Skip to content

chore(deps): bump serialize-javascript, @angular-devkit/build-angular, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin#1287

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-bf738618c8
Open

chore(deps): bump serialize-javascript, @angular-devkit/build-angular, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin#1287
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-bf738618c8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript to 7.0.7 and updates ancestor dependencies serialize-javascript, @angular-devkit/build-angular, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.7

Release notes

Sourced from serialize-javascript's releases.

v7.0.7

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.6...v7.0.7

v7.0.6

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.5...v7.0.6

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @angular-devkit/build-angular from 18.2.2 to 21.2.19

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.19

@​angular-devkit/build-angular

Commit Description
fix - df5429871 update http-proxy-middleware to 3.0.7

21.2.18

@​angular/cli

Commit Description
fix - 61a810ab6 respect release age policy in update bootstrapping logic

@​angular/build

Commit Description
fix - a2b6116ed bump undici to 7.28.0
fix - 2510ee3c9 bump vite to 7.3.6

21.2.17

@​angular/build

Commit Description
fix - 9c366e8be bump @​babel/core to 7.29.7
fix - 6a06ce9e9 bump esbuild to 0.28.1
fix - 637b84877 bump piscina to 5.2.0
fix - e86d58a12 bump vite to 7.3.5

21.2.16

@​angular/cli

Commit Description
fix - 77c9047ac update pacote to 21.5.1

@​angular/ssr

Commit Description
fix - d052e97da prioritize options over environment variables in AngularNodeAppEngine

21.2.15

@​angular/cli

Commit Description
fix - 42ac0ed0f remove forceAuth and unscoped credential parsing
fix - c7a7f1955 support registry metadata fetching under bun package manager

21.2.14

@​angular/cli

Commit Description
fix - aed448748 expand package groups for newly added peer dependencies in update schematic

@​angular/build

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.19 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
df5429871 fix update http-proxy-middleware to 3.0.7

20.3.32 (2026-07-09)

@​angular-devkit/build-angular

Commit Type Description
d4e07cb3e fix update http-proxy-middleware to 3.0.7

22.1.0-next.3 (2026-07-09)

@​angular/build

Commit Type Description
34d558c3c feat add built-in SQLite cache store fallback
52ae7f862 feat share persistent build cache across git worktrees
41bd100dd fix fallback to build target preserveSymlinks option in karma runner
6d9b360e5 fix prevent esbuild service hang on internal component stylesheet builds
85c53d990 fix prevent externalizing builder-injected i18n locale data
004cc4104 fix strip all vite id prefixes from minified code with external dependencies
09d0a11a8 perf enable fast-path AST printing with sourcemaps in AotCompilation

@​angular/ssr

Commit Type Description
0bd22dae0 fix replace all route parameters when resolving relative redirects

22.0.6 (2026-07-08)

... (truncated)

Commits
  • 1a72825 release: cut the v21.2.19 release
  • df54298 fix(@​angular-devkit/build-angular): update http-proxy-middleware to 3.0.7
  • fe3a606 release: cut the v21.2.18 release
  • 2510ee3 fix(@​angular/build): bump vite to 7.3.6
  • 61a810a fix(@​angular/cli): respect release age policy in update bootstrapping logic
  • a2b6116 fix(@​angular/build): bump undici to 7.28.0
  • 9c1edbc release: cut the v21.2.17 release
  • 637b848 fix(@​angular/build): bump piscina to 5.2.0
  • 9c366e8 fix(@​angular/build): bump @​babel/core to 7.29.7
  • 6a06ce9 fix(@​angular/build): bump esbuild to 0.28.1
  • Additional commits viewable in compare view

Updates @storybook/angular from 8.2.9 to 10.5.4

Release notes

Sourced from @​storybook/angular's releases.

v10.5.4

10.5.4

v10.5.3

10.5.3

v10.5.2

10.5.2

v10.5.1

10.5.1

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Changelog

Sourced from @​storybook/angular's changelog.

10.5.4

10.5.3

10.5.2

  • TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
  • TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
  • Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
  • Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
  • Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

10.5.1

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Commits
  • 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
  • 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
  • b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
  • 518f711 Bump version from "10.5.1" to "10.5.2" [skip ci]
  • c253a06 Bump version from "10.5.0" to "10.5.1" [skip ci]
  • 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
  • 5b56b6c Merge remote-tracking branch 'origin/next' into task/ffd6b664-Automigrating-a...
  • 08abbc2 Format angular template components
  • 448db85 Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]
  • 3a53335 Merge pull request #35318 from EtiennePasteur/next
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/angular since your current version.


Updates terser-webpack-plugin from 5.3.10 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

v5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v5.5.0

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

v5.4.0

5.4.0 (2026-03-10)

Features

  • added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)

v5.3.16

... (truncated)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

  • deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

5.6.0

Minor Changes

  • support array of minimizers for minify and terserOptions (by @​alexander-akait in #674)

  • add built-in CSS minimizers from css-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add built-in HTML minimizers from html-minimizer-webpack-plugin (by @​alexander-akait in #674)

  • add filter method to minimizers, allowing a single plugin instance to handle multiple asset types (by @​alexander-akait in #674)

  • terser-webpack-plugin has been renamed to minimizer-webpack-plugin, merging other minimizers from css-minimizer-webpack-plugin and html-minimizer-webpack-plugin. We will continue to publish new releases under the old name, but we recommend switching to the new package - minimizer-webpack-plugin. It is now a single plugin for minification. We also added the ability to specify different minifier types using only one plugin instance, which will improve performance. (by @​alexander-akait in #677)

  • rename terserOptions to minimizerOptions; terserOptions is kept as a deprecated alias (by @​alexander-akait in #674)

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.5.0 (2026-04-23)

Features

  • support extractComments in swcMinify (#665) (03143d3)

5.4.0 (2026-03-10)

Features

  • added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)

5.3.16 (2025-12-11)

Bug Fixes

5.3.15 (2025-12-05)

... (truncated)

Commits
  • 5207f94 chore(release): new release (#683)
  • 06bda34 fix: dedupe extracted comments in linear time (#682)
  • 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
  • 57bdcfc chore(release): new release (#675)
  • 6feeda0 chore: add changelog entry (#677)
  • dd360be chore: rename other things
  • d78b6bd ci: dual-publish release as minimizer-webpack-plugin and terser-webpack-plugi...
  • e06c526 docs: add changesets for changes since v5.5.0 (#674)
  • a875994 chore: update codebase
  • 2bfd4f8 ci: add changesets-driven release workflow (#672)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for terser-webpack-plugin since your current version.


Updates copy-webpack-plugin from 4.6.0 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems

v13.0.1

13.0.1 (2025-08-12)

Bug Fixes

v13.0.0

13.0.0 (2025-02-27)

⚠ BREAKING CHANGES

  • switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

  • concurrency option is limited to files now (#796) (d42469c)
  • the order of patterns provided by the developer is respected

v12.0.2

12.0.2 (2024-01-17)

Bug Fixes

v12.0.1

12.0.1 (2024-01-11)

... (truncated)

Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems

13.0.1 (2025-08-12)

Bug Fixes

13.0.0 (2025-02-27)

⚠ BREAKING CHANGES

  • switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

  • concurrency option is limited to files now (#796) (d42469c)
  • the order of patterns provided by the developer is respected

12.0.2 (2024-01-17)

Bug Fixes

12.0.1 (2024-01-11)

Bug Fixes

... (truncated)

Commits
  • 18eb9d9 chore(release): 14.0.0
  • 2881203 refactor!: minimum supported Node.js version is 20.9.0 (#819)
  • 9dc3d31 chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#815)
  • 5cf5a1d chore(deps): update (#814)
  • 3dd5b6e chore(deps): bump js-yaml (#813)
  • 9ac38bb chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#812)
  • 6a16bac Update link to contributing guidelines in README
  • a1625f9 chore: migrate from contrib (#810)
  • 9f6f204 chore: update github actions/checkout from v4 to v5 (#809)
  • 73a30bc chore(release): 13.0.1
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.7 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [@storybook/angular](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/angular), [terser-webpack-plugin](https://github.com/webpack/minimizer-webpack-plugin) and [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.7
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.7)

Updates `@angular-devkit/build-angular` from 18.2.2 to 21.2.19
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.2...v21.2.19)

Updates `@storybook/angular` from 8.2.9 to 10.5.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.4/code/frameworks/angular)

Updates `terser-webpack-plugin` from 5.3.10 to 5.6.1
- [Release notes](https://github.com/webpack/minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/minimizer-webpack-plugin@v5.3.10...v5.6.1)

Updates `copy-webpack-plugin` from 4.6.0 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v4.6.0...v14.0.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.7
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.19
  dependency-type: direct:development
- dependency-name: "@storybook/angular"
  dependency-version: 10.5.4
  dependency-type: direct:development
- dependency-name: terser-webpack-plugin
  dependency-version: 5.6.1
  dependency-type: indirect
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants