[Snyk] Upgrade @angular/common from 13.3.6 to 13.4.0

[sumansaurabh]

User description

Snyk has created this PR to upgrade @angular/common from 13.3.6 to 13.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.

• The recommended version was released 2 years ago.

Release notes

Package name: @angular/common

• 13.4.0 - 2023-04-06
• 13.3.12 - 2022-11-21
• 13.3.11 - 2022-05-31
• 13.3.10 - 2022-05-25
• 13.3.9 - 2022-05-18
• 13.3.8 - 2022-05-12
• 13.3.7 - 2022-05-11
• 13.3.6 - 2022-05-04

from @angular/common GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

---

Description

• Upgraded @angular/common to version 13.4.0 to keep dependencies up-to-date.
• This upgrade helps in addressing existing vulnerabilities and improves security.
• The new version includes various improvements and bug fixes.

---

Changes walkthrough 📝

Relevant files

Dependencies

package-lock.json Upgrade @angular/common to version 13.4.0                                frameworks/hello-world-angular/webview-ui/package-lock.json Upgraded @angular/common from version 13.3.6 to 13.4.0. Updated integrity hash for the new version. Adjusted peer dependencies to match the new version. +9/-8      package.json Update @angular/common dependency version                                frameworks/hello-world-angular/webview-ui/package.json Changed @angular/common dependency version from ~13.3.0 to ~13.4.0. +1/-1

---

💡 Penify usage:
Comment /help on the PR to get a list of all available Penify tools and their descriptions

[penify-dev]

PR Review 🔍

⏱️ Estimated effort to review [1-5]	2, because the changes are straightforward and involve upgrading a package version with minimal impact on the codebase.
🧪 Relevant tests	No
⚡ Possible issues	No
🔒 Security concerns	No

[penify-dev]

PR Code Suggestions ✨

Category	Suggestion	Score
Security	Validate the integrity hash for the updated package version Verify that the integrity hash for @angular/common matches the expected value for version 13.4.0 to ensure package authenticity. frameworks/hello-world-angular/webview-ui/package-lock.json [392] -"integrity": "sha512-DHbPqRaxW7GmnkxqZaaasgC5OaFTeTBrmr7MJUsqsSGePHWuJYWU4QS3Fn86zd/VESJgBGmq2aCDEUmzfjnRQA==", +"integrity": "sha512-<expected_hash_for_13.4.0>", Suggestion importance[1-10]: 8 Why: This suggestion is important for security, as verifying the integrity hash ensures that the package has not been tampered with. However, the suggestion lacks the actual expected hash value.	8
Verification	Ensure the resolved URL is correct for the new package version Check that the resolved URL for @angular/common points to the correct version to avoid potential issues with package retrieval. frameworks/hello-world-angular/webview-ui/package-lock.json [390] +"resolved": "https://registry.npmjs.org/@angular/common/-/common-13.4.0.tgz", - Suggestion importance[1-10]: 7 Why: Ensuring the resolved URL is correct is important for package retrieval, but the suggestion does not provide a specific improvement or validation step.	7
Compatibility	Align the version of @angular/core with @angular/common for compatibility Consider updating the version of @angular/core to match the new version of @angular/common for compatibility. frameworks/hello-world-angular/webview-ui/package.json [16] -"@angular/core": "~13.3.0", +"@angular/core": "~13.4.0", Suggestion importance[1-10]: 6 Why: While aligning the versions of @angular/core and @angular/common can improve compatibility, the current version of @angular/core is still compatible with @angular/common version 13.4.0, making this suggestion less critical.	6
Maintainability	Standardize the versioning format for consistency Ensure that the version of @angular/common is consistent across all occurrences in the package-lock file to avoid potential version conflicts. frameworks/hello-world-angular/webview-ui/package-lock.json [12] -"@angular/common": "^13.4.0", +"@angular/common": "~13.4.0", Suggestion importance[1-10]: 3 Why: The suggestion to standardize the versioning format is valid, but the change from "^13.4.0" to "~13.4.0" does not address any critical issues and is more of a style preference.	3