[Snyk] Upgrade @angular/forms from 12.0.4 to 12.2.17

[nejidevelops]

Snyk has created this PR to upgrade @angular/forms from 12.0.4 to 12.2.17.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 36 versions ahead of your current version.

• The recommended version was released 3 years ago.

Release notes

Package name: @angular/forms

• 12.2.17 - 2022-11-22
• 12.2.16 - 2022-01-27
• 12.2.15 - 2021-12-15
• 12.2.14 - 2021-12-01
• 12.2.13 - 2021-11-03
• 12.2.12 - 2021-10-27
• 12.2.11 - 2021-10-20
• 12.2.10 - 2021-10-13
• 12.2.9 - 2021-10-06
• 12.2.8 - 2021-09-30
• 12.2.7 - 2021-09-22
• 12.2.6 - 2021-09-15
• 12.2.5 - 2021-09-08
• 12.2.4 - 2021-09-01
• 12.2.3 - 2021-08-25
• 12.2.2 - 2021-08-18
• 12.2.1 - 2021-08-11
• 12.2.0 - 2021-08-04
• 12.2.0-rc.0 - 2021-07-28
• 12.2.0-next.3 - 2021-07-21
• 12.2.0-next.2 - 2021-07-14
• 12.2.0-next.1 - 2021-06-30
• 12.2.0-next.0 - 2021-06-24
• 12.1.5 - 2021-08-04
• 12.1.4 - 2021-07-28
• 12.1.3 - 2021-07-21
• 12.1.2 - 2021-07-14
• 12.1.1 - 2021-06-30
• 12.1.0 - 2021-06-24
• 12.1.0-next.6 - 2021-06-16
• 12.1.0-next.5 - 2021-06-09
• 12.1.0-next.4 - 2021-06-02
• 12.1.0-next.3 - 2021-05-26
• 12.1.0-next.2 - 2021-05-19
• 12.1.0-next.1 - 2021-05-05
• 12.0.5 - 2021-06-16
• 12.0.4 - 2021-06-09

from @angular/forms GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[gemini-code-assist]

Summary of Changes

Hello @nejidevelops, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request, automatically generated by Snyk, updates the @angular/forms dependency version specified in angular-app/package.json. The change modifies the version range for this package.

Highlights

• Dependency Update: Updates the specified version range for the @angular/forms package in angular-app/package.json from ^15.0.0 to ^12.2.17.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in issue comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist is currently in preview and may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments to provide feedback.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configureGemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request, as per its title and Snyk's description, aims to upgrade @angular/forms from 12.0.4 to 12.2.17. However, the actual code change in package.json shows a downgrade of @angular/forms from ^15.0.0 to ^12.2.17.

This creates a critical version incompatibility, as other core Angular dependencies like @angular/core, @angular/common, etc., remain at ^15.0.0. Mixing major Angular versions (v15 with v12) will very likely lead to build failures, runtime errors, and peer dependency conflicts.

It's recommended to either:

1. Align @angular/forms with the other Angular 15 packages by using a v15 version (e.g., reverting to ^15.0.0 or updating to a specific v15 patch like ^15.2.10 to match resolved versions of other Angular packages in the lock file).
2. If the project is indeed intended to be on Angular 12, this PR should be re-evaluated against a correct baseline where all Angular packages are on v12.

The current change as-is poses a significant risk to the application's stability and correctness.

[gemini-code-assist]

This change introduces a significant version mismatch for @angular/forms. The PR appears to downgrade @angular/forms from ^15.0.0 (as per the diff) to ^12.2.17.

However, other core Angular packages in this package.json (e.g., @angular/core, @angular/common, @angular/compiler) are specified as ^15.0.0. Mixing major versions of Angular packages (v12 for Forms with v15 for Core, Common, etc.) is highly likely to lead to:

• Build failures due to peer dependency conflicts.
• Runtime errors due to API incompatibilities.
• Unexpected application behavior.

It's crucial that all @angular/* packages, especially runtime dependencies, are aligned to the same major version. For an Angular 15 project, @angular/forms should also be on a v15 release.

The PR title and description suggest an upgrade from 12.0.4 to 12.2.17. If this was the true intention and the project is meant to be on Angular 12, the starting point of this PR (showing ^15.0.0 for @angular/forms) is conflicting. This discrepancy needs clarification.

To resolve the immediate issue of version mismatch with other Angular 15 packages, @angular/forms should be updated to a compatible v15 version.

    "@angular/forms": "^15.0.0",