Skip to content

Resolve "Review and address high-level vulnerabilities as per vulnerabilities report"

Closes #1354 (closed)

Both affected packages are trans deps of @angular-devkit/build-angular (determined by yarn why). We're using v16.2.16 of that package, which seems to be the last version of v16 (i.e. there is no v16.2.17 or v16.3).

Upgrading Angular to a new major version seems like an overkill for this issue. So I just upgraded the 2 affected trans deps by specifying the patched versions in the package.json resolutions

Merge request reports

Loading