Skip to content

build(deps): bump serialize-javascript, terser-webpack-plugin and @angular-devkit/build-angular#1277

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-54370ddfa1
Open

build(deps): bump serialize-javascript, terser-webpack-plugin and @angular-devkit/build-angular#1277
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-54370ddfa1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 25, 2026

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, terser-webpack-plugin and @angular-devkit/build-angular. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates terser-webpack-plugin from 5.3.16 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Updates @angular-devkit/build-angular from 19.2.26 to 21.2.14

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.14

@​angular/cli

Commit Description
fix - aed448748 expand package groups for newly added peer dependencies in update schematic

@​angular/build

Commit Description
fix - d46c082fb prevent esbuild service child process leakage

21.2.13

@​angular-devkit/build-angular

Commit Description
fix - 3c6d26a31 remove unconditional CORS wildcard from webpack dev-server

@​angular/build

Commit Description
fix - 2b3e95517 assert that asset input paths are within workspace root

21.2.12

@​angular/build

Commit Description
fix - cbad57579 ignore virtual esbuild paths with (disabled):

21.2.11

@​angular/cli

Commit Description
fix - bbd63b7a5 robustly parse npm manifest from array

@​angular/ssr

Commit Description
fix - eafe1a719 allow all hosts in common engine rendering options to prevent validation errors
fix - 7a116a80d remove stateful flag from URL_PARAMETER_REGEXP

21.2.10

@​angular/cli

Commit Description
fix - bb8611913 restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit Description
fix - e7abeb5c7 add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.14 (2026-06-03)

@​angular/cli

Commit Type Description
aed448748 fix expand package groups for newly added peer dependencies in update schematic

@​angular/build

Commit Type Description
d46c082fb fix prevent esbuild service child process leakage

20.3.27 (2026-06-02)

@​angular/ssr

Commit Type Description
07c6c96ba fix add support for configuring trusted proxy headers via environment variable

19.2.27 (2026-06-02)

@​angular/ssr

Commit Type Description
2c0dfc2ac fix add support for configuring trusted proxy headers via environment variable

21.2.13 (2026-05-27)

@​angular-devkit/build-angular

Commit Type Description
3c6d26a31 fix remove unconditional CORS wildcard from webpack dev-server

... (truncated)

Commits
  • 4488398 release: cut the v21.2.14 release
  • d46c082 fix(@​angular/build): prevent esbuild service child process leakage
  • aed4487 fix(@​angular/cli): expand package groups for newly added peer dependencies in...
  • 287e4e8 release: cut the v21.2.13 release
  • 3c6d26a fix(@​angular-devkit/build-angular): remove unconditional CORS wildcard from w...
  • 2b3e955 fix(@​angular/build): assert that asset input paths are within workspace root
  • 9dcef4d release: cut the v21.2.12 release
  • feec5bf refactor(@​angular/build): add missing OutputFile import
  • 48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
  • cbad575 fix(@​angular/build): ignore virtual esbuild paths with (disabled):
  • Additional commits viewable in compare view

@dependabot dependabot Bot added Dependencies javascript Pull requests that update javascript code labels May 25, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 25, 2026 16:16
…gular-devkit/build-angular

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) and [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.5)

Updates `terser-webpack-plugin` from 5.3.16 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.6.1)

Updates `@angular-devkit/build-angular` from 19.2.26 to 21.2.14
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@v19.2.26...v21.2.14)

---
updated-dependencies:
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.12
  dependency-type: direct:development
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-54370ddfa1 branch from 3f26a40 to 4cf8266 Compare June 8, 2026 18:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants