Skip to content

Bump serialize-javascript, @symfony/webpack-encore, terser-webpack-plugin and workbox-webpack-plugin#3715

Open
dependabot[bot] wants to merge 1 commit into6.2from
dependabot/npm_and_yarn/multi-6f76ae7951
Open

Bump serialize-javascript, @symfony/webpack-encore, terser-webpack-plugin and workbox-webpack-plugin#3715
dependabot[bot] wants to merge 1 commit into6.2from
dependabot/npm_and_yarn/multi-6f76ae7951

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps serialize-javascript to 7.0.5 and updates ancestor dependencies serialize-javascript, @symfony/webpack-encore, terser-webpack-plugin and workbox-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 4.0.0 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @symfony/webpack-encore from 4.7.0 to 6.0.0

Release notes

Sourced from @​symfony/webpack-encore's releases.

v5.3.1

What's Changed

Full Changelog: symfony/webpack-encore@v5.3.0...v5.3.1

v5.3.0

What's Changed

New Contributors

Full Changelog: symfony/webpack-encore@v5.2.0...v5.3.0

Peer dependencies update!

Features

Internals

New Contributors

Full Changelog: symfony/webpack-encore@v5.1.0...v5.2.0

5.1: Stimulus Bridge 4

What's Changed

Features

Full Changelog: symfony/webpack-encore@v5.0.1...v5.1.0

v5.0.1

Bug fixes

... (truncated)

Changelog

Sourced from @​symfony/webpack-encore's changelog.

6.0.0

This is a new major version that contains several backwards-compatibility breaks, but for the best!

BC Breaks

  • Remove support of Node.js <22.13.0
  • Remove support of babel-loader@^9.1.3, see possible BC breaks in 10.0.0 release notes
  • Remove support of style-loader@^3.3.0, see possible BC breaks in 4.0.0 release notes
  • Remove support of less-loader@^11.0.0, see possible BC breaks in 12.0.0 release notes
  • Remove support of postcss-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
  • Remove support of stylus-loader@^7.0.0, see possible BC breaks in 8.0.0 release notes
  • Remove support of webpack-cli@^5.0.0, see possible BC breaks in 6.0.0 release notes
  • Remove unmaintained file-loader dependency The [N] placeholder (regex capture groups in filename patterns) is no longer supported. If you were using patterns like [1] or [2] in your Encore.copyFiles() filename option, you will need to restructure your file organization or use a different naming strategy.
  • Remove deprecated --https flag and devServerConfig.https option for webpack-dev-server, use --server-type https or configureDevServerOptions() with server: 'https' instead

Features

  • Update @​nuxt/friendly-errors-webpack-plugin to @​kocal/friendly-errors-webpack-plugin, a maintained fork of the original plugin
  • Update webpack from ^5.74.0 to ^5.82.0
  • Update css-minimizer-webpack-plugin to ^8.0.0, see release notes
  • Finish removing Vue 2 support leftovers (JSX code path, vue-jsx feature, version: 2 option, Vue 2 peer dependencies), which was forgotten during v5.0.0

5.3.0

  • Add support for Svelte 5

5.2.0

  • Add support for Webpack CLI ^6.0.0

  • Add support for babel-loader ^10.0.0

  • Add support for style-loader ^4.0.0

If you manually specified the option insert, now it can only be a selector or the path to the module. Follow the style-loader migration guide to upgrade!

5.1.0

Features

5.0.1

... (truncated)

Commits
  • 93016b8 Tagging 6.0.0
  • fb434b5 bug #1401 Follow-up #1400 (fix URLs generation) (Kocal)
  • 3e149b9 Follow-up #1400 (fix URLs generation)
  • 5557f89 feature #1400 Remove deprecated --https flag and devServerConfig.https op...
  • c5d7afa Remove deprecated --https flag and devServerConfig.https option
  • 0c706d2 feature #1399 Remove Vue 2 support leftovers (Kocal)
  • 94619b0 Remove Vue 2 support leftovers
  • b8c997b feature #1398 Remove unmaintained file-loader dependency (Kocal)
  • 1200947 Remove unmaintained file-loader dependency
  • b0542cf minor #1397 Add AGENTS.md (Kocal)
  • Additional commits viewable in compare view

Updates terser-webpack-plugin from 5.3.16 to 5.5.0

Release notes

Sourced from terser-webpack-plugin's releases.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits

Updates workbox-webpack-plugin from 6.6.0 to 7.4.1

Release notes

Sourced from workbox-webpack-plugin's releases.

Workbox v7.4.1

What's Changed

New Contributors

Full Changelog: GoogleChrome/workbox@v7.4.0...v7.4.1

Workbox v7.4.0

v7.4.0

  • Critical dependency updates.

Workbox v7.3.0

v7.3.0

  • Critical dependency updates.

v7.1.0

What's Changed ✏️

... (truncated)

Commits
  • 62b9d8b v7.4.1
  • b6b696c Merge pull request #3510 from GoogleChrome/chore/update-lock-file
  • 6524a7d Update test
  • 9a57e39 Run npm audit fix
  • 86035d8 Update lock file
  • c75363a Merge pull request #3508 from GoogleChrome/dependabot/github_actions/github/c...
  • 85383d6 Merge pull request #3507 from GoogleChrome/dependabot/npm_and_yarn/apideck/be...
  • a1cdb47 Bump github/codeql-action from 4 to 4.35.2
  • 05b276d Bump @​apideck/better-ajv-errors from 0.3.1 to 0.3.7
  • 8e6df29 Merge pull request #3489 from rtritto/replace-lodash
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by swissspidy, a new releaser for workbox-webpack-plugin since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file 🧹 Chore labels May 4, 2026
…ugin and workbox-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@symfony/webpack-encore](https://github.com/symfony/webpack-encore), [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) and [workbox-webpack-plugin](https://github.com/googlechrome/workbox). These dependencies need to be updated together.


Updates `serialize-javascript` from 4.0.0 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v4.0.0...v7.0.5)

Updates `@symfony/webpack-encore` from 4.7.0 to 6.0.0
- [Release notes](https://github.com/symfony/webpack-encore/releases)
- [Changelog](https://github.com/symfony/webpack-encore/blob/main/CHANGELOG.md)
- [Commits](symfony/webpack-encore@v4.7.0...v6.0.0)

Updates `terser-webpack-plugin` from 5.3.16 to 5.5.0
- [Release notes](https://github.com/webpack/terser-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.16...v5.5.0)

Updates `workbox-webpack-plugin` from 6.6.0 to 7.4.1
- [Release notes](https://github.com/googlechrome/workbox/releases)
- [Commits](GoogleChrome/workbox@v6.6.0...v7.4.1)

---
updated-dependencies:
- dependency-name: "@symfony/webpack-encore"
  dependency-version: 6.0.0
  dependency-type: direct:development
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.5.0
  dependency-type: indirect
- dependency-name: workbox-webpack-plugin
  dependency-version: 7.4.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-6f76ae7951 branch from 54111c2 to f3c3c76 Compare May 8, 2026 10:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🧹 Chore dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants