[Snyk] Fix for 4 vulnerabilities

[snyk-io]

Snyk has created this PR to fix 4 vulnerabilities in the pnpm dependencies of this project.

Snyk changed the following file(s):

• examples/angular/auto-refetching/package.json

⚠️ Warning

Failed to update the pnpm-lock.yaml, please update manually before merging.

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Use of Weak Hash SNYK-JS-ANGULARCOMMON-17356555
	Modification of Assumed-Immutable Data SNYK-JS-ANGULARCORE-17353317
	Denial of Service (DoS) SNYK-JS-PACOTE-8225084
	Directory Traversal SNYK-JS-VITE-17353904

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use of Weak Hash
🦉 Denial of Service (DoS)
🦉 Directory Traversal

[snyk-io]

This is a set of patch version upgrades for Angular packages. According to Angular's semantic versioning policy, patch releases are for bug fixes and do not contain breaking changes.

• @angular/build, @angular/cli, @angular/common, @angular/core: The updates from 20.3.x to a later 20.3.y version consist of minor bug fixes and security patches. The official changelog indicates that recent patches in this version range primarily contain fixes and deprecations, without any API removals or modifications that would require developer action.

No breaking changes are expected for this upgrade.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
query-auto-refetching	Error		Jun 27, 2026 9:10pm

[changeset-bot]

⚠️ No Changeset found

Latest commit: 1250f74

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

Deployment failed with the following error:

Too many requests - try again in 5 minutes (more than 60, code: "api-deployments-flood").

Learn More: https://vercel.com/docs/limits#rate-limits

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[kilo-code-bot]

WARNING: Angular packages are at inconsistent patch versions: @angular/build at ^20.3.30, @angular/cli at ^20.3.29, @angular/common/@angular/core at ^20.3.25, while @angular/compiler, @angular/platform-browser, and @angular/compiler-cli remain at ^20.0.0. Angular packages are tightly coupled and should typically be pinned to the same version to avoid peer dependency and build issues.

---

Reply with @kilocode-bot fix it to have Kilo Code address this issue.

[kilo-code-bot]

Code Review Summary

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
WARNING	1

Issue Details (click to expand)

WARNING

File	Line	Issue
examples/angular/auto-refetching/package.json	22	Angular packages have inconsistent patch versions across dependencies and devDependencies

Files Reviewed (1 file)

• examples/angular/auto-refetching/package.json - 1 issue

Fix these issues in Kilo Cloud

---

_{Reviewed by step-3.7-flash-20260528 · Input: 168.9K · Output: 11.2K · Cached: 111.7K}

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

The updates in package.json align with the requirement to patch four security vulnerabilities. However, the update of the pnpm-lock.yaml file failed, which prevents these security fixes from being applied to the project's runtime or build environment. This is a critical gap that must be resolved prior to merging.

Codacy analysis indicates that the changes are up to standards, and no new quality issues or complexity increases were introduced. High-priority verification is required for the build process and example functionality as these remain untested in the current submission.

About this PR

• The pnpm-lock.yaml file was not updated. The security vulnerabilities will not be resolved until the lockfile is manually updated and committed to reflect the changes made in package.json.

Test suggestions

• Verify that the application builds successfully with the upgraded Angular patch versions.
• Verify that the 'auto-refetching' example functionality remains operational with updated dependencies.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that the application builds successfully with the upgraded Angular patch versions.
2. Verify that the 'auto-refetching' example functionality remains operational with updated dependencies.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}