Skip to content

chore(deps): bump serialize-javascript and @nx/webpack#76

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8bfee93a38
Open

chore(deps): bump serialize-javascript and @nx/webpack#76
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8bfee93a38

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps serialize-javascript to 7.0.5 and updates ancestor dependency @nx/webpack. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @nx/webpack from 19.4.1 to 22.7.2

Release notes

Sourced from @​nx/webpack's releases.

22.7.2 (2026-05-14)

🚀 Features

  • gradle: stream batch task results to nx as they finish (#35487)
  • nx-dev: track docs analytics for code copy, LLM prompt, YouTube (#35526)
  • testing: add migration for Jest 30 snapshot guide link (#35629)

🩹 Fixes

  • angular: disable vitest watch by default (#35493)
  • angular-rspack: keep root-scoped assets out of per-locale i18n emit (#35621)
  • bundling: include tsconfig solution input for rollup (#35476)
  • bundling: include tsconfig solution input for webpack (#35477, #35476)
  • core: bump axios to 1.16.0 for all packages (#35568)
  • core: add provenance check in nx console status path (#35485)
  • core: remove access control header from graph app (#35494)
  • core: ensure verbose logs go to stderr and daemon logs are properly decorated (#34358)
  • core: show flaky-task count in run summary (#35491)
  • core: unique telemetry user_id; expose workspace_id dimension (#35553)
  • core: update minimatch to 10.2.5 (#35569, #34660)
  • core: restore use-legacy-versioning shim for @​nx/js@​21 ensurePackage path (#35574)
  • core: isolate NX_PARALLEL env var in parallel-related specs (#35579)
  • core: skip handleimport miss path when nx key packages are absent (#35596)
  • core: use gethostuuid(3) instead of ioreg on macOS (#35599)
  • core: isolate cache env vars in splitArgs spec (#35584)
  • core: enable node's native v8 compile cache support (#35415, #20454)
  • core: support skipped batch tasks end-to-end and fix TUI double logs (#35617)
  • core: keep TUI task selection on the in-progress section (#35640)
  • core: allow nx mcp to run outside of an Nx workspace (#35655)
  • core: cast perf entries to PerformanceMeasure for detail access (43c0c821ba)
  • devkit: exclude dist from jest module path scan (#35615)
  • devkit: expand @​nx/devkit/internal re-exports for cherry-picked v23 deep-import migration (#35541)
  • dotnet: correct output paths for Web SDK and centralized dist setups (#35398)
  • gradle: exclude batch-runner from jest haste-map crawl (#35501)
  • gradle: exclude project-graph from jest module path scan (#35609)
  • gradle: support Windows file paths (#35184, #34987)
  • js: strip glob from inferred outputs before resolving as path (#35463, #35452)
  • js: reference vitest.config in eslint dep-checks for vitest libs (#35460, #33670, #35450)
  • js: include transitive workspace deps in pruned pnpm lockfile (#35532, #35347, #34655)
  • linter: prevent ENOENT crash in getRelativeImportPath for unresolvable paths (#35007, #13872, #34066, #30491, #16716, #35006, #21889, #32190)
  • maven: skip attached artifacts that fail to materialize in batch record (#35473)
  • maven: serialize Maven 4 build state recording (#35555)
  • maven: widen runCLI timeout for --no-batch maven.test.ts cases (#35589)
  • nx-dev: document nested CLI subcommands beyond two levels (#35519)
  • nx-dev: short-circuit bot probes in framer rewrite edge function (#35527)
  • react: withSvgr migration preserves other properties (#35484)
  • repo: clear NX_INVOCATION_ROOT_PID in run-native-target to avoid recursion false-positive (443dee0b22)
  • repo: revert deep-import rewrites that targeted v23-only @​nx/devkit/internal entry (ac8187963d)
  • repo: unblock 22.7.x cargo tests and nx-build e2e (#34285)

... (truncated)

Commits
  • d84f424 fix(devkit): expand @​nx/devkit/internal re-exports for cherry-picked v23 deep...
  • ac81879 fix(repo): revert deep-import rewrites that targeted v23-only @​nx/devkit/inte...
  • 7e4bce9 feat(testing): add migration for Jest 30 snapshot guide link (#35629)
  • 7a68bf4 fix(bundling): include tsconfig solution input for webpack (#35477)
  • 4bbd4b1 chore(repo): migrate nx repo to eslint v9 flat config (#35359)
  • dc479c5 fix(js): stop generating baseUrl in tsconfig, use ./ prefix for path mappings...
  • facec58 fix(misc): use workspace root for package manager detection and normalize pat...
  • 887fca4 fix(repo): narrow copy-assets outputs to prevent overlap with build-base (#35...
  • 63a8f27 fix(webpack): bump postcss-loader to ^8.2.1 to eliminate transitive yaml@1.x ...
  • a040a93 fix(repo): add copy-assets plugin and migrate all packages from legacy-post-b...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nx/webpack since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependency [@nx/webpack](https://github.com/nrwl/nx/tree/HEAD/packages/webpack). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.5)

Updates `@nx/webpack` from 19.4.1 to 22.7.2
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/22.7.2/packages/webpack)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: "@nx/webpack"
  dependency-version: 22.7.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants