[Snyk] Upgrade terser from 5.19.0 to 5.19.4

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade terser from 5.19.0 to 5.19.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-09-04.

Release notes

Package name: terser

• 5.19.4 - 2023-09-04
  

  5.19.4

• 5.19.3 - 2023-08-29
  

  5.19.3

• 5.19.2 - 2023-07-21
  

  5.19.2

• 5.19.1 - 2023-07-17
  

  5.19.1

• 5.19.0 - 2023-07-11
  

  5.19.0

from terser GitHub release notes

Commit messages

Package name: terser

• c698427 5.19.4
• 1233c98 update changelog
• bdd2349 prevent creating very deeply nested ternaries from a long list of `if..return`. Closes Improve JIT of static variables which value is already known dotnet/runtime#1432
• 33d53e0 prevent inlining classes into other functions, to avoid constructors being compared. Closes Annotate System.Security.Claims for nullable dotnet/runtime#1431
• 7f34b52 5.19.3
• 840a5d5 changelog
• 2e0b75a fix side effect detection of optional?.chains. Closes Remove dead code in build.ps1 after -help option was added dotnet/runtime#1430
• 27c0a3b Added roundRect to domprops.js (MemoryCache needs a way to handle physical memory pressure on Linux dotnet/runtime#1426)
• 931f8a5 Update LICENSE
• 8f22035 5.19.2
• d252faa update changelog
• ad93cce fix performance hit from avoiding HTML comments in the output. Closes Potential Issues with Deserializing ISerializable Types dotnet/runtime#1414
• 798135e 5.19.1
• 65aeccf update changelog
• 5cb3679 update package with vuln
• 2da58b2 fix source mapping of concise async/static method names. Fixes System.Xml.Serialization.XmlSerializer serializes 0x00 but crashes on deserialization dotnet/runtime#1411
• b6a25ae traverse class definitions while dropping unused variables. Fixes System.Xml.XmlSerializer cannot serialize System.Nullable<t> as attribute dotnet/runtime#1412
• fb48cb1 avoid more cases that result in ouputtting </script> and HTML comments. Closes XsdDataContractExporter throws PNSE dotnet/runtime#1408

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: 35af48b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codeautopilot]

Pull Request Summary

This Pull Request is an automated upgrade request created by Snyk to upgrade the terser package from version 5.19.0 to version 5.19.4. The recommended version is 4 versions ahead of the current version and was released a month ago on September 4, 2023.

The changes in this Pull Request include modifications to the package-lock.json and package.json files. In the package-lock.json file, the resolved URLs and integrity hashes for the @jridgewell/gen-mapping, @jridgewell/resolve-uri, @jridgewell/set-array, @jridgewell/source-map, @jridgewell/trace-mapping, acorn, acorn-jsx, buffer-from, builtin-modules, commander, concat-map, esutils, fast-deep-equal, fast-json-stable-stringify, find-up, fs.realpath, glob, graceful-fs, has-flag, inflight, inherits, is-binary-path, is-plain-object, is-stream, isexe, json-parse-better-errors, json-schema-traverse, json-stable-stringify-without-jsonify, json5, kind-of, lodash, lodash.debounce, lodash.memoize, lodash.uniq, minimatch, minimist, mkdirp, ms, node-fetch, normalize-package-data, npm-run-path, object-assign, once, os-tmpdir, p-limit, p-locate, p-try, path-exists, path-is-absolute, path-key, path-parse, path-type, picomatch, process-nextick-args, promise-inflight, pseudomap, readable-stream, readdirp, resolve, resolve-from, rimraf, safe-buffer, semver, source-map, source-map-support, terser, terser-webpack-plugin, through2, to-absolute-glob, to-fast-properties, trim-newlines, tslib, typescript, uglify-js, util-deprecate, v8-compile-cache, which, which-module, worker-farm, wrappy, write-file-atomic, yargs, and yargs-parser packages have been updated. In the package.json file, the terser package version has been updated to 5.19.4.

The purpose of this Pull Request is to keep the dependencies up-to-date, making it easier to fix existing vulnerabilities and quickly identify and fix newly disclosed vulnerabilities that may affect the project.

The impact of this Pull Request is that the terser package will be upgraded to the latest version, which may include bug fixes, performance improvements, and new features. It is important to review the release notes of the terser package to understand the specific changes and improvements introduced in version 5.19.4.

---

Current plan usage: 51.21%

---

Have feedback or need help?

Discord
Documentation
support@codeautopilot.com