chore(deps): update npm packages by renovate[bot] · Pull Request #575 · voidzero-dev/oxc-angular-compiler

renovate · 2026-10-11T21:38:59Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@angular/animations (source)	`22.2.1` → `22.2.2`
@angular/build	`22.2.1` → `22.2.2`
@angular/cdk	`22.2.1` → `22.2.2`
@angular/common (source)	`22.2.1` → `22.2.2`
@angular/compiler (source)	`22.2.1` → `22.2.2`
@angular/compiler-cli (source)	`22.2.1` → `22.2.2`
@angular/core (source)	`22.2.1` → `22.2.2`
@angular/forms (source)	`22.2.1` → `22.2.2`
@angular/material	`22.2.1` → `22.2.2`
@angular/platform-browser (source)	`22.2.1` → `22.2.2`
@angular/platform-browser-dynamic (source)	`22.2.1` → `22.2.2`
@angular/router (source)	`22.2.1` → `22.2.2`
@oxc-node/cli (source)	`0.1.3` → `0.1.5`
@oxc-node/core	`0.1.3` → `0.1.5`
@playwright/test (source)	`1.63.0` → `1.64.0`
@sanity/types (source)	`6.17.0` → `6.18.0`
pkg-pr-new (source)	`0.0.88` → `0.0.91`
postcss (source)	`8.5.28` → `8.5.29`
posthog-js (source)	`1.435.6` → `1.438.3`
vite (source)	`8.3.2` → `8.3.4`

Release Notes

angular/angular (@angular/animations)

`v22.2.2`

Compare Source

compiler

Commit	Type	Description
fa63bfad14	fix	avoid leaking ::ng-deep detection state between rules
5744e7575c	fix	avoid prototype lookups when resolving entities
97e57157e4	fix	correctly match directives on `<ng-template>` nested in various namespaces
0474258a5a	fix	ignore `@let` declarations in the control flow content projection diagnostic
725ffcf4fa	fix	match namespaced root nodes of control flow blocks against ng-content tag selectors
5ff83c11fe	fix	strip script elements regardless of namespace

compiler-cli

Commit	Type	Description
01949c53a6	fix	don't mark constructor parameter properties as inherited
f43c63f70c	perf	optimize missing directive extended checks

core

Commit	Type	Description
095644168e	fix	defer afterRenderEffect sequences registered while hooks run
a312520447	fix	strip reserved character from translations
74bc86d8b2	fix	untrack `onError` handler to prevent signal write exceptions

forms

Commit	Type	Description
b0710b8db6	fix	don't crash when control is missing in setUpValidators
ef0359676c	fix	skip class bindings for orphaned fields
c91a8c429d	fix	use `Object.is` when comparing control bindings in signal forms
6cd3a8a929	fix	write a pending debounced value when its control is destroyed

language-service

Commit	Type	Description
6c44a9ecc5	fix	add strictUnclaimedEventNames to angularCompilerOptions schema

router

Commit	Type	Description
576df28471	fix	fall back when serializing protocol-relative URLs
e0137cbfde	fix	remove the navigate event abort listener once it fires
fc91c725a0	fix	reset internal state on error handler redirect after state commit

angular/angular-cli (@angular/build)

`v22.2.2`

Compare Source

@angular-devkit/build-angular

Commit	Type	Description
cfe970c8bc	fix	preserve Host header when proxying in ssr-dev-server

@angular/build

Commit	Type	Description
405bfa370a	fix	keep the order of glob entries in the proxy configuration
996e47f809	fix	support a string `context` in array-form proxy configurations

angular/components (@angular/cdk)

`v22.2.2`

Compare Source

cdk

Commit	Type	Description
237d951c6	fix	drag-drop: remove old prefixes for fullscreen elements
471f62afa	fix	drag-drop: use consistent touch coordinates for bounded dragging (#33928)
9c62976ba	fix	overlay: remove old prefixes for fullscreen elements

material

Commit	Type	Description
a069b18e1	fix	icon: do not copy event attributes (#33929)

google-maps

Commit	Type	Description
5b8c5fd62	fix	use console.error instead of hard error (#33917)

oxc-project/oxc-node (@oxc-node/cli)

`v0.1.5`

Compare Source

Bug Fixes

core: evaluate enum member values for the transformer (#802) (70d16e1), closes #795 oxc-project/oxc#21667 #795
core: honor tsconfig verbatimModuleSyntax (#800) (03f8086), closes #798
core: map tsconfig compilerOptions.jsx values to JsxOptions (#799) (6aaa39a), closes #796
core: resolve helper imports against the loader, not the user file (#803) (cfc5900), closes #794 #794
core: run .jsx/.tsx in type: module packages as ES modules (#801) (28ccab0), closes #797 #800 #797

`v0.1.4`

Compare Source

Note: Version bump only for package oxc-node

microsoft/playwright (@playwright/test)

