Bump the js-dependencies group across 1 directory with 27 updates

[dependabot]

Bumps the js-dependencies group with 25 updates in the /frontend directory:

Package	From	To
@angular/animations	21.2.1	21.2.8
@angular/cdk	21.2.1	21.2.6
@angular/common	21.2.1	21.2.8
@angular/compiler	21.2.1	21.2.8
@angular/core	21.2.1	21.2.8
@angular/forms	21.2.1	21.2.8
@angular/material	21.2.1	21.2.6
@angular/platform-browser	21.2.1	21.2.8
@angular/platform-browser-dynamic	21.2.1	21.2.8
@angular/router	21.2.1	21.2.8
apexcharts	5.10.1	5.10.6
ng-apexcharts	2.2.0	2.3.0
ngx-markdown	21.1.0	21.2.0
@angular-devkit/build-angular	21.2.1	21.2.7
@angular-eslint/builder	21.2.0	21.3.1
@angular-eslint/eslint-plugin	21.2.0	21.3.1
@angular-eslint/eslint-plugin-template	21.2.0	21.3.1
@angular-eslint/schematics	21.2.0	21.3.1
@angular/cli	21.2.1	21.2.7
@angular/compiler-cli	21.2.1	21.2.8
@typescript-eslint/eslint-plugin	8.56.1	8.58.1
eslint	9.39.3	10.2.0
jasmine-core	6.1.0	6.2.0
sass	1.97.3	1.99.0
typescript	5.9.3	6.0.2

Updates @angular/animations from 21.2.1 to 21.2.8

Release notes

Sourced from @​angular/animations's releases.

21.2.8

compiler

Commit	Description
	handle nested brackets in host object bindings

compiler-cli

Commit	Description
	error for type parameter declarations

core

Commit	Description
	handle missing serialized container hydration data
	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Description
	get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit	Description
	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Description
	prevent recursive scope checks for invalid NgModule imports

core

Commit	Description
	prevent binding unsafe attributes on SVG animation elements (#67797)
	resolve component import by exact specifier in route lazy-loading schematic
	treat object[data] as resource URL context (#67797)

localize

Commit	Description
	validate locale in getOutputPathFn to prevent path traversal

router

Commit	Description
	pass outlet context to split to fix empty path named outlets

21.2.6

common

Commit	Description
	avoid redundant image fetch on destroy with auto sizes

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/animations's changelog.

21.2.8 (2026-04-08)

compiler

Commit	Type	Description
e40d378f3e	fix	handle nested brackets in host object bindings

compiler-cli

Commit	Type	Description
2c6781071f	fix	error for type parameter declarations

core

Commit	Type	Description
82192deda9	fix	handle missing serialized container hydration data
057cc6d09d	fix	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Type	Description
7797671257	fix	get quick info at local var location to align with TS semantics and support type narrowing

22.0.0-next.6 (2026-04-01)

compiler

Commit	Type	Description
08d36599d7	fix	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Type	Description
fcd0bb0db8	fix	prevent recursive scope checks for invalid NgModule imports

core

Commit	Type	Description
e84e35cdd6	fix	prevent binding unsafe attributes on SVG animation elements (#67797)
8fa6617352	fix	resolve component import by exact specifier in route lazy-loading schematic
028e1d3ce0	fix	treat object[data] as resource URL context (#67797)

localize

Commit	Type	Description
7871093822	fix	validate locale in getOutputPathFn to prevent path traversal

migrations

Commit	Type	Description
682aaf943f	feat	add strictTemplates to tsconfig during ng update

router

Commit	Type	Description
daa9b2a9d6	fix	pass outlet context to split to fix empty path named outlets

... (truncated)

Commits

• 7907e98 test: remove duplicate tests
• See full diff in compare view

Updates @angular/cdk from 21.2.1 to 21.2.6

Release notes

Sourced from @​angular/cdk's releases.

21.2.6

material

Commit	Description
	select: wrong transform origin when opening upwards inside another overlay (#33032)

21.2.5

material

Commit	Description
	sidenav: not resetting margin if transition does not start (#33001)
	slider: not picking up static direction (#33006)
	tooltip: allow hover detection logic to be customized (#33018)

cdk

Commit	Description
	stepper: linear updates not reflected in the DOM (#33007)

21.2.4

material

Commit	Description
	tooltip: wrong type for shape token (#32968)

21.2.3

material

Commit	Description
	datepicker: add harness for datepicker actions (#32925)

cdk

Commit	Description
	drag-drop: item returned to wrong index in initial container (#32944)

21.2.2

aria

Commit	Description
	grid: unit tests and small fixes for grid directives (#32841)

Changelog

Sourced from @​angular/cdk's changelog.

