30-Dec-2025 — upgrade frontend dependencies and fix tab selection issues refs #108

build 395 — commit 78b9020

Upgrade core dependencies:

• ngx-bootstrap: 20.0.0 → 20.0.2 (includes v20.0.1 fix for tabset setActive #6767)
• Angular: 20.2.4 → 20.3.15 (fixes XSS vulnerabilities GHSA-58c5-g7wp-6w37, GHSA-v4hv-rgfq-gp49)
• @angular/cdk: 20.2.2 → 20.2.14
• Angular CLI/build tools: 20.2.2 → 20.3.13 Upgrade other frontend libraries:
• FontAwesome packages: 6.1.x → 6.7.2
• core-js: 3.6.1 → 3.47.0
• es-toolkit: 1.39.10 → 1.43.0
• typescript: 5.9.2 → 5.9.3
• typescript-eslint: 8.46.4 → 8.51.0
• Other minor version bumps for marked, meetup-api, turndown, url-polyfill Tab selection fixes (defensive):
• Initialize tab properties with default values in system-settings.ts, mail-settings.ts, and backup-and-restore.ts
• Prevents race condition where tabs render before query params subscription fires
• ngx-bootstrap 20.0.1 fixed the core issue, but initialization provides additional robustness Security impact:
• Reduced vulnerabilities from 54 to 40
• Fixed Angular XSS issues in HTTP client and SVG/MathML handling
• All packages now on exact versions for reproducible builds