[dependabot]

Bumps seroval from 1.6.2 to 1.7.2.

Release notes

Sourced from seroval's releases.

seroval-plugins@1.7.1

Patch Changes

• 2d03651: serialize, toJSON, crossSerialize and toCrossJSON now throw when the value contains an async iterable or a ReadableStream, as they do for a promise. Before, they sent a stream that never got its values. Use an async or streaming function to send them.

seroval@1.7.1

Patch Changes

• b703710: createCrossDeserializer no longer causes unhandled rejections. This covers a rejected promise that the caller never reads, and a pending promise that abort rejects. Code that awaits the promise still gets the rejection.
• 2d03651: serialize, toJSON, crossSerialize and toCrossJSON now throw when the value contains an async iterable or a ReadableStream, as they do for a promise. Before, they sent a stream that never got its values. Use an async or streaming function to send them.
• 2c25bf3: serialize, toJSON, crossSerialize and toCrossJSON now send a createStream stream that has ended with all its events. A stream that is still open, or a live stream, now throws. Before, they sent an empty stream that never ended.

seroval-plugins@1.7.0

Minor Changes

• 4c0008f: Add createLiveStream(), a single-consumer stream that holds one event at a time and resolves each producer write only after the serialized record is accepted. crossSerializeStream and toCrossJSONStream callbacks may now return a promise; the next record, and the acceptance of the source event behind it, wait for it to settle. Records discovered while parsing an event are emitted after the record that introduces them, one callback runs at a time, onDone waits for the last callback and is not called after an output failure, and cleanup runs every callback once. Async iterables and ReadableStream values read their next chunk only after the previous record is accepted. Existing streaming plugin lifecycle hooks remain available; parsing a live stream is the preferred way to connect an incremental source.
• f2b7d0c: Raise the supported Node.js floor from >=10 to >=20 in engines, remove the no-op typesVersions from seroval, give seroval-plugins main, module and types fields plus a typesVersions entry that points at the emitted web declarations, and link the plugins package to the workspace copy of seroval.
• 5ab601f: Add plugin context hooks for parsing an async iterable as a stream source. Use them in the ReadableStream plugin to avoid a separate live-stream producer while keeping backpressure, cancellation, and wire format intact. Upgrade both packages together because the plugin requires the new core hooks.

Patch Changes

• c643404: The documentation moved to https://seroval.vercel.app. The READMEs and the package homepages now link to it.
• a1e185a: Build with an explicit ES2020 syntax target so the emitted syntax floor no longer follows engines.node, keeping nullish coalescing and optional chaining as written.
• be1f32b: Improve tree shaking of web namespace imports in ESM builds while preserving the CommonJS export shape.
• 90e8f73: The web plugins that match instances of a built-in class, such as URL, Blob and Headers, now set skipPlainObjects. With a seroval version that supports it, serializing plain objects with these plugins is faster.

seroval@1.7.0

Minor Changes

• 9a75aae: Add the assignSharedRefsOnly option to crossSerialize and crossSerializeAsync. It stores only the values the output reads more than once in $R, which makes shorter output when no later script refers back to it.
• f3f39de: Add createCrossDeserializer, a session for cross-reference JSON records that tracks unsettled promises and open streams, reports how many are still pending, and can abort them with a caller-supplied reason when the transport fails.
• 2324090: Streams serialized from a live stream in streaming mode are rebuilt with a live receiver: it keeps history only until its first listener subscribes, then forwards each value without retaining it and refuses a second listener. Replay streams and existing serialized data are unchanged, and readers that ignore the marker build a replay receiver.
• 4c0008f: Add createLiveStream(), a single-consumer stream that holds one event at a time and resolves each producer write only after the serialized record is accepted. crossSerializeStream and toCrossJSONStream callbacks may now return a promise; the next record, and the acceptance of the source event behind it, wait for it to settle. Records discovered while parsing an event are emitted after the record that introduces them, one callback runs at a time, onDone waits for the last callback and is not called after an output failure, and cleanup runs every callback once. Async iterables and ReadableStream values read their next chunk only after the previous record is accepted. Existing streaming plugin lifecycle hooks remain available; parsing a live stream is the preferred way to connect an incremental source.
• f2b7d0c: Raise the supported Node.js floor from >=10 to >=20 in engines, remove the no-op typesVersions from seroval, give seroval-plugins main, module and types fields plus a typesVersions entry that points at the emitted web declarations, and link the plugins package to the workspace copy of seroval.
• 8a95987: Add the optional skipPlainObjects plugin field. A plugin that sets it to true is not tested against plain objects, which makes parsing faster when most values are plain objects.
• 5ab601f: Add plugin context hooks for parsing an async iterable as a stream source. Use them in the ReadableStream plugin to avoid a separate live-stream producer while keeping backpressure, cancellation, and wire format intact. Upgrade both packages together because the plugin requires the new core hooks.

Patch Changes

• 6d92c38: - Export SerializeOptions, SerializeAsyncOptions, ToJSONOptions and ToJSONAsyncOptions, the option types of serialize, serializeAsync, toJSON and toJSONAsync.
  • Mark Feature.ArrowFunction and SerovalMissingReferenceError as deprecated. Neither has any effect.
• 8b4214f: Reuse the resolved plugin list when the same plugins array is passed again, so each call no longer rebuilds it.
• b7edc16: Create leaf nodes with only their t, i and s fields, cutting tree memory for primitive-heavy payloads.
• dcf9a69: Report the depth limit error with its own error code.
• e118511: Derive the well-known symbol name and lookup tables and the error constructor names from their single source tables.
• 1e13e04: Avoid temporary reference lookup wrappers in the parsers and resolve named references with one registry lookup.
• c643404: The documentation moved to https://seroval.vercel.app. The READMEs and the package homepages now link to it.
• 3234e88: Honor depthLimit in every serializer entry point and in fromJSON, wrap failures raised while emitting output in SerovalSerializationError, and report a node id that is assigned twice with SerovalConflictedNodeIdError.
• a1e185a: Build with an explicit ES2020 syntax target so the emitted syntax floor no longer follows engines.node, keeping nullish coalescing and optional chaining as written.
• 3b49dc3: Inline feature bits inside the library with an internal const enum. The exported Feature enum is unchanged.

... (truncated)

Commits

• 5d96663 chore: version packages
• 737afa1 fix: stop unhandled rejections from fromJSON and fromCrossJSON
• 069dfeb chore: version packages (#264)
• 1c5b011 ci: require approval for benchmark runs (#260)
• 2c25bf3 feat: send ended streams in sync modes (#262)
• 2d03651 fix: throw for async iterables in sync modes (#261)
• b703710 fix: stop unhandled rejections from createCrossDeserializer (#258)
• 3a44e4b chore(deps): bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 (#254)
• 297a9a7 chore(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0 (#252)
• 23c6300 chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.1 (#251)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[cloudflare-workers-and-pages]

Deploying opensourcescout with    Cloudflare Pages

Latest commit:	e041074
Status:	🚫  Build failed.

View logs