Skip to content

chore: update js packages#74

Closed
mi5t4n wants to merge 2 commits intomainfrom
fix/dependabot-errors
Closed

chore: update js packages#74
mi5t4n wants to merge 2 commits intomainfrom
fix/dependabot-errors

Conversation

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates JavaScript tooling dependencies to address multiple Dependabot security alerts in the Carousel Kit project’s build/lint/test toolchain.

Changes:

  • Bumped @wordpress/scripts from ^31.2.0 to ^31.6.0.
  • Added an npm overrides entry for serialize-javascript (^7.0.3).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

"react-dom": "^18.3.1",
"webpack-dev-server": ">=5.2.1"
"webpack-dev-server": ">=5.2.1",
"serialize-javascript": "^7.0.3"
Copy link

Copilot AI Mar 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new npm override forces serialize-javascript to v7 (^7.0.3), but copy-webpack-plugin@10.2.4 in the dependency tree declares serialize-javascript: ^6.0.0. Forcing a different major than a package declares support for can break the build at runtime. Consider overriding to a patched 6.x version that satisfies ^6.0.0 (e.g., ^6.0.2), or bumping the upstream dependency (e.g., via @wordpress/scripts/webpack plugin versions) to one that officially supports serialize-javascript@7 before enforcing v7.

Suggested change
"serialize-javascript": "^7.0.3"
"serialize-javascript": "^6.0.2"

Copilot uses AI. Check for mistakes.
@mi5t4n mi5t4n requested a review from up1512001 March 6, 2026 09:38
@up1512001
Copy link
Member

@mi5t4n closing this PR as all dependabot issues are fixed.

@up1512001 up1512001 closed this Mar 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants