Skip to content

chore(deps): bump serialize-javascript, @angular-devkit/build-angular, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin#1237

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-659c299c04
Open

chore(deps): bump serialize-javascript, @angular-devkit/build-angular, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin#1237
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-659c299c04

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 6, 2026

Bumps serialize-javascript to 7.0.4 and updates ancestor dependencies serialize-javascript, @angular-devkit/build-angular, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.4

Release notes

Sourced from serialize-javascript's releases.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for serialize-javascript since your current version.


Updates @angular-devkit/build-angular from 18.2.2 to 21.2.1

Release notes

Sourced from @​angular-devkit/build-angular's releases.

21.2.1

@​schematics/angular

Commit Description
fix - 72d466aa0 prevent adding test dependencies when minimal option is enabled

@​angular/cli

Commit Description
fix - ae4c28d00 correct dev dependency detection logic in ng add
fix - 465073bc1 disable npm update notifier in package manager host
fix - 36270634f ensure group members are updated to targeted version
fix - d87dba6af ignore unknown files when formatting schematic changes

@​angular-devkit/build-angular

Commit Description
fix - 0019d1c8e update copy-webpack-plugin to v14.0.0

@​angular/build

Commit Description
fix - 6ad860863 bundle polyfills to preserve execution order in dev server
fix - d17397375 conditionally allow vi.mock for non-relative imports
fix - 0d49f86ed resolve style include paths relative to ng-package.json in unit-test builder
fix - 584f6a2d9 treat empty browsers array as undefined in unit-test builder
perf - 6699cdc9b fix memory leak in ng serve with i18n

@​angular/ssr

Commit Description
fix - 43a9dfa66 improve header validation logic
fix - dee3717b3 introduce DI token to signal route discovery process

21.2.0

@​schematics/angular

Commit Description
feat - aa7381efd add a '.prettierrc' file to generated workspaces and add Prettier as dev dependency
feat - f80db6fb7 add ng-add support for Vitest browser providers
fix - 5d1df50d8 add actionable feedback to vitest-browser schematic

@​angular/cli

Commit Description
feat - 0dd04f289 add markdown files to Prettier's formatting list
feat - fbae1b6ab automatic formatting files modified by schematics
feat - 91b9d281f integrate file formatting into update migrations
feat - 98a24d040 standardize MCP tools around workspace/project options
fix - d9cd609c5 correctly parse scoped packages in yarn classic list output
fix - 5b05f2500 enable shell option for Prettier execution on Windows platforms
fix - 25b8a157d quote complex range specifiers in package manager
fix - 6f29a8c35 renamed files by their new path in the schematic workflow
fix - 201a036f2 simplify Angular version compatibility checks and add special handling for local builds of new major versions
fix - cdd26bb66 validate package manager version using semver.valid and throw an error if invalid

... (truncated)

Changelog

Sourced from @​angular-devkit/build-angular's changelog.

21.2.1 (2026-03-05)

@​angular/cli

Commit Type Description
ae4c28d00 fix correct dev dependency detection logic in ng add
465073bc1 fix disable npm update notifier in package manager host
36270634f fix ensure group members are updated to targeted version
d87dba6af fix ignore unknown files when formatting schematic changes

@​schematics/angular

Commit Type Description
72d466aa0 fix prevent adding test dependencies when minimal option is enabled

@​angular-devkit/build-angular

Commit Type Description
0019d1c8e fix update copy-webpack-plugin to v14.0.0

@​angular/build

Commit Type Description
6ad860863 fix bundle polyfills to preserve execution order in dev server
d17397375 fix conditionally allow vi.mock for non-relative imports
0d49f86ed fix resolve style include paths relative to ng-package.json in unit-test builder
584f6a2d9 fix treat empty browsers array as undefined in unit-test builder
6699cdc9b perf fix memory leak in ng serve with i18n

@​angular/ssr

Commit Type Description
43a9dfa66 fix improve header validation logic
dee3717b3 fix introduce DI token to signal route discovery process

20.3.19 (2026-03-04)

@​angular-devkit/build-angular

Commit Type Description

... (truncated)

Commits
  • 74e254b release: cut the v21.2.1 release
  • 500b47d ci: add issue_labels job to dev-infra workflow
  • 33a3172 build: introduce package deprecation metadata and integrate it into the relea...
  • 584f6a2 fix(@​angular/build): treat empty browsers array as undefined in unit-test bui...
  • 0d49f86 fix(@​angular/build): resolve style include paths relative to `ng-package.json...
  • d173973 fix(@​angular/build): conditionally allow vi.mock for non-relative imports
  • e265b1c ci: update pull-request labeling action path
  • 87a88ba build: update cross-repo angular dependencies
  • 62b1500 ci: create gemini code reviewer configuration
  • a6d5f33 build: update dependency aspect_rules_jasmine to v2.0.4
  • Additional commits viewable in compare view

Updates @storybook/angular from 8.2.9 to 10.2.16

Release notes

Sourced from @​storybook/angular's releases.

v10.2.16

10.2.16

v10.2.15

10.2.15

v10.2.14

10.2.14

v10.2.13

10.2.13

v10.2.12

10.2.12

v10.2.11

10.2.11

v10.2.10

10.2.10

... (truncated)

Changelog

Sourced from @​storybook/angular's changelog.

10.2.16

10.2.15

10.2.14

10.2.13

10.2.12

10.2.11

10.2.10

10.2.9

... (truncated)

Commits
  • 8a7f39a Bump version from "10.2.15" to "10.2.16" [skip ci]
  • 7b4ab63 Bump version from "10.2.14" to "10.2.15" [skip ci]
  • 8392ec0 Bump version from "10.2.13" to "10.2.14" [skip ci]
  • 305b534 Bump version from "10.2.12" to "10.2.13" [skip ci]
  • 68f811f Bump version from "10.2.11" to "10.2.12" [skip ci]
  • be01dca Bump version from "10.2.10" to "10.2.11" [skip ci]
  • c812573 Bump version from "10.2.9" to "10.2.10" [skip ci]
  • 4cdde82 Bump version from "10.2.8" to "10.2.9" [skip ci]
  • 719b6ca Bump version from "10.2.7" to "10.2.8" [skip ci]
  • 8d687ec Bump version from "10.2.6" to "10.2.7" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​storybook/angular since your current version.


Updates terser-webpack-plugin from 5.3.10 to 5.3.17

Release notes

Sourced from terser-webpack-plugin's releases.

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)

v5.3.16

5.3.16 (2025-12-11)

Bug Fixes

v5.3.15

5.3.15 (2025-12-05)

Bug Fixes

  • catch error when loading minimizers (#639) (586af0a)
  • respect errors and warnings from minimizer without code (8607f79)

v5.3.14

5.3.14 (2025-03-06)

Bug Fixes

v5.3.13

5.3.13 (2025-03-05)

Bug Fixes

  • ecma and module types in minimizer options (#620) (5aa43c2)

v5.3.12

5.3.12 (2025-02-27)

Bug Fixes

  • allows minimizers to set worker thread support and don't use worker thread for swc and esbuild (#619) (15ddaab)

... (truncated)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.3.17 (2026-03-03)

Bug Fixes

  • update serialize-javascript (37c490c)

5.3.16 (2025-12-11)

Bug Fixes

5.3.15 (2025-12-05)

Bug Fixes

  • catch error when loading minimizers (#639) (586af0a)
  • respect errors and warnings from minimizer without code (8607f79)

5.3.14 (2025-03-06)

Bug Fixes

5.3.13 (2025-03-05)

Bug Fixes

  • ecma and module types in minimizer options (#620) (5aa43c2)

5.3.12 (2025-02-27)

Bug Fixes

  • allows minimizers to set worker thread support and don't use worker thread for swc and esbuild (#619) (15ddaab)

5.3.11 (2024-12-13)

Bug Fixes

  • avoid the deprecation message (0341ad1)
Commits

Updates copy-webpack-plugin from 4.6.0 to 14.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v14.0.0

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems

v13.0.1

13.0.1 (2025-08-12)

Bug Fixes

v13.0.0

13.0.0 (2025-02-27)

⚠ BREAKING CHANGES

  • switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

  • concurrency option is limited to files now (#796) (d42469c)
  • the order of patterns provided by the developer is respected

v12.0.2

12.0.2 (2024-01-17)

Bug Fixes

v12.0.1

12.0.1 (2024-01-11)

... (truncated)

Changelog

Sourced from copy-webpack-plugin's changelog.

14.0.0 (2026-03-02)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 20.9.0 (#819) (2881203)

Bug Fixes

  • update serialize-javascript to fix security problems

13.0.1 (2025-08-12)

Bug Fixes

13.0.0 (2025-02-27)

⚠ BREAKING CHANGES

  • switch from globby and fast-glob to tinyglobby (#795) (19fd937)

For more information please visit tinyglobby.

The breaking change only affects the developer who used these options - gitignore and ignoreFiles in the globOptions option.

Please migrate to the ignore option.

Bug Fixes

  • concurrency option is limited to files now (#796) (d42469c)
  • the order of patterns provided by the developer is respected

12.0.2 (2024-01-17)

Bug Fixes

12.0.1 (2024-01-11)

Bug Fixes

... (truncated)

Commits
  • 18eb9d9 chore(release): 14.0.0
  • 2881203 refactor!: minimum supported Node.js version is 20.9.0 (#819)
  • 9dc3d31 chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#815)
  • 5cf5a1d chore(deps): update (#814)
  • 3dd5b6e chore(deps): bump js-yaml (#813)
  • 9ac38bb chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#812)
  • 6a16bac Update link to contributing guidelines in README
  • a1625f9 chore: migrate from contrib (#810)
  • 9f6f204 chore: update github actions/checkout from v4 to v5 (#809)
  • 73a30bc chore(release): 13.0.1
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

…, @storybook/angular, terser-webpack-plugin and copy-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.4 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [@angular-devkit/build-angular](https://github.com/angular/angular-cli), [@storybook/angular](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/angular), [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin) and [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.4
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.4)

Updates `@angular-devkit/build-angular` from 18.2.2 to 21.2.1
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@18.2.2...v21.2.1)

Updates `@storybook/angular` from 8.2.9 to 10.2.16
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.2.16/code/frameworks/angular)

Updates `terser-webpack-plugin` from 5.3.10 to 5.3.17
- [Release notes](https://github.com/webpack/terser-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/terser-webpack-plugin@v5.3.10...v5.3.17)

Updates `copy-webpack-plugin` from 4.6.0 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v4.6.0...v14.0.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.4
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-version: 21.2.1
  dependency-type: direct:development
- dependency-name: "@storybook/angular"
  dependency-version: 10.2.16
  dependency-type: direct:development
- dependency-name: terser-webpack-plugin
  dependency-version: 5.3.17
  dependency-type: indirect
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants