Skip to content

Bump serialize-javascript from 7.1.0 to 7.1.1 - #3454

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/serialize-javascript-7.1.1
Open

Bump serialize-javascript from 7.1.0 to 7.1.1#3454
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/serialize-javascript-7.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript from 7.1.0 to 7.1.1.

Release notes

Sourced from serialize-javascript's releases.

v7.1.1

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.1.0...v7.1.1

Commits
  • 8c8caa7 release: v7.1.1
  • ffda9f1 fix: fix XSS bypass via split </script payload across function bodies
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Changes for a dependency update label Sep 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 1, 2026 14:55
@dependabot dependabot Bot added the dependencies Changes for a dependency update label Sep 1, 2026
@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Thank you for your contribution, one of the team will evaluate shortly.

@ElinoraWhite

Copy link
Copy Markdown
Member

Dependabot (@dependabot) rebase

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) from 7.1.0 to 7.1.1.
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v7.1.0...v7.1.1)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/serialize-javascript-7.1.1 branch from 6c1e0bd to b968e88 Compare September 2, 2026 04:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes for a dependency update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant