FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

Bump serialize-javascript, @angular-devkit/build-angular and @rollup/plugin-terser by dependabot[bot] · Pull Request #11 · thulium/openapi-typescript-codegen · GitHub

Bump serialize-javascript, @angular-devkit/build-angular and @rollup/plugin-terser - #11

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-b170973b85
Open

Bump serialize-javascript, @angular-devkit/build-angular and @rollup/plugin-terser#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-b170973b85

Conversation

dependabot Bot commented on behalf of github Mar 31, 2026
edited
Loading

Copy link
Copy Markdown

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, @angular-devkit/build-angular and @rollup/plugin-terser. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for serialize-javascript since your current version.


Updates @angular-devkit/build-angular from 17.3.17 to 21.2.5

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.5

@​angular/cli

Commit Description
support custom port in MCP devserver start tool

@​angular/ssr

Commit Description
allow underscores in host validation
patch Headers.forEach in cloneRequestAndPatchHeaders

21.2.4

@​angular/cli

Commit Description
restore console methods after logger completes

@​angular/build

Commit Description
deduplicate and merge coverage excludes with vitest
prevent reporter duplicates by explicitly overriding Vitest configuration
remove default for unit-test coverage option
warn about performance of test.exclude in vitest configuration
warn when vitest watch config conflicts with builder

@​angular/ssr

Commit Description
apply forwarded prefix and vary header in accept-language redirects
support '*' in allowedHosts and warn about security risks

21.2.3

@​angular/cli

Commit Description
use parsed package name for migrate-only updates

@​angular/build

Commit Description
alias createRequire banner import to avoid duplicate binding
only use external packages for polyfills when no local files are present

@​angular/ssr

Commit Description
disallow x-forwarded-prefix starting with a backslash
ensure unique values in redirect response Vary header
support custom headers in redirect responses

21.2.2

@​angular/cli

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.5 (2026-03-27)

@​angular/cli

Commit Type Description
cadf9b201 feat support custom port in MCP devserver start tool

@​angular/ssr

Commit Type Description
bbc255419 fix allow underscores in host validation
b1fe66a7f fix patch Headers.forEach in cloneRequestAndPatchHeaders

20.3.22 (2026-03-27)

@​angular-devkit/build-angular

Commit Type Description
5978eeeff fix update picomatch to 4.0.4

@​angular-devkit/core

Commit Type Description
6e9b92612 fix update picomatch to 4.0.4

@​angular/build

Commit Type Description
6f209c26d fix update picomatch to 4.0.4

19.2.23 (2026-03-27)

@​angular/cli

Commit Type Description
67cfbe32f fix update picomatch to 4.0.4

... (truncated)

Commits
  • 3018612 release: cut the v21.2.5 release
  • 349bd43 build: update dependency picomatch to v4.0.4
  • cadf9b2 feat(@​angular/cli): support custom port in MCP devserver start tool
  • bbc2554 fix(@​angular/ssr): allow underscores in host validation
  • 88ac998 build: update cross-repo angular dependencies
  • 022e0ef build: update github/codeql-action action to v4.34.1
  • c363f19 build: update dependency node to v22.22.2
  • b1fe66a fix(@​angular/ssr): patch Headers.forEach in cloneRequestAndPatchHeaders
  • 2aa93fc release: cut the v21.2.4 release
  • f33826e build: update cross-repo angular dependencies
  • Additional commits viewable in compare view

Updates @rollup/plugin-terser from 0.4.4 to 1.0.0

Changelog

Sourced from @​rollup/plugin-terser's changelog.

v1.0.0

2026-03-05

Breaking Changes

  • terser!: upgrade serialize-javascript to v7 and node to v20 (#1968)
Commits Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​rollup/plugin-terser since your current version.


dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 31, 2026
dependabot Bot requested a review from a team as a code owner March 31, 2026 13:46
…plugin-terser

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.5)

Updates `@angular-devkit/build-angular` from 17.3.9 to 21.2.5
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@17.3.9...v21.2.5)

Updates `@rollup/plugin-terser` from 0.4.4 to 1.0.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.0/packages/terser)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.5
  dependency-type: direct:development
- dependency-name: "@rollup/plugin-terser"
  dependency-version: 1.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-b170973b85 branch from 404d942 to ff08ae0 Compare March 31, 2026 13:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants


Back | FazBrowse Home | New Git URL