Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update terser requirement from ~4.0.0 to ~4.3.1 #5145

Merged

Conversation

dependabot-preview[bot]
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented Sep 24, 2019

Updates the requirements on terser to permit the latest version.

Changelog

Sourced from terser's changelog.

v4.3.1

  • Fixed an issue from 4.3.0 where any block scope within a for loop erroneously had its parent set to the function scopee
  • Fixed an issue where compressing IIFEs with argument expansions would result in some parameters becoming undefined
  • addEventListener options argument's properties are now part of the DOM properties list.

v4.3.0

  • Do not drop computed object keys with side effects
  • Functions passed to other functions in calls are now wrapped in parentheses by default, which speeds up loading most modules
  • Objects with computed properties are now less likely to be hoisted
  • Speed and memory efficiency optimizations
  • Fixed scoping issues with try and switch

v4.2.1

  • Minor refactors
  • Fixed a bug similar to #369 in collapse_vars
  • Functions can no longer be inlined into a place where they're going to be compared with themselves.
  • reduce_funcs option is now legacy, as using reduce_vars without reduce_funcs caused some weird corner cases. As a result, it is now implied in reduce_vars and can't be turned off without turning off reduce_vars.
  • Bug which would cause a random stack overflow has now been fixed.

v4.2.0

  • When the source map URL is inline, don't write it to a file.
  • Fixed output parens when a lambda literal is the tag on a tagged template string.
  • The mangle.properties.undeclared option was added. This enables the property mangler to mangle properties of variables which can be found in the name cache, but whose properties are not known to this Terser run.
  • The v8 bug where the toString and source representations of regexes like RegExp("\\\n") includes an actual newline is now fixed.
  • Now we're guaranteed to not have duplicate comments in the output
  • Domprops updates

v4.1.4

  • Fixed a crash when inlining a function into somewhere else when it has interdependent, non-removable variables.

v4.1.3

  • Several issues with the reduce_vars option were fixed.
  • Starting this version, we only have a dist/bundle.min.js

v4.1.2

  • The hotfix was hotfixed

v4.1.1

  • Fixed a bug where toplevel scopes were being mixed up with lambda scopes

v4.1.0

... (truncated)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

@dependabot-preview dependabot-preview bot added dependencies Update the dependencies javascript labels Sep 24, 2019
@sbrunner
Copy link
Member

@dependabot rebase

Updates the requirements on [terser](https://github.com/fabiosantoscode/terser) to permit the latest version.
- [Release notes](https://github.com/fabiosantoscode/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v4.0.0...v4.3.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot force-pushed the dependabot/npm_and_yarn/terser-approx-4.3.1 branch from 30078dd to 1d44fa5 Compare September 24, 2019 09:26
@dependabot-preview dependabot-preview bot merged commit d4af837 into master Sep 24, 2019
@dependabot-preview dependabot-preview bot deleted the dependabot/npm_and_yarn/terser-approx-4.3.1 branch September 24, 2019 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Update the dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant