[Snyk] Fix for 2 vulnerabilities

[negue]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	No	Proof of Concept
	688/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.9	Improper Access Control SNYK-JS-VITE-6531286	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @angular-devkit/build-angular

The new version differs by 43 commits.

• bb23e09 release: cut the v16.2.14 release
• 1068c3c fix(@ angular-devkit/build-angular): update vite to `4.5.3`
• b951c58 release: cut the v16.2.13 release
• 882fff3 test: update Safari 15 private property E2E for babel changes
• bdcc5a1 test: disable failing test
• 6b8722d build: update ng-dev config to work with Node.js 18.19
• 5ad507e fix(@ angular-devkit/build-angular): `update webpack-dev-middleware` to `6.1.2`
• 50a46c6 test: update webpack tests filenames and size checks to pass with latest webpack
• c306f73 release: cut the v16.2.12 release
• 5fad401 fix(@ angular-devkit/build-angular): update dependency vite to v4.5.2
• 75ab5fa release: cut the v16.2.11 release
• 8314369 test: always use package manager force option in version add command E2E
• e0e011f build: update dependency vite to v4.5.1
• 66b18b6 release: cut the v16.2.10 release
• bab3672 fix(@ angular-devkit/build-angular): normalize exclude path
• 64e263e docs: the node.js's link fix.
• 5085c62 release: cut the v16.2.9 release
• 2a1bbc0 fix(@ angular-devkit/schematics): running external schematics with yarn pnp
• 5f4ca4e fix(@ angular-devkit/schematics): running external schematics with yarn pnp
• 75b7491 fix(@ schematics/angular): allow dash in selector before a number
• 8f16486 release: cut the v16.2.8 release
• 4427560 fix(@ angular/cli): remove the need to specify `--migrate-only` when `--name` is used during `ng update`
• b5d4003 release: cut the v16.2.7 release
• f1a0c33 fix(@ schematics/angular): change Twitter logo to X

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution