chore: resolve open dependabot security alerts (#252)

* chore: resolve open dependabot security alerts

- vitest ^2.1.9 -> ^4.1.0 to fix UI server arbitrary file read/exec (critical, GHSA-5xrq-8626-4rwp, alerts #40 #41)
- @analogjs/vitest-angular ^1.11.0 -> ^2.6.0 for vitest 4 compatibility
- add ws ^8.21.0 override to avoid reintroducing GHSA-58qx-3vcg-4xpx via jsdom

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: bump angular-integration node engine to >=22 for vitest 4

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: bump esbuild to ^0.28.1 in integration tests to resolve security alerts

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: raise angular-integration node engine floor to >=22.22.3

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* test(angular): flush change detection in directive else-template assertions

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* Revert "test(angular): flush change detection in directive else-template assertions"

This reverts commit 92b3257.

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: use vitest ^3.2.6 (patched) with @analogjs/vitest-angular ^1.22.5

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: revert to vitest ^4.1.0 toolchain (3.x regresses angular directive tests)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* fix(angular): set feature flag value before super.ngOnChanges so else template renders

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: regenerate API client (oapi-codegen v2.7.0 -> v2.7.1)

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: bump angular to 19.2.25 and form-data to 4.0.6 for security alerts

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: resolve form-data via lockfile instead of direct dependency

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

* chore: align angular-integration node engine range with subdependency constraints

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

---------

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

Author: jonathannorris

internal/api/client/sync_client.gen.go

@@ -424,9 +424,9 @@ export class DiscountPercentageFeatureFlagDirective extends FeatureFlagDirective
   }
 
   override ngOnChanges() {
-    super.ngOnChanges();
-
     this._featureFlagValue = this.discountPercentageFeatureFlagValue;
+
+    super.ngOnChanges();
   }
 
   /**
@@ -696,9 +696,9 @@ export class GreetingMessageFeatureFlagDirective extends FeatureFlagDirective<st
   }
 
   override ngOnChanges() {
-    super.ngOnChanges();
-
     this._featureFlagValue = this.greetingMessageFeatureFlagValue;
+
+    super.ngOnChanges();
   }
 
   /**
@@ -837,9 +837,9 @@ export class ThemeCustomizationFeatureFlagDirective extends FeatureFlagDirective
   }
 
   override ngOnChanges() {
-    super.ngOnChanges();
-
     this._featureFlagValue = this.themeCustomizationFeatureFlagValue;
+
+    super.ngOnChanges();
   }
 
   /**
@@ -978,9 +978,9 @@ export class UsernameMaxLengthFeatureFlagDirective extends FeatureFlagDirective<
   }
 
   override ngOnChanges() {
-    super.ngOnChanges();
-
     this._featureFlagValue = this.usernameMaxLengthFeatureFlagValue;
+
+    super.ngOnChanges();
   }
 
   /**

internal/cmd/testdata/success_angular.golden

@@ -221,9 +221,9 @@ export class {{ .Key | ToPascal }}FeatureFlagDirective extends FeatureFlagDirect
 {{- if ne $type "boolean" }}
 
   override ngOnChanges() {
-    super.ngOnChanges();
-
     this._featureFlagValue = this.{{ .Key | ToCamel }}FeatureFlagValue;
+
+    super.ngOnChanges();
   }
 {{- end }}