Skip to content

chore(deps-dev): bump @rollup/plugin-terser from 1.0.0 to 1.0.2 - #314

Merged
dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/rollup/plugin-terser-1.0.2
Oct 27, 2026
Merged

dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/rollup/plugin-terser-1.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @rollup/plugin-terser from 1.0.0 to 1.0.2.

Changelog

Sourced from @​rollup/plugin-terser's changelog.

v1.0.2

2026-10-21

Updates

  • terser: update terser to ^5.49.2 (#2019)

v1.0.1

2026-10-21

Bugfixes

  • terser: share nameCache between chunks by serializing minify tasks (#2020)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 26, 2026
Bumps [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser) from 1.0.0 to 1.0.2.
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.2/packages/terser)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-terser"
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/rollup/plugin-terser-1.0.2 branch from 2ff6a50 to 88bab4c Compare October 27, 2026 13:38

@dhensby dhensby left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot review of head 88bab4c

Check Result
PR provenance Author dependabot[bot]. 1 commit(s), each signed by GitHub.
Diff scope package-lock.json, package.json
Integrity The lockfile hash of each new version matches the npm registry.
Install scripts No new preinstall, install or postinstall script.
CI 18 of 18 checks passed.
Package Change Dependency Publisher Provenance or source
@jridgewell/gen-mapping 0.3.5 → 0.3.13 (patch) dev, transitive jridgewell, same as 0.3.5 No provenance (0.3.5 had none). gitHead 095a582 is on jridgewell/sourcemaps main (no version tag)
@jridgewell/trace-mapping 0.3.25 → 0.3.31 (patch) dev, transitive jridgewell, same as 0.3.25 No provenance (0.3.25 had none). gitHead 74fc8e1 is on jridgewell/sourcemaps main (no version tag)
@rollup/plugin-terser 1.0.0 → 1.0.2 (patch) dev, direct GitHub Actions (trusted publishing), same as 1.0.0 SLSA verified: rollup/plugins@ab5e155 (refs/heads/master), build
terser 5.46.1 → 5.51.2 (minor) dev, transitive fabiosantoscode, same as 5.46.1 No provenance (5.46.1 had none). gitHead 317f449 = tag v5.51.2 in terser/terser

Compatibility evidence: CI.

Maintainer decision

Human reviewed supply-chain verification and accepted risk: the repository of @jridgewell/gen-mapping 0.3.13 and @jridgewell/trace-mapping 0.3.31 changed to jridgewell/sourcemaps.

  • jridgewell/sourcemaps is a monorepo of the same owner, with packages/gen-mapping and packages/trace-mapping. The old repositories jridgewell/gen-mapping and jridgewell/trace-mapping are archived.
  • The publisher (jridgewell) did not change.
  • The gitHeads 095a582 and 74fc8e1 are ancestors of main. There are no version tags.
  • Tarball-to-gitHead comparison, with the registry integrity verified: gen-mapping has 7 identical files, 0 different files and 24 build files that are not in source. trace-mapping has 12 identical files, 0 different files and 40 build files that are not in source.
  • These are transitive dev dependencies, and CI is green.

@dhensby
dhensby merged commit 2e7e310 into master Oct 27, 2026
18 checks passed
@dhensby
dhensby deleted the dependabot/npm_and_yarn/rollup/plugin-terser-1.0.2 branch October 27, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant