{"id":"695823be51eccfbd24748206","title":"2025 12 30","path":"how-to/committee/release-notes/2025-12-30","contentMarkdown":"# 30-Dec-2025 — upgrade frontend dependencies and fix tab selection issues [refs #108](https://github.com/nbarrett/ngx-ramblers/issues/108)\n\n## [build 395](https://github.com/nbarrett/ngx-ramblers/actions/runs/20600148978) — [commit 78b9020](https://github.com/nbarrett/ngx-ramblers/commit/78b9020a36e461b9ff4edbfc8d7af9a702527d73)\n\n_____\n\nUpgrade core dependencies:\n- ngx-bootstrap: 20.0.0 → 20.0.2 (includes v20.0.1 fix for tabset setActive #6767)\n- Angular: 20.2.4 → 20.3.15 (fixes XSS vulnerabilities GHSA-58c5-g7wp-6w37, GHSA-v4hv-rgfq-gp49)\n- @angular/cdk: 20.2.2 → 20.2.14\n- Angular CLI/build tools: 20.2.2 → 20.3.13\nUpgrade other frontend libraries:\n- FontAwesome packages: 6.1.x → 6.7.2\n- core-js: 3.6.1 → 3.47.0\n- es-toolkit: 1.39.10 → 1.43.0\n- typescript: 5.9.2 → 5.9.3\n- typescript-eslint: 8.46.4 → 8.51.0\n- Other minor version bumps for marked, meetup-api, turndown, url-polyfill\nTab selection fixes (defensive):\n- Initialize tab properties with default values in system-settings.ts, mail-settings.ts, and backup-and-restore.ts\n- Prevents race condition where tabs render before query params subscription fires\n- ngx-bootstrap 20.0.1 fixed the core issue, but initialization provides additional robustness\nSecurity impact:\n- Reduced vulnerabilities from 54 to 40\n- Fixed Angular XSS issues in HTTP client and SVG/MathML handling\n- All packages now on exact versions for reproducible builds","contentHtml":"<h1>30-Dec-2025 — upgrade frontend dependencies and fix tab selection issues <a href=\"https://github.com/nbarrett/ngx-ramblers/issues/108\">refs #108</a></h1>\n<h2><a href=\"https://github.com/nbarrett/ngx-ramblers/actions/runs/20600148978\">build 395</a> — <a href=\"https://github.com/nbarrett/ngx-ramblers/commit/78b9020a36e461b9ff4edbfc8d7af9a702527d73\">commit 78b9020</a></h2>\n<hr>\n<p>Upgrade core dependencies:</p>\n<ul>\n<li>ngx-bootstrap: 20.0.0 → 20.0.2 (includes v20.0.1 fix for tabset setActive #6767)</li>\n<li>Angular: 20.2.4 → 20.3.15 (fixes XSS vulnerabilities GHSA-58c5-g7wp-6w37, GHSA-v4hv-rgfq-gp49)</li>\n<li>@angular/cdk: 20.2.2 → 20.2.14</li>\n<li>Angular CLI/build tools: 20.2.2 → 20.3.13\nUpgrade other frontend libraries:</li>\n<li>FontAwesome packages: 6.1.x → 6.7.2</li>\n<li>core-js: 3.6.1 → 3.47.0</li>\n<li>es-toolkit: 1.39.10 → 1.43.0</li>\n<li>typescript: 5.9.2 → 5.9.3</li>\n<li>typescript-eslint: 8.46.4 → 8.51.0</li>\n<li>Other minor version bumps for marked, meetup-api, turndown, url-polyfill\nTab selection fixes (defensive):</li>\n<li>Initialize tab properties with default values in system-settings.ts, mail-settings.ts, and backup-and-restore.ts</li>\n<li>Prevents race condition where tabs render before query params subscription fires</li>\n<li>ngx-bootstrap 20.0.1 fixed the core issue, but initialization provides additional robustness\nSecurity impact:</li>\n<li>Reduced vulnerabilities from 54 to 40</li>\n<li>Fixed Angular XSS issues in HTTP client and SVG/MathML handling</li>\n<li>All packages now on exact versions for reproducible builds</li>\n</ul>\n"}