Skip to content

build(deps): bump serialize-javascript, terser-webpack-plugin, compression-webpack-plugin, copy-webpack-plugin, css-minimizer-webpack-plugin, html-minimizer-webpack-plugin and image-minimizer-webpack-plugin#990

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-a03179a8de

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 6, 2026

Removes serialize-javascript. It's no longer used after updating ancestor dependencies serialize-javascript, terser-webpack-plugin, compression-webpack-plugin, copy-webpack-plugin, css-minimizer-webpack-plugin, html-minimizer-webpack-plugin and image-minimizer-webpack-plugin. These dependencies need to be updated together.

Removes serialize-javascript

Updates terser-webpack-plugin from 5.3.16 to 5.3.17

Release notes

Sourced from terser-webpack-plugin's releases.

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Changelog

Sourced from terser-webpack-plugin's changelog.

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)
Commits

Updates compression-webpack-plugin from 11.1.0 to 12.0.0

Release notes

Sourced from compression-webpack-plugin's releases.

v12.0.0

12.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#423) (5d0ab70)
Changelog

Sourced from compression-webpack-plugin's changelog.

12.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#423) (5d0ab70)
Commits

Updates copy-webpack-plugin from 13.0.1 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems
Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems
Commits

Updates css-minimizer-webpack-plugin from 7.0.4 to 8.0.0

Release notes

Sourced from css-minimizer-webpack-plugin's releases.

v8.0.0

8.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#303) (8791cc2)
Changelog

Sourced from css-minimizer-webpack-plugin's changelog.

8.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#303) (8791cc2)
Commits

Updates html-minimizer-webpack-plugin from 5.0.4 to 6.0.0

Release notes

Sourced from html-minimizer-webpack-plugin's releases.

v6.0.0

6.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#161) (2f5ef9a)
Changelog

Sourced from html-minimizer-webpack-plugin's changelog.

6.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#161) (2f5ef9a)
Commits

Updates image-minimizer-webpack-plugin from 4.1.4 to 5.0.0

Release notes

Sourced from image-minimizer-webpack-plugin's releases.

v5.0.0

5.0.0 (2026-03-03)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#493) (8df7466)
Changelog

Sourced from image-minimizer-webpack-plugin's changelog.

5.0.0 (2026-03-03)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#493) (8df7466)
Commits
  • 1f1f473 chore(release): 5.0.0
  • 8df7466 refactor!: minimum supported Node.js version is 20.9.0 (#493)
  • 70c93b7 build(deps): bump fast-xml-parser and imagemin-svgo (#490)
  • 8c838e8 build(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#488)
  • e9a2042 build(deps-dev): bump webpack from 5.101.1 to 5.105.0 (#487)
  • 64f0082 build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#486)
  • c5ec7cd build(deps-dev): bump js-yaml from 3.14.1 to 3.14.2 (#485)
  • a3243aa docs: update contributing
  • ca075f5 chore: update readme (#483)
  • 1ec04e7 chore: migrate from contrib (#482)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…ssion-webpack-plugin, copy-webpack-plugin, css-minimizer-webpack-plugin, html-minimizer-webpack-plugin and image-minimizer-webpack-plugin

Removes [serialize-javascript](https://github.com/yahoo/serialize-javascript). It's no longer used after updating ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin), [compression-webpack-plugin](https://github.com/webpack/compression-webpack-plugin), [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin), [css-minimizer-webpack-plugin](https://github.com/webpack/css-minimizer-webpack-plugin), [html-minimizer-webpack-plugin](https://github.com/webpack/html-minimizer-webpack-plugin) and [image-minimizer-webpack-plugin](https://github.com/webpack/image-minimizer-webpack-plugin). These dependencies need to be updated together.


Removes `serialize-javascript`

Updates `terser-webpack-plugin` from 5.3.16 to 5.3.17
- [Release notes](https://github.com/webpack/terser-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/terser-webpack-plugin@v5.3.16...v5.3.17)

Updates `compression-webpack-plugin` from 11.1.0 to 12.0.0
- [Release notes](https://github.com/webpack/compression-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/compression-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/compression-webpack-plugin@v11.1.0...v12.0.0)

Updates `copy-webpack-plugin` from 13.0.1 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v13.0.1...v14.0.0)

Updates `css-minimizer-webpack-plugin` from 7.0.4 to 8.0.0
- [Release notes](https://github.com/webpack/css-minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/css-minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/css-minimizer-webpack-plugin@v7.0.4...v8.0.0)

Updates `html-minimizer-webpack-plugin` from 5.0.4 to 6.0.0
- [Release notes](https://github.com/webpack/html-minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/html-minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/html-minimizer-webpack-plugin@v5.0.4...v6.0.0)

Updates `image-minimizer-webpack-plugin` from 4.1.4 to 5.0.0
- [Release notes](https://github.com/webpack/image-minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/image-minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/image-minimizer-webpack-plugin@v4.1.4...v5.0.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.3.17
  dependency-type: indirect
- dependency-name: compression-webpack-plugin
  dependency-version: 12.0.0
  dependency-type: direct:development
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:development
- dependency-name: css-minimizer-webpack-plugin
  dependency-version: 8.0.0
  dependency-type: direct:development
- dependency-name: html-minimizer-webpack-plugin
  dependency-version: 6.0.0
  dependency-type: direct:development
- dependency-name: image-minimizer-webpack-plugin
  dependency-version: 5.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 6, 2026
@vercel
Copy link

vercel bot commented Mar 6, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pro-react-admin Ready Ready Preview, Comment Mar 6, 2026 4:12pm
pro-react-admin-projecta Ready Ready Preview, Comment Mar 6, 2026 4:12pm
pro-react-admin-projectb Ready Ready Preview, Comment Mar 6, 2026 4:12pm
pro-react-admin-shell Ready Ready Preview, Comment Mar 6, 2026 4:12pm

@what-the-diff
Copy link

what-the-diff bot commented Mar 6, 2026

PR摘要

  • 更新了 "compression-webpack-plugin" 的版本
    将 "compression-webpack-plugin" 从版本^11.1.0升级到了版本^12.0.0.

  • 更新了 "copy-webpack-plugin" 的版本
    将 "copy-webpack-plugin" 从版本^13.0.1升级到了版本^14.0.0.

  • 更新了 "css-minimizer-webpack-plugin" 的版本
    将 "css-minimizer-webpack-plugin" 从版本^7.0.4升级到了版本^8.0.0.

  • 更新了 "html-minimizer-webpack-plugin" 的版本
    将 "html-minimizer-webpack-plugin" 从版本^5.0.4升级到了版本^6.0.0.

  • 更新了 "image-minimizer-webpack-plugin" 的版本
    将 "image-minimizer-webpack-plugin" 从版本^4.1.4升级到了版本^5.0.0.

@vercel vercel bot temporarily deployed to Preview – pro-react-admin-shell March 6, 2026 16:06 Inactive
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 6, 2026

@vercel vercel bot temporarily deployed to Preview – pro-react-admin-projectb March 6, 2026 16:10 Inactive
@vercel vercel bot temporarily deployed to Preview – pro-react-admin-projecta March 6, 2026 16:12 Inactive
@wkylin wkylin closed this Mar 7, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 7, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/multi-a03179a8de branch March 7, 2026 14:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant