Skip to content

Bump serialize-javascript, terser-webpack-plugin and copy-webpack-plugin#2483

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2df0ba0700
Open

Bump serialize-javascript, terser-webpack-plugin and copy-webpack-plugin#2483
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2df0ba0700

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 11, 2026

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, terser-webpack-plugin and copy-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates terser-webpack-plugin from 5.3.16 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Updates copy-webpack-plugin from 11.0.0 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems

v13.0.1

13.0.1 (2025-08-12)

Bug Fixes

v13.0.0

13.0.0 (2025-02-27)

⚠ BREAKING CHANGES

  • switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

  • concurrency option is limited to files now (#796) (d42469c)
  • the order of patterns provided by the developer is respected

v12.0.2

12.0.2 (2024-01-17)

Bug Fixes

v12.0.1

12.0.1 (2024-01-11)

... (truncated)

Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems

13.0.1 (2025-08-12)

Bug Fixes

13.0.0 (2025-02-27)

⚠ BREAKING CHANGES

  • switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

  • concurrency option is limited to files now (#796) (d42469c)
  • the order of patterns provided by the developer is respected

12.0.2 (2024-01-17)

Bug Fixes

12.0.1 (2024-01-11)

Bug Fixes

... (truncated)

Commits
  • 18eb9d9 chore(release): 14.0.0
  • 2881203 refactor!: minimum supported Node.js version is 20.9.0 (#819)
  • 9dc3d31 chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#815)
  • 5cf5a1d chore(deps): update (#814)
  • 3dd5b6e chore(deps): bump js-yaml (#813)
  • 9ac38bb chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#812)
  • 6a16bac Update link to contributing guidelines in README
  • a1625f9 chore: migrate from contrib (#810)
  • 9f6f204 chore: update github actions/checkout from v4 to v5 (#809)
  • 73a30bc chore(release): 13.0.1
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates terser-webpack-plugin from 5.3.9 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 11, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 11, 2026 23:25
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from e8bb5f5 to fc18ef6 Compare May 12, 2026 21:04
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from fc18ef6 to 9bfd3eb Compare May 22, 2026 16:34
@github-actions

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 83s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from 9bfd3eb to f6ceb0c Compare May 28, 2026 17:48
@github-actions

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 131s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from f6ceb0c to 7cb4392 Compare June 1, 2026 19:54
@github-actions

github-actions Bot commented Jun 1, 2026

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 88s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from 7cb4392 to f1093a2 Compare June 3, 2026 17:03
@github-actions

github-actions Bot commented Jun 3, 2026

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 92s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from f1093a2 to be8f380 Compare June 4, 2026 16:50
@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 88s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from be8f380 to adac3da Compare June 4, 2026 21:14
@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 92s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) and [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.5)

Updates `terser-webpack-plugin` from 5.3.16 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.6.1)

Updates `copy-webpack-plugin` from 11.0.0 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v11.0.0...v14.0.0)

Updates `terser-webpack-plugin` from 5.3.9 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.6.1)

---
updated-dependencies:
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:production
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.0
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-2df0ba0700 branch from adac3da to ff581bb Compare June 8, 2026 20:19
@github-actions

github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown

Playwright tests ❌ failed

Passed Failed Flaky Duration
0 0 0 86s

📊 Open full report · Workflow run

⚠️ 20 shard(s) failed before tests ran (infra/auth issue). Stats below reflect only shards that executed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants