Sfoglia il codice sorgente

Update @rollup/plugin-terser to 1.0.0.

Resolves serialize-javascript vulnerability (GHSA-5c6j-r48x-rmvq).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Mr.doob 1 mese fa
parent
commit
456f169690
2 ha cambiato i file con 12 aggiunte e 43 eliminazioni
  1. 11 42
      package-lock.json
  2. 1 1
      package.json

+ 11 - 42
package-lock.json

@@ -11,7 +11,7 @@
       "devDependencies": {
       "devDependencies": {
         "@eslint/js": "^9.0.0",
         "@eslint/js": "^9.0.0",
         "@rollup/plugin-node-resolve": "^16.0.0",
         "@rollup/plugin-node-resolve": "^16.0.0",
-        "@rollup/plugin-terser": "^0.4.0",
+        "@rollup/plugin-terser": "^1.0.0",
         "eslint": "^9.0.0",
         "eslint": "^9.0.0",
         "eslint-config-mdcs": "^5.0.0",
         "eslint-config-mdcs": "^5.0.0",
         "eslint-plugin-compat": "^7.0.0",
         "eslint-plugin-compat": "^7.0.0",
@@ -454,18 +454,18 @@
       }
       }
     },
     },
     "node_modules/@rollup/plugin-terser": {
     "node_modules/@rollup/plugin-terser": {
-      "version": "0.4.4",
-      "resolved": "https://registry.npmjs.org/@rollup/plugin-terser/-/plugin-terser-0.4.4.tgz",
-      "integrity": "sha512-XHeJC5Bgvs8LfukDwWZp7yeqin6ns8RTl2B9avbejt6tZqsqvVoWI7ZTQrcNsfKEDWBTnTxM8nMDkO2IFFbd0A==",
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/@rollup/plugin-terser/-/plugin-terser-1.0.0.tgz",
+      "integrity": "sha512-FnCxhTBx6bMOYQrar6C8h3scPt8/JwIzw3+AJ2K++6guogH5fYaIFia+zZuhqv0eo1RN7W1Pz630SyvLbDjhtQ==",
       "dev": true,
       "dev": true,
       "license": "MIT",
       "license": "MIT",
       "dependencies": {
       "dependencies": {
-        "serialize-javascript": "^6.0.1",
+        "serialize-javascript": "^7.0.3",
         "smob": "^1.0.0",
         "smob": "^1.0.0",
         "terser": "^5.17.4"
         "terser": "^5.17.4"
       },
       },
       "engines": {
       "engines": {
-        "node": ">=14.0.0"
+        "node": ">=20.0.0"
       },
       },
       "peerDependencies": {
       "peerDependencies": {
         "rollup": "^2.0.0||^3.0.0||^4.0.0"
         "rollup": "^2.0.0||^3.0.0||^4.0.0"
@@ -3140,16 +3140,6 @@
         "node": ">=10"
         "node": ">=10"
       }
       }
     },
     },
-    "node_modules/randombytes": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
-      "integrity": "sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "safe-buffer": "^5.1.0"
-      }
-    },
     "node_modules/require-directory": {
     "node_modules/require-directory": {
       "version": "2.1.1",
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
@@ -3259,27 +3249,6 @@
         "fsevents": "~2.3.2"
         "fsevents": "~2.3.2"
       }
       }
     },
     },
-    "node_modules/safe-buffer": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
-      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
-      "dev": true,
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/feross"
-        },
-        {
-          "type": "patreon",
-          "url": "https://www.patreon.com/feross"
-        },
-        {
-          "type": "consulting",
-          "url": "https://feross.org/support"
-        }
-      ],
-      "license": "MIT"
-    },
     "node_modules/semver": {
     "node_modules/semver": {
       "version": "7.7.4",
       "version": "7.7.4",
       "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
       "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
@@ -3294,13 +3263,13 @@
       }
       }
     },
     },
     "node_modules/serialize-javascript": {
     "node_modules/serialize-javascript": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.2.tgz",
-      "integrity": "sha512-Saa1xPByTTq2gdeFZYLLo+RFE35NHZkAbqZeWNd3BpzppeVisAqpDjcp8dyf6uIvEqJRd46jemmyA4iFIeVk8g==",
+      "version": "7.0.4",
+      "resolved": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-7.0.4.tgz",
+      "integrity": "sha512-DuGdB+Po43Q5Jxwpzt1lhyFSYKryqoNjQSA9M92tyw0lyHIOur+XCalOUe0KTJpyqzT8+fQ5A0Jf7vCx/NKmIg==",
       "dev": true,
       "dev": true,
       "license": "BSD-3-Clause",
       "license": "BSD-3-Clause",
-      "dependencies": {
-        "randombytes": "^2.1.0"
+      "engines": {
+        "node": ">=20.0.0"
       }
       }
     },
     },
     "node_modules/shebang-command": {
     "node_modules/shebang-command": {

+ 1 - 1
package.json

@@ -93,7 +93,7 @@
   "devDependencies": {
   "devDependencies": {
     "@eslint/js": "^9.0.0",
     "@eslint/js": "^9.0.0",
     "@rollup/plugin-node-resolve": "^16.0.0",
     "@rollup/plugin-node-resolve": "^16.0.0",
-    "@rollup/plugin-terser": "^0.4.0",
+    "@rollup/plugin-terser": "^1.0.0",
     "eslint": "^9.0.0",
     "eslint": "^9.0.0",
     "eslint-config-mdcs": "^5.0.0",
     "eslint-config-mdcs": "^5.0.0",
     "eslint-plugin-compat": "^7.0.0",
     "eslint-plugin-compat": "^7.0.0",

粤ICP备19079148号