[Snyk] Security upgrade @angular/compiler from 18.2.13 to 19.2.17

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• Angular/package.json
• Angular/package-lock.json

---

This major version upgrade to Angular 19 introduces fundamental architectural changes, making Standalone the default for components, directives, and pipes. It also includes breaking changes to the reactivity API and requires a TypeScript version update.

• Standalone Components by Default: Components, directives, and pipes are now standalone: true by default. The ng update command attempts to automatically migrate existing code by adding standalone: false where needed, but manual verification is essential to ensure modules and components behave as expected. [4, 5, 7]
• Reactivity API Change in effect(): The allowSignalWrites flag has been removed from the effect() function. Signals can now be written within an effect by default, which could alter the behavior of existing reactive logic that relied on the previous, more restrictive behavior. [4]
• TypeScript 5.6+ is Required: Angular 19 requires TypeScript version 5.6 or later. Projects using older versions of TypeScript will encounter compilation errors and must be updated. [5, 11]

Recommendation: Execute ng update @angular/core@19 @angular/cli@19 to leverage the automated migrations. Afterward, thoroughly test the application, paying special attention to component declarations and any logic using Angular's effect() function.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCOMPILER-14157154	189

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)