`v1.64.0`

Compare Source

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');

for (const tool of await page.webmcp.tools())
  console.log(tool.name, tool.description);

const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';

export default defineConfig({
  use: {
    video: {
      mode: 'on',
      size: { width: 1920, height: 1080 },
      fps: 60,
      show: {
        actions: {
          style: {
            point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
            highlight: 'outline: 2px solid #&#8203;333; background: rgba(0, 128, 255, .15)',
            title: 'font-size: 16px',
          },
        },
      },
    },
  },
});

New fps option in testOptions.video, recordVideo and
screencast.start(). Firefox and WebKit currently capture up to 25 frames per second.
New style option takes CSS declarations for the point marker, the target
highlight and the action title. It replaces the fontSize option, which is now deprecated.
The cursor stays visible at the last action point, survives navigations and travels along a natural, eased path.
Videos are encoded with VP9 instead of VP8, which takes less CPU and produces smaller files of the same or better
quality.
All video options are also available in Playwright MCP and playwright-cli.

🎯 Test runner

New testProject.default option keeps a project in the config without running it by default. You can configure every browser you care about, and let a plain npx playwright test run just your favourite one:

// playwright.config.ts
import { defineConfig, devices } from '@playwright/test';

export default defineConfig({
  projects: [
    { name: 'chromium', use: devices['Desktop Chrome'] },
    { name: 'firefox', use: devices['Desktop Firefox'], default: false },
    { name: 'webkit', use: devices['Desktop Safari'], default: false },
  ],
});

npx playwright test                     # runs chromium only
npx playwright test --project=firefox   # runs firefox
npx playwright test --project="*"       # runs all three, for example on CI

New --shuffle command line option schedules tests in a random order, which helps to find tests that accidentally depend on each other.

npx playwright test --shuffle
# Running 42 tests using 4 workers, shuffle seed 271828182
# ...

# Pass the seed to reproduce the same order.
npx playwright test --shuffle 271828182

New lock option in test.describe.configure() adds test locks to all tests in a file or a group:
```
test.describe.configure({ lock: 'user-settings' });
```

New type option of toHaveScreenshot in testConfig.expect stores all unnamed screenshots as WebP:

// playwright.config.ts
export default defineConfig({
  expect: {
    toHaveScreenshot: { type: 'webp' },
  },
});

🪆 Locator.within()

New locator.within() combines two locators that you already have, reading in the natural order —
"this button, within that dialog":

const saveButton = page.getByRole('button', { name: 'Save' });
const dialog = page.getByTestId('settings-dialog');

await saveButton.within(dialog).click();

Relative locators such as locator.nth() or locator.first() are resolved inside each parent
separately, which makes column-like queries straightforward:

// The third cell of every row, not the third cell in the table.
const thirdColumn = page.getByRole('cell').nth(2).within(page.getByRole('row'));
await expect(thirdColumn).toHaveText(['Apple', 'Banana', 'Cherry']);

New APIs

New page.getByRef() locates an element by its aria ref, such as e2, reported by page.ariaSnapshot() in the 'ai' mode.
New option includeShadow in page.content() and frame.content() serializes open shadow roots as declarative shadow DOM.
New option signCount sets the initial signature counter of a virtual credential. credentials.create() and credentials.get() return the current signCount, and it is saved and restored together with the credentials in the storage state.
New fullConfig.filteredProjects lists the projects that were selected to run after applying the --project filter. It is available in global setup and reporters.

New apiRequestContext.addCookies(), apiRequestContext.cookies() and apiRequestContext.clearCookies() manage cookies of a request context, mirroring the BrowserContext methods:

await request.addCookies([{ name: 'session-id', value: '42', url: 'https://example.com' }]);
console.log(await request.cookies('https://example.com'));
await request.clearCookies({ name: 'session-id' });

Breaking changes ⚠️

screen property is now forwarded from the device descriptors. If you use ...devices['Desktop Chrome'] and alike, window.screen and media queries now see the emulated screen size. You can opt-out by explicitly setting screen to undefined:
```
// playwright.config.ts
export default defineConfig({
  use: {
    ...devices['Desktop Chrome'],
    screen: undefined,
  },
});
```
JSX in your test files now follows your tsconfig.json. Playwright compiles JSX in test files according to the jsx, jsxFactory, jsxFragmentFactory and jsxImportSource tsconfig options, and defaults to the automatic runtime from react/jsx-runtime.
--update-snapshots=missing now passes the test run. Tests that only create missing snapshots now pass in the 'missing' mode of testConfig.updateSnapshots, so that CI can generate new snapshots and verify the existing ones in a single run. The mode used when the option is not specified is now called 'default' and behaves as before: missing snapshots are written and the test fails.
Elements inside hidden iframes are considered hidden. Elements inside an iframe that is not visible, for example with visibility: hidden, are now considered hidden by actions, locator.isVisible() and expect(locator).toBeVisible().

Browser Versions

Chromium 156.0.8078.4
Mozilla Firefox 157.0
WebKit 27.2

This version was also tested against the following stable channels:

Google Chrome 155
Microsoft Edge 155

sanity-io/sanity (@sanity/types)

`v6.18.0`

Compare Source

Sanity Studio v6.18.0

This release includes various improvements and bug fixes.

For the complete changelog with all details, please visit:
www.sanity.io/changelog/studio-Ni4xNy4w

Install or upgrade Sanity Studio

To upgrade to this version, run:

npm install sanity@latest

To initiate a new Sanity Studio project or learn more about upgrading, please refer to our comprehensive guide on Installing and Upgrading Sanity Studio.

📓 Full changelog

Author	Message	Commit
squiggler-app[bot]	chore(deps): update dependency @chromatic-com/playwright to v1 (#15047)	`91bd640`
squiggler-app[bot]	chore(deps): update dependency eslint-plugin-tsdoc to ^0.5.4 (#15191)	`ede53e6`
squiggler-app[bot]	chore(deps): update chromaui/action action to v18.10.2 (#15173)	`00d44e5`
squiggler-app[bot]	fix(deps): update dependency @sanity/cli to ^8.13.1 (#15171)	`5621df3`
squiggler-app[bot]	chore(deps): update pnpm to v12.9.1 (#15178)	`33df09c`
squiggler-app[bot]	fix(deps): update sanity-sdk to ^3.8.0 (#15184)	`ab6f9c5`
squiggler-app[bot]	chore(tests): generate dts tests 🤖 ✨ (#15196)	`2fc5948`
squiggler-app[bot]	chore(deps): lock file maintenance (#15198)	`2fe100d`
squiggler-app[bot]	fix(deps): update dependency motion to v14 (#15181)	`c7b0c03`
squiggler-app[bot]	chore(deps): update dependency @sanity/ui to ^4.3.1 (#15197)	`12d9555`
squiggler-app[bot]	chore(deps): update dependency @sentry/react to ^10.76.0 (#15174)	`9fc1d84`
squiggler-app[bot]	fix(deps): update storybook monorepo to ^10.6.1 (#15172)	`2e8c27c`
squiggler-app[bot]	chore(deps): update dependency oxfmt to ^0.72.0 (#15077)	`8d6395e`
squiggler-app[bot]	chore(deps): update dependency web-vitals to ^6.2.3 (#15169)	`11f751b`
squiggler-app[bot]	chore(deps): update dependency lefthook to ^2.1.16 (#15167)	`0608fbb`
squiggler-app[bot]	chore(deps): update dependency @sanity/tsdown-config to ^0.28.4 (#15165)	`efebccb`
squiggler-app[bot]	chore(deps): update dependency chromatic to ^18.10.2 (#15166)	`d7d105f`
squiggler-app[bot]	chore(deps): update dependency ui5 to v5.0.0-alpha.13 (#15168)	`77b2e32`
squiggler-app[bot]	chore(deps): update dependency @sanity/vanilla-extract-vite-plugin to ^0.2.23 (#15193)	`c03132e`
squiggler-app[bot]	chore(deps): update renovatebot/github-action action to v46.3.7 (#15170)	`e4aac33`
squiggler-app[bot]	chore(deps): lock file maintenance (#15194)	`7bf1cc5`
squiggler-app[bot]	chore(deps): update dependency vite to ^8.3.3 (#15186)	`0b8600f`
squiggler-app[bot]	chore(deps): lock file maintenance (#15131)	`9fa1c05`
squiggler-app[bot]	chore(deps): update dependency oxlint to ^1.87.0 (#15177)	`265ada8`
squiggler-app[bot]	chore(deps): update dependency oxc-transform-react to ^0.153.0 (#15176)	`f2a6f2d`
squiggler-app[bot]	fix(deps): update dependency motion to ^13.5.1 (#15179)	`0c1fa74`
squiggler-app[bot]	chore(deps): update dependency knip to ^6.39.0 (#15175)	`78d8a59`
squiggler-app[bot]	chore(deps): update dependency @vitejs/plugin-react to ^6.1.2 (#15164)	`f90c697`
@stipsan	chore(comments-v2): suppress deprecated comment range oxlint errors (#15183)	`fbb2770`
squiggler-app[bot]	fix(deps): update dev-non-major (#15180)	`34a1125`
squiggler-app[bot]	fix(deps): update dependency @sanity/client to ^8.8.0 (#15079)	`7962239`
squiggler-app[bot]	chore(deps): update dependency @sanity/ailf to ^7.40.0 (#15087)	`779d8a3`
squiggler-app[bot]	fix(deps): update vitest monorepo to ^5.0.3 (#15046)	`51a16e7`
squiggler-app[bot]	chore(deps): update dependency turbo to ^2.11.7 (#15085)	`3cf68a2`
@stipsan	chore(deps): bump the vanilla-extract vite plugin to 0.2.22 to fix stale css in sanity dev (#15138)	`6aa0dee`
@stipsan	chore(deps): upgrade vite to 8.3.2 and rolldown to 1.2.12 (#15162)	`8f3e866`
@gu-stav	feat(core): open canvas inside workbench (#15060)	`17eec24`
@gu-stav	feat(core): follow the workbench color scheme (#15063)	`25aa731`
@gu-stav	feat(core): skip page performance metrics in workbench (#15064)	`7c63e1e`
@gu-stav	fix(core): let workbench own sign-in (#15080)	`20d3e1f`
@gu-stav	feat(core): sync studio navigation with workbench (#15092)	`0005bd9`
@jordanl17	fix(releases): restore release avatar icon alignment inside v4 button and text hosts (#15148)	`0362e48`
@stipsan	chore(deps): bump @sanity/themer to 0.9.0 (#15150)	`4e15668`
cursor[bot]	test(store): cover initial value stream existence and timeout paths (#15132)	`b7bf9f5`
cursor[bot]	test(presentation): cover intent state routing edge cases (#15143)	`d56954e`
@jordanl17	feat(structure): add a stable attribute for hiding the document toolbar (#15139)	`60fdf3d`
@gu-stav	feat(structure): support document favorites in workbench (#15019)	`8dae879`
squiggler-app[bot]	chore(deps): update dependency @sanity/functions to ^1.8.1 (#15113)	`b875cbd`
squiggler-app[bot]	chore(deps): update dependency @sanity/google-maps-input to ^6.1.14 (#15083)	`c1e1238`
@laurenashpole	chore: migrate text in core/canvas to core/feedba

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

Branch creation
- "before 10am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

socket-security · 2026-10-11T21:39:31Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@angular/platform-browser-dynamic@22.2.1 ⏵ 22.2.2	⁺¹
npm/pkg-pr-new@0.0.88 ⏵ 0.0.91	⁺¹		⁺⁴
npm/@sanity/types@6.17.0 ⏵ 6.18.0
npm/@angular/platform-browser@22.2.1 ⏵ 22.2.2	⁺¹	⁺¹
npm/@angular/animations@22.2.1 ⏵ 22.2.2	⁺¹		⁺¹
npm/@oxc-node/core@0.1.3 ⏵ 0.1.5	⁺²	⁺¹	⁺²
npm/@angular/compiler-cli@22.2.1 ⏵ 22.2.2	⁺¹		⁺¹
npm/@angular/router@22.2.1 ⏵ 22.2.2	⁺¹	⁺¹
npm/@angular/forms@22.2.1 ⏵ 22.2.2	⁺¹		⁺²
npm/@angular/build@22.2.1 ⏵ 22.2.2		⁺¹	⁺²
npm/@angular/compiler@22.2.1 ⏵ 22.2.2	⁺¹		⁺¹
npm/@angular/cdk@22.2.1 ⏵ 22.2.2
npm/@angular/core@22.2.1 ⏵ 22.2.2	⁺¹	⁺¹	⁺¹
npm/@angular/common@22.2.1 ⏵ 22.2.2			^-1
npm/@oxc-node/cli@0.1.3 ⏵ 0.1.5	⁺⁴		⁺²
npm/@angular/material@22.2.1 ⏵ 22.2.2		⁺¹
npm/postcss@8.5.28 ⏵ 8.5.29	⁺¹	⁺¹
npm/vite@8.3.2 ⏵ 8.3.4	⁺¹	⁺¹
npm/posthog-js@1.435.6 ⏵ 1.438.3	⁺¹
npm/@playwright/test@1.63.0 ⏵ 1.64.0

View full report

chore(deps): update npm packages

50eff1c

renovate Bot enabled auto-merge (squash) October 11, 2026 21:39

Brooooooklyn mentioned this pull request Oct 13, 2026

fix(compiler): match Angular 22.2.2 emit for img/video src sanitizers and namespaced block tags #577

Open

Navigation Menu

Repository navigation

chore(deps): update npm packages - #575

chore(deps): update npm packages#575
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-packages

renovate Bot commented Oct 11, 2026

Uh oh!

socket-security Bot commented Oct 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 11, 2026

Release Notes

compiler

compiler-cli

core

forms

language-service

router

cdk

material

google-maps

Bug Fixes

🧰 WebMCP

🎬 Better videos

🎯 Test runner

🪆 Locator.within()

New APIs

Breaking changes ⚠️

Browser Versions

Sanity Studio v6.18.0

Install or upgrade Sanity Studio

📓 Full changelog

Configuration

Uh oh!

socket-security Bot commented Oct 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants