Skip to content

chore(deps): combined dependency bumps#998

Open
dependabot[bot] wants to merge 15 commits intomasterfrom
dependabot/npm_and_yarn/multi-49e462b207
Open

chore(deps): combined dependency bumps#998
dependabot[bot] wants to merge 15 commits intomasterfrom
dependabot/npm_and_yarn/multi-49e462b207

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Combined Dependabot Dependency Bumps

This PR combines the following Dependabot updates:

Root dependencies

docs/es-modules dependencies

Already merged into master (included in this branch)

dependabot bot added 2 commits January 4, 2026 08:13
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 6.0.2 to 6.4.1.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@6.4.1/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 6.4.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 9, 2026 16:05
@dependabot dependabot bot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Mar 9, 2026
@netlify
Copy link

netlify bot commented Mar 9, 2026

Deploy Preview for cld-video-player ready!

Name Link
🔨 Latest commit 5423a99
🔍 Latest deploy log https://app.netlify.com/projects/cld-video-player/deploys/69bd2c2c428ff600088230df
😎 Deploy Preview https://deploy-preview-998--cld-video-player.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify
Copy link

netlify bot commented Mar 9, 2026

Deploy Preview for cld-vp-esm-pages ready!

Name Link
🔨 Latest commit 5423a99
🔍 Latest deploy log https://app.netlify.com/projects/cld-vp-esm-pages/deploys/69bd2c2c6f1f290008f4dfbd
😎 Deploy Preview https://deploy-preview-998--cld-vp-esm-pages.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-49e462b207 branch from d8c477a to 5e00355 Compare March 10, 2026 07:03
Bumps [qs](https://github.com/ljharb/qs) from 6.14.0 to 6.14.2.
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)
- [Commits](ljharb/qs@v6.14.0...v6.14.2)

---
updated-dependencies:
- dependency-name: qs
  dependency-version: 6.14.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-49e462b207 branch 4 times, most recently from 5355ced to 4e54575 Compare March 19, 2026 15:39
dependabot bot added 4 commits March 19, 2026 15:40
Bumps [rollup](https://github.com/rollup/rollup) from 4.40.2 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.40.2...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [rollup](https://github.com/rollup/rollup) from 4.57.0 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.57.0...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [webpack](https://github.com/webpack/webpack) from 5.95.0 to 5.105.2.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.95.0...v5.105.2)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.105.2
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
…ebpack-plugin and css-minimizer-webpack-plugin

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.4 and updates ancestor dependencies [serialize-javascript](https://github.com/yahoo/serialize-javascript), [terser-webpack-plugin](https://github.com/webpack/terser-webpack-plugin), [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) and [css-minimizer-webpack-plugin](https://github.com/webpack/css-minimizer-webpack-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.4
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.4)

Updates `terser-webpack-plugin` from 5.3.16 to 5.3.17
- [Release notes](https://github.com/webpack/terser-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/terser-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/terser-webpack-plugin@v5.3.16...v5.3.17)

Updates `copy-webpack-plugin` from 12.0.2 to 14.0.0
- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/copy-webpack-plugin@v12.0.2...v14.0.0)

Updates `css-minimizer-webpack-plugin` from 7.0.4 to 8.0.0
- [Release notes](https://github.com/webpack/css-minimizer-webpack-plugin/releases)
- [Changelog](https://github.com/webpack/css-minimizer-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/css-minimizer-webpack-plugin@v7.0.4...v8.0.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.4
  dependency-type: indirect
- dependency-name: terser-webpack-plugin
  dependency-version: 5.3.17
  dependency-type: direct:development
- dependency-name: copy-webpack-plugin
  dependency-version: 14.0.0
  dependency-type: direct:development
- dependency-name: css-minimizer-webpack-plugin
  dependency-version: 8.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-49e462b207 branch from 4e54575 to 43f49c2 Compare March 19, 2026 15:41
tsi added 7 commits March 19, 2026 17:51
….59.0' into dependabot/npm_and_yarn/multi-49e462b207
…modules/rollup-4.59.0' into dependabot/npm_and_yarn/multi-49e462b207
…5.105.2' into dependabot/npm_and_yarn/multi-49e462b207
…2' into dependabot/npm_and_yarn/multi-49e462b207
….17.23' into dependabot/npm_and_yarn/multi-49e462b207
…modules/vite-6.4.1' into dependabot/npm_and_yarn/multi-49e462b207

Made-with: Cursor

# Conflicts:
#	docs/es-modules/package-lock.json
#	docs/es-modules/pnpm-lock.yaml
@tsi tsi changed the title chore(deps): bump serialize-javascript, terser-webpack-plugin, copy-webpack-plugin and css-minimizer-webpack-plugin chore(deps): combined dependency bumps Mar 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant