (#​14546) (5089821)
• core: product-switch design review updates (#​14487) (535aa5d)
• core: Settings Dialog latest design updates and drill-down navigation (#​14526) (e70d13b)
• core: update product switch design and documentation examples (#​14528) (c16945e)
• i18n: lazy registry + secondary entry points for tree-shaking (#​14495) (8a02a2d)

BREAKING CHANGES

• fd-avatar-group type="group" now defaults popover placement to 'bottom' instead of 'bottom-start'. Consumers that need the previous left-aligned behavior must pass [popoverPlacement]="'bottom-start'" explicitly.
• core: DatetimePickerComponent.dateChange now emits D | null. Event handlers must accept null when allowNull is enabled.
• i18n: FD_LANGUAGE_* constants and provideAllFundamentalLanguages are no longer exported from the root entry. See MIGRATION.md for import path changes. provideFundamentalTranslations, FD_LANGUAGE_SIGNAL, all tokens, pipes, and utilities stay in the root.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 9805da73-5f17-42fb-9088-4babd8d325d6

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[renovate]

ℹ️ Artifact update notice

File name: package-lock.json

npm --before could not be enforced because existing locked packages were published after the minimumReleaseAge cutoff. This will resolve after the next lock file maintenance run.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @openmfp/webcomponents@1.10.0
npm error Found: @angular/core@22.2.1
npm error node_modules/@angular/core
npm error   peer @angular/core@"^21.2.19 || ^22.0.0" from the root project
npm error   peer @angular/core@"22.2.1" from @angular/animations@22.2.1
npm error   node_modules/@angular/animations
npm error     peer @angular/animations@"^21.2.19 || ^22.0.0" from the root project
npm error     peerOptional @angular/animations@"22.2.1" from @angular/platform-browser@22.2.1
npm error     node_modules/@angular/platform-browser
npm error       peer @angular/platform-browser@"^21.2.19 || ^22.0.0" from the root project
npm error       9 more (@angular/cdk, @angular/forms, @angular/router, ...)
npm error     1 more (@storybook/angular)
npm error   13 more (@angular/cdk, @angular/common, @angular/elements, ...)
npm error
npm error Could not resolve dependency:
npm error dev @angular/platform-browser-dynamic@"22.2.3" from the root project
npm error
npm error Conflicting peer dependency: @angular/core@22.2.3
npm error node_modules/@angular/core
npm error   peer @angular/core@"22.2.3" from @angular/platform-browser-dynamic@22.2.3
npm error   node_modules/@angular/platform-browser-dynamic
npm error     dev @angular/platform-browser-dynamic@"22.2.3" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry this command with --force or --legacy-peer-deps to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-10-15T04_27_47_262Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-15T04_27_47_262Z-debug-0.log