chore(deps): bump @ngrx/component from 22.0.0-rc.0 to 22.0.0

[dependabot]

Bumps @ngrx/component from 22.0.0-rc.0 to 22.0.0.

Changelog

Sourced from @​ngrx/component's changelog.

22.0.0-beta.0 (2026-07-16)

Bug Fixes

• entity: infer selectId return type from adapter configuration (#5085) (de9bf52)
• signals: execute state watchers outside of reactive context (#5171) (dbd6fac), closes #5165
• www: fix same-page fragment links (#5193) (b90671e)
• www: stub api references (#5162) (6df7b20)

Features

• prepare v22 release (#5182) (6d41f5c)
• eslint-plugin: drop support for eslint v8 and legacy eslintrc config format (#5175) (4240de4), closes #5169
• operators: remove deprecated tapResponse signature (#5153) (e9316ed)
• router-store: deprecate APIs from data-persistence sub-package (#5180) (46c0077)
• signals: add resource extensions (#5167) (c61f834), closes #5126
• signals: enable creation of dynamic deep signals (#5187) (fa0780e)
• upgrade to Angular 22 (#5155) (7b5aa8e)

BREAKING CHANGES

• signals: Union state slices and computed results that include an object literal now create a DeepSignal for each object literal member, instead of exposing the whole union as a single Signal.

BEFORE:

A union that included an object literal was exposed as a single Signal of the whole union.

signalState:

const state = signalState<{ user: { name: string } | null }>({
  user: null,
});
// state.user: Signal<{ name: string } | null>

signalStore:

const Store = signalStore(
  withState<{ user: { name: string } | null }>({ user: null })
);
const store = inject(Store);
// store.user: Signal<{ name: string } | null>

deepComputed:

... (truncated)

Commits

• 18b9914 chore: release 22.0.0
• 47d574e docs: improve a11y (#5211)
• f03bbe5 docs: add Gold Sponsors to homepage (#5210)
• dfa3769 docs: add coderabbit as sponsor (#5209)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[numbers-official]

Automated Code Review (Heartbeat Deep Check)

Reviewed lockfile-only diff for this PR (bumps @ngrx/component 22.0.0-rc.0 → 22.0.0 stable, plus the same transitive dev/peer clean-up as sibling patch-updates PR: removes stale less/needle/jiti/image-size/copy-anything/is-what/errno peer chains, bumps @types/node dev 26.1.2 → 26.4.0). Direct @ngrx/component runtime dep in package.json advances from 22.0.0-rc.0 to 22.0.0 (rc-to-GA of the same minor line).

Findings

• No regression risks, bugs, or security concerns found. Rc → GA on the same 22.0.0 line typically only lands stabilization fixes, and CI (build, test, dependabot-lockfile-normalize, CodeQL PR #3529) is all green on the current head.

Summary

Safe to merge from an automated-review perspective — still requires human approval. Suggest a quick smoke test of any component using @ngrx/component's LetDirective / PushPipe (async state binding in templates) before merging in case the rc → stable delta touched change-detection behaviour.