Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 8, 2023

Bumps terser from 5.14.2 to 5.17.2.

Changelog

Sourced from terser's changelog.

v5.17.2

  • Be less conservative when detecting use-before-definition of var in hoisted functions.
  • Support unusual (but perfectly valid) initializers of for-in and for-of loops.
  • Fix issue where hoisted function would be dropped if it was after a continue statement

v5.17.1

  • Fix evaluating .length when the source array might've been mutated

v5.17.0

  • Drop vestigial = undefined default argument in IIFE calls (#1366)
  • Evaluate known arrays' .length property when statically determinable
  • Add @__KEY__ annotation to mangle string literals (#1365)

v5.16.9

  • Fix parentheses in output of optional chains (a?.b) (#1374)
  • More documentation on source maps (#1368)
  • New lhs_constants option, allowing to stop Terser from swapping comparison operands (#1361)

v5.16.8

  • Become even less conservative around function definitions for reduce_vars
  • Fix parsing context of import.meta expressions such that method calls are allowed

v5.16.6

  • Become less conservative with analyzing function definitions for reduce_vars
  • Parse import.meta as a real AST node and not an object.property

v5.16.5

  • Correctly handle AST transform functions that mutate children arrays
  • Don't mutate the options object passed to Terser (#1342)
  • Do not treat BigInt like a number

v5.16.4

  • Keep (defaultArg = undefined) => ..., because default args don't count for function length
  • Prevent inlining variables into ?. optional chains
  • Avoid removing unused arguments while transforming
  • Optimize iterating AST node lists
  • Make sure catch and finally aren't children of try in the AST
  • Use modern unicode property escapes (\p{...}) to parse identifiers when available

v5.16.3

  • Ensure function definitions, don't assume the values of variables defined after them.

v5.16.2

  • Fix sourcemaps with non-ascii characters (#1318)

... (truncated)

Commits
  • 474fca5 5.17.2
  • 1213257 update changelog
  • 765c1fe test #833 fix
  • 58e1d6f be less conservative about preventing use-before-define in hoisted defuns. Cl...
  • e072c21 Do not evaluate the initializers of for-in and for-of. Closes #1234
  • 7093b30 Preserve hoisted functions after continue. Closes #833
  • 374073b 5.17.1
  • 2acb238 update changelog
  • dd6ebd3 Avoid computing the .length of referred arrays in case of mutations. Closes #...
  • 028514c Handle dropping var [] in unreachable code. Closes #1293
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [terser](https://github.com/terser/terser) from 5.14.2 to 5.17.2.
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](terser/terser@v5.14.2...v5.17.2)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 8, 2023
@dependabot dependabot bot requested a review from 5HT2 May 8, 2023 16:02
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 15, 2023

Superseded by #148.

@dependabot dependabot bot closed this May 15, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/terser-5.17.2 branch May 15, 2023 16:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant