fix(deps): update dependency terser to v4.8.1 [security] #163
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
4.6.10
->4.8.1
GitHub Vulnerability Alerts
CVE-2022-25858
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.
Release Notes
terser/terser (terser)
v4.8.1
Compare Source
v4.8.0
Compare Source
million = 1_000_000
) was added.yield
wasn't considered a valid property key in generators.v4.7.0
Compare Source
arguments
object is now considered safe to retrieve properties from (useful forlength
, or0
) even whenpure_getters
is not set.const
declarations without value (which is invalid) in some corner cases when usingcollapse_vars
.v4.6.13
Compare Source
e
in them.v4.6.12
Compare Source
[1,[2, 3]]
is different from[1, 2, [3]]
v4.6.11
Compare Source
this
in function calls.x ?? y
), plus basic optimization for it.+
have been further optimizedConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.