Bump terser from 5.12.1 to 5.13.0 #498

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/develop/terser-5.13.0 into develop

2022-04-27 06:09:19 +02:00

dependabot[bot] commented

2022-04-27 06:04:20 +02:00

(Migrated from github.com)

Bumps terser from 5.12.1 to 5.13.0.

Changelog

Sourced from terser's changelog.

v5.13.0

All calls to eval() were removed (#1171, #1184)

source-map was updated to 0.8.0-beta.0 (#1164)

NavigatorUAData was added to domprops to avoid property mangling (#1166)

Commits

700bdba 5.13.0
20f1d7a update changelog
67887ea Remove last new Function() call (#1184)
a8ab684 Run Eval removing codeshift (#1171)
52da6d2 stop using eval to create RegExps
7c98c9c Update source-map -> 0.8.0-beta.0 (#1164)
a88f4fa domprops.js: add NavigatorUAData to domprops (#1166)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @Serraniel.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [terser](https://github.com/terser/terser) from 5.12.1 to 5.13.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/terser/terser/blob/master/CHANGELOG.md">terser's changelog</a>.</em></p> <blockquote> <h2>v5.13.0</h2> <ul> <li>All calls to eval() were removed (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1171">#1171</a>, <a href="https://github-redirect.dependabot.com/terser/terser/issues/1184">#1184</a>)</li> <li><code>source-map</code> was updated to 0.8.0-beta.0 (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1164">#1164</a>)</li> <li>NavigatorUAData was added to domprops to avoid property mangling (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1166">#1166</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/terser/terser/commit/700bdba64839db657b24cecc27a21bc592a11461"><code>700bdba</code></a> 5.13.0</li> <li><a href="https://github.com/terser/terser/commit/20f1d7a0952d284da8d9d60779276cef340c3057"><code>20f1d7a</code></a> update changelog</li> <li><a href="https://github.com/terser/terser/commit/67887ea9ce48d9d1311b74752478018c500c9dfa"><code>67887ea</code></a> Remove last new Function() call (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1184">#1184</a>)</li> <li><a href="https://github.com/terser/terser/commit/a8ab6845b64ec87c611511ea282dcbd2d56c074c"><code>a8ab684</code></a> Run Eval removing codeshift (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1171">#1171</a>)</li> <li><a href="https://github.com/terser/terser/commit/52da6d2f6f7cb28179bfc5dd195d7e179cb6ed17"><code>52da6d2</code></a> stop using eval to create RegExps</li> <li><a href="https://github.com/terser/terser/commit/7c98c9caf70c16fe55050d3677d1822b0f7afdc5"><code>7c98c9c</code></a> Update source-map -> 0.8.0-beta.0 (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1164">#1164</a>)</li> <li><a href="https://github.com/terser/terser/commit/a88f4faded370c2f1e1af7417dcda2bb9c63da65"><code>a88f4fa</code></a> domprops.js: add <code>NavigatorUAData</code> to domprops (<a href="https://github-redirect.dependabot.com/terser/terser/issues/1166">#1166</a>)</li> <li>See full diff in <a href="https://github.com/terser/terser/compare/v5.12.1...v5.13.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=terser&package-manager=npm_and_yarn&previous-version=5.12.1&new-version=5.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @Serraniel. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Serraniel (Migrated from github.com) approved these changes 2022-04-27 06:04:38 +02:00