[Snyk] Upgrade uglify-js from 3.11.5 to 3.15.4

[snyk-bot]

Snyk has created this PR to upgrade uglify-js from 3.11.5 to 3.15.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 32 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-04-09.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: uglify-js

• 3.15.4 - 2022-04-09
  

  Features

  • ensure keep_fnames on function literals assigned to variables (8922f08)
  • workaround quirk on Chrome v100 (3671894)

  Bug Fixes

  • class literal (a8e040b, c624b43)
  • comma operator (8922f08)
  • default parameter (ccd77d7)
  • destructuring syntax (d75a946)
  • for...in loop (01b8407)
  • function literal (998c979)
  • labeled statement (224c91b)
  • object method (a8e040b)
  • rest parameter (15a4074)
  • spread syntax (46570a4)
  • var statement (fb5e08e, 21bd4c4)
  • yield keyword (5e30f3a)
• 3.15.3 - 2022-03-10
  

  Features

  • improve compress efficiency (fdbbef2)

  Bug Fixes

  • arguments object (104d385)
  • eval() function (e2b0081)
  • var statement (042c228, 12a6728)
• 3.15.2 - 2022-02-26
  

  Features

  • improve compress efficiency (b6c72c8)
  • generalise optimisation on conditional branches (6d0bb58, a14555a, d5afe16)
  • extend nullish comparison truncation (9686379)
  • minimise mangle entropy (a7d0616)
  • trim return from discarded calls (dd3b81d)

  Bug Fixes

  • class literