[npm audit] Upgrade serialize-javscript to 7.0.5 to address CVE GHSA-qj8w-gfj5-8c6v (#5737)

cmalonzo · web-flow · commit 49dc367625a6 · 2026-04-01T11:33:16.000-04:00
Co-authored-by: Camille Malonzo &lt;cmalonzo@users.noreply.github.com&gt;
diff --git a/common/changes/@rushstack/module-minifier/main_2026-03-31-17-21.json b/common/changes/@rushstack/module-minifier/main_2026-03-31-17-21.json
@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/module-minifier",
+      "comment": "Bump serialize-javascript 7.0.5 to address CVE GHSA-qj8w-gfj5-8c6v",
+      "type": "patch"
+    }
+  ],
+  "packageName": "@rushstack/module-minifier"
+}
diff --git a/common/config/subspaces/default/pnpm-lock.yaml b/common/config/subspaces/default/pnpm-lock.yaml
diff --git a/common/config/subspaces/default/repo-state.json b/common/config/subspaces/default/repo-state.json
@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "8821e1e50d94962f6d01f6b347c1a79a584bc961",
+  "pnpmShrinkwrapHash": "958d2b2f4a0d7c66f79432acbee97ea344254ed6",
   "preferredVersionsHash": "029c99bd6e65c5e1f25e2848340509811ff9753c"
 }
diff --git a/libraries/module-minifier/package.json b/libraries/module-minifier/package.json
@@ -40,7 +40,7 @@
   },
   "dependencies": {
     "@rushstack/worker-pool": "workspace:*",
-    "serialize-javascript": "7.0.3",
+    "serialize-javascript": "7.0.5",
     "source-map": "~0.7.3",
     "terser": "^5.9.0"
   },

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`// DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.`
`2`	`2`	`{`
`3`		`- "pnpmShrinkwrapHash": "8821e1e50d94962f6d01f6b347c1a79a584bc961",`
	`3`	`+ "pnpmShrinkwrapHash": "958d2b2f4a0d7c66f79432acbee97ea344254ed6",`
`4`	`4`	`"preferredVersionsHash": "029c99bd6e65c5e1f25e2848340509811ff9753c"`
`5`	`5`	`}`