Skip to content

Comments

Bump terser from 5.10.0 to 5.16.3#210

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/terser-5.16.3
Closed

Bump terser from 5.10.0 to 5.16.3#210
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/terser-5.16.3

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 7, 2023

Bumps terser from 5.10.0 to 5.16.3.

Changelog

Sourced from terser's changelog.

v5.16.3

  • Ensure function definitions, don't assume the values of variables defined after them.

v5.16.2

  • Fix sourcemaps with non-ascii characters (#1318)
  • Support string module name and export * as (#1336)
  • Do not move let out of for initializers, as it can change scoping
  • Fix a corner case that would generate the invalid syntax if (something) let x ("let" in braceless if body)
  • Knowledge of more native object properties (#1330)
  • Got rid of Travis (#1323)
  • Added semi-secret asObject sourcemap option to typescript defs (#1321)

v5.16.1

  • Properly handle references in destructurings (const { [reference]: val } = ...)
  • Allow parsing of .#privatefield in nested classes
  • Do not evaluate operations that return large strings if that would make the output code larger
  • Make collapse_vars handle block scope correctly
  • Internal improvements: Typos (#1311), more tests, small-scale refactoring

v5.16.0

  • Disallow private fields in object bodies (#1011)
  • Parse #privatefield in object (#1279)
  • Compress #privatefield in object

v5.15.1

  • Fixed missing parentheses around optional chains
  • Avoid bare let or const as the bodies of if statements (#1253)
  • Small internal fixes (#1271)
  • Avoid inlining a class twice and creating two equivalent but !== classes.

v5.15.0

  • Basic support for ES2022 class static initializer blocks.
  • Add AudioWorkletNode constructor options to domprops list (#1230)
  • Make identity function inliner not inline id(...expandedArgs)

v5.14.2

  • Security fix for RegExps that should not be evaluated (regexp DDOS)
  • Source maps improvements (#1211)
  • Performance improvements in long property access evaluation (#1213)

v5.14.1

  • keep_numbers option added to TypeScript defs (#1208)
  • Fixed parsing of nested template strings (#1204)

... (truncated)

Commits
  • 86c9e8e 5.16.3
  • 1fe29c4 update changelog
  • 4020eb3 refactor: do not check reduce_vars option exists when running inline_into_sym...
  • 7f6187a Make sure hoisted function definitions can't use not-yet-defined variables. C...
  • 6c2c056 5.16.2
  • e8cfadd update changelog
  • 6c726e9 Appropriately encode source maps to base64. Closes #1018. Based on #1318
  • c53b5bc Support string module name and export * as (#1336)
  • 79d7613 Do not move let and const out of for initializers. Closes #997
  • c14d512 ensure let, const, class, have braces in if, for, while statements. clo...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [terser](https://github.com/terser/terser) from 5.10.0 to 5.16.3.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v5.10.0...v5.16.3)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 7, 2023
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 7, 2023

Dependabot tried to add @XhmikosR as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/kabat87/bootstrap/pulls/210/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the users or teams you specified is not a collaborator of the kabat87/bootstrap repository. // See: https://docs.github.com/rest/reference/pulls#request-reviewers-for-a-pull-request

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 7, 2023

The following labels could not be found: v5.

@vercel
Copy link

vercel bot commented Feb 7, 2023

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated
bootstrap ❌ Failed (Inspect) Feb 7, 2023 at 10:02AM (UTC)

@coveralls
Copy link

Pull Request Test Coverage Report for Build 4112689094

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • 1 unchanged line in 1 file lost coverage.
  • Overall coverage increased (+0.0%) to 95.593%

Files with Coverage Reduction New Missed Lines %
js/src/dom/event-handler.js 1 91.82%
Totals Coverage Status
Change from base Build 1807584333: 0.0%
Covered Lines: 1975
Relevant Lines: 2027

💛 - Coveralls

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 21, 2023

Superseded by #215.

@dependabot dependabot bot closed this Feb 21, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/terser-5.16.3 branch February 21, 2023 11:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant