[npm audit] Upgrade serialize-javscript to 7.0.5 to address CVE GHSA-qj8w-gfj5-8c6v

cmalonzo · cmalonzo · commit 24aadddef417 · 2026-03-31T13:22:59.000-04:00
diff --git a/common/changes/@rushstack/module-minifier/main_2026-03-31-17-21.json b/common/changes/@rushstack/module-minifier/main_2026-03-31-17-21.json
@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/module-minifier",
+      "comment": "Bump serialize-javascript 7.0.5 to address CVE GHSA-qj8w-gfj5-8c6v",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/module-minifier"
+}
diff --git a/common/config/subspaces/default/pnpm-lock.yaml b/common/config/subspaces/default/pnpm-lock.yaml
diff --git a/common/config/subspaces/default/repo-state.json b/common/config/subspaces/default/repo-state.json
@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "c482c23c40b202ed750549c796c24b3550d0ba6e",
+  "pnpmShrinkwrapHash": "0c0523b0f41972665d585bae2695afcf6858d418",
   "preferredVersionsHash": "029c99bd6e65c5e1f25e2848340509811ff9753c"
 }
diff --git a/libraries/module-minifier/package.json b/libraries/module-minifier/package.json
@@ -40,7 +40,7 @@
   },
   "dependencies": {
     "@rushstack/worker-pool": "workspace:*",
-    "serialize-javascript": "7.0.3",
+    "serialize-javascript": "7.0.5",
     "source-map": "~0.7.3",
     "terser": "^5.9.0"
   },

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`// DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.`
`2`	`2`	`{`
`3`		`- "pnpmShrinkwrapHash": "c482c23c40b202ed750549c796c24b3550d0ba6e",`
	`3`	`+ "pnpmShrinkwrapHash": "0c0523b0f41972665d585bae2695afcf6858d418",`
`4`	`4`	`"preferredVersionsHash": "029c99bd6e65c5e1f25e2848340509811ff9753c"`
`5`	`5`	`}`