Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 24, 2022

Bumps uglify-js from 3.13.6 to 3.17.4.

Release notes

Sourced from uglify-js's releases.

v3.17.4

Features

  • simplify chained boolean & string expressions (a3918973887d8eede545372363e621c0319b8e54, ed7051b9bb0ce47294718fa192092f98642bc2c4)

Bug Fixes

  • async generator function (5411360829a59fb9b38e5ac360620124a53a31be)
  • compound assignment operator (19c471c16a52156cdea44cd0d911aa4f1cf18ff8)
  • generator function (7edd10e5e508df42da8586afc994537598c83f25)
  • immediately invoked function expression (8319badea8f5bc4348b80511813594f74e4daf15)
  • logical operator (5a5200d657f2eb6c37026509afd683fe4f4fc84f)
  • rest parameter (bccb1c3bd9155e1045e2fcac7dff2245250f7bcb)
  • unary arithmetic operator (19c471c16a52156cdea44cd0d911aa4f1cf18ff8)

v3.17.3

Features

  • improve heuristics for mangle.properties (3fa20866813f634d97d0958208b0bbf16977ae4d)
  • enable domprops to be used under minify() (bd5fc4cb1b39d7a150daff1d41a5894ef217f462)
  • improve compression of boolean & conditional expressions (80fc8625476f8ce3aada091251072359b350a990, dabcc39b5138b6e9c84bfd1733bea220edee6d34, 58d997a3d68ea419147f80c066cbc8b23152f112)

Bug Fixes

  • async generator function (8e65413b992d3f0d1d1ce5829a3493c81c06d147, a570c0025141e46e795a9adf9fb318b8cf21031e)
  • class field (e1e35163970af44c320c88ab308ad1020526faac)
  • for await...of loop (140e4e0da881e2e92fad217586711aeb2fe6c274)
  • lexical declaration (be8ccc3ab5c34c4d4861e58bb1634d6dbc4a53f0)
  • switch statement (6cdc035b2f7d03baaecf87d8a83ab10c964d79ea)

v3.17.2

Bug Fixes

  • assignment operator (9efa02afb6de5f55d98b6f0d1369788012a29c34, 63b04a687aec5659532d8a89f4cd016558059a8e)
  • if statement (9ac3879b06ddd26a56cc0298c1af1aac5a1fa022)
  • return statement (37d3e4feaa1feae6a68dd6069484e464ae94a91b)
  • ternary expression (43ec350cd2f714e6c19097e6386a27ba3de8e941)

v3.17.1

Features

  • improve precision of escape analysis (d6d2f5ced2ce7f16eb02138ec243c01fe2b5717a, 10bc86ba107a17b3186d06938cb1b2bb45262e42)
  • improve usability of --mangle-props (9eea3a673a0aceb277ab06e4d585d002af992dd6, 4653e8aec0f8db498556b7da89903b6ae3434f24, 5ac6ec5496af3d38b0d14ee1987d2bfc9e3085be)
  • extend glob patterns for --in-situ (535212c69ef163c1cc35b7aa3d1fd625a171bb0e)
  • support Adobe ExtendScipt on best-effort basis (32bd65a87fd8a828150eccb57024adc60b468b05)
  • inline immediately invoked arrow function expressions (9dec612cd5c167eeac9ed68f9f2832bae7260196)
  • improve elimination of lexical declarations (edf1bf110635e604973d626e7ac45b6086e4b9fc)

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
> **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file security labels Oct 24, 2022
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uglify-js-3.17.4 branch from b735093 to 047a1da Compare October 25, 2022 14:51
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uglify-js-3.17.4 branch 2 times, most recently from 875aa38 to ab0baaf Compare November 11, 2022 22:21
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uglify-js-3.17.4 branch from ab0baaf to 4c13387 Compare January 5, 2023 19:15
Bumps [uglify-js](https://github.com/mishoo/UglifyJS) from 3.13.6 to 3.17.4.
- [Release notes](https://github.com/mishoo/UglifyJS/releases)
- [Commits](mishoo/UglifyJS@v3.13.6...v3.17.4)

---
updated-dependencies:
- dependency-name: uglify-js
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uglify-js-3.17.4 branch from 4c13387 to 0468831 Compare February 3, 2023 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant