Skip to content

Bump serialize-javascript, @angular-builders/custom-webpack, @angular-devkit/build-angular and terser-webpack-plugin#167

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5566668ac6
Open

Bump serialize-javascript, @angular-builders/custom-webpack, @angular-devkit/build-angular and terser-webpack-plugin#167
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5566668ac6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, @angular-builders/custom-webpack, @angular-devkit/build-angular and terser-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @angular-builders/custom-webpack from 19.0.1 to 21.0.3

Changelog

Sourced from @​angular-builders/custom-webpack's changelog.

21.0.3 (2026-01-14)

Note: Version bump only for package @​angular-builders/custom-webpack

21.0.3-beta.1 (2026-01-14)

Note: Version bump only for package @​angular-builders/custom-webpack

21.0.3-beta.0 (2026-01-14)

21.0.2 (2026-01-13)

Note: Version bump only for package @​angular-builders/custom-webpack

21.0.1 (2026-01-12)

Note: Version bump only for package @​angular-builders/custom-webpack

21.0.1-beta.0 (2026-01-12)

Note: Version bump only for package @​angular-builders/custom-webpack

21.0.0 (2026-01-12)

Note: Version bump only for package @​angular-builders/custom-webpack

21.0.0-beta.1 (2025-12-17)

⚠ BREAKING CHANGES

  • All packages now require Angular 21

Miscellaneous Chores

21.0.0-beta.0 (2025-12-17)

⚠ BREAKING CHANGES

  • All packages now require Angular 21

Miscellaneous Chores

20.0.1-beta.1 (2025-11-13)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​angular-builders/custom-webpack since your current version.


Updates @angular-devkit/build-angular from 19.2.19 to 21.2.12

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.12

@​angular/build

Commit Description
fix - cbad57579 ignore virtual esbuild paths with (disabled):

21.2.11

@​angular/cli

Commit Description
fix - bbd63b7a5 robustly parse npm manifest from array

@​angular/ssr

Commit Description
fix - eafe1a719 allow all hosts in common engine rendering options to prevent validation errors
fix - 7a116a80d remove stateful flag from URL_PARAMETER_REGEXP

21.2.10

@​angular/cli

Commit Description
fix - bb8611913 restrict MCP workspace access to allowed client roots during resolution

21.2.9

@​schematics/angular

Commit Description
fix - e7abeb5c7 add missing imports for focus and skip APIs in refactor-jasmine-vitest

@​angular/cli

Commit Description
fix - 233deef01 fix broken img ref in ai-tutor
fix - 7cea9885c introduce initial package manager workspace awareness
fix - 5b1a5b743 remove standalone true ref in ai tutor

@​angular/ssr

Commit Description
fix - 94023f62c introduce trustProxyHeaders option to safely validate and sanitize proxy headers
fix - 5ffe5c309 add support for configuring trusted proxy headers via environment variable
fix - 930ada9b7 decode route segments when building and matching route tree
fix - 0dc8a440c use router to normalize URLs for comparison

21.2.8

@​angular/cli

Commit Description
fix - e91280c05 dynamically resolve project Angular CLI executable inside MCP tools
fix - 01af6741b ignore EBADF file system errors during MCP project scan
fix - f7a3e6ed8 use headless option in MCP test tool

@​angular-devkit/build-angular

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.12 (2026-05-20)

@​angular/build

Commit Type Description
cbad57579 fix ignore virtual esbuild paths with (disabled):

22.0.0-rc.0 (2026-05-13)

Deprecations

@​angular-devkit/build-angular

  • Webpack builders in build-angular are deprecated. Use @​angular/build builders instead.

@​angular-devkit/build-webpack

  • Webpack builders in build-webpack are deprecated. Use @​angular/build builders instead.

@​angular/ssr

  • CommonEngine APIs are deprecated in favor of AngularNodeAppEngine or AngularAppEngine.

@​ngtools/webpack

  • @​ngtools/webpack loader and plugin are deprecated. Use @​angular/build instead.

@​schematics/angular

Commit Type Description
b2f7a038b feat conditionally install istanbul coverage provider for Vitest migration
d227e6985 feat migrate fake async to Vitest fake timers
d2aa9ede5 feat migrate fakeAsync's flush behavior when used in beforeEach
c9f408153 feat set up fake timers in beforeEach instead of beforeAll
8d0805dd1 feat update TSConfig globals during karma to vitest migration
aed407db8 fix defer karma config deletion in Karma to Vitest migration
7fb59eaa6 fix use service decorator in ng generate

@​angular/cli

Commit Type Description
58c0978f6 feat add support for Node.js 26.0.0
ff88f491d fix restrict MCP workspace access to allowed client roots during resolution

... (truncated)

Commits
  • 9dcef4d release: cut the v21.2.12 release
  • feec5bf refactor(@​angular/build): add missing OutputFile import
  • 48c17e8 docs: update JSDoc return tag to @return and fix description in registry.ts
  • cbad575 fix(@​angular/build): ignore virtual esbuild paths with (disabled):
  • 6cc9349 docs: update ng.ts render function documentation to reflect removal of render...
  • 00e3663 release: cut the v21.2.11 release
  • eafe1a7 fix(@​angular/ssr): allow all hosts in common engine rendering options to prev...
  • 7a116a8 fix(@​angular/ssr): remove stateful flag from URL_PARAMETER_REGEXP
  • a7705fb build: update cross-repo angular dependencies
  • 453ed5b build: update github/codeql-action action to v4.35.4
  • Additional commits viewable in compare view

Updates terser-webpack-plugin from 5.3.14 to 5.6.0

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)

v5.3.16

5.3.16 (2025-12-11)

Bug Fixes

... (truncated)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)

5.3.16 (2025-12-11)

Bug Fixes

5.3.15 (2025-12-05)

Bug Fixes

  • catch error when loading minimizers (#639) (586af0a)
  • respect errors and warnings from minimizer without code (8607f79)
Commits
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • 9b82a77 test: cover multi-asset minify and js-only minimizer fallback (#671)
  • 34610d9 feat: added the filter method to minimizers and allow to handle different a...
  • 1a34e62 feat: add built-in CSS minimizers from css-minimizer-webpack-plugin (#669)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…-devkit/build-angular and terser-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@angular-builders/custom-webpack](https://github.com/just-jeb/angular-builders/tree/HEAD/packages/custom-webpack), [@angular-devkit/build-angular](https://github.com/angular/angular-cli) and [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.5)

Updates `@angular-builders/custom-webpack` from 19.0.1 to 21.0.3
- [Release notes](https://github.com/just-jeb/angular-builders/releases)
- [Changelog](https://github.com/just-jeb/angular-builders/blob/master/packages/custom-webpack/CHANGELOG.md)
- [Commits](https://github.com/just-jeb/angular-builders/commits/@angular-builders/custom-webpack@21.0.3/packages/custom-webpack)

Updates `@angular-devkit/build-angular` from 19.2.19 to 21.2.12
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@19.2.19...v21.2.12)

Updates `terser-webpack-plugin` from 5.3.14 to 5.6.0
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.14...v5.6.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: "@angular-builders/custom-webpack"
  dependency-version: 21.0.3
  dependency-type: direct:development
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.12
  dependency-type: direct:development
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from a team as a code owner May 22, 2026 07:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 22, 2026
@CLAassistant
Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@github-actions github-actions Bot enabled auto-merge (squash) May 22, 2026 07:13
@CLAassistant
Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@sonarqubecloud
Copy link
Copy Markdown

@socket-security
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant