Is it possible to update devalue dependency in vike-react-query to v5 series?

[MrNaif2018]

To fix those nasty (but probably useless) CVEs github keeps showing:

Thank you!

[brillout]

CC @nitedani (author of vike-react-query)

[brillout]

@MrNaif2018 I guess Dani is busy. Up for a PR? The best would be to use https://github.com/brillout/json-serializer instead of devalue, but just bumping devalue is okay.

[MrNaif2018]

Is json-serializer's stringify the recommended way? Because it uses devalue's uneval, which seems to be a bit different from stringify
"Use uneval when you want the most compact possible output and don't want to include any code for parsing the serialized value."

[brillout]

In principle, yes, let's migrate to json-serializer because AFAICT it's much simper, lighter, more reliable, faster (it uses the native JSON serializer).

But vike-react-query might require a devalue functionality that json-serializer doesn't have (I don't know, I didn't write vike-react-query).