Skip to content

build(deps): bump serialize-javascript, nitropack and terser-webpack-plugin#424

Merged
hakatashi merged 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-a364b74de7
Mar 30, 2026
Merged

build(deps): bump serialize-javascript, nitropack and terser-webpack-plugin#424
hakatashi merged 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-a364b74de7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2026

Removes serialize-javascript. It's no longer used after updating ancestor dependencies serialize-javascript, nitropack and terser-webpack-plugin. These dependencies need to be updated together.

Removes serialize-javascript

Updates nitropack from 2.11.9 to 2.13.2

Release notes

Sourced from nitropack's releases.

v2.13.2

compare changes

[!NOTE] This release upgrades h3 to latest 1.15.9 which contains security fixes.

🩹 Fixes

  • prerender: Skip writing routes with .. or outside of public dir (81f76800)
  • prerender: Mark invalid routes as skipped (9cb795c7)

📖 Documentation

  • Fix icon assets (#4022)

Preset Changes

  • vercel: Add types and docs for isr.exposeErrBody (f7753152)

❤️ Contributors

v2.13.1

compare changes

This release mainly updates dependencies (696dc3a9)

  • h3@1.15.5 released with security fix (release notes)
  • unstorage@v1.17.4 released with chokidar, lru-cache, and h3 dependency bumps (release notes)

v2.13.0

compare changes

🚀 Enhancements

  • vercel: Add support for skew protection (#3850)
  • bun: Support NITRO_BUN_IDLE_TIMEOUT env variable (#3294)

🔥 Performance

  • Process static assets in parallel (#3910)
  • Limit concurrency for compressing public assets (#3384)

🩹 Fixes

  • firebase: Update gen 1 import to match latest sdk (28406449)
  • Correct crypto polyfill (5caca6c0)

... (truncated)

Commits

Updates terser-webpack-plugin from 5.3.16 to 5.4.0

Release notes

Sourced from terser-webpack-plugin's releases.

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 29, 2026
…plugin

Removes [serialize-javascript](https://github.com/yahoo/serialize-javascript). It's no longer used after updating ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [nitropack](https://github.com/nitrojs/nitro) and [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin). These dependencies need to be updated together.


Removes `serialize-javascript`

Updates `nitropack` from 2.11.9 to 2.13.2
- [Release notes](https://github.com/nitrojs/nitro/releases)
- [Changelog](https://github.com/nitrojs/nitro/blob/main/changelog.config.ts)
- [Commits](nitrojs/nitro@v2.11.9...v2.13.2)

Updates `terser-webpack-plugin` from 5.3.16 to 5.4.0
- [Release notes](https://github.com/webpack/terser-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/terser-webpack-plugin@v5.3.16...v5.4.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 
  dependency-type: indirect
- dependency-name: nitropack
  dependency-version: 2.13.2
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.4.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-a364b74de7 branch from 3c67dde to 7ff398f Compare March 30, 2026 06:25
@hakatashi hakatashi merged commit c556d12 into master Mar 30, 2026
1 of 2 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/multi-a364b74de7 branch March 30, 2026 06:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant