Bump html-minifier-next from 4.1.1 to 4.6.1

[dependabot]

Bumps html-minifier-next from 4.1.1 to 4.6.1.

Changelog

Sourced from html-minifier-next's changelog.

[4.6.1] - 2025-12-01

Changed

• Improved parser error handling
  • Added line/column tracking for better error messages
  • Improved continueOnParseError to skip problematic characters instead of failing

Fixed

• Fixed parser hang on HTML with massive attribute values (e.g., large SVG path data)
  • Limited attribute regex input to 20 KB to prevent catastrophic backtracking
  • Attributes exceeding 20 KB are extracted using manual string parsing (preserving all data)
  • Parser now gracefully handles pathological cases in SSR framework output
• Fixed sortAttributes incorrectly parsing JSON-LD script content as HTML
  • The scan() function (used for attribute sorting analysis) now only recursively processes text/html script content
  • JSON-LD and other non-HTML script types are correctly skipped during the scan phase
  • Prevents corruption when using sortAttributes with processScripts: ["application/ld+json"]

[4.6.0] - 2025-11-29

Added

• Added automatic minification for JSON script tags
  • Supports application/json, application/ld+json, application/manifest+json, application/vnd.geo+json, importmap, and speculationrules script types
  • JSON is parsed and re-stringified to remove whitespace
  • When continueOnMinifyError is true (default), malformed JSON is logged and returned unchanged; when false, JSON parse errors throw, consistent with CSS/JS/URL minification

Internal

• Added preset-related tests

[4.5.2] - 2025-11-28

Internal

• Added test coverage for bare returns with customEventAttributes option
  • Ensures compatibility with future JavaScript minifiers (oxc-minify, @​swc/core) that may handle bare return statements differently than Terser
  • Covers return with function calls, conditional returns, multiple statements with returns, and early return guard patterns
  • Tests framework-specific event attributes (Angular ng-click, Vue @click, Alpine.js x-on:click) with bare returns

[4.5.1] - 2025-11-28

Changed

• Removed conservativeCollapse from comprehensive preset

[4.5.0] - 2025-11-28

Added

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)