From 157043368304cc0949cd92a2908f1c6fb13ed04c Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Thu, 4 Jun 2026 20:13:57 +0000 Subject: [PATCH] fix: upgrade @rollup/plugin-terser to fix serialize-javascript vulnerability Upgrade @rollup/plugin-terser from ^0.4.3 to ^1.0.0 to resolve high-severity vulnerabilities in serialize-javascript (GHSA-5c6j-r48x-rmvq, GHSA-qj8w-gfj5-8c6v). Co-Authored-By: Patrick Kaeding --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index c1e3e8e..423883c 100644 --- a/package.json +++ b/package.json @@ -49,7 +49,7 @@ "@eslint/js": "^9.7.0", "@rollup/plugin-json": "^6.0.0", "@rollup/plugin-node-resolve": "^15.1.0", - "@rollup/plugin-terser": "^0.4.3", + "@rollup/plugin-terser": "^1.0.0", "@rollup/plugin-typescript": "^12.1.1", "@testing-library/dom": "^10.4.0", "@testing-library/jest-dom": "^6.4.8",