refactor: Bump serialize-javascript and terser-webpack-plugin

[dependabot]

Removes serialize-javascript. It's no longer used after updating ancestor dependency terser-webpack-plugin. These dependencies need to be updated together.

Removes serialize-javascript

Updates terser-webpack-plugin from 5.3.16 to 5.4.0

Release notes

Sourced from terser-webpack-plugin's releases.

v5.4.0

5.4.0 (2026-03-10)

Features

• added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

• update serialize-javascript (37c490c)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.4.0 (2026-03-10)

Features

• added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

• update serialize-javascript (37c490c)

Commits

• 543da6e chore(release): 5.4.0
• 29ac915 feat: added ability to minimizer JSON using jsonMinify (#657)
• e505dee fix: align with code
• 6f911ff chore(release): 5.3.17
• 37c490c fix: update serialize-javascript
• 207764f chore: deps update (#652)
• a85ab47 chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#648)
• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Cleaned up and optimized project dependencies by removing unused entries
  • Updated build tool to the latest compatible version for improved performance and stability

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parseplatformorg]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[mtrezza]

Validated this Dependabot PR:

• Dependencies: Both serialize-javascript (removed) and terser-webpack-plugin (5.3.16 → 5.4.0) are transitive/indirect dependencies — neither appears in package.json dependencies or devDependencies
• Changes: Lock-file only (package-lock.json); 3 additions, 24 deletions (net reduction — removes serialize-javascript and randombytes entries, updates terser-webpack-plugin version)
• CI: All 10 checks pass (Node Engine, Lint, Circular Dependencies, Docker, NPM Lock File, Node 20/22/24, Commit Message, Snyk)
• Security: Snyk reports no issues
• Changelog: Not required for transitive lock-file-only update
• Breaking changes: None — terser-webpack-plugin 5.4.0 is a minor bump adding jsonMinify feature; serialize-javascript was removed as it's no longer a dependency of terser-webpack-plugin since v5.3.17
• No superseding PRs found

[mtrezza]

@coderabbitai review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 0a559c41-dd35-4a81-bd23-5d63a86e2dd6

📥 Commits

Reviewing files that changed from the base of the PR and between 8b15fa7 and 6b416de.

📒 Files selected for processing (1)

• package-lock.json

---

📝 Walkthrough

Walkthrough

Updated package-lock.json to remove randombytes@2.1.0 and serialize-javascript@6.0.2 dependencies, and upgraded terser-webpack-plugin from version 5.3.16 to 5.4.0, which no longer declares serialize-javascript as a dependency.

Changes

Cohort / File(s)	Summary
Dependency version updates package-lock.json	Removed randombytes and serialize-javascript dependency entries; upgraded terser-webpack-plugin from 5.3.16 to 5.4.0 with updated resolved URL and integrity hash.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description provides a clear explanation of why the changes were made (serialize-javascript no longer needed after terser-webpack-plugin update), includes release notes and changelog details, but does not follow the repository's required PR template structure.	Restructure the description to follow the required template with 'Issue', 'Approach', and 'Tasks' sections, rather than providing only release notes details.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main changes: removing serialize-javascript and bumping terser-webpack-plugin, which are the primary changes reflected in the package-lock.json modifications.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/npm_and_yarn/multi-0d13b2d87f

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}