chore(deps): update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@analogjs/vite-plugin-angular	2.7.1 → 2.7.2			devDependencies	patch
@analogjs/vitest-angular (source)	2.7.1 → 2.7.2			devDependencies	patch
@angular-devkit/build-angular	22.1.7 → 22.1.8			devDependencies	patch
@angular-devkit/core	22.1.7 → 22.1.8			devDependencies	patch
@angular-devkit/schematics	22.1.7 → 22.1.8			devDependencies	patch
@angular-eslint/eslint-plugin (source)	22.2.0 → 22.5.0			devDependencies	minor
@angular-eslint/eslint-plugin-template (source)	22.2.0 → 22.5.0			devDependencies	minor
@angular-eslint/template-parser (source)	22.2.0 → 22.5.0			devDependencies	minor
@angular/animations (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/cdk	22.1.5 → 22.1.7			devDependencies	patch
@angular/cdk	22.1.5 → 22.1.7			dependencies	patch
@angular/cli	22.1.7 → 22.1.8			devDependencies	patch
@angular/common (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/common (source)	22.1.5 → 22.1.7			peerDependencies	patch
@angular/compiler (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/compiler-cli (source)	22.1.5 → 22.1.7			devDependencies	patch
@angular/core (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/core (source)	22.1.5 → 22.1.7			peerDependencies	patch
@angular/forms (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/language-service (source)	22.1.5 → 22.1.7			devDependencies	patch
@angular/material	22.1.5 → 22.1.7			devDependencies	patch
@angular/material	22.1.5 → 22.1.7			dependencies	patch
@angular/material	22.1.5 → 22.1.7			peerDependencies	patch
@angular/material-moment-adapter	22.1.5 → 22.1.7			dependencies	patch
@angular/platform-browser (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/platform-browser-dynamic (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/router (source)	22.1.5 → 22.1.7			dependencies	patch
@angular/router (source)	22.1.5 → 22.1.7			peerDependencies	patch
@nx/angular (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/devkit (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/eslint (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/eslint-plugin (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/gradle (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/js (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/module-federation (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/playwright (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/vitest (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/web (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/webpack (source)	23.2.0 → 23.2.1			devDependencies	patch
@nx/workspace (source)	23.2.0 → 23.2.1			devDependencies	patch
@playwright/test (source)	1.62.1 → 1.63.0			devDependencies	minor
@redocly/cli	2.51.1 → 2.53.3			devDependencies	minor
@schematics/angular	22.1.7 → 22.1.8			devDependencies	patch
@swc/core (source)	1.16.1 → 1.16.2			devDependencies	patch
@types/node (source)	24.13.3 → 24.13.5			devDependencies	patch	24.13.6
@typescript-eslint/eslint-plugin (source)	8.69.0 → 8.70.0			devDependencies	minor
@typescript-eslint/parser (source)	8.69.0 → 8.70.0			devDependencies	minor
@typescript-eslint/utils (source)	8.69.0 → 8.70.0			devDependencies	minor
actions/setup-java	v6.0.0 → v6.0.1			action	patch
ag-grid-angular	36.1.0 → 36.2.0			dependencies	minor
ag-grid-community (source)	36.1.0 → 36.2.0			dependencies	minor
angular-eslint (source)	22.2.0 → 22.5.0			devDependencies	minor
autoprefixer	10.5.4 → 10.6.1			devDependencies	minor
docker/setup-buildx-action	v4.3.0 → v4.4.1			action	minor
docker/setup-qemu-action	v4.3.0 → v4.4.0			action	minor
eslint (source)	10.9.1 → 10.10.0			devDependencies	minor	10.11.0
github.com/jackc/pgx/v5	v5.10.0 → v5.11.0			require	minor
github/codeql-action	v4.37.9 → v4.38.0			action	minor	v4.38.1
golang.org/x/crypto	v0.56.0 → v0.57.0			require	minor
jsdom	30.0.1 → 30.1.0			devDependencies	minor
lint-staged	17.4.1 → 17.5.1			devDependencies	minor
memfs	4.69.1 → 4.78.0			pnpm-workspace.overrides	minor	4.78.1
nx (source)	23.2.0 → 23.2.1			devDependencies	patch
pnpm (source)	11.25.0 → 11.27.0			packageManager	minor
pnpm/action-setup	v6.0.10 → v6.1.0			action	minor
prettier (source)	3.9.6 → 3.9.7			devDependencies	patch	3.9.8
typescript-eslint (source)	8.69.0 → 8.70.0			devDependencies	minor
webpack	5.110.3 → 5.111.0			devDependencies	minor	5.111.1
yaml (source)	2.9.0 → 2.9.1			devDependencies	patch
org.springdoc:springdoc-openapi-starter-webmvc-ui (source)	3.1.0 → 3.1.1			dependencies	patch

---

Release Notes

analogjs/analog (@​analogjs/vite-plugin-angular)

v2.7.2

Compare Source

Bug Fixes

• content: resolve fragment-only anchor hrefs against the current document, not (#​2501) (83d299a)
• vite-plugin-angular: preserve source maps across TypeScript transforms (#​2506) (cad322b)
• vite-plugin-angular: use null for default providedIn setting for Injectable (#​2515) (c555ba6)
• vite-plugin-nitro: exclude load-only server-function hosts (#​2543) (68d67c5)

angular/angular-cli (@​angular-devkit/build-angular)

v22.1.8

Compare Source

@​angular/build

Commit	Type	Description
a6e30fa378	fix	disable strictPort when port 0 is used in dev-server
35a5d4aa49	perf	avoid full JSON parsing when updating sourcemap ignore list
48cc43cbf2	perf	read rendered module length once per module in chunk optimizer (#​34045)

angular-eslint/angular-eslint (@​angular-eslint/eslint-plugin)

v22.5.0

Compare Source

🚀 Features

• eslint-plugin: [sort-keys-in-type-decorator] disallow unconfigured properties (#​3193)

❤️ Thank You

• Максим Иванов

v22.4.0

Compare Source

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

v22.3.0

Compare Source

🚀 Features

• eslint-plugin: [reactive-context-must-read-signal] add new rule (#​3090)
• eslint-plugin: [inject-at-top] add additionalInjectFunctions option (#​3169)
• eslint-plugin: [use-injectable-provided-in] add allowProvidedInNull option (#​3152)

🩹 Fixes

• eslint-plugin: [reactive-context-must-read-signal] improve getter and function detection (#​3175)
• eslint-plugin: [prefer-signal-model] don't report when input and output types differ (#​3089)
• eslint-plugin: [prefer-signal-model] skip inputs with transform option (#​3050)
• eslint-plugin: [no-implicit-take-until-destroyed] report methods also called outside DI context (#​3164)

❤️ Thank You

• Anas B.
• Guillaume DROUARD
• James Henry @​JamesHenry
• Omar Jimenez @​omy13
• xonaib @​xonaib
• Zonaib Bokhari @​xonaib

angular-eslint/angular-eslint (@​angular-eslint/eslint-plugin-template)

v22.5.0

Compare Source

This was a version bump only for eslint-plugin-template to align it with other projects, there were no code changes.

v22.4.0

Compare Source

🚀 Features

• eslint-plugin-template: [no-inline-styles] add "dynamic" option value for style bindings (#​3190)
• eslint-plugin-template: add prefer-style-binding rule (#​3188)
• eslint-plugin-template: [no-inline-styles] allow [style] bindings via allowBindToStyle (#​3112)
• eslint-plugin-template: support regex entries in ignoreWithDirectives option (#​3180)
• eslint-plugin-template: [click-events-have-key-events] add requireKeyCode and allowedKeyCodes options (#​3178)

🩹 Fixes

• eslint-plugin-template: [prefer-at-else] avoid unsafe content projection fixes (#​3189)
• eslint-plugin-template: [no-nested-tags] treat ng-template as a nesting boundary (#​3187)
• eslint-plugin-template: [prefer-self-closing-tags] ignore all index.html files (#​3184)
• eslint-plugin-template: [eqeqeq] honor allowNullOrUndefined across compiler copies (#​3182)
• eslint-plugin-template: [prefer-self-closing-tags] ignore children of svg and math elements (#​3181)

❤️ Thank You

• AI-JamesHenry @​AI-JamesHenry
• James Henry @​JamesHenry
• Zonaib Bokhari @​xonaib
• Максим Иванов

v22.3.0

Compare Source

This was a version bump only for eslint-plugin-template to align it with other projects, there were no code changes.

angular-eslint/angular-eslint (@​angular-eslint/template-parser)

v22.5.0

Compare Source

This was a version bump only for template-parser to align it with other projects, there were no code changes.

v22.4.0

Compare Source

This was a version bump only for template-parser to align it with other projects, there were no code changes.

v22.3.0

Compare Source

This was a version bump only for template-parser to align it with other projects, there were no code changes.

angular/angular (@​angular/animations)

v22.1.7

Compare Source

compiler

Commit	Type	Description
5e632b639f	fix	wrap @for collection expression before appending non-null assertion

core

Commit	Type	Description
ec48c8305c	fix	return null when getDirectiveMetadata is called with null or undefined

forms

Commit	Type	Description
6555c4ee1e	fix	mark control as dirty before setting its value in FVC interop

v22.1.6

Compare Source

compiler

Commit	Type	Description
cbb8702143	fix	namespace @property declarations

compiler-cli

Commit	Type	Description
aea121e532	fix	do not flag callable objects with zero parameters in uninvoked track function check

core

Commit	Type	Description
c19b948ef8	fix	apply SkipSelf to only the starting node in embedded views

platform-server

Commit	Type	Description
d20a379583	fix	avoid sourcemap corruption during domino path substitution

router

Commit	Type	Description
95c01e9cde	fix	keep detached route subtree contexts isolated and intact

angular/components (@​angular/cdk)

v22.1.7

Compare Source

cdk

Commit	Type	Description
a9b6b74bb	fix	table: update rows when row definitions change (#​33670)

v22.1.6

Compare Source

cdk

Commit	Type	Description
690ddb4a2	fix	overlay: expose currently open overlays (#​33768)

nrwl/nx (@​nx/angular)

v23.2.1

Compare Source

23.2.1 (2026-09-09)

🚀 Features

• core: report the cache location alongside usage (#​36959)
• repo: add a .NET example for @​nx/dotnet (#​36701)

🩹 Fixes

• angular: correct declaration maps and exports of buildable libraries (#​36373, #​36357)
• core: separate daemon runtime env from graph identity (#​36565, #​36564)
• core: validate the migrations path before extracting package migrations (#​36887)
• core: release per-run process listeners and task history results (#​36866)
• core: read the pnpm 12 min-release-age policy instead of deferring to an install (#​36915, #​36914)
• core: carry minimumReleaseAge into pruned pnpm deploy output (#​36900, #​36899)
• core: report how a plugin worker was lost instead of always calling it an exit (#​36894)
• core: keep the cache in the workspace on CI (#​36922)
• core: restore the wasm walker imports dropped by a stray cfg attribute (#​36924)
• core: avoid mutating target options when resolving configurations (#​36934)
• js: resolve tsconfig to absolute path so ${configDir} paths type-check without baseUrl (#​36445)
• misc: scan package projects for env vars (#​36847)
• release: exclude AI coding agents from the changelog Thank You section (#​36892)
• release: use the release group name when resolving the previous tag for fixed groups (#​36554)
• repo: provision JDK 17 for Gradle builds with mise (#​36965)
• repo: guard JAVA17_HOME against an uninstalled JDK (#​36969)
• rspack: write the normalized cache option in NxAppRspackPlugin (#​36905, #​36878)

❤️ Thank You

• AgentEnder @​AgentEnder
• Caleb Ukle
• Claude
• Craigory Coppola @​AgentEnder
• Denis Frenademetz @​skrtheboss
• Eduardo Speroni @​edusperoni
• Federico Bartoli
• FrozenPandaz @​FrozenPandaz
• Jack Stevenson
• Jason Jean @​FrozenPandaz
• Jupiter Jayna @​sdjayna
• Juri Strumpflohner @​juristr
• Leosvel Pérez Espinosa @​leosvelperez
• Nicolas Beaussart @​beaussan
• ShwethaSundar
• Stephen Jayna

microsoft/playwright (@​playwright/test)

v1.63.0

Compare Source

Redocly/redocly-cli (@​redocly/cli)

v2.53.3

Compare Source

Patch Changes

• Fixed respect so a same-workflow goto no longer cleared $steps outputs from steps that already ran.
  Previously, this broke $steps expressions in the target step.
• Updated @​redocly/respect-core to v2.53.3.

v2.53.2

Compare Source

Patch Changes

• Added start and end line and column positions to each problem location in the --format=json lint output.
• Updated @​redocly/openapi-core to v2.53.2.

v2.53.1

Compare Source

Patch Changes

• Added a deprecation warning to the build-docs command about the upcoming switch to Redoc 3.

v2.53.0

Compare Source

Minor Changes

• Added a disallowDefault option to the operation-2xx-response rule, which requires an explicit 2xx response when enabled.
  There is no change in current behavior.

Patch Changes

• Updated @​redocly/openapi-core to v2.53.0.

v2.52.1

Compare Source

Patch Changes

• Updated redoc to the 2.5.4 version to fix accessibility problems in the HTML produced by build-docs.
  Added the lang attribute to the default build-docs template.

v2.52.0

Compare Source

Minor Changes

• Added agent skills for AI coding assistants: redocly-cli for everyday CLI usage, redocly-lint-rules for writing configurable rules and custom plugins.
  Install them with npx skills add https://redocly.com.
• Added an experimental inspect-node-types command to navigate the Redocly's node type tree of an API description.
  inspect-node-types helps pick the correct subject types for a configurable rule or the correct visitor for a custom plugin.
• Added a strategy option to the component-name-unique rule, matching the --component-names-strategy option of the bundle command.
• Added an experimental introspect-mcp command that analyzes a running MCP server and records its tools, prompts, resources, and capabilities.
  introspect-mcp records its findings in the x-mcp extension of an OpenAPI description.

Patch Changes

• Updated @​redocly/openapi-core to v2.52.0.

v2.51.2

Compare Source

Patch Changes

• Updated fast-uri to the 3.1.7 version to resolve CVE-2026-75931, CVE-2026-75975, CVE-2026-75899, and CVE-2026-76172.
• Fixed drift and coverage failing to match a path template whose segment mixes literal text with parameters, such as /instances/{worldId}:{instanceId}.
• Fixed an issue where Redocly config resolution failed when plugins used ESM syntax.
• Updated @​redocly/openapi-core to v2.51.2.

swc-project/swc (@​swc/core)

v1.16.2

[Compare Source](https://re

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: apps/backend/identity-service/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=2 days

Details:

Package	Change
golang.org/x/sync	v0.22.0 -> v0.23.0
golang.org/x/sys	v0.47.0 -> v0.48.0
golang.org/x/text	v0.41.0 -> v0.42.0