[dependabot]

Bumps the minor-and-patch group with 17 updates in the /frameworks/angular directory:

Package	From	To
@angular/common	22.2.0	22.2.3
@angular/compiler	22.2.0	22.2.3
@angular/core	22.2.0	22.2.3
@angular/forms	22.2.0	22.2.3
@angular/platform-browser	22.2.0	22.2.3
@angular/router	22.2.0	22.2.3
@angular-eslint/builder	22.5.0	22.6.0
@angular/build	22.2.0	22.2.4
@angular/cli	22.2.0	22.2.4
@angular/compiler-cli	22.2.0	22.2.3
angular-eslint	22.5.0	22.6.0
eslint	10.11.0	10.13.0
jsdom	30.1.1	30.1.3
postcss	8.5.28	8.5.31
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vitest	5.0.1	5.0.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
@angular/common	22.2.0	22.2.3
@angular/compiler	22.2.0	22.2.3
@angular/core	22.2.0	22.2.3
@angular/forms	22.2.0	22.2.3
@angular/platform-browser	22.2.0	22.2.3
@angular/router	22.2.0	22.2.3
@angular-eslint/builder	22.5.0	22.6.0
@angular/build	22.2.0	22.2.4
@angular/cli	22.2.0	22.2.4
@angular/compiler-cli	22.2.0	22.2.3
angular-eslint	22.5.0	22.6.0
eslint	10.11.0	10.13.0
jsdom	30.1.1	30.1.3
postcss	8.5.28	8.5.31
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vitest	5.0.1	5.0.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10

Bumps the minor-and-patch group with 6 updates in the /frameworks/nuxt/keycloak-js directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
nuxt	4.5.2	4.6.2
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13
nuxt	4.5.2	4.6.2
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13

Bumps the minor-and-patch group with 8 updates in the /frameworks/nuxt/oidc-client-ts directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
nuxt	4.5.2	4.6.2
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13
@pinia/nuxt	1.0.2	1.0.3
nuxt	4.5.2	4.6.2
pinia	4.0.3	4.1.0
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13

Bumps the minor-and-patch group with 9 updates in the /frameworks/reactjs/oidc-client-ts directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2

Bumps the minor-and-patch group with 11 updates in the /frameworks/reactjs/oidc-spa directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
oidc-spa	10.2.15	10.2.18
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
zod	4.6.5	4.6.7
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2

Bumps the minor-and-patch group with 9 updates in the /frameworks/reactjs/oidc-spa-starter directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
react	19.3.0	19.3.1
react-dom	19.3.0	19.3.1
@types/node	24.13.6	24.19.2
@vitejs/plugin-react	6.1.1	6.1.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2

Bumps the minor-and-patch group with 17 updates in the /frameworks/spring-boot-keycloak/angularclient directory:

Package	From	To
@angular/common	22.2.0	22.2.3
@angular/compiler	22.2.0	22.2.3
@angular/core	22.2.0	22.2.3
@angular/forms	22.2.0	22.2.3
@angular/platform-browser	22.2.0	22.2.3
@angular/router	22.2.0	22.2.3
@angular-eslint/builder	22.5.0	22.6.0
@angular/build	22.2.0	22.2.4
@angular/cli	22.2.0	22.2.4
@angular/compiler-cli	22.2.0	22.2.3
angular-eslint	22.5.0	22.6.0
eslint	10.11.0	10.13.0
jsdom	30.1.1	30.1.3
postcss	8.5.28	8.5.31
prettier	3.9.9	3.9.10
typescript-eslint	8.69.0	8.72.0
vitest	5.0.1	5.0.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.69.0	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.69.0	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.69.0	8.72.0
@angular/common	22.2.0	22.2.3
@angular/compiler	22.2.0	22.2.3
@angular/core	22.2.0	22.2.3
@angular/forms	22.2.0	22.2.3
@angular/platform-browser	22.2.0	22.2.3
@angular/router	22.2.0	22.2.3
@angular-eslint/builder	22.5.0	22.6.0
@angular/build	22.2.0	22.2.4
@angular/cli	22.2.0	22.2.4
@angular/compiler-cli	22.2.0	22.2.3
angular-eslint	22.5.0	22.6.0
eslint	10.11.0	10.13.0
jsdom	30.1.1	30.1.3
postcss	8.5.28	8.5.31
prettier	3.9.9	3.9.10
typescript-eslint	8.69.0	8.72.0
vitest	5.0.1	5.0.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.69.0	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10

Bumps the minor-and-patch group with 9 updates in the /frameworks/sveltekit directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
typescript-eslint	8.70.1	8.72.0
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
eslint-plugin-svelte	3.23.0	3.23.1
globals	17.12.0	17.13.0
prettier	3.9.9	3.9.10
svelte	5.57.1	5.57.2
svelte-check	4.7.6	4.7.7
typescript-eslint	8.70.1	8.72.0
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2

Bumps the minor-and-patch group with 8 updates in the /frameworks/vue directory:

Package	From	To
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vue-tsc	3.3.11	3.3.13
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
@types/node	24.13.6	24.19.2
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
vue	3.5.43	3.5.44
vue-router	5.3.1	5.4.0
@types/node	24.13.6	24.19.2
@vitejs/plugin-vue	6.0.9	6.0.10
eslint	10.11.0	10.13.0
prettier	3.9.9	3.9.10
vite	8.3.1	8.3.5
vue-tsc	3.3.11	3.3.13
@types/node	24.13.6	24.19.2

Bumps the minor-and-patch group with 2 updates in the /tools/e2e-smoke directory: @types/node and @playwright/test.

Updates @angular/common from 22.2.0 to 22.2.3

Release notes

Sourced from @​angular/common's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• dcb29a9 docs: fix @​param names that don't match their parameters
• fafec77 fix(common): harden param encoding against prototype pollution
• ad2f291 fix(common): let NgOptimizedImage pass a [srcset] binding through when srcset...
• 6dee7fe fix(http): forward reportProgress of httpResource as `reportDownloadProgr...
• 270abc9 docs(docs-infra): throw on absolute links in @​see tags
• See full diff in compare view

Updates @angular/compiler from 22.2.0 to 22.2.3

Release notes

Sourced from @​angular/compiler's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• 54f3de5 fix(compiler): check @boundary blocks in the control flow content projectio...
• 5e50658 fix(compiler): compare the operand in ReadTemporaryExpr.isEquivalent
• 35a02f8 fix(compiler): harden JIT against prototype pollution
• b6f9cc5 fix(compiler): do not scope comments placed inside of a selector
• 08075e8 fix(compiler): support dots in class binding names
• c7a72c2 fix(compiler): support popover property bindings
• 5ff83c1 fix(compiler): strip script elements regardless of namespace
• 6fa2b08 refactor(compiler): remove img/video src attribute from the URL security cont...
• fa63bfa fix(compiler): avoid leaking ::ng-deep detection state between rules
• 725ffcf fix(compiler): match namespaced root nodes of control flow blocks against ng-...
• Additional commits viewable in compare view

Updates @angular/core from 22.2.0 to 22.2.3

Release notes

Sourced from @​angular/core's releases.

22.2.3

common

Commit	Description
	harden param encoding against prototype pollution

compiler

Commit	Description
	check @boundary blocks in the control flow content projection diagnostic
	compare the operand in ReadTemporaryExpr.isEquivalent
	do not scope comments placed inside of a selector
	harden JIT against prototype pollution
	support dots in class binding names
	support popover property bindings

compiler-cli

Commit	Description
	inline tcb when depending on local directive

core

Commit	Description
	avoid deleting idle bucket created during another bucket's drain
	do not swallow compilation errors in computeStandaloneComponentScope
	don't crash initEventReplay when two apps share an APP_ID
	error when destroying embedded view with animations
	keep activeConsumer and currentInjector constant using Store helper
	skip nested tick from onMicrotaskEmpty while a tick is running

forms

Commit	Description
	use addEventListener to avoid unconditional CD scheduling on blur

migrations

Commit	Description
	normalize .d.ts paths in output migration field IDs

router

Commit	Description
	check abort signal state on subscribe

22.2.2

compiler

Commit	Description
	avoid leaking ::ng-deep detection state between rules
	avoid prototype lookups when resolving entities
	correctly match directives on <ng-template> nested in various namespaces
	ignore @let declarations in the control flow content projection diagnostic
	match namespaced root nodes of control flow blocks against ng-content tag selectors
	strip script elements regardless of namespace

... (truncated)

Commits

• 90af679 fix(core): do not swallow compilation errors in computeStandaloneComponentScope
• eca5fa4 fix(core): don't crash initEventReplay when two apps share an APP_ID
• cc515b8 perf(forms): use addEventListener to avoid unconditional CD scheduling on blur
• dcb29a9 docs: fix @​param names that don't match their parameters
• d04f214 fix(migrations): normalize .d.ts paths in output migration field IDs
• 51ce6e5 docs: use consistent headers in best-practices.md
• e59a230 fix(core): error when destroying embedded view with animations
• 08075e8 fix(compiler): support dots in class binding names
• 913ae74 fix(core): skip nested tick from onMicrotaskEmpty while a tick is running
• b5208f9 fix(core): avoid deleting idle bucket created during another bucket's drain
• Additional commits viewable in compare view

Updates @angular/forms from 22.2.0 to 22.2.3

Release notes

Sourced from @​angular/forms's releases.

22.2.3

common

Commit	Description
	har... Description has been truncated

[xgp]

Triage assessment

Automated triage assessment (not a human maintainer decision) based on main at 758b93d (2026-11-02).

• Priority: priority:P3. Routine minor/patch dependency maintenance for sample apps.
• Disposition: Ready for human review (triage:needs-review, execution:agent-ready for the validation pass); left open.
• Findings: Bumps 36 minor/patch updates across ten example directories (Angular 22.2.x, ESLint, Prettier, typescript-eslint, Vitest, jsdom, PostCSS, Playwright and others). Routine minor/patch updates; no security advisory is cited in the PR body. Because it spans ten independent examples, a regression in one example would block the whole group. All per-example Build and check jobs and the Spring Boot api / Gradle build passed on the PR head; Vercel deploys skipped by design for Dependabot PRs. The PR is based on the current main and GitHub reports it mergeable (merging is blocked only on the required review). Green CI is not proof of runtime behaviour: CI does not run a login against Keycloak.
• Evidence: PR checks on head f032512; .github/dependabot.yml; the files linked above (static inspection; no tests were run for this assessment).

Next action

Maintainer review and merge decision; optionally a local login smoke test first. No implementation work is needed.

First-pass agent prompt

Work on p2-inc/examples PR #100.

Objective
Validate the Dependabot update for 10 directories (Angular, Nuxt x2, React x3, Spring Boot Angular client, SvelteKit, Vue, tools/e2e-smoke) and report whether it can be merged without regressions.

Starting point and existing work
Target branch main at 758b93d (inspected 2026-11-02); PR head f032512476 from Dependabot. Refresh the branch and discussion before starting. Continue this PR; do not create a competing bump. If the branch is stale, ask Dependabot to rebase (@dependabot rebase comment) instead of editing lockfiles by hand.

Established facts and evidence

• 36 minor/patch updates across ten example directories (Angular 22.2.x, ESLint, Prettier, typescript-eslint, Vitest, jsdom, PostCSS, Playwright and others).
• All per-example Build and check jobs and the Spring Boot api / Gradle build passed on the PR head; Vercel deploys skipped by design for Dependabot PRs.

Code to inspect

• Each directory's package.json and pnpm-lock.yaml changed by the PR (20 files).
• tools/e2e-smoke (Playwright bump) since it is the shared smoke test.

Suggested approach

1. Check out the PR head in a sandbox with no GitHub write credentials or production secrets.
2. Run the validation below on main first, then on the PR head, and compare.
3. Report any behaviour or build difference; do not change application code unless a regression is found and explained.
   Validate any suspected regression before attributing it to the bump.

Acceptance criteria

• Install, typecheck, lint, test and build pass on the PR head as they do on main.
• Logging in and out against the local Keycloak still works for the affected example(s).
• Any new warning, deprecation or behaviour change is reported.

Validation

for d in frameworks/angular frameworks/nuxt/keycloak-js frameworks/nuxt/oidc-client-ts frameworks/reactjs/oidc-client-ts frameworks/reactjs/oidc-spa frameworks/reactjs/oidc-spa-starter frameworks/spring-boot-keycloak/angularclient frameworks/sveltekit frameworks/vue tools/e2e-smoke; do
  (cd $d && pnpm install --frozen-lockfile && pnpm run --if-present typecheck && pnpm run --if-present lint && pnpm run --if-present test && pnpm run --if-present build) || echo FAIL $d
done
# then run tools/e2e-smoke against at least one SPA (e.g. Vue on :3000) and Angular (:4200) with the local Keycloak

Scope and constraints
Review/validation only; do not hand-edit lockfiles or add unrelated upgrades. Major-version upgrades are out of scope.
Follow CONTRIBUTING.md (Node.js 24, pnpm with frozen lockfile, PKCE, no secrets). Avoid unrelated refactoring.

Expected output
A short review note on the PR: commands run, results on main vs the PR head, any regression found, and a merge/no-merge recommendation for a maintainer. Do not merge, release, or close the PR as part of this first pass.