Skip to content

Bump serialize-javascript and @x-govuk/govuk-eleventy-plugin - #30

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8212dcaf23
Closed

Bump serialize-javascript and @x-govuk/govuk-eleventy-plugin#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-8212dcaf23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 29, 2026

Copy link
Copy Markdown

Bumps serialize-javascript to 7.0.5 and updates ancestor dependency @x-govuk/govuk-eleventy-plugin. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.0.5

Release notes

Sourced from serialize-javascript's releases.

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0
  • build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#206) 42b7cdb

yahoo/serialize-javascript@v7.0.2...v7.0.3

v7.0.2

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.1...v7.0.2

v7.0.1

What's Changed

New Contributors

Full Changelog: yahoo/serialize-javascript@v7.0.0...v7.0.1

v7.0.0

Breaking Changes

  • requires Node.js v20+

What's Changed

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for serialize-javascript since your current version.


Updates @x-govuk/govuk-eleventy-plugin from 8.3.0 to 9.0.1

Release notes

Sourced from @​x-govuk/govuk-eleventy-plugin's releases.

v9.0.1

  • Fix package-lock.json 27e34c2

x-govuk/govuk-eleventy-plugin@v9.0.0...v9.0.1

v9.0.0

Breaking changes

  • Remove remaining rebrand switches 7b2c2b8
  • Update component styles to support govuk-frontend v6 9c5e007
  • Update layouts to support govuk-frontend v6 c4b5f7f
  • Bump govuk-frontend dependency to v6 04125a5
  • Remove unused options parameter from itemsFromNavigation filter 17a3063

Documentation

  • Use functional colours config in design example dcb2694
  • Update example homepage illustration to use revised GOV.UK colour palette 371a0af

Chores

  • Lint JSDoc 2621307
  • Use a single import 582448f
  • Use a more specific minimum Node version b1946b2
  • Add missing extraneous dependencies 8267a2a
  • Update dependencies 38ec615
  • Sort package.json 43b86f3

x-govuk/govuk-eleventy-plugin@v8.3.1...v9.0.0

v8.3.1

  • Use POSIX forward slash path separator for assetPath in generated SCSS. Fixes #422, thanks to @​rnwolf for reporting. 6e33dee
  • Update dependencies 97781ef

x-govuk/govuk-eleventy-plugin@v8.3.0...v8.3.1

Commits
  • 8254330 9.0.1
  • 27e34c2 Fix package-lock.json
  • 9408e49 9.0.0
  • dcb2694 Use functional colours config in design example
  • 7b2c2b8 Remove remaining rebrand switches
  • 371a0af Update example homepage illustration to use revised GOV.UK colour palette
  • 9c5e007 Update component styles to support govuk-frontend v6
  • c4b5f7f Update layouts to support govuk-frontend v6
  • 04125a5 Bump govuk-frontend dependency to v6
  • 2621307 Lint JSDoc
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.0.5 and updates ancestor dependency [@x-govuk/govuk-eleventy-plugin](https://github.com/x-govuk/govuk-eleventy-plugin). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.0.5
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.0.5)

Updates `@x-govuk/govuk-eleventy-plugin` from 8.3.0 to 9.0.1
- [Release notes](https://github.com/x-govuk/govuk-eleventy-plugin/releases)
- [Commits](x-govuk/govuk-eleventy-plugin@v8.3.0...v9.0.1)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.0.5
  dependency-type: indirect
- dependency-name: "@x-govuk/govuk-eleventy-plugin"
  dependency-version: 9.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 29, 2026
@sonarqubecloud

sonarqubecloud Bot commented May 8, 2026

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Author

Superseded by #92.

@dependabot dependabot Bot closed this Jun 21, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-8212dcaf23 branch June 21, 2026 17:46
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Development

Successfully merging this pull request may close these issues.

0 participants