21.2.6 "steel bottle" (2026-04-08)

material

Commit	Type	Description
5b4bbe9c4f	fix	select: wrong transform origin when opening upwards inside another overlay (#33032)

22.0.0-next.3 "rubber-wombat" (2026-04-01)

Breaking Changes

multiple

• Renames the values input/model to value in Combobox, Listbox, Tree, Menu, Toolbar, and Select. Users must update their templates to use the value property instead of values.

  • refactor(multiple): update api goldens

material

Commit	Type	Description
ac3911071	fix	sidenav: not resetting margin if transition does not start (#33001)
a7d556180	fix	slider: not picking up static direction (#33006)
236762fbc	fix	tooltip: allow hover detection logic to be customized (#33018)

cdk

Commit	Type	Description
a7fe128c3	fix	stepper: linear updates not reflected in the DOM (#33007)

multiple

Commit	Type	Description
94a50a25f	refactor	rename values to value for signal forms compatibility (#33012)

21.2.5 "steel-wombat" (2026-04-01)

cdk

Commit	Type	Description
42e10553c	fix	stepper: linear updates not reflected in the DOM (#33007)

material

Commit	Type	Description
895908a12	fix	sidenav: not resetting margin if transition does not start (#33001)
475a8aabb	fix	slider: not picking up static direction (#33006)
8a5ed09e5	fix	tooltip: allow hover detection logic to be customized (#33018)

21.2.4 "hassium-halfpipe" (2026-03-25)

material

... (truncated)

Commits

• a236a40 release: cut the v21.2.6 release
• 6b955a7 build: update cross-repo angular dependencies (#33043)
• 2909c3a build: lock file maintenance (#33038)
• 5b4bbe9 fix(material/select): wrong transform origin when opening upwards inside anot...
• 2c877d2 Set generic on some InjectionToken. (#32753)
• 97be64a build: update cross-repo angular dependencies (#33030)
• 424b282 build: update dependency aspect_rules_ts to v3.8.8 (#33025)
• e433a66 docs(material/dialog): clarify that default options replace rather than merge...
• c9d40aa release: cut the v21.2.5 release
• 899456f build: update cross-repo angular dependencies (#33017)
• Additional commits viewable in compare view

Updates @angular/common from 21.2.1 to 21.2.8

Release notes

Sourced from @​angular/common's releases.

21.2.8

compiler

Commit	Description
	handle nested brackets in host object bindings

compiler-cli

Commit	Description
	error for type parameter declarations

core

Commit	Description
	handle missing serialized container hydration data
	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Description
	get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit	Description
	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Description
	prevent recursive scope checks for invalid NgModule imports

core

Commit	Description
	prevent binding unsafe attributes on SVG animation elements (#67797)
	resolve component import by exact specifier in route lazy-loading schematic
	treat object[data] as resource URL context (#67797)

localize

Commit	Description
	validate locale in getOutputPathFn to prevent path traversal

router

Commit	Description
	pass outlet context to split to fix empty path named outlets

21.2.6

common

Commit	Description
	avoid redundant image fetch on destroy with auto sizes

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

21.2.8 (2026-04-08)

compiler

Commit	Type	Description
e40d378f3e	fix	handle nested brackets in host object bindings

compiler-cli

Commit	Type	Description
2c6781071f	fix	error for type parameter declarations

core

Commit	Type	Description
82192deda9	fix	handle missing serialized container hydration data
057cc6d09d	fix	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Type	Description
7797671257	fix	get quick info at local var location to align with TS semantics and support type narrowing

22.0.0-next.6 (2026-04-01)

compiler

Commit	Type	Description
08d36599d7	fix	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Type	Description
fcd0bb0db8	fix	prevent recursive scope checks for invalid NgModule imports

core

Commit	Type	Description
e84e35cdd6	fix	prevent binding unsafe attributes on SVG animation elements (#67797)
8fa6617352	fix	resolve component import by exact specifier in route lazy-loading schematic
028e1d3ce0	fix	treat object[data] as resource URL context (#67797)

localize

Commit	Type	Description
7871093822	fix	validate locale in getOutputPathFn to prevent path traversal

migrations

Commit	Type	Description
682aaf943f	feat	add strictTemplates to tsconfig during ng update

router

Commit	Type	Description
daa9b2a9d6	fix	pass outlet context to split to fix empty path named outlets

... (truncated)

Commits

• 8102331 test(http): disable XSRF and mock location in HttpClient tests to avoid Domin...
• 13f050d test: construct local Date objects to fix timezone flakiness
• d0cf299 test: remove unsupported timezone from formatDate tests
• b4ab6ba fix(common): avoid redundant image fetch on destroy with auto sizes
• adda6c5 build: update aspect_rules_js to 3.0.2
• See full diff in compare view

Updates @angular/compiler from 21.2.1 to 21.2.8

Release notes

Sourced from @​angular/compiler's releases.

21.2.8

compiler

Commit	Description
	handle nested brackets in host object bindings

compiler-cli

Commit	Description
	error for type parameter declarations

core

Commit	Description
	handle missing serialized container hydration data
	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Description
	get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit	Description
	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Description
	prevent recursive scope checks for invalid NgModule imports

core

Commit	Description
	prevent binding unsafe attributes on SVG animation elements (#67797)
	resolve component import by exact specifier in route lazy-loading schematic
	treat object[data] as resource URL context (#67797)

localize

Commit	Description
	validate locale in getOutputPathFn to prevent path traversal

router

Commit	Description
	pass outlet context to split to fix empty path named outlets

21.2.6

common

Commit	Description
	avoid redundant image fetch on destroy with auto sizes

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

21.2.8 (2026-04-08)

compiler

Commit	Type	Description
e40d378f3e	fix	handle nested brackets in host object bindings

compiler-cli

Commit	Type	Description
2c6781071f	fix	error for type parameter declarations

core

Commit	Type	Description
82192deda9	fix	handle missing serialized container hydration data
057cc6d09d	fix	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Type	Description
7797671257	fix	get quick info at local var location to align with TS semantics and support type narrowing

22.0.0-next.6 (2026-04-01)

compiler

Commit	Type	Description
08d36599d7	fix	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Type	Description
fcd0bb0db8	fix	prevent recursive scope checks for invalid NgModule imports

core

Commit	Type	Description
e84e35cdd6	fix	prevent binding unsafe attributes on SVG animation elements (#67797)
8fa6617352	fix	resolve component import by exact specifier in route lazy-loading schematic
028e1d3ce0	fix	treat object[data] as resource URL context (#67797)

localize

Commit	Type	Description
7871093822	fix	validate locale in getOutputPathFn to prevent path traversal

migrations

Commit	Type	Description
682aaf943f	feat	add strictTemplates to tsconfig during ng update

router

Commit	Type	Description
daa9b2a9d6	fix	pass outlet context to split to fix empty path named outlets

... (truncated)

Commits

• a4f3120 refactor(compiler): require a reference in DirectiveMeta
• de533fe refactor(compiler-cli): move ClassPropertyMapping into compiler
• ea1e34c refactor(compiler): move matchSource into base metadata
• e40d378 fix(compiler): handle nested brackets in host object bindings
• d04ddd7 fix(core): prevent binding unsafe attributes on SVG animation elements (#67797)
• fea25d1 fix(compiler): register SVG animation attributes in URL security context (#67...
• 880a57d fix(compiler): prevent shimCssText from adding extra blank lines per CSS comment
• 23ea431 fix(compiler): parse named HTML entities containing digits
• 334ae10 fix(compiler): ensure generated code compiles
• ed2d324 fix(compiler): disallow translations of iframe src
• Additional commits viewable in compare view

Updates @angular/core from 21.2.1 to 21.2.8

Release notes

Sourced from @​angular/core's releases.

21.2.8

compiler

Commit	Description
	handle nested brackets in host object bindings

compiler-cli

Commit	Description
	error for type parameter declarations

core

Commit	Description
	handle missing serialized container hydration data
	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Description
	get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit	Description
	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Description
	prevent recursive scope checks for invalid NgModule imports

core

Commit	Description
	prevent binding unsafe attributes on SVG animation elements (#67797)
	resolve component import by exact specifier in route lazy-loading schematic
	treat object[data] as resource URL context (#67797)

localize

Commit	Description
	validate locale in getOutputPathFn to prevent path traversal

router

Commit	Description
	pass outlet context to split to fix empty path named outlets

21.2.6

common

Commit	Description
	avoid redundant image fetch on destroy with auto sizes

compiler

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/core's changelog.

21.2.8 (2026-04-08)

compiler

Commit	Type	Description
e40d378f3e	fix	handle nested brackets in host object bindings

compiler-cli

Commit	Type	Description
2c6781071f	fix	error for type parameter declarations

core

Commit	Type	Description
82192deda9	fix	handle missing serialized container hydration data
057cc6d09d	fix	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Type	Description
7797671257	fix	get quick info at local var location to align with TS semantics and support type narrowing

22.0.0-next.6 (2026-04-01)

compiler

Commit	Type	Description
08d36599d7	fix	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Type	Description
fcd0bb0db8	fix	prevent recursive scope checks for invalid NgModule imports

core

Commit	Type	Description
e84e35cdd6	fix	prevent binding unsafe attributes on SVG animation elements (#67797)
8fa6617352	fix	resolve component import by exact specifier in route lazy-loading schematic
028e1d3ce0	fix	treat object[data] as resource URL context (#67797)

localize

Commit	Type	Description
7871093822	fix	validate locale in getOutputPathFn to prevent path traversal

migrations

Commit	Type	Description
682aaf943f	feat	add strictTemplates to tsconfig during ng update

router

Commit	Type	Description
daa9b2a9d6	fix	pass outlet context to split to fix empty path named outlets

... (truncated)

Commits

• d4c8a9a refactor(compiler-cli): decouple SymbolBuilder from BoundTarget and minimize ...
• 057cc6d fix(core): remove obsolete iOS cursor pointer hack in event delegation
• c9f8f3a test(core): add missing import of ChangeDetectionStrategy in query_spec
• 910dcb6 refactor(compiler-cli): decouple TemplateSymbolBuilder from ts.TypeChecker
• 82192de fix(core): handle missing serialized container hydration data
• 2ae0912 refactor(core): address review comments on NG0750 error message
• e583f4c refactor(core): Add more detail to NG0750 error message
• 0b08e29 test(core): refactors test to use timeout utility
• 4ad6d58 build: update cross-repo angular dependencies to v21.2.6
• d04ddd7 fix(core): prevent binding unsafe attributes on SVG animation elements (#67797)
• Additional commits viewable in compare view

Updates @angular/forms from 21.2.1 to 21.2.8

Release notes

Sourced from @​angular/forms's releases.

21.2.8

compiler

Commit	Description
	handle nested brackets in host object bindings

compiler-cli

Commit	Description
	error for type parameter declarations

core

Commit	Description
	handle missing serialized container hydration data
	remove obsolete iOS cursor pointer hack in event delegation

language-service

Commit	Description
	get quick info at local var location to align with TS semantics and support type narrowing

21.2.7

compiler

Commit	Description
	register SVG animation attributes in URL security context (#67797)

compiler-cli

Commit	Description
	prevent recursive scope checks for invalid NgModule imports

core

Commit	Description
	prevent binding unsafe attributes on SVG animation elements (#67797)
	resolve component import by exact specifier in route lazy-loading schematic
	treat object[data] as resource URL context (#67797)

localize

Commit	Description
	validate locale in getOutputPathFn to prevent path... Description has been truncated

[github-actions]

This change predominantly updates several dependencies and development dependencies within the package.json file. The focus is on upgrading various Angular packages, along with other essential libraries like ApexCharts, eslint, jasmine-core, sass, and TypeScript, aligning them with their latest versions for improved performance, security, and compatibility.

Walkthrough

• Chore: Updated multiple dependencies and devDependencies to their latest versions for enhanced stability and compatibility.
• Style: Improved package ecosystem with updated library versions, providing end-users potentially smoother and more bug-free interactions.
• Performance: These updates can lead to a more responsive and efficient frontend application by utilizing optimized library functionalities.

_{Model: gpt-4o-2024-08-06 | Prompt Tokens: 1103 | Completion Tokens: 132}

[github-actions]

Here's a collaborative code review enhanced with AI insights. These suggestions are thoughtful recommendations rather than definitive requirements, so please adapt them to fit your project's unique needs. You remain the expert developer making the final choices—AI simply offers additional perspective to support your decision-making process.

---

Always critique what AI says. Do not let AI replace YOUR I.
_{Model: claude-sonnet-4-20250514 | Prompt Tokens: 2117 | Completion Tokens: 648}

[github-actions]

Consider aligning Angular dependency versions for better consistency. Currently, most Angular packages are updated to ^21.2.8 but @angular/cdk and @angular/material are at ^21.2.6. This version mismatch could potentially cause compatibility issues.

"@angular/cdk": "^21.2.8",
"@angular/material": "^21.2.8"

[github-actions]

The @angular-eslint/template-parser package remains at version ^21.2.0 while other @angular-eslint packages have been updated to ^21.3.1. This inconsistency should be addressed to ensure all ESLint Angular tools work together properly.

"@angular-eslint/template-parser": "^21.3.1"

[github-actions]

The @typescript-eslint/parser version ^8.39.0 is significantly behind the @typescript-eslint/eslint-plugin version ^8.58.1. These packages should be kept in sync to avoid potential compatibility issues.

"@typescript-eslint/parser": "^8.58.1"

[github-actions]

The TypeScript version has been updated to 6.0, but this appears to be a major version jump. Ensure that this is intentional and that your codebase is compatible with TypeScript 6.0. You might want to verify this version exists and is stable, as TypeScript typically uses semantic versioning with more granular releases.

"typescript": "~5.9.0"

Consider using the tilde (~) operator for TypeScript to allow patch updates while preventing potentially breaking minor updates.