Skip to content

chore(deps): bump serialize-javascript, terser-webpack-plugin, copy-webpack-plugin and css-minimizer-webpack-plugin in /webapp - #498

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webapp/multi-8095145964
Open

chore(deps): bump serialize-javascript, terser-webpack-plugin, copy-webpack-plugin and css-minimizer-webpack-plugin in /webapp#498
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webapp/multi-8095145964

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps serialize-javascript to 7.1.0 and updates ancestor dependencies serialize-javascript, terser-webpack-plugin, copy-webpack-plugin and css-minimizer-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.1.0

Release notes

Sourced from serialize-javascript's releases.

v7.1.0

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.7...v7.1.0

v7.0.7

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.6...v7.0.7

v7.0.6

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.5...v7.0.6

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

... (truncated)

Commits
  • 739145a release: v7.1.0
  • 57865ed feat: add Node.js 26 to test matrix
  • 01bec60 release: v7.0.7
  • 5009715 fix: reject spoofed RegExp objects with non-string source property
  • 153eb43 release: v7.0.6
  • a83d2cb fix: reject spoofed URL objects with non-string toString() result
  • 451af65 build(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#215)
  • df3f1c1 release: v7.0.5
  • f147e90 Merge commit from fork
  • eec32e0 release: v7.0.4
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates terser-webpack-plugin from 5.3.16 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Updates copy-webpack-plugin from 13.0.1 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems
Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems
Commits

Updates css-minimizer-webpack-plugin from 7.0.2 to 8.0.0

Release notes

Sourced from css-minimizer-webpack-plugin's releases.

v8.0.0

8.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#303) (8791cc2)

v7.0.4

7.0.4 (2025-12-11)

Bug Fixes

v7.0.3

7.0.3 (2025-12-05)

Bug Fixes

  • respect errors and warnings from minimizer without code (933fb49)
Changelog

Sourced from css-minimizer-webpack-plugin's changelog.

8.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#303) (8791cc2)

7.0.4 (2025-12-11)

Bug Fixes

7.0.3 (2025-12-05)

Bug Fixes

  • respect errors and warnings from minimizer without code (933fb49)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from 4edf85c to fa9ae12 Compare July 23, 2026 16:34
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from fa9ae12 to 153573f Compare July 23, 2026 16:39
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from 153573f to 52c8a1a Compare July 23, 2026 16:46
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from 52c8a1a to fb316b4 Compare July 23, 2026 16:56
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from fb316b4 to b252551 Compare July 23, 2026 17:02
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from b252551 to 4589e5d Compare July 23, 2026 17:08
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from 4589e5d to 3682b06 Compare August 10, 2026 11:14
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from 3682b06 to f352309 Compare August 10, 2026 11:30
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from f352309 to 4377e02 Compare August 10, 2026 11:35
…ebpack-plugin and css-minimizer-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.1.0 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin), [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) and [css-minimizer-webpack-plugin](https://github.com/webpack/css-minimizer-webpack-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.1.0
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.1.0)

Updates `terser-webpack-plugin` from 5.3.16 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.6.1)

Updates `copy-webpack-plugin` from 13.0.1 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v13.0.1...v14.0.0)

Updates `css-minimizer-webpack-plugin` from 7.0.2 to 8.0.0
- [Release notes](https://github.com/webpack/css-minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/css-minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/css-minimizer-webpack-plugin@v7.0.2...v8.0.0)

---
updated-dependencies:
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:production
- dependency-name: css-minimizer-webpack-plugin
  dependency-version: 8.0.0
  dependency-type: direct:development
- dependency-name: serialize-javascript
  dependency-version: 7.0.7
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/webapp/multi-8095145964 branch from 4377e02 to ed12db0 Compare August 10, 2026 11:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants