SWI-3723 [Snyk] Fix for 2 vulnerabilities

[bwappsec]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• samples/client/petstore/typescript-angular-v13-provided-in-root/package.json
• samples/client/petstore/typescript-angular-v13-provided-in-root/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCOMPILER-14908872	161
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCORE-14908871	161

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

[bwappsec]

This is a major upgrade spanning six versions (v13 → v19) and introduces fundamental, breaking architectural changes. A direct upgrade is not feasible; a sequential, version-by-version migration is required.

Key Breaking Changes:

• Standalone by Default: The concept of NgModule is now legacy. Since v17, components, directives, and pipes are generated as standalone by default, changing how applications are structured and dependencies are managed.
• New Template Control Flow: The structural directives *ngIf, *ngFor, and *ngSwitch have been replaced by a new, built-in block syntax (@if, @for, @switch).
• Reactivity with Signals: A new signal-based reactivity model has been introduced to manage state, aiming to eventually make Zone.js optional. This is a new paradigm for change detection.
• View Engine Removed: As of v16, the legacy View Engine and the Angular Compatibility Compiler (ngcc) have been completely removed. Libraries not compiled with the modern Ivy engine are no longer compatible.

Source: Angular Update Guide
Recommendation: Do not attempt a direct upgrade from 13 to 19. Follow the official Angular Update Guide to upgrade one major version at a time, running migrations and tests at each step.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[bwappsec]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.