Bump terser from 5.17.1 to 5.17.2 #693

Merged

dependabot[bot] merged 1 commit from dependabot/npm_and_yarn/develop/terser-5.17.2 into develop

2023-05-09 07:02:17 +02:00

dependabot[bot] commented

2023-05-09 06:58:09 +02:00

(Migrated from github.com)

Bumps terser from 5.17.1 to 5.17.2.

Changelog

Sourced from terser's changelog.

v5.17.2

Be less conservative when detecting use-before-definition of var in hoisted functions.

Support unusual (but perfectly valid) initializers of for-in and for-of loops.

Fix issue where hoisted function would be dropped if it was after a continue statement

Commits

474fca5 5.17.2
1213257 update changelog
765c1fe test #833 fix
58e1d6f be less conservative about preventing use-before-define in hoisted defuns. Cl...
e072c21 Do not evaluate the initializers of for-in and for-of. Closes #1234
7093b30 Preserve hoisted functions after continue. Closes #833
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @Serraniel.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [terser](https://github.com/terser/terser) from 5.17.1 to 5.17.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/terser/terser/blob/master/CHANGELOG.md">terser's changelog</a>.</em></p> <blockquote> <h2>v5.17.2</h2> <ul> <li>Be less conservative when detecting use-before-definition of <code>var</code> in hoisted functions.</li> <li>Support unusual (but perfectly valid) initializers of for-in and for-of loops.</li> <li>Fix issue where hoisted function would be dropped if it was after a <code>continue</code> statement</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/terser/terser/commit/474fca53535ec84bcde92730b5d82d96e2181dec"><code>474fca5</code></a> 5.17.2</li> <li><a href="https://github.com/terser/terser/commit/1213257944a9388302ae8c3d80526371c30f8a1a"><code>1213257</code></a> update changelog</li> <li><a href="https://github.com/terser/terser/commit/765c1fe56ec5d2bd2a3abd884aa62b50edd70239"><code>765c1fe</code></a> test <a href="https://redirect.github.com/terser/terser/issues/833">#833</a> fix</li> <li><a href="https://github.com/terser/terser/commit/58e1d6f83068b20e0d85d56d9bda8a7d80436ce0"><code>58e1d6f</code></a> be less conservative about preventing use-before-define in hoisted defuns. Cl...</li> <li><a href="https://github.com/terser/terser/commit/e072c218498ff5bcacab268f8813d5480ba0d288"><code>e072c21</code></a> Do not evaluate the initializers of for-in and for-of. Closes <a href="https://redirect.github.com/terser/terser/issues/1234">#1234</a></li> <li><a href="https://github.com/terser/terser/commit/7093b3028ef4cda97bedb5beaff2edc1eea262e0"><code>7093b30</code></a> Preserve hoisted functions after <code>continue</code>. Closes <a href="https://redirect.github.com/terser/terser/issues/833">#833</a></li> <li>See full diff in <a href="https://github.com/terser/terser/compare/v5.17.1...v5.17.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=terser&package-manager=npm_and_yarn&previous-version=5.17.1&new-version=5.17.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @Serraniel. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

Serraniel (Migrated from github.com) approved these changes 2023-05-09 06:58:28 +02:00