From 31b2a175e5dd0afebd2383d2d20816ffbb940376 Mon Sep 17 00:00:00 2001 From: tada5hi Date: Wed, 11 Feb 2026 14:16:54 +0100 Subject: [PATCH 1/3] fix(terser): bump serialize-javascript, smob & terser --- packages/terser/package.json | 8 +-- pnpm-lock.yaml | 105 +++++++++++++++++++---------------- 2 files changed, 61 insertions(+), 52 deletions(-) diff --git a/packages/terser/package.json b/packages/terser/package.json index 24f9a35a6..53591ad89 100644 --- a/packages/terser/package.json +++ b/packages/terser/package.json @@ -61,12 +61,12 @@ } }, "dependencies": { - "serialize-javascript": "^6.0.1", - "smob": "^1.0.0", - "terser": "^5.17.4" + "serialize-javascript": "^7.0.2", + "smob": "^1.6.0", + "terser": "^5.46.0" }, "devDependencies": { - "@types/serialize-javascript": "^5.0.2", + "@types/serialize-javascript": "^5.0.4", "rollup": "^4.0.0-24", "typescript": "^4.8.3" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index e5908b66b..3480c9d8a 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -85,7 +85,7 @@ importers: version: 5.9.3 vitest: specifier: ^4.0.2 - version: 4.0.2(@types/node@20.19.23)(terser@5.17.4) + version: 4.0.2(@types/node@20.19.23)(terser@5.46.0) packages/alias: devDependencies: @@ -690,18 +690,18 @@ importers: packages/terser: dependencies: serialize-javascript: - specifier: ^6.0.1 - version: 6.0.1 + specifier: ^7.0.2 + version: 7.0.2 smob: - specifier: ^1.0.0 - version: 1.0.0 + specifier: ^1.6.0 + version: 1.6.0 terser: - specifier: ^5.17.4 - version: 5.17.4 + specifier: ^5.46.0 + version: 5.46.0 devDependencies: '@types/serialize-javascript': - specifier: ^5.0.2 - version: 5.0.2 + specifier: ^5.0.4 + version: 5.0.4 rollup: specifier: ^4.0.0-24 version: 4.0.0-24 @@ -1671,6 +1671,9 @@ packages: resolution: {integrity: sha512-sQXCasFk+U8lWYEe66WxRDOE9PjVz4vSM51fTu3Hw+ClTpUSQb718772vH3pyS5pShp6lvQM7SxgIDXXXmOX7w==} engines: {node: '>=6.0.0'} + '@jridgewell/gen-mapping@0.3.13': + resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==} + '@jridgewell/gen-mapping@0.3.2': resolution: {integrity: sha512-mh65xKQAzI6iBcFzwv28KVWSmCkdRBWoOh+bYQGW3+6OZvbbN3TqMGo5hqYxQniRcH9F2VZIoJCm4pa3BPDK/A==} engines: {node: '>=6.0.0'} @@ -1683,8 +1686,8 @@ packages: resolution: {integrity: sha512-xnkseuNADM0gt2bs+BvhO0p78Mk762YnZdsuzFV018NoG1Sj1SCQvpSqa7XUaTam5vAGasABV9qXASMKnFMwMw==} engines: {node: '>=6.0.0'} - '@jridgewell/source-map@0.3.2': - resolution: {integrity: sha512-m7O9o2uR8k2ObDysZYzdfhb08VuEml5oWGiosa1VdaPZ/A6QyPkAJuwN0Q1lhULOf6B7MtQmHENS743hWtCrgw==} + '@jridgewell/source-map@0.3.11': + resolution: {integrity: sha512-ZMp1V8ZFcPG5dIWnQLr3NSI1MiCU7UETdS/A0G8V/XWHvJv3ZsFqutJn1Y5RPmAPX6F3BiE397OqveU/9NCuIA==} '@jridgewell/sourcemap-codec@1.4.14': resolution: {integrity: sha512-XPSJHWmi394fuUuzDnGz1wiKqWfo1yXecHQMRf2l6hztTO+nPru658AyDngaBe7isIxEkRsPR3FZh+s7iVa4Uw==} @@ -1698,6 +1701,9 @@ packages: '@jridgewell/trace-mapping@0.3.16': resolution: {integrity: sha512-LCQ+NeThyJ4k1W2d+vIKdxuSt9R3pQSZ4P92m7EakaYuXcVWbHuT5bjNcqLd4Rdgi6xYWYDvBJZJLZSLanjDcA==} + '@jridgewell/trace-mapping@0.3.31': + resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==} + '@jridgewell/trace-mapping@0.3.9': resolution: {integrity: sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ==} @@ -2175,8 +2181,8 @@ packages: '@types/semver@7.3.12': resolution: {integrity: sha512-WwA1MW0++RfXmCr12xeYOOC5baSC9mSb0ZqCquFzKhcoF4TvHu5MKOuXsncgZcpVFhB1pXd5hZmM0ryAoCp12A==} - '@types/serialize-javascript@5.0.2': - resolution: {integrity: sha512-BRLlwZzRoZukGaBtcUxkLsZsQfWZpvog6MZk3PWQO9Q6pXmXFzjU5iGzZ+943evp6tkkbN98N1Z31KT0UG1yRw==} + '@types/serialize-javascript@5.0.4': + resolution: {integrity: sha512-Z2R7UKFuNWCP8eoa2o9e5rkD3hmWxx/1L0CYz0k2BZzGh0PhEVMp9kfGiqEml/0IglwNERXZ2hwNzIrSz/KHTA==} '@types/source-map-support@0.5.6': resolution: {integrity: sha512-b2nJ9YyXmkhGaa2b8VLM0kJ04xxwNyijcq12/kDoomCt43qbHBeK2SLNJ9iJmETaAj+bKUT05PQUu3Q66GvLhQ==} @@ -4534,9 +4540,6 @@ packages: resolution: {integrity: sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==} engines: {node: '>=10'} - randombytes@2.1.0: - resolution: {integrity: sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==} - read-pkg-up@7.0.1: resolution: {integrity: sha512-zK0TB7Xd6JpCLmlLmufqykGE+/TlOePD6qKClNW7hHDKFh/J7/7gCWGR7joEQEW1bKq3a3yUZSObOoWLFQ4ohg==} engines: {node: '>=8'} @@ -4736,8 +4739,9 @@ packages: resolution: {integrity: sha512-8I8TjW5KMOKsZQTvoxjuSIa7foAwPWGOts+6o7sgjz41/qMD9VQHEDxi6PBvK2l0MXUmqZyNpUK+T2tQaaElvw==} engines: {node: '>=10'} - serialize-javascript@6.0.1: - resolution: {integrity: sha512-owoXEFjWRllis8/M1Q+Cw5k8ZH40e3zhp/ovX+Xr/vi1qj6QesbyXXViFbpNvWvPNAD62SutwEXavefrLJWj7w==} + serialize-javascript@7.0.2: + resolution: {integrity: sha512-Y/agDAqbUWRYFWLF5pMT9Rb8wN5ERPMbQH7oq6R+4YgFdMNO4+ELo4PjFCW3H+2CbXirPr/XUgYT+3iXJfTbZQ==} + engines: {node: '>=20.0.0'} set-blocking@2.0.0: resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==} @@ -4783,12 +4787,13 @@ packages: resolution: {integrity: sha512-FC+lgizVPfie0kkhqUScwRu1O/lF6NOgJmlCgK+/LYxDCTk8sGelYaHDhFcDN+Sn3Cv+3VSa4Byeo+IMCzpMgQ==} engines: {node: '>=12'} - smob@1.0.0: - resolution: {integrity: sha512-fnePEPpgGjAdBDk0nV7L9jcStbbcUsKS5TC+RYambCSU9Dm1k2rqDivdg5LBRVWF/NXe0Rq8yfnKKQI08kSXIg==} - smob@1.4.0: resolution: {integrity: sha512-MqR3fVulhjWuRNSMydnTlweu38UhQ0HXM4buStD/S3mc/BzX3CuM9OmhyQpmtYCvoYdl5ris6TI0ZqH355Ymqg==} + smob@1.6.0: + resolution: {integrity: sha512-m/Bpm2tsx68FEr4zgGaMdcjHSkq7x7uOPJIQudT/gS7slXH5y2VatJru4POV0dKbmk7ZYntX29fKgwWCXJKwvQ==} + engines: {node: '>=22.0.0'} + sort-keys@2.0.0: resolution: {integrity: sha512-/dPCrG1s3ePpWm6yBbxZq5Be1dXGLyLn9Z791chDC3NFrpkVbWGzkBwPN1knaciexFXgRJ7hzdnwZ4stHSDmjg==} engines: {node: '>=4'} @@ -4954,8 +4959,8 @@ packages: resolution: {integrity: sha512-aoBAniQmmwtcKp/7BzsH8Cxzv8OL736p7v1ihGb5e9DJ9kTwGWHrQrVB5+lfVDzfGrdRzXch+ig7LHaY1JTOrg==} engines: {node: '>=8'} - terser@5.17.4: - resolution: {integrity: sha512-jcEKZw6UPrgugz/0Tuk/PVyLAPfMBJf5clnGueo45wTweoV8yh7Q7PEkhkJ5uuUbC7zAxEcG3tqNr1bstkQ8nw==} + terser@5.46.0: + resolution: {integrity: sha512-jTwoImyr/QbOWFFso3YoU3ik0jBBDJ6JTOQiy/J2YxVJdZCc+5u7skhNwiOR3FQIygFqVUPHl7qbbxtjW2K3Qg==} engines: {node: '>=10'} hasBin: true @@ -6338,6 +6343,11 @@ snapshots: '@jridgewell/set-array': 1.1.2 '@jridgewell/sourcemap-codec': 1.4.15 + '@jridgewell/gen-mapping@0.3.13': + dependencies: + '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/trace-mapping': 0.3.31 + '@jridgewell/gen-mapping@0.3.2': dependencies: '@jridgewell/set-array': 1.1.2 @@ -6348,10 +6358,10 @@ snapshots: '@jridgewell/set-array@1.1.2': {} - '@jridgewell/source-map@0.3.2': + '@jridgewell/source-map@0.3.11': dependencies: - '@jridgewell/gen-mapping': 0.3.2 - '@jridgewell/trace-mapping': 0.3.16 + '@jridgewell/gen-mapping': 0.3.13 + '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/sourcemap-codec@1.4.14': {} @@ -6364,6 +6374,11 @@ snapshots: '@jridgewell/resolve-uri': 3.1.0 '@jridgewell/sourcemap-codec': 1.4.14 + '@jridgewell/trace-mapping@0.3.31': + dependencies: + '@jridgewell/resolve-uri': 3.1.0 + '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/trace-mapping@0.3.9': dependencies: '@jridgewell/resolve-uri': 3.1.0 @@ -6753,7 +6768,7 @@ snapshots: '@types/semver@7.3.12': {} - '@types/serialize-javascript@5.0.2': {} + '@types/serialize-javascript@5.0.4': {} '@types/source-map-support@0.5.6': dependencies: @@ -6954,13 +6969,13 @@ snapshots: chai: 6.2.0 tinyrainbow: 3.0.3 - '@vitest/mocker@4.0.2(vite@7.1.12(@types/node@20.19.23)(terser@5.17.4))': + '@vitest/mocker@4.0.2(vite@7.1.12(@types/node@20.19.23)(terser@5.46.0))': dependencies: '@vitest/spy': 4.0.2 estree-walker: 3.0.3 magic-string: 0.30.19 optionalDependencies: - vite: 7.1.12(@types/node@20.19.23)(terser@5.17.4) + vite: 7.1.12(@types/node@20.19.23)(terser@5.46.0) '@vitest/pretty-format@4.0.2': dependencies: @@ -8023,8 +8038,8 @@ snapshots: espree@9.6.1: dependencies: - acorn: 8.14.0 - acorn-jsx: 5.3.2(acorn@8.14.0) + acorn: 8.15.0 + acorn-jsx: 5.3.2(acorn@8.15.0) eslint-visitor-keys: 3.4.3 esprima@4.0.1: {} @@ -9350,10 +9365,6 @@ snapshots: quick-lru@5.1.1: {} - randombytes@2.1.0: - dependencies: - safe-buffer: 5.2.1 - read-pkg-up@7.0.1: dependencies: find-up: 4.1.0 @@ -9605,9 +9616,7 @@ snapshots: dependencies: type-fest: 0.13.1 - serialize-javascript@6.0.1: - dependencies: - randombytes: 2.1.0 + serialize-javascript@7.0.2: {} set-blocking@2.0.0: {} @@ -9657,10 +9666,10 @@ snapshots: ansi-styles: 6.1.1 is-fullwidth-code-point: 4.0.0 - smob@1.0.0: {} - smob@1.4.0: {} + smob@1.6.0: {} + sort-keys@2.0.0: dependencies: is-plain-obj: 1.1.0 @@ -9829,10 +9838,10 @@ snapshots: temp-dir@2.0.0: {} - terser@5.17.4: + terser@5.46.0: dependencies: - '@jridgewell/source-map': 0.3.2 - acorn: 8.8.0 + '@jridgewell/source-map': 0.3.11 + acorn: 8.15.0 commander: 2.20.3 source-map-support: 0.5.21 @@ -10037,7 +10046,7 @@ snapshots: spdx-correct: 3.1.1 spdx-expression-parse: 3.0.1 - vite@7.1.12(@types/node@20.19.23)(terser@5.17.4): + vite@7.1.12(@types/node@20.19.23)(terser@5.46.0): dependencies: esbuild: 0.25.11 fdir: 6.5.0(picomatch@4.0.3) @@ -10048,12 +10057,12 @@ snapshots: optionalDependencies: '@types/node': 20.19.23 fsevents: 2.3.3 - terser: 5.17.4 + terser: 5.46.0 - vitest@4.0.2(@types/node@20.19.23)(terser@5.17.4): + vitest@4.0.2(@types/node@20.19.23)(terser@5.46.0): dependencies: '@vitest/expect': 4.0.2 - '@vitest/mocker': 4.0.2(vite@7.1.12(@types/node@20.19.23)(terser@5.17.4)) + '@vitest/mocker': 4.0.2(vite@7.1.12(@types/node@20.19.23)(terser@5.46.0)) '@vitest/pretty-format': 4.0.2 '@vitest/runner': 4.0.2 '@vitest/snapshot': 4.0.2 @@ -10070,7 +10079,7 @@ snapshots: tinyexec: 0.3.2 tinyglobby: 0.2.15 tinyrainbow: 3.0.3 - vite: 7.1.12(@types/node@20.19.23)(terser@5.17.4) + vite: 7.1.12(@types/node@20.19.23)(terser@5.46.0) why-is-node-running: 2.3.0 optionalDependencies: '@types/node': 20.19.23 From a1c2600e767a1eb7e55e0cc843b58854dc2579f3 Mon Sep 17 00:00:00 2001 From: tada5hi Date: Wed, 11 Feb 2026 14:22:50 +0100 Subject: [PATCH 2/3] fix(deps): downgrade serialize-javascript vo v6.0.2 --- packages/terser/package.json | 2 +- pnpm-lock.yaml | 20 ++++++++++++++------ 2 files changed, 15 insertions(+), 7 deletions(-) diff --git a/packages/terser/package.json b/packages/terser/package.json index 53591ad89..e9c47417b 100644 --- a/packages/terser/package.json +++ b/packages/terser/package.json @@ -61,7 +61,7 @@ } }, "dependencies": { - "serialize-javascript": "^7.0.2", + "serialize-javascript": "^6.0.2", "smob": "^1.6.0", "terser": "^5.46.0" }, diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 3480c9d8a..8e1642cb0 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -690,8 +690,8 @@ importers: packages/terser: dependencies: serialize-javascript: - specifier: ^7.0.2 - version: 7.0.2 + specifier: ^6.0.2 + version: 6.0.2 smob: specifier: ^1.6.0 version: 1.6.0 @@ -4540,6 +4540,9 @@ packages: resolution: {integrity: sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==} engines: {node: '>=10'} + randombytes@2.1.0: + resolution: {integrity: sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==} + read-pkg-up@7.0.1: resolution: {integrity: sha512-zK0TB7Xd6JpCLmlLmufqykGE+/TlOePD6qKClNW7hHDKFh/J7/7gCWGR7joEQEW1bKq3a3yUZSObOoWLFQ4ohg==} engines: {node: '>=8'} @@ -4739,9 +4742,8 @@ packages: resolution: {integrity: sha512-8I8TjW5KMOKsZQTvoxjuSIa7foAwPWGOts+6o7sgjz41/qMD9VQHEDxi6PBvK2l0MXUmqZyNpUK+T2tQaaElvw==} engines: {node: '>=10'} - serialize-javascript@7.0.2: - resolution: {integrity: sha512-Y/agDAqbUWRYFWLF5pMT9Rb8wN5ERPMbQH7oq6R+4YgFdMNO4+ELo4PjFCW3H+2CbXirPr/XUgYT+3iXJfTbZQ==} - engines: {node: '>=20.0.0'} + serialize-javascript@6.0.2: + resolution: {integrity: sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==} set-blocking@2.0.0: resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==} @@ -9365,6 +9367,10 @@ snapshots: quick-lru@5.1.1: {} + randombytes@2.1.0: + dependencies: + safe-buffer: 5.2.1 + read-pkg-up@7.0.1: dependencies: find-up: 4.1.0 @@ -9616,7 +9622,9 @@ snapshots: dependencies: type-fest: 0.13.1 - serialize-javascript@7.0.2: {} + serialize-javascript@6.0.2: + dependencies: + randombytes: 2.1.0 set-blocking@2.0.0: {} From ef293ff7d8ee4ec7be423820bdd189dc55fe1fc1 Mon Sep 17 00:00:00 2001 From: tada5hi Date: Wed, 11 Feb 2026 15:42:40 +0100 Subject: [PATCH 3/3] fix(deps): bump smob to v1.6.1 --- packages/terser/package.json | 2 +- pnpm-lock.yaml | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/packages/terser/package.json b/packages/terser/package.json index e9c47417b..b9feafe86 100644 --- a/packages/terser/package.json +++ b/packages/terser/package.json @@ -62,7 +62,7 @@ }, "dependencies": { "serialize-javascript": "^6.0.2", - "smob": "^1.6.0", + "smob": "^1.6.1", "terser": "^5.46.0" }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 8e1642cb0..aff637060 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -693,8 +693,8 @@ importers: specifier: ^6.0.2 version: 6.0.2 smob: - specifier: ^1.6.0 - version: 1.6.0 + specifier: ^1.6.1 + version: 1.6.1 terser: specifier: ^5.46.0 version: 5.46.0 @@ -4792,9 +4792,9 @@ packages: smob@1.4.0: resolution: {integrity: sha512-MqR3fVulhjWuRNSMydnTlweu38UhQ0HXM4buStD/S3mc/BzX3CuM9OmhyQpmtYCvoYdl5ris6TI0ZqH355Ymqg==} - smob@1.6.0: - resolution: {integrity: sha512-m/Bpm2tsx68FEr4zgGaMdcjHSkq7x7uOPJIQudT/gS7slXH5y2VatJru4POV0dKbmk7ZYntX29fKgwWCXJKwvQ==} - engines: {node: '>=22.0.0'} + smob@1.6.1: + resolution: {integrity: sha512-KAkBqZl3c2GvNgNhcoyJae1aKldDW0LO279wF9bk1PnluRTETKBq0WyzRXxEhoQLk56yHaOY4JCBEKDuJIET5g==} + engines: {node: '>=20.0.0'} sort-keys@2.0.0: resolution: {integrity: sha512-/dPCrG1s3ePpWm6yBbxZq5Be1dXGLyLn9Z791chDC3NFrpkVbWGzkBwPN1knaciexFXgRJ7hzdnwZ4stHSDmjg==} @@ -9676,7 +9676,7 @@ snapshots: smob@1.4.0: {} - smob@1.6.0: {} + smob@1.6.1: {} sort-keys@2.0.0: dependencies: