[dependabot]

Removes minimatch. It's no longer used after updating ancestor dependency @angular/cli. These dependencies need to be updated together.

Removes minimatch

Updates @angular/cli from 21.2.29 to 22.2.5

Release notes

Sourced from @​angular/cli's releases.

22.2.5

@​schematics/angular

Commit	Description
	avoid adding web worker snippet to server configuration files
	ignore non-workspace stylesheet entries when adding Tailwind
	include the SSR entry file in the trust-proxy-headers migration
	include the type separator in the class spec import
	keep the default getter access type of spyOnProperty in refactor-jasmine-vitest
	migrate CallInfo returnValue and object in refactor-jasmine-vitest
	migrate spy.calls.first().args in refactor-jasmine-vitest
	set explicit type for the module --route component
	set explicit type for the app-shell component

@​angular/cli

Commit	Description
	explain how to pick a project when a schematic cannot determine one
	handle bun registry error output and 404 detection
	support resolving subproject dependencies in bun workspaces

@​angular-devkit/build-angular

Commit	Description
	resolve dev-server sslKey and sslCert relative to the workspace root (#34399)

@​angular-devkit/core

Commit	Description
	only invoke smart default provider when value is undefined

@​angular-devkit/schematics

Commit	Description
	support delegating trees in partition (#34539)
	support delegating trees in the filter rule (#34539)

@​angular/build

Commit	Description
	escape prerender redirect URLs
	include the oxc-parser WASI binding as an optional dependency
	only require karma-coverage when coverage is enabled
	resolve dev-server sslKey and sslCert relative to the workspace root (#34399)
	serialize server manifest asset paths
	suggest the istanbul provider in the unit-test V8 browser coverage error
	warn about unsupported options in the unit-test karma runner
	write the stats file in a stable, deterministic order
	avoid duplicate Domino bundling in server bundles
	avoid web worker channel overhead in library parallel compilation

@​angular/ssr

Commit	Description
	preserve trailing slashes in query and fragment of redirect URLs

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.2.5 (2026-10-28)

@​angular/cli

Commit	Type	Description
7efeeb9caa	fix	explain how to pick a project when a schematic cannot determine one
ee61e328ac	fix	handle bun registry error output and 404 detection
0d8898c289	fix	support resolving subproject dependencies in bun workspaces

@​schematics/angular

Commit	Type	Description
982c3dcbfc	fix	avoid adding web worker snippet to server configuration files
18e5dc6fe8	fix	ignore non-workspace stylesheet entries when adding Tailwind
dd18bda9db	fix	include the SSR entry file in the trust-proxy-headers migration
b7e24561e7	fix	include the type separator in the class spec import
7f3840c70c	fix	keep the default getter access type of spyOnProperty in refactor-jasmine-vitest
eaf2343be4	fix	migrate CallInfo returnValue and object in refactor-jasmine-vitest
6680d289cb	fix	migrate spy.calls.first().args in refactor-jasmine-vitest
9cba0da43f	fix	set explicit type for the module --route component
e9ae950364	fix	set explicit type for the app-shell component

@​angular-devkit/build-angular

Commit	Type	Description
0c4bd19ace	fix	resolve dev-server sslKey and sslCert relative to the workspace root (#34399)

@​angular-devkit/core

Commit	Type	Description
ad04d689bb	fix	only invoke smart default provider when value is undefined

@​angular-devkit/schematics

Commit	Type	Description
e7fd1bd9cb	fix	support delegating trees in partition (#34539)
1854c1714d	fix	support delegating trees in the filter rule (#34539)

@​angular/build

Commit	Type	Description
6d45d1007f	fix	escape prerender redirect URLs
6298fb89e6	fix	include the oxc-parser WASI binding as an optional dependency
325f6a0f48	fix	only require karma-coverage when coverage is enabled

... (truncated)

Commits

• 9e8eea0 release: cut the v22.2.5 release
• e3134b4 fix(@​angular/build): warn about unsupported options in the unit-test karma ru...
• 199775b build: update dependency webpack-dev-middleware to v8.5.0
• 7efeeb9 fix(@​angular/cli): explain how to pick a project when a schematic cannot dete...
• 6298fb8 fix(@​angular/build): include the oxc-parser WASI binding as an optional depen...
• 7f3840c fix(@​schematics/angular): keep the default getter access type of spyOnPropert...
• 325f6a0 fix(@​angular/build): only require karma-coverage when coverage is enabled
• e7fd1bd fix(@​angular-devkit/schematics): support delegating trees in partition (#34...
• 1854c17 fix(@​angular-devkit/schematics): support delegating trees in the filter rul...
• 9701ae9 docs(@​angular-devkit/build-angular): correct browser-esbuild statsJson descri...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[github-actions]

🔒 Security Scan Results

ℹ️ Note: Only vulnerabilities with available fixes (upgrades or patches) are counted toward thresholds.

Check Type	Count (with fixes)	Without fixes	Threshold	Result
🔴 Critical Severity	0	0	10	✅ Passed
🟠 High Severity	0	0	25	✅ Passed
🟡 Medium Severity	0	0	0	✅ Passed
🔵 Low Severity	0	0	0	✅ Passed

⏱️ SLA Breach Summary

✅ No SLA breaches detected. All vulnerabilities are within acceptable time thresholds.

Severity	Breaches (with fixes)	Breaches (no fixes)	SLA Threshold (with/no fixes)	Status
🔴 Critical	0	0	15 / 30 days	✅ Passed
🟠 High	0	0	30 / 120 days	✅ Passed
🟡 Medium	0	0	90 / 365 days	✅ Passed
🔵 Low	0	0	180 / 365 days	✅ Passed

✅ BUILD PASSED - All security checks passed