Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump terser from 5.31.0 to 5.34.1 in the npm_and_yarn group across 1 directory #1075

Merged
merged 1 commit into from
Oct 3, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 3, 2024

Bumps the npm_and_yarn group with 1 update in the / directory: terser.

Updates terser from 5.31.0 to 5.34.1

Changelog

Sourced from terser's changelog.

v5.34.1

  • bump the rollup devDependency to disable CVE warnings (Terser was not affected)

v5.34.0

  • internal: stop assigning properties to objects they don't belong in
  • internal: run compress tests in parallel
  • drop_console: emit an empty function if the return value of console.METHOD(...) may be called.

v5.33.0

  • reduce_vars improved when dealing with hoisted function definitions (#1544)

v5.32.0

  • import("module") can now be input and output from ESTree AST (#1557)
  • BigInt literals can now be input and output from ESTree AST (#1555)
  • typeof an object or array (typeof {} and typeof []) can now be statically evaluated. (#1546)

v5.31.6

  • Retain side effects in a case when the expression is a sequence (comma) expression

v5.31.5

  • Revert v5.31.4, which created mysterious issues #1548, #1549

v5.31.4 (reverted)

  • drop_unused: drop classes which only have side effects in the extends part

v5.31.3

  • drop_unused: drop unused parameters from IIFEs in some more situations.

v5.31.2

  • drop_unused: scan variables in self-referential class declarations that contain side effects.
  • Don't add parens to arrow function when it's the default for an argument (#1540)
  • Update domprops (#1538)

v5.31.1

  • Allow drop-unused to drop the whole assignment (not just the assigned name) in more situations, in order to avoid duplication of long strings.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.
📦 Published PR as canary version: 11.11.1--canary.1075.11165204957.0

✨ Test out this PR locally via:

npm install [email protected]
# or 
yarn add [email protected]

Bumps the npm_and_yarn group with 1 update in the / directory: [terser](https://github.com/terser/terser).


Updates `terser` from 5.31.0 to 5.34.1
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v5.31.0...v5.34.1)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Classification: Update one or more dependencies version label Oct 3, 2024
@codykaup codykaup self-assigned this Oct 3, 2024
@codykaup codykaup added patch Auto: Increment the patch version when merged skip-release Auto: Preserve the current version when merged labels Oct 3, 2024
Copy link

codacy-production bot commented Oct 3, 2024

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation Diff coverage
+0.00% (target: -1.00%) (target: 80.00%)
Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (1b60568) 8606 4647 54.00%
Head commit (6aab020) 8606 (+0) 4647 (+0) 54.00% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#1075) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

Codacy stopped sending the deprecated coverage status on June 5th, 2024. Learn more

@codykaup codykaup enabled auto-merge October 3, 2024 15:52
@codykaup codykaup disabled auto-merge October 3, 2024 15:52
@codykaup codykaup enabled auto-merge October 3, 2024 15:53
@codykaup codykaup added this pull request to the merge queue Oct 3, 2024
Merged via the queue into main with commit 517911b Oct 3, 2024
22 of 38 checks passed
@codykaup codykaup deleted the dependabot/npm_and_yarn/npm_and_yarn-9e3c98836f branch October 3, 2024 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Classification: Update one or more dependencies version patch Auto: Increment the patch version when merged skip-release Auto: Preserve the current version when merged
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant