[dependabot]

Bumps the patch group with 14 updates in the /test-app directory:

Package	From	To
@angular/common	21.2.23	21.2.25
@angular/compiler	21.2.23	21.2.25
@angular/core	21.2.23	21.2.25
@angular/forms	21.2.23	21.2.25
@angular/platform-browser	21.2.23	21.2.25
@angular/router	21.2.23	21.2.25
@types/lodash	4.17.25	4.17.26
@angular-devkit/build-angular	21.2.24	21.2.26
@angular/cli	21.2.24	21.2.26
@angular/compiler-cli	21.2.23	21.2.25
@angular/language-service	21.2.23	21.2.25
@types/node	26.6.3	26.6.5
jsdom	30.1.1	30.1.2
vite	8.3.1	8.3.4

Updates @angular/common from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/common's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/common's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• See full diff in compare view

Updates @angular/compiler from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/compiler's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/compiler's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• See full diff in compare view

Updates @angular/core from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/core's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/core's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• 6489ca5 fix(router): reject duplicate outlets in production builds
• 03872a8 fix(router): avoid dense elements allocation for numeric URL keys
• See full diff in compare view

Updates @angular/forms from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/forms's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/forms's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• See full diff in compare view

Updates @angular/platform-browser from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/platform-browser's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/platform-browser's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• See full diff in compare view

Updates @angular/router from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/router's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/router's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• a83f811 fix(router): require outlets to match a route before processing child segments
• 6489ca5 fix(router): reject duplicate outlets in production builds
• 4bc11a5 fix(router): do not copy URL-sized objects into every route snapshot
• a131f77 perf(router): do not retain UrlTree instances in RouterLink
• 03872a8 fix(router): avoid dense elements allocation for numeric URL keys
• See full diff in compare view

Updates @types/lodash from 4.17.25 to 4.17.26

Commits

• See full diff in compare view

Updates @angular-devkit/build-angular from 21.2.24 to 21.2.26

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.26

@​angular/cli

Commit	Description
	bump @​modelcontextprotocol/sdk to 1.31.0

21.2.25

@​angular/build

Commit	Description
	bump piscina to 5.3.2

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.26 (2026-10-07)

@​angular/cli

Commit	Type	Description
9d2987f354	fix	bump @​modelcontextprotocol/sdk to 1.31.0

20.3.39 (2026-10-07)

@​angular/cli

Commit	Type	Description
373a7cedce	fix	bump @​modelcontextprotocol/sdk to 1.31.0

21.2.25 (2026-10-05)

@​angular/build

Commit	Type	Description
7e6d2da084	fix	bump piscina to 5.3.2

20.3.38 (2026-10-05)

@​angular/build

Commit	Type	Description
3e39e33fb1	fix	bump piscina to 5.3.2

22.3.0-next.0 (2026-10-01)

... (truncated)

Commits

• 4bbeadd release: cut the v21.2.26 release
• 9d2987f fix(@​angular/cli): bump @​modelcontextprotocol/sdk to 1.31.0
• 2a30aa2 release: cut the v21.2.25 release
• 7e6d2da fix(@​angular/build): bump piscina to 5.3.2
• See full diff in compare view

Updates @angular/cli from 21.2.24 to 21.2.26

Release notes

Sourced from @​angular/cli's releases.

21.2.26

@​angular/cli

Commit	Description
	bump @​modelcontextprotocol/sdk to 1.31.0

21.2.25

@​angular/build

Commit	Description
	bump piscina to 5.3.2

Changelog

Sourced from @​angular/cli's changelog.

21.2.26 (2026-10-07)

@​angular/cli

Commit	Type	Description
9d2987f354	fix	bump @​modelcontextprotocol/sdk to 1.31.0

20.3.39 (2026-10-07)

@​angular/cli

Commit	Type	Description
373a7cedce	fix	bump @​modelcontextprotocol/sdk to 1.31.0

21.2.25 (2026-10-05)

@​angular/build

Commit	Type	Description
7e6d2da084	fix	bump piscina to 5.3.2

20.3.38 (2026-10-05)

@​angular/build

Commit	Type	Description
3e39e33fb1	fix	bump piscina to 5.3.2

22.3.0-next.0 (2026-10-01)

... (truncated)

Commits

• 4bbeadd release: cut the v21.2.26 release
• 9d2987f fix(@​angular/cli): bump @​modelcontextprotocol/sdk to 1.31.0
• 2a30aa2 release: cut the v21.2.25 release
• 7e6d2da fix(@​angular/build): bump piscina to 5.3.2
• See full diff in compare view

Updates @angular/compiler-cli from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/compiler-cli's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/compiler-cli's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• See full diff in compare view

Updates @angular/language-service from 21.2.23 to 21.2.25

Release notes

Sourced from @​angular/language-service's releases.

21.2.25

platform-server

Commit	Description
	reject protocol-relative paths in resolveUrl

router

Commit	Description
	do not copy URL-sized objects into every route snapshot
	reject duplicate outlets in production builds
	require outlets to match a route before processing child segments
	do not retain UrlTree instances in RouterLink

21.2.24

router

Commit	Description
	avoid dense elements allocation for numeric URL keys

Changelog

Sourced from @​angular/language-service's changelog.

21.2.25 (2026-09-30)

platform-server

Commit	Type	Description
450af9c813	fix	reject protocol-relative paths in resolveUrl

router

Commit	Type	Description
4bc11a546b	fix	do not copy URL-sized objects into every route snapshot
6489ca5d84	fix	reject duplicate outlets in production builds
a83f8119ac	fix	require outlets to match a route before processing child segments
a131f77d92	perf	do not retain UrlTree instances in RouterLink

21.2.24 (2026-09-23)

router

Commit	Type	Description
03872a80bc	fix	avoid dense elements allocation for numeric URL keys

Commits

• See full diff in compare view

Updates @types/node from 26.6.3 to 26.6.5

Commits

• See full diff in compare view

Updates jsdom from 30.1.1 to 30.1.2

Release notes

Sourced from jsdom's releases.

v30.1.2

• Updated URLs to support Unicode v18.0.0 in internationalized domain names.
• Reduced package size and memory use for CSS property definitions. (@​scttcper)
• Fixed severe slowdowns when building large DOM trees, including SVG charts with D3, which regressed in v30.1.0. (@​cmdcolin)
• Fixed exponentially slow reads of empty inherited CSS custom properties in deeply nested documents, and custom properties incorrectly inheriting past an initial reset. (@​scttcper)
• Fixed getComputedStyle() returning stale results after editing stylesheet declarations, selectors, or media queries, including in imported stylesheets.
• Fixed selector matching and computed styles after changes to form control checkedness, indeterminacy, selection, values, and validity, including during form resets and canceled clicks.
• Fixed computed styles for :focus, :focus-visible, :focus-within, and selectors containing them after focus changes, including inside focus and blur listeners. (@​asamuzaK)
• Fixed element.focus() incorrectly focusing elements hidden by 'display', including through shadow hosts and slots, and elements excluded by shadow DOM slot assignment. (@​asamuzaK)
• Fixed getComputedStyle() throwing for elements without inline-style support, including XML and MathML elements.
• Fixed a memory leak where stylesheet parsing retained the last parsed stylesheet's window after window.close().
• Fixed memory growth from long-lived MutationObserver instances retaining bookkeeping for garbage-collected nodes. (@​scttcper)
• Fixed retained select.selectedOptions collections becoming stale after selection changes and form resets.
• Fixed rejection of negative CSS sizing values, including for 'min-width', 'min-height', 'max-width', and 'max-height', which regressed in v30.1.0.
• Fixed handling of deeply nested color-mix() expressions, including exceptions during color resolution. (@​asamuzaK)

Commits

• a23bfb7 30.1.2
• 64a75d2 Update dependencies and dev dependencies
• 7bf9653 Invalidate styles after CSSOM and control state changes
• fe9009c Update focused area handling
• a8d28b3 Release windows retained by stylesheet parsing
• 05a2c01 Deduplicate generated CSS property metadata
• 1efa190 Reduce generated CSS property data
• a372e12 Avoid Document named-property rebuilds after irrelevant tree mutations
• b2cd235 Update css-color
• 0542d2b Release idle MutationObserver bookkeeping
• Additional commits viewable in compare view

Updates vite from 8.3.1 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

• module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

• bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

v8.3.3

Bug Fixes

• deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
• html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
• server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
• server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

v8.3.2

Bug Fixes

• build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)
• bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)
• bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)
• deps: update all non-major dependencies (#23601) (9944fa6)
• deps: update rolldown-related dependencies (#23602) (88c1741)
• html: resolve percent-encoded srcset urls (#23609) (53f1ce7)
• limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

• bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

• avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
• build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
• build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
• bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
• client: skip rewriting unchanged adopted styles (#23697) (fa71469)
• css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
• deps: update all non-major dependencies (#23648) (8a4c19c)
• deps: update rolldown-related dependencies (#23649) (794516d)
• dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
• don't treat modules ending with js-like query as js (#23687) (fcb6f12)
• html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
• html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
• optimizer: scan deep imports with custom extensions (#23678) (8579189)
• remove input option unescaping for now (#23694) (facc2fb)
• server: match static aliases on path boundaries (#23643) (b28db28)
• watc...

  Description has been truncated

[mgetzflex]

@dependabot retry

[mgetzflex]

@dependabot rebase

[fpigeonjr]

✅ Approved

All required checks are green. The update preserves Angular 21 compatibility across the fleet, and I found no blocking correctness, security, or dependency-alignment issues.

✅ Approve — no blocking findings remain.

This review was drafted by @fpigeonjr's coding agent.