Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump terser from 5.19.2 to 5.38.1 #2605

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 11, 2025

Bumps terser from 5.19.2 to 5.38.1.

Changelog

Sourced from terser's changelog.

v5.38.1

  • Fix inlining non-call expressions into an optional_call?.()

v5.38.0

  • Remove console method-of-method calls (eg console.log.apply()) when drop_console option is used (#1585)
  • Remove more object spreads, such as { ...void !0 } (#1142)

v5.37.0

  • Reserved object properties from chrome extensions (domprops)
  • Fix semicolon insertion between a class property without a semicolon a and a computed class property ["prop"]

v5.36.0

  • Support import attributes with syntax

v5.35.0

  • Ensure parent directory exists when using --output on CLI (#1530)

v5.34.1

  • bump the rollup devDependency to disable CVE warnings (Terser was not affected)

v5.34.0

  • internal: stop assigning properties to objects they don't belong in
  • internal: run compress tests in parallel
  • drop_console: emit an empty function if the return value of console.METHOD(...) may be called.

v5.33.0

  • reduce_vars improved when dealing with hoisted function definitions (#1544)

v5.32.0

  • import("module") can now be input and output from ESTree AST (#1557)
  • BigInt literals can now be input and output from ESTree AST (#1555)
  • typeof an object or array (typeof {} and typeof []) can now be statically evaluated. (#1546)

v5.31.6

  • Retain side effects in a case when the expression is a sequence (comma) expression

v5.31.5

  • Revert v5.31.4, which created mysterious issues #1548, #1549

v5.31.4 (reverted)

  • drop_unused: drop classes which only have side effects in the extends part

... (truncated)

Commits
  • c0417d7 5.38.1
  • 0b7d83a update changelog
  • ebf4a81 fix inlining non-call expressions in place of a optional_call?.(). Closes #...
  • 150347d 5.38.0
  • ec39f94 update changelog
  • 3e0e7d0 fix: correctly remove the console methods when drop_console is an array (#1585)
  • 914c31a Revert "update package-lock.json"
  • e5be79d update package-lock.json
  • 430795b do not use reference-style links
  • ce4a582 make is_constant() recognize constants with several unary prefixes (#1142)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [terser](https://github.com/terser/terser) from 5.19.2 to 5.38.1.
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v5.19.2...v5.38.1)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner February 11, 2025 05:25
@dependabot dependabot bot added Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 11, 2025
Copy link

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] 🔁 npm/[email protected], npm/[email protected] Transitive: filesystem, shell +11 4.25 MB fabiosantoscode

View full report↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Changed Required label for PR that categorizes merge commit message as "Changed" for changelog dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants