Update dependency serialize-javascript to v3

[dev-mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
serialize-javascript	dependencies	major	^1.5.0 → ^3.0.0
serialize-javascript	dependencies	major	^1.7.0 → ^3.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	Vulnerability	Reachability
High	8.1	CVE-2020-7660

---

Release Notes

yahoo/serialize-javascript (serialize-javascript)

v3.1.0

Compare Source

• Bump mocha from 7.1.2 to 7.2.0 (#​83)
• Bump mocha from 7.1.1 to 7.1.2 (#​82)
• Bump nyc from 15.0.0 to 15.0.1 (#​81)
• Don't replace regex / function placeholders within string literals (#​79)
• [Security] Bump minimist from 1.2.0 to 1.2.5 (#​78)
• Bump mocha from 7.1.0 to 7.1.1 (#​77)
• Bump mocha from 7.0.1 to 7.1.0 (#​74)
• Update example in README (#​73)

Note: the randombytes has been added to the dependency package to improve the generation of UIDs. Check the #​22 for more information. Thanks to @​JordanMilne and @​Siebes for this change.

v3.0.0

Compare Source

• Introduce support for Infinity (@​vthibault, #​72)
• Bump mocha from 7.0.0 to 7.0.1 (#​71)
• Test on Node.js v12 (@​okuryu, #​70)
• Bump mocha from 6.2.2 to 7.0.0 (#​69)
• Bump nyc from 14.1.1 to 15.0.0 (#​68)

Behavior changes for Infinity

It serializes Infinity values as follows since this version. The result of serialization may be changed if you are passing Infinity values into the serialize-javascript.

v3.x

const serialize = require('serialize-javascript');

serialize({inf: Infinity}); // '{"inf":Infinity}'

v2.x

const serialize = require('serialize-javascript');

serialize({inf: Infinity}); // '{"inf":null}'

v2.1.2

Compare Source

• Ignore .nyc_output (@​styfle, #​64)

v2.1.1

Compare Source

• Fix regular expressions Cross-Site Scripting (XSS) vulnerability (see security advisory)
• Migrate to nyc from istanbul

v2.1.0

Compare Source

• Add ignoreFunction option (@​realdennis, #​58)

v2.0.0

Compare Source

• re-landed #​54 with bump major version (see: #​57)

Behavior changes for undefined

It serializes undefined values as follows since this version. The result of serialization may be changed if you are passing undefined values into the serialize-javascript.

v2.x

const serialize = require('serialize-javascript');

serialize({undef: undefined}); // '{"undef":undefined}'

v1.x

const serialize = require('serialize-javascript');

serialize({undef: undefined}); // '{}'

v1.9.1

Compare Source

• Revert #​54 for breaking changes (see: #​57)
• Bump mocha from 5.2.0 to 6.2.0 (#​56)

v1.9.0

Compare Source

• support serialize undefined (@​nqdy666, #​54)
• Update Node.js versions to tests

v1.8.0

Compare Source

• Enhanced object literals don't have arrows (@​jowenjowen, #​51)

---

• If you want to rebase/retry this PR, check this box