Skip to content

Bump serialize-javascript, mocha and terser-webpack-plugin - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-1701a33ccd
Open

Bump serialize-javascript, mocha and terser-webpack-plugin#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-1701a33ccd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Removes serialize-javascript. It's no longer used after updating ancestor dependencies serialize-javascript, mocha and terser-webpack-plugin. These dependencies need to be updated together.

Removes serialize-javascript

Updates mocha from 10.8.2 to 12.0.1

Release notes

Sourced from mocha's releases.

v12.0.1

12.0.1 (2026-09-08)

🩹 Fixes

  • bump serialize-javascript to ^7.1.1 (#6278) (02558a3)
  • deps: update dependency find-up to v8 (#5747) (ee11d29)
  • deps: update dependency is-path-inside to v4 (#5748) (5b27e3a)
  • deps: update dependency starlight-blog to ^0.29.0 (#6248) (532b82b)
  • keep unknown config values from becoming test specs (#6244) (15aa7d1)
  • only reject positional args that are entirely numeric (#6222) (1633779)
  • reporter: split err.stack at trailing frame block so embedded stacks render once (#5997) (90f48e4)

📚 Documentation

🧹 Chores

  • auto-add GitHub items to project (#5686) (d24c320)
  • convert lib/runner.js to ESM (#6260) (123b2d5)
  • deps: update actions/add-to-project action to v2 (#6276) (00f873b)
  • deps: update actions/github-script action to v9 (#6277) (49ed525)
  • deps: update dependency astro to v7.2.9 (#6223) (513bd50)
  • deps: update dependency eslint to v10.9.1 (#6251) (e28b90c)
  • deps: update dependency eslint-plugin-n to v18.3.0 (#6240) (3a11840)
  • deps: update dependency globals to v17.11.0 (#6243) (1cf345b)
  • deps: update dependency globals to v17.12.0 (#6288) (97b8df6)
  • deps: update dependency js-yaml to v5.4.1 (#6247) (9593caa)
  • deps: update dependency knip to v6.32.3 (#6224) (6781fa1)
  • deps: update dependency knip to v6.34.0 (#6279) (85ff1b6)
  • deps: update dependency rollup to v4.63.1 (#6274) (e5a779e)
  • deps: update dependency serialize-javascript to v7.1.0 (#6239) (77e4d4a)
  • deps: update dependency webpack to v5.110.1 (#6275) (ec436d5)
  • deps: update matteogabriele/agentscan-action action to v2.5.0 (#6280) (0bb7925)
  • remove unused .lintstagedrc.json (#6270) (d84fdbf)
  • update spam filter (#6271) (b932787)
  • use a junction to link the config fixture on Windows (#6218) (a6b5d98)

v12.0.0

12.0.0 (2026-08-31)

🩹 Fixes

... (truncated)

Changelog

Sourced from mocha's changelog.

12.0.1 (2026-09-08)

🩹 Fixes

  • bump serialize-javascript to ^7.1.1 (#6278) (02558a3)
  • deps: update dependency find-up to v8 (#5747) (ee11d29)
  • deps: update dependency is-path-inside to v4 (#5748) (5b27e3a)
  • deps: update dependency starlight-blog to ^0.29.0 (#6248) (532b82b)
  • keep unknown config values from becoming test specs (#6244) (15aa7d1)
  • only reject positional args that are entirely numeric (#6222) (1633779)
  • reporter: split err.stack at trailing frame block so embedded stacks render once (#5997) (90f48e4)

📚 Documentation

🧹 Chores

  • auto-add GitHub items to project (#5686) (d24c320)
  • convert lib/runner.js to ESM (#6260) (123b2d5)
  • deps: update actions/add-to-project action to v2 (#6276) (00f873b)
  • deps: update actions/github-script action to v9 (#6277) (49ed525)
  • deps: update dependency astro to v7.2.9 (#6223) (513bd50)
  • deps: update dependency eslint to v10.9.1 (#6251) (e28b90c)
  • deps: update dependency eslint-plugin-n to v18.3.0 (#6240) (3a11840)
  • deps: update dependency globals to v17.11.0 (#6243) (1cf345b)
  • deps: update dependency globals to v17.12.0 (#6288) (97b8df6)
  • deps: update dependency js-yaml to v5.4.1 (#6247) (9593caa)
  • deps: update dependency knip to v6.32.3 (#6224) (6781fa1)
  • deps: update dependency knip to v6.34.0 (#6279) (85ff1b6)
  • deps: update dependency rollup to v4.63.1 (#6274) (e5a779e)
  • deps: update dependency serialize-javascript to v7.1.0 (#6239) (77e4d4a)
  • deps: update dependency webpack to v5.110.1 (#6275) (ec436d5)
  • deps: update matteogabriele/agentscan-action action to v2.5.0 (#6280) (0bb7925)
  • remove unused .lintstagedrc.json (#6270) (d84fdbf)
  • update spam filter (#6271) (b932787)
  • use a junction to link the config fixture on Windows (#6218) (a6b5d98)

12.0.0 (2026-08-31)

🩹 Fixes

  • fixup parsing negative numbers and quoted strings (#6250) (2962875)
  • preserve FIFO descriptors when respawning (#6254) (3bb317d)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mocha since your current version.


Updates terser-webpack-plugin from 5.3.16 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 3, 2026
@socket-security

socket-security Bot commented Sep 3, 2026 •
edited
Loading

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedmocha@​10.8.2 ⏵ 12.0.197 +11009595 -1100

View full report

@dependabot
Bump serialize-javascript, mocha and terser-webpack-plugin
8c69682 
Removes [serialize-javascript](https://github.com/yahoo/serialize-javascript). It's no longer used after updating ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [mocha](https://github.com/mochajs/mocha) and [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin). These dependencies need to be updated together.


Removes `serialize-javascript`

Updates `mocha` from 10.8.2 to 12.0.1
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v10.8.2...v12.0.1)

Updates `terser-webpack-plugin` from 5.3.16 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.6.1)

---
updated-dependencies:
- dependency-name: mocha
  dependency-version: 12.0.0
  dependency-type: direct:development
- dependency-name: serialize-javascript
  dependency-version:
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-1701a33ccd branch from 6e00dea to 8c69682 Compare September 14, 2026 10:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants