[Snyk] Security upgrade @angular-devkit/build-angular from 15.2.11 to 18.0.0

[thavelock]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • frontend/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	141/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Local, EPSS: 0.01055, Social Trends: No, Days since published: 174, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.35, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @angular-devkit/build-angular

The new version differs by 250 commits.

• 6a7ad0e release: cut the v18.0.0 release
• 2320352 build: update Angular packages to v18 stable
• dd786d4 fix(@ angular/cli): only add --version option on default command
• 2aeecd6 release: cut the v18.0.0-rc.3 release
• 41ab6c8 fix(@ angular/cli): add `--version` option
• f4670fc fix(@ angular/cli): eliminate prompts during `ng version` command
• d034c1b build: update angular
• 5389c7a refactor: replace vite server.ws.send usages
• 4d7cd5e fix(@ angular/build): correctly wrap class expressions with static properties or blocks emitted by esbuild
• decca6e refactor(@ angular/build): fully move postcss to an optional peer dependency
• 4e05ab6 refactor(@ angular/cli): show optional migration name and documentation URL if available during updates
• 3c93f94 refactor(@ schematics/angular): improve optional application migration description
• a99ec6a fix(@ angular/cli): keep cli package first in update package group metadata
• 7e8c6a7 ci: split ci into privileged and unprivileged workflows
• f51cea7 build: update all non-major dependencies
• bc5644c refactor(@ angular/cli): use prompt helper functions in analytics and completion commands
• 1039f6d fix(@ angular/cli): change update guide link to angular.dev
• e7ef048 build: update actions/checkout action to v4.1.6
• 5da14ed build: update all non-major dependencies
• aec632b build: update angular
• 2265f63 refactor(@ angular/build): cleanup persistent JS transformer cache on plugin dispose
• 4111153 fix(@ angular/build): add console note about development server raw file size
• dc20948 refactor(@ angular-devkit/schematics): reduce direct rxjs usage in filter host tree
• 86b53c5 fix(@ angular-devkit/schematics): `SchematicTestRunner.runExternalSchematic` fails with "The encoded data was not valid for encoding utf-8"

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.