Commit ad1f6fb
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
Bump terser from 4.4.0 to 4.8.1 (#139)
Summary:
Bumps [terser](https://github.com/terser/terser) from 4.4.0 to 4.8.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/terser/terser/blob/master/CHANGELOG.md">terser's changelog</a>.</em></p>
<blockquote>
<h2>v4.8.1 (backport)</h2>
<ul>
<li>Security fix for RegExps that should not be evaluated (regexp DDOS)</li>
</ul>
<h2>v4.8.0</h2>
<ul>
<li>Support for numeric separators (<code>million = 1_000_000</code>) was added.</li>
<li>Assigning properties to a class is now assumed to be pure.</li>
<li>Fixed bug where <code>yield</code> wasn't considered a valid property key in generators.</li>
</ul>
<h2>v4.7.0</h2>
<ul>
<li>A bug was fixed where an arrow function would have the wrong size</li>
<li><code>arguments</code> object is now considered safe to retrieve properties from (useful for <code>length</code>, or <code>0</code>) even when <code>pure_getters</code> is not set.</li>
<li>Fixed erroneous <code>const</code> declarations without value (which is invalid) in some corner cases when using <code>collapse_vars</code>.</li>
</ul>
<h2>v4.6.13</h2>
<ul>
<li>Fixed issue where ES5 object properties were being turned into ES6 object properties due to more lax unicode rules.</li>
<li>Fixed parsing of BigInt with lowercase <code>e</code> in them.</li>
</ul>
<h2>v4.6.12</h2>
<ul>
<li>Fixed subtree comparison code, making it see that <code>[1,[2, 3]]</code> is different from <code>[1, 2, [3]]</code></li>
<li>Printing of unicode identifiers has been improved</li>
</ul>
<h2>v4.6.11</h2>
<ul>
<li>Read unused classes' properties and method keys, to figure out if they use other variables.</li>
<li>Prevent inlining into block scopes when there are name collisions</li>
<li>Functions are no longer inlined into parameter defaults, because they live in their own special scope.</li>
<li>When inlining identity functions, take into account the fact they may be used to drop <code>this</code> in function calls.</li>
<li>Nullish coalescing operator (<code>x ?? y</code>), plus basic optimization for it.</li>
<li>Template literals in binary expressions such as <code>+</code> have been further optimized</li>
</ul>
<h2>v4.6.10</h2>
<ul>
<li>Do not use reduce_vars when classes are present</li>
</ul>
<h2>v4.6.9</h2>
<ul>
<li>Check if block scopes actually exist in blocks</li>
</ul>
<h2>v4.6.8</h2>
<ul>
<li>Take into account "executed bits" of classes like static properties or computed keys, when checking if a class evaluation might throw or have side effects.</li>
</ul>
<h2>v4.6.7</h2>
<ul>
<li>Some new performance gains through a <code>AST_Node.size()</code> method which measures a node's source code length without printing it to a string first.</li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/terser/terser/commits">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `dependabot rebase` will rebase this PR
- `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `dependabot merge` will merge this PR after your CI passes on it
- `dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `dependabot cancel merge` will cancel a previously requested merge and block automerging
- `dependabot reopen` will reopen this PR if it is closed
- `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/relayjs/relay-devtools/network/alerts).
</details>
Pull Request resolved: #139
Reviewed By: tyao1
Differential Revision: D38976568
Pulled By: voideanvalue
fbshipit-source-id: b79f5777851c765cb510ef701a6ae6a721cc22681 parent 23d5bac commit ad1f6fb
1 file changed
Lines changed: 9 additions & 9 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2362 | 2362 | | |
2363 | 2363 | | |
2364 | 2364 | | |
2365 | | - | |
2366 | | - | |
2367 | | - | |
| 2365 | + | |
| 2366 | + | |
| 2367 | + | |
2368 | 2368 | | |
2369 | 2369 | | |
2370 | 2370 | | |
| |||
9759 | 9759 | | |
9760 | 9760 | | |
9761 | 9761 | | |
9762 | | - | |
9763 | | - | |
9764 | | - | |
| 9762 | + | |
| 9763 | + | |
| 9764 | + | |
9765 | 9765 | | |
9766 | 9766 | | |
9767 | 9767 | | |
| |||
10258 | 10258 | | |
10259 | 10259 | | |
10260 | 10260 | | |
10261 | | - | |
10262 | | - | |
10263 | | - | |
| 10261 | + | |
| 10262 | + | |
| 10263 | + | |
10264 | 10264 | | |
10265 | 10265 | | |
10266 | 10266 | | |
| |||
0 commit comments