Skip to content

chore(deps-dev): override serialize-javascript to a patched version - #542

Merged
josephfusco merged 1 commit into
mainfrom
chore/deps-security-overrides
Nov 1, 2026
Merged

josephfusco merged 1 commit into
mainfrom
chore/deps-security-overrides

Conversation

@josephfusco

Copy link
Copy Markdown
Member

Bumps the serialize-javascript override from ^7.0.5 to ^7.1.3 (resolves to 7.1.4), fixing Dependabot alert #251 (XSS via unescaped </script at the end of a serialized function body). Dev-only, transitive through @wordpress/scripts.

npm run build passes.

Use of AI Tools

AI assistance: Yes
Tool(s): Claude Code
Model(s): Claude Opus 5.5
Used for: Assisting with triaging Dependabot alerts and updating the override.

@josephfusco
josephfusco requested review from a team and colinmurphy as code owners November 1, 2026 03:32
@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

🛝 WordPress Playground

Built from 857b214

Launch WordPress Playground

Opens GraphiQL with WPGraphQL and this build active. The "Content Blocks Demo" post has core blocks to query through editorBlocks.

@josephfusco
josephfusco merged commit f921449 into main Nov 1, 2026
18 checks passed
@josephfusco
josephfusco deleted the chore/deps-security-overrides branch November 1, 2026 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant