[Snyk] Security upgrade @angular/compiler-cli from 13.2.3 to 18.2.8

[bartosz-io]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @angular/compiler-cli

The new version differs by 250 commits.

• 9e0d294 release: cut the v18.2.8 release
• 21be258 fix(compiler): scope :host-context inside pseudo selectors, do not decrease specificity (#57796)
• d325f9b fix(compiler): fix parsing of the :host-context with pseudo selectors (#57796)
• aea747a fix(compiler): preserve attributes attached to :host selector (#57796)
• 11692c8 fix(compiler): add multiple :host and nested selectors support (#57796)
• 48a1437 fix(compiler): fix comment typo (#57796)
• 66dcc69 fix(compiler): allow combinators inside pseudo selectors (#57796)
• 7a6fd42 fix(compiler): transform pseudo selectors correctly for the encapsulated view (#57796)
• 31fb9d0 docs: mention autoDetectChanges parameter default value (#58092)
• b40875a fix(platform-server): destroy `PlatformRef` when error happens during the `bootstrap()` phase (#58112) (#58135)
• 59394ee build: update actions/cache digest to 3624ceb (#58125)
• 46bafb0 fix(core): clean up afterRender after it is executed (#58119)
• 9ca9db4 refactor(core): drop `ViewRefTracker` in favor of `ApplicationRef`. (#58096)
• 9f2726b refactor(docs-infra): add tooltip to the download button in playground (#58065)
• 490786a docs: complete the example in use InjectionToken section (#57839)
• 7b13d34 build: update scorecard action dependencies (#58116)
• 99b5417 build: update actions/cache digest to 2cdf405 (#58107)
• bf83801 build: update actions/checkout digest to eef6144 (#58108)
• 02de7fc fix(zone.js): remove `abort` listener once fetch is settled (#57882)
• f187c3a fix(compiler-cli): defer symbols only used in types (#58104)
• 7eb264a docs: use correct heading in templates guide (#58101)
• b35e7f8 docs: add info on `AbstractControl.source` type. (#58094)
• 10081a9 docs: move JSDoc before functions (#58087)
• 0e225ce docs(docs-infra): Add NgModule exports for directives. (#58071)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption