Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: update rollup-plugin-terser #1805

Closed
wants to merge 3 commits into from

Conversation

abdonrd
Copy link
Collaborator

@abdonrd abdonrd commented Aug 13, 2020

The v5 depends on a version of serialize-javascript with a vulnerability:

https://github.com/IBM/pwa-lit-template/network/alert/package-lock.json/serialize-javascript/open

Screenshot 2020-08-13 at 09 29 41

@abdonrd abdonrd force-pushed the update-rollup-plugin-terser branch 2 times, most recently from a5efea6 to f077afc Compare August 14, 2020 08:40
@abdonrd
Copy link
Collaborator Author

abdonrd commented Aug 14, 2020

Depends on new relase with: terser/terser#779

@abdonrd abdonrd force-pushed the update-rollup-plugin-terser branch from 5cdbfcf to 7820e46 Compare August 18, 2020 14:30
@abdonrd abdonrd force-pushed the update-rollup-plugin-terser branch from 7820e46 to 17bd93c Compare August 18, 2020 14:42
@abdonrd abdonrd force-pushed the update-rollup-plugin-terser branch from 17bd93c to f7ca716 Compare August 18, 2020 14:47
@abdonrd abdonrd force-pushed the update-rollup-plugin-terser branch 3 times, most recently from 0737f19 to e8199bf Compare August 18, 2020 15:31
@abdonrd
Copy link
Collaborator Author

abdonrd commented Aug 18, 2020

Now terser.minify is async, we need to update it.

https://github.com/terser/terser/blob/master/CHANGELOG.md#v500-beta0

@LarsDenBakker
Copy link
Member

This is definitely going to be a bit of a pain to rewrite :(

@LarsDenBakker
Copy link
Member

Thanks a lot of this PR. Upgrading terser will be a bit more complex, but I don't want to block that updating the rollup plugin so I'm doing that upgrade in #1831.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants