Add resolution for serialize-javascript to force new version (#32683)
terser-webpack-plugin depends on ^6 but there's a CVE that's only fixed in version 7. The CVE probably isn't terribly important for a dependecy only used for building but it's breaking the dependabot job which breaks our CD. https://github.com/webpack/terser-webpack-plugin/issues/644 is the bug tracking upgrading the dependency upstream.
This commit is contained in:
+2
-1
@@ -32,7 +32,8 @@
|
||||
"wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0",
|
||||
"wrap-ansi": "npm:wrap-ansi@^7.0.0",
|
||||
"matrix-widget-api": "^1.17.0",
|
||||
"qs": "6.14.2"
|
||||
"qs": "6.14.2",
|
||||
"serialize-javascript": "7.0.3"
|
||||
},
|
||||
"dependencies": {},
|
||||
"devDependencies": {
|
||||
|
||||
Reference in New Issue
Block a user