[Snyk] Fix for 6 vulnerabilities

[snyk-io]

Snyk has created this PR to fix 6 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• chargebee-js-angular/package.json
• chargebee-js-angular/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-15353387	710
	Inefficient Algorithmic Complexity SNYK-JS-MINIMATCH-15353389	710
	Server-side Request Forgery (SSRF) SNYK-JS-ANGULARBUILD-15357312	660
	Server-side Request Forgery (SSRF) SNYK-JS-ANGULARDEVKITBUILDANGULAR-15357315	660
	Server-side Request Forgery (SSRF) SNYK-JS-SCHEMATICSANGULAR-15357313	660
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCORE-15353393	580

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Cross-site Scripting (XSS)
🦉 Regular Expression Denial of Service (ReDoS)

[snyk-io]

This is a complex and high-risk upgrade, advancing across two major versions of the Angular framework from v18 to v20 for the CLI and from v18 to v19 for Core and other packages. This update introduces significant breaking changes that will require code refactoring, dependency updates, and thorough testing.

Key Breaking Changes (v18 → v19):

• Standalone by Default: New components, directives, and pipes are now generated as standalone. Projects still using NgModules must manually set standalone: false in schematics or update their architecture.
• TypeScript 5.6+ Required: The project's TypeScript version must be updated.
• effect() API Change: The allowSignalWrites flag has been removed from effect(), and writes are now enabled by default. This may affect custom effects logic.
• New Schematics: The Angular CLI provides new schematics to help migrate from constructor injection to the inject() function and to adopt signal-based inputs.

Key Breaking Changes (v19 → v20):

• Removal of Deprecated Modules:
  • View Engine: The legacy View Engine renderer has been completely removed. All code and libraries must be Ivy-compatible.
  • @angular/http: This module, deprecated since v5, is now removed. All HTTP calls must use HttpClient from @angular/common/http.
  • @angular/upgrade: The package for running hybrid AngularJS/Angular applications has been removed.
• Testing Breakages:
  • ng-reflect-* attributes are no longer added in development mode, which will break tests that relied on them for querying elements.
  • TestBed.get() is removed. Use TestBed.inject() instead.
• Zoneless (Developer Preview): Zoneless applications are now in developer preview. If you opt-in, you must remove zone.js from your polyfills.

ng-packagr v18 → v19:

• This major version upgrade aligns with Angular v19 and likely drops support for older Node.js and TypeScript versions that are incompatible with Angular 19.

Recommendation: This upgrade cannot be performed passively. It requires a dedicated migration effort. Use the official ng update command and follow the Angular Update Guide precisely. It is strongly advised to perform the upgrade sequentially: first from v18 to v19, address all breaking changes, and then proceed from v19 to v20.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

⛔ Snyk checks have failed. 1 issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (1)
⛔	Open Source Security	0	1	0	0	1 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[hivel-marco]

Secrets found in the following files: chargebee-js-angular/package-lock.json
PII found in the following files: chargebee-js-angular/package-lock.json

• chargebee-js-angular/package.json
  PR has too many lines changed - Skipping review. Please keep lines changed under 2000 for high quality reviews