Bump terser and parcel #240
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://cdn.statically.io/img/avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
the
dependencies
Closed
|
New dependency changes detected. Learn more about Socket for GitHub ↗︎ 🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again. Bot CommandsTo ignore an alert, reply with a comment starting with
🫣 Native codeContains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs. Ensure that native code bindings are expected. Consumers may consider pure JS and functionally similar alternatives to avoid the challenges and risks associated with native code bindings.
Pull request alert summary
📊 Modified Dependency Overview:
|
Bumps [terser](https://github.com/terser/terser) to 5.16.8 and updates ancestor dependency [parcel](https://github.com/parcel-bundler/parcel). These dependencies need to be updated together. Updates `terser` from 3.17.0 to 5.16.8 - [Release notes](https://github.com/terser/terser/releases) - [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md) - [Commits](terser/terser@v3.17.0...v5.16.8) Updates `parcel` from 1.12.4 to 2.8.3 - [Release notes](https://github.com/parcel-bundler/parcel/releases) - [Changelog](https://github.com/parcel-bundler/parcel/blob/v2/CHANGELOG.md) - [Commits](https://github.com/parcel-bundler/parcel/compare/parcel-bundler@1.12.4...v2.8.3) --- updated-dependencies: - dependency-name: terser dependency-type: indirect - dependency-name: parcel dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/terser-and-parcel-5.16.8
branch
from
cf0c0f9
to
e8b88fa
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps terser to 5.16.8 and updates ancestor dependency parcel. These dependencies need to be updated together.
Updates
terserfrom 3.17.0 to 5.16.8Changelog
Sourced from terser's changelog.
... (truncated)
Commits
b79e49a5.16.8350d534lint7c5b980update changeloge1d7b80allow chaining methods into import.meta. Closes #135821600d9close #1338 where possible (#1360)91176955.16.696abde5update changelog4d6c4f6Fix output increase by walking function definitions first. Closes #1338 while...8a1b240Parse import.meta as a special expression. Closes #1349c7d844b5.16.5Updates
parcelfrom 1.12.4 to 2.8.3Release notes
Sourced from parcel's releases.
... (truncated)
Changelog
Sourced from parcel's changelog.
... (truncated)
Commits
349a6cav2.8.3a86c53cChangelog for v2.8.37023c08Address bug by updating an asset reference and merge conditions (#8762)ddae31aFix CSS order when merging type change bundles (#8766)2172672fixing failing build for contributors on Linux using Node 18 (#8763)723e844Extension: Importers View and separate LSP protocol package (#8747)e2deeecBump swc to fix sourcemaps with Windows line endings (#8756)fdae6c0Apply HMR updates in topological order (#8752)e21af59Make extension packaging work (#8730)c97cf38Typed api.storeResult (#8732)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.