Bump terser from 4.4.3 to 4.6.1 (!29964) · Merge requests · Bootstrap / bootstrap

Merged Administrator requested to merge dependabot/npm_and_yarn/terser-4.6.1 into master Jan 07, 2020

Created by: dependabot-preview[bot]

Bumps terser from 4.4.3 to 4.6.1.

Changelog

v4.6.1

Fixed an issue where a class is duplicated by reduce_vars when there's a recursive reference to the class.

v4.6.0

Fixed issues with recursive class references.

BigInt evaluation has been prevented, stopping Terser from evaluating BigInts like it would do regular numbers.

Class property support has been added

v4.5.1

(hotfix release)

Fixed issue where () => ({})[something] was not parenthesised correctly.

v4.5.0

Inlining has been improved

An issue where keep_fnames combined with functions declared through variables was causing name shadowing has been fixed

You can now set the ES version through their year

The output option keep_numbers has been added, which prevents Terser from turning 1000 into 1e3 and such

Internal small optimisations and refactors

Commits

6355c91 4.6.1
64aa293 update changelog
ff0f702 add tests
3210292 prevent duplicating classes. Closes #549
cf16b4f 4.6.0
a5abb63 update changelog
49e54eb make class recursive refs count as recursive refs. closes #543
5f0555c prevent evaluation of BigInts. closes #546.
00ea641 document and improve functional tests
4503ca7 move functional tests to a script file
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in the .dependabot/config.yml file in this repo:

Update frequency
Out-of-range updates (receive only lockfile updates, if desired)
Security updates (receive only security updates, if desired)