Skip to content

Bump serialize-javascript from 7.1.2 to 7.1.4 - #2597

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/serialize-javascript-7.1.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/serialize-javascript-7.1.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript from 7.1.2 to 7.1.4.

Release notes

Sourced from serialize-javascript's releases.

v7.1.4

What's Changed

Note on method serialization

Concise methods ({ m() {} }), including async, generator and computed-key methods, are now serialized correctly when their bodies contain a nested arrow function or function declaration. Previously these were emitted unchanged, producing invalid output that failed to deserialize (#118). Class expressions continue to be emitted as-is.

Reporting security issues

This repo now has a security policy. Please report vulnerabilities privately through GitHub's private vulnerability reporting rather than public issues.

Full Changelog: yahoo/serialize-javascript@v7.1.3...v7.1.4

v7.1.3

See: GHSA-m5mm-p8h7-m29v

What's Changed

Note on ignoreFunction

With ignoreFunction: true, function values are now omitted the same way JSON.stringify omits them, without deleting them from the input object. Functions inside arrays are emitted as null (previously this produced Array.prototype.slice.call(...) output).

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.1.2...v7.1.3

Commits
  • 05c5ceb release: v7.1.4 (#238)
  • fdb853d Fix methods containing nested functions and arrows (#231)
  • f7dfeae docs: add SECURITY.md pointing to private vulnerability reporting (#237)
  • 4d36b82 release: v7.1.3 (#236)
  • 45e5397 fix: ignore functions without mutating input objects (#233)
  • e978a1b fix: serialize Dates with expanded ISO years (#232)
  • 2864b3c fix: escape </script at the end of a serialized function body (#235)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 24, 2026
@changeset-bot

changeset-bot Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 492323b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@netlify

netlify Bot commented Oct 24, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for cloudfour-patterns ready!

Name Link
🔨 Latest commit 492323b
🔍 Latest deploy log https://app.netlify.com/projects/cloudfour-patterns/deploys/6add8b2924b67e1c503a9bc8
😎 Deploy Preview https://deploy-preview-2597--cloudfour-patterns.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.1.2 to 7.1.4.
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v7.1.2...v7.1.4)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump serialize-javascript from 7.1.0 to 7.1.4 Bump serialize-javascript from 7.1.2 to 7.1.4 Oct 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/serialize-javascript-7.1.4 branch from acd958c to 492323b Compare October 25, 2026 04:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants