chore(deps): bump the angular-security group across 2 directories with 1 update

[dependabot]

Bumps the angular-security group with 1 update in the /angular-standalone/base directory: @angular/router.
Bumps the angular-security group with 1 update in the /angular/base directory: @angular/router.

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @​angular/router's releases.

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

Commit	Description
	add strictUnclaimedEventNames option to catch misspelled output bindings
	scope type-checking of keyed defer blocks
	deduplicate deferred imports across multiple blocks

core

Commit	Description
	add ErrorBoundary programmatic APIs (#70463)
	add utility for testing directives
	allow reading Injector from a view or content query
	support annotations in WebMCP tool declarations
	cancel leave animations in nested views during list reordering
	support function and signal bindings in animate.enter and animate.leave
	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Description
	allow permanent hidden fields in signal forms
	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Description
	add support for @boundary blocks (#70463)

router

Commit	Description
	add containsTree as public API
	allow throwing RedirectCommand to trigger redirects
	expose router resources in public API
	stabilize auto cleanup injectors feature
	determine blocking state solely by resource loading status
	expose reload method on ActivatedRoute resources
	maintain frozen state on rollback until resource loading completes
	mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

• fix(vscode-extension): Support inlay hint in inline templates (c11920da48)
• fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)
• fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)
• feat(language-service): add support for @​boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

• 52c33bc refactor(router): clean up route resource implementation and test helpers
• 5af6121 fix(router): avoid dense elements allocation for numeric URL keys
• 954f6af test(router): Fix broken test
• 6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
• 51f056f docs(router): clarify route resource parameters
• f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
• f825c9b docs: fix API links that point at missing member anchors
• 2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
• 2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
• 4380e68 docs(router): update scroll restoration example
• Additional commits viewable in compare view

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @​angular/router's releases.

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

Commit	Description
	add strictUnclaimedEventNames option to catch misspelled output bindings
	scope type-checking of keyed defer blocks
	deduplicate deferred imports across multiple blocks

core

Commit	Description
	add ErrorBoundary programmatic APIs (#70463)
	add utility for testing directives
	allow reading Injector from a view or content query
	support annotations in WebMCP tool declarations
	cancel leave animations in nested views during list reordering
	support function and signal bindings in animate.enter and animate.leave
	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Description
	allow permanent hidden fields in signal forms
	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Description
	add support for @boundary blocks (#70463)

router

Commit	Description
	add containsTree as public API
	allow throwing RedirectCommand to trigger redirects
	expose router resources in public API
	stabilize auto cleanup injectors feature
	determine blocking state solely by resource loading status
	expose reload method on ActivatedRoute resources
	maintain frozen state on rollback until resource loading completes
	mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

• fix(vscode-extension): Support inlay hint in inline templates (c11920da48)
• fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)
• fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)
• feat(language-service): add support for @​boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

• 52c33bc refactor(router): clean up route resource implementation and test helpers
• 5af6121 fix(router): avoid dense elements allocation for numeric URL keys
• 954f6af test(router): Fix broken test
• 6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
• 51f056f docs(router): clarify route resource parameters
• f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
• f825c9b docs: fix API links that point at missing member anchors
• 2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
• 2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
• 4380e68 docs(router): update scroll restoration example
• Additional commits viewable in compare view

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @​angular/router's releases.

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

Commit	Description
	add strictUnclaimedEventNames option to catch misspelled output bindings
	scope type-checking of keyed defer blocks
	deduplicate deferred imports across multiple blocks

core

Commit	Description
	add ErrorBoundary programmatic APIs (#70463)
	add utility for testing directives
	allow reading Injector from a view or content query
	support annotations in WebMCP tool declarations
	cancel leave animations in nested views during list reordering
	support function and signal bindings in animate.enter and animate.leave
	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Description
	allow permanent hidden fields in signal forms
	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Description
	add support for @boundary blocks (#70463)

router

Commit	Description
	add containsTree as public API
	allow throwing RedirectCommand to trigger redirects
	expose router resources in public API
	stabilize auto cleanup injectors feature
	determine blocking state solely by resource loading status
	expose reload method on ActivatedRoute resources
	maintain frozen state on rollback until resource loading completes
	mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

• fix(vscode-extension): Support inlay hint in inline templates (c11920da48)
• fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)
• fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)
• feat(language-service): add support for @​boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

• 52c33bc refactor(router): clean up route resource implementation and test helpers
• 5af6121 fix(router): avoid dense elements allocation for numeric URL keys
• 954f6af test(router): Fix broken test
• 6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
• 51f056f docs(router): clarify route resource parameters
• f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
• f825c9b docs: fix API links that point at missing member anchors
• 2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
• 2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
• 4380e68 docs(router): update scroll restoration example
• Additional commits viewable in compare view

Updates @angular/router from 22.1.7 to 22.2.0

Release notes

Sourced from @​angular/router's releases.

22.2.0

compiler

Commit	Description
	allow template to access private props
	do not encapsulate nested selectors if parent contains ::ng-deep
	scope nested CSS rules

compiler-cli

Commit	Description
	add strictUnclaimedEventNames option to catch misspelled output bindings
	scope type-checking of keyed defer blocks
	deduplicate deferred imports across multiple blocks

core

Commit	Description
	add ErrorBoundary programmatic APIs (#70463)
	add utility for testing directives
	allow reading Injector from a view or content query
	support annotations in WebMCP tool declarations
	cancel leave animations in nested views during list reordering
	support function and signal bindings in animate.enter and animate.leave
	update FakeNavigation to match WHATWG HTML spec

forms

Commit	Description
	allow permanent hidden fields in signal forms
	hard-code readOnlyHint and untrustedContentHint for WebMCP implicit signal forms

language-service

Commit	Description
	add support for @boundary blocks (#70463)

router

Commit	Description
	add containsTree as public API
	allow throwing RedirectCommand to trigger redirects
	expose router resources in public API
	stabilize auto cleanup injectors feature
	determine blocking state solely by resource loading status
	expose reload method on ActivatedRoute resources
	maintain frozen state on rollback until resource loading completes
	mark router_resource module-level symbols as side-effect free

VSCode Extension: 22.2.0

• fix(vscode-extension): Support inlay hint in inline templates (c11920da48)
• fix(vscode-extension): provide folding ranges for templates with interpolated strings (5c927fba0d)
• fix(vscode-extension): handle template literals when detecting supported decorator fields (f2cf65a898)
• feat(language-service): add support for @​boundary blocks (#70463) (f4a5650ed9)

... (truncated)

Commits

• 52c33bc refactor(router): clean up route resource implementation and test helpers
• 5af6121 fix(router): avoid dense elements allocation for numeric URL keys
• 954f6af test(router): Fix broken test
• 6f5a4a0 fix(router): expose reload method on ActivatedRoute resources
• 51f056f docs(router): clarify route resource parameters
• f829afa docs(router): name UrlHandlingStrategy.extract in the Navigation docs
• f825c9b docs: fix API links that point at missing member anchors
• 2dcdf9a fix(router): mark router_resource module-level symbols as side-effect free
• 2c6c67b fix(router): maintain frozen state on rollback until resource loading completes
• 4380e68 docs(router): update scroll restoration example
• Additional commits viewable in compare view