build: update cross-repo angular dependencies (main)

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
@angular/animations	dependencies	digest	995e14b → 9d3d315
@angular/animations (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/cdk	dependencies	digest	7bc49b6 → 58e2053
@angular/cdk	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/common	dependencies	digest	b61ffd8 → be537ed
@angular/common (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/common (source)	peerDependencies	minor	^22.0.0-next → ^22.1.0-next
@angular/compiler	dependencies	digest	95b1298 → 282e1c5
@angular/compiler (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/compiler-cli	dependencies	digest	3e011b1 → a3a4b6b
@angular/compiler-cli (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/compiler-cli (source)	dependencies	minor	22.0.0 → 22.1.0-next.0
@angular/core	dependencies	digest	03ca085 → 3d52c13
@angular/core (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/core (source)	peerDependencies	minor	^22.0.0-next → ^22.1.0-next
@angular/forms	dependencies	digest	0abbf54 → 05a284a
@angular/forms (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/language-service	dependencies	digest	5998ae5 → 61a4803
@angular/localize	dependencies	digest	8f7ae70 → edaed6a
@angular/localize	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/material	dependencies	digest	7a236ec → 5528675
@angular/material	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/material-moment-adapter	dependencies	digest	f710a88 → 5b9de0d
@angular/ng-dev	devDependencies	digest	68eef04 → 5d98425
@angular/platform-browser	dependencies	digest	9b66d50 → b7253e1
@angular/platform-browser (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/platform-browser-dynamic	dependencies	digest	2e6ce4e → 65960a6
@angular/platform-server	dependencies	digest	4269172 → e3fe333
@angular/platform-server (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/router	dependencies	digest	4109051 → 67a575c
@angular/router (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
@angular/service-worker	dependencies	digest	2cf5d8e → 8a08a9b
@angular/service-worker (source)	devDependencies	minor	22.0.0 → 22.1.0-next.0
devinfra	git_override	digest	cef5e36 → b9d15e3
rules_angular	git_override	digest	02e0d38 → 0571709
rules_browsers	git_override	digest	c7e596a → 3e345a4

🔡 If you wish to disable git hash updates, add ":disableDigestUpdates" to the extends array in your config.

---

• If you want to rebase/retry this PR, check this box

---

Release Notes

angular/angular (@​angular/animations)

v22.1.0-next.0

Compare Source

Deprecations

http

• HttpClient.jsonp, HttpClientJsonpModule, and related JSONP classes/functions are deprecated. Use standard HTTP requests instead.

common

Commit	Type	Description
1ad6824d0d	fix	skip transfer cache for uncacheable HTTP traffic (#​69017)

compiler

Commit	Type	Description
25c744c4d0	fix	support foreign components defined outside top-level scope

compiler-cli

Commit	Type	Description
aeb55c8bc1	fix	allow passing uninvoked signals as foreign component props
7c60a98b3c	fix	support import aliases in foreignImports (#​68674)

core

Commit	Type	Description
124ba10ead	feat	add custom set option to linkedSignal
b3748e9fe4	fix	correct container anchor collection order to match DOM layout
11b206b919	fix	introduce disposal mechanism for Angular views in foreign @content
56607967db	fix	introduce logical-only containers for foreign content
0c07356c5c	fix	set current tnode in foreign component instruction on reuse

http

Commit	Type	Description
c0cbd46bd7	fix	skip transfer cache for fetch credentialed requests (#​69017)
af04e266cc	refactor	deprecate jsonp support

language-service

Commit	Type	Description
7f0265e43a	feat	compile non-exported classes if standalone (#​68454)
4f9c824dd9	feat	Typecheck templates which would require inline typecheck blocks (#​68454)

platform-server

Commit	Type	Description
cf9d7fa0f8	fix	harden platform location origin validation during SSR (#​69184)

v22.0.1

Compare Source

Deprecations

platform-server

• XHR support in @angular/platform-server is deprecated. Use standard fetch APIs instead.
  (cherry picked from commit 8446e46)

common

Commit	Type	Description
c4b5fa3c92	fix	escape CSS string-terminating characters in escapeCssUrl
dfff57ede9	fix	Limits date format string length
3c2892c8df	fix	prevent prototype pollution in formatDateTime
1d87c49f6e	fix	use cryptographically secure SHA-256 for transfer cache key generation

compiler

Commit	Type	Description
1ee224ca30	fix	disallow i18n event attributes
a56f1cdf8f	fix	more robust logic to check if regex can be optimized
5946c18275	fix	sanitize href/xlink:href attributes of any element of the MathML namespace
393b84caf8	fix	sanitize two-way properties

compiler-cli

Commit	Type	Description
3d9ca2f173	fix	bind switch exhaustive check expressions

core

Commit	Type	Description
669146b0e7	fix	disable WebMCP during SSR
562a566ead	fix	Handle synchronous errors in PendingTasks.run function
fa546f382d	fix	harden TransferState restoration against DOM clobbering
29fdb98684	fix	prevent dangling prevConsumer reference from leaking destroyed views (#​68681)
cdcea80327	fix	require WebMCP tool descriptions
4289c4c840	fix	update comment for Default change detection
3dd433b39a	fix	use Object.hasOwn to handle null-prototype objects in toStylingKeyValueArray
045bb736b3	fix	validate lowercase SVG animation attribute names

forms

Commit	Type	Description
11836a670a	fix	delay mcp reading the form model by a tick
85d2d100e3	fix	harden FormGroup control lookups against prototype shadowing
e51ad374ea	fix	remove animationstart listener on component destroy to prevent memory leak
55b7b5a6b6	fix	set additionalProperties: false on generated WebMCP form

http

Commit	Type	Description
ffb06c0514	fix	ensure query parameters are inserted before URL fragments
2dd65d21e6	fix	pass down the reportUploadProgress and reportDownloadProgress on post/patch requests
4254eb416c	fix	preserve empty referrer option in HttpRequest
167bd4c162	fix	Rejects non-HTTP(S) URLs in JSONP requests

language-service

Commit	Type	Description
43a0e28729	fix	prevent external template inlay hints from appearing in TS files

platform-server

Commit	Type	Description
ed48ca7f51	fix	harden platform location origin validation during SSR
1881ede3a7	refactor	deprecate ServerXhr

router

Commit	Type	Description
43edc8410f	fix	use native URL object for navigation boundary and comparison

service-worker

Commit	Type	Description
cf97b1f828	fix	Strips sensitive headers on cross-origin redirects

angular/components (@​angular/cdk)

v22.1.0-next.0

Compare Source

No user facing changes in this release

v22.0.1

Compare Source

aria

Commit	Type	Description
7581b0592	fix	combobox: avoid error for synthetic events (#​33360)
1c4706155	fix	combobox: prevent re-dispatching keyboard event on control target change (#​33362)
96e9ce10c	fix	tree: recursive textDirection getter (#​33337)

cdk

Commit	Type	Description
629aea403	fix	a11y: avoid prototype conflicts in id generator (#​33356)
49aeb676c	fix	clipboard: avoid infinite attempt loop (#​33366)

material

Commit	Type	Description
d7a8cb963	fix	dialog: ignore clicks on aria-disabled close buttons (#​33373)
bde3c7621	fix	timepicker: do not allow intervals less than a second (#​33354)

youtube-player

Commit	Type	Description
d75a22d69	fix	avoid errors with clobbered variables
fe0a96ce6	fix	validate ID before attaching them to placeholder

[gemini-code-assist]

Code Review

This pull request updates dependency versions and commits across several configuration files. Specifically, it bumps the commit overrides for rules_angular, devinfra, and rules_browsers in MODULE.bazel, updates the corresponding browser binaries and lockfile digests in MODULE.bazel.lock, and updates the @angular/ng-dev package to a newer commit in package.json. There are no review comments, and I have no additional feedback to provide.

[alan-agius4]

This PR was merged into the repository. The changes were merged into the following branches:

• main: e8312fa

[angular-automatic-lock-bot]

This pull request has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}