[Snyk] Security upgrade @angular/compiler from 9.1.13 to 19.2.17

[patzeltj]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• src/frontend/packages/core/package.json

---

This is an extremely high-risk upgrade across 10 major versions, involving multiple fundamental architectural shifts and paradigm changes. A direct migration is not feasible; a carefully planned, incremental upgrade path from one major version to the next is required. [3, 24] Key breaking changes include the complete removal of the legacy View Engine compiler, the introduction of Standalone Components, a new reactivity model with Signals, and updated template control flow syntax.

• View Engine Removal: As of v13, the legacy View Engine is completely removed, making the Ivy compiler mandatory. [9, 10, 15] This requires all libraries and dependencies to be Ivy-compatible, and removes the need for the Angular Compatibility Compiler (ngcc). [21]
• Architectural Paradigm Shifts: The framework has evolved significantly. Standalone Components became stable in v15, allowing for applications without NgModules. [2, 17, 23] Starting in v16, a new reactivity system using Signals was introduced, paving the way for zoneless applications. [11, 25, 35]
• Template Syntax and Core Dependencies: Angular v17 introduced a new built-in control flow syntax (e.g., @if, @for) that replaces older structural directives like *ngIf and *ngFor. [19, 22] Additionally, support for Internet Explorer 11 was removed in v13 [12, 29], and required versions for both Node.js and TypeScript have been raised with nearly every major release. [4, 15, 16]

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-JS-ANGULARCOMPILER-14157154	706

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)