Skip to content

Bump serialize-javascript, @symfony/webpack-encore, terser-webpack-plugin and workbox-webpack-plugin#3715

Closed
dependabot[bot] wants to merge 1 commit into
6.2from
dependabot/npm_and_yarn/multi-6f76ae7951
Closed

Bump serialize-javascript, @symfony/webpack-encore, terser-webpack-plugin and workbox-webpack-plugin#3715
dependabot[bot] wants to merge 1 commit into
6.2from
dependabot/npm_and_yarn/multi-6f76ae7951

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, @symfony/webpack-encore, terser-webpack-plugin and workbox-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 4.0.0 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @symfony/webpack-encore from 4.7.0 to 6.0.0

Release notes

Sourced from @​symfony/webpack-encore's releases.

v5.3.1

What's Changed

Full Changelog: symfony/webpack-encore@v5.3.0...v5.3.1

v5.3.0

What's Changed

New Contributors

Full Changelog: symfony/webpack-encore@v5.2.0...v5.3.0

Peer dependencies update!

Features

Internals

New Contributors

Full Changelog: symfony/webpack-encore@v5.1.0...v5.2.0

5.1: Stimulus Bridge 4

What's Changed

Features

Full Changelog: symfony/webpack-encore@v5.0.1...v5.1.0

v5.0.1

Bug fixes

... (truncated)

Changelog

Sourced from @​symfony/webpack-encore's changelog.

6.0.0

This is a new major version that contains several backwards-compatibility breaks, but for the best!

BC Breaks

  • Remove support of Node.js <22.13.0
  • Remove support of babel-loader@^9.1.3, see possible BC breaks in 10.0.0 release notes
  • Remove support of style-loader@^3.3.0, see possible BC breaks in 4.0.0 release notes
  • Remove support of less-loader@^11.0.0, see possible BC breaks in 12.0.0 release notes
  • Remove support of postcss-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
  • Remove support of stylus-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
  • Remove support of webpack-cli@^5.0.0, see possible BC breaks in 6.0.0 release notes
  • Remove unmaintained file-loader dependency The [N] placeholder (regex capture groups in filename patterns) is no longer supported. If you were using patterns like [1] or [2] in your Encore.copyFiles() filename option, you will need to restructure your file organization or use a different naming strategy.
  • Remove deprecated --https flag and devServerConfig.https option for webpack-dev-server, use --server-type https or configureDevServerOptions() with server: 'https' instead

Features

  • Update @​nuxt/friendly-errors-webpack-plugin to @​kocal/friendly-errors-webpack-plugin, a maintained fork of the original plugin
  • Update webpack from ^5.74.0 to ^5.82.0
  • Update css-minimizer-webpack-plugin to ^8.0.0, see release notes
  • Finish removing Vue 2 support leftovers (JSX code path, vue-jsx feature, version: 2 option, Vue 2 peer dependencies), which was forgotten during v5.0.0

5.3.0

  • Add support for Svelte 5

5.2.0

  • Add support for Webpack CLI ^6.0.0

  • Add support for babel-loader ^10.0.0

  • Add support for style-loader ^4.0.0

If you manually specified the option insert, now it can only be a selector or the path to the module. Follow the style-loader migration guide to upgrade!

5.1.0

Features

5.0.1

... (truncated)

Commits
  • 93016b8 Tagging 6.0.0
  • fb434b5 bug #1401 Follow-up #1400 (fix URLs generation) (Kocal)
  • 3e149b9 Follow-up #1400 (fix URLs generation)
  • 5557f89 feature #1400 Remove deprecated --https flag and devServerConfig.https op...
  • c5d7afa Remove deprecated --https flag and devServerConfig.https option
  • 0c706d2 feature #1399 Remove Vue 2 support leftovers (Kocal)
  • 94619b0 Remove Vue 2 support leftovers
  • b8c997b feature #1398 Remove unmaintained file-loader dependency (Kocal)
  • 1200947 Remove unmaintained file-loader dependency
  • b0542cf minor #1397 Add AGENTS.md (Kocal)
  • Additional commits viewable in compare view

Updates terser-webpack-plugin from 5.3.16 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Updates workbox-webpack-plugin from 6.6.0 to 7.4.1

Release notes

Sourced from workbox-webpack-plugin's releases.

Workbox v7.4.1

What's Changed

New Contributors

Full Changelog: GoogleChrome/workbox@v7.4.0...v7.4.1

Workbox v7.4.0

v7.4.0

  • Critical dependency updates.

Workbox v7.3.0

v7.3.0

  • Critical dependency updates.

v7.1.0

What's Changed ✏️

... (truncated)

Commits
  • 62b9d8b v7.4.1
  • b6b696c Merge pull request #3510 from GoogleChrome/chore/update-lock-file
  • 6524a7d Update test
  • 9a57e39 Run npm audit fix
  • 86035d8 Update lock file
  • c75363a Merge pull request #3508 from GoogleChrome/dependabot/github_actions/github/c...
  • 85383d6 Merge pull request #3507 from GoogleChrome/dependabot/npm_and_yarn/apideck/be...
  • a1cdb47 Bump github/codeql-action from 4 to 4.35.2
  • 05b276d Bump @​apideck/better-ajv-errors from 0.3.1 to 0.3.7
  • 8e6df29 Merge pull request #3489 from rtritto/replace-lodash
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by swissspidy, a new releaser for workbox-webpack-plugin since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file 🧹 Chore labels May 4, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-6f76ae7951 branch 2 times, most recently from f3c3c76 to bba742d Compare May 9, 2026 19:56
…ugin and workbox-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@symfony/webpack-encore](https://github.com/symfony/webpack-encore), [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) and [workbox-webpack-plugin](https://github.com/googlechrome/workbox). These dependencies need to be updated together.


Updates `serialize-javascript` from 4.0.0 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v4.0.0...v7.0.5)

Updates `@symfony/webpack-encore` from 4.7.0 to 6.0.0
- [Release notes](https://github.com/symfony/webpack-encore/releases)
- [Changelog](https://github.com/symfony/webpack-encore/blob/main/CHANGELOG.md)
- [Commits](symfony/webpack-encore@v4.7.0...v6.0.0)

Updates `terser-webpack-plugin` from 5.3.16 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.6.1)

Updates `workbox-webpack-plugin` from 6.6.0 to 7.4.1
- [Release notes](https://github.com/googlechrome/workbox/releases)
- [Commits](GoogleChrome/workbox@v6.6.0...v7.4.1)

---
updated-dependencies:
- dependency-name: "@symfony/webpack-encore"
  dependency-version: 6.0.0
  dependency-type: direct:development
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.5.0
  dependency-type: indirect
- dependency-name: workbox-webpack-plugin
  dependency-version: 7.4.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-6f76ae7951 branch from bba742d to b915b21 Compare May 29, 2026 21:13
@dependabot @github

dependabot Bot commented on behalf of github Jun 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 28, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-6f76ae7951 branch June 28, 2026 08:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🧹 Chore dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants