Add resolution for serialize-javascript to force new version (#32683)

terser-webpack-plugin depends on ^6 but there's a CVE that's only
fixed in version 7. The CVE probably isn't terribly important for
a dependecy only used for building but it's breaking the dependabot
job which breaks our CD.

https://github.com/webpack/terser-webpack-plugin/issues/644 is the bug
tracking upgrading the dependency upstream.
This commit is contained in:
David Baker
2026-03-02 16:39:55 +00:00
committed by GitHub
parent fe84501e95
commit 738fa0f9bd
2 changed files with 15 additions and 14 deletions
+2 -1
View File
@@ -32,7 +32,8 @@
"wrap-ansi-cjs": "npm:wrap-ansi@^7.0.0",
"wrap-ansi": "npm:wrap-ansi@^7.0.0",
"matrix-widget-api": "^1.17.0",
"qs": "6.14.2"
"qs": "6.14.2",
"serialize-javascript": "7.0.3"
},
"dependencies": {},
"devDependencies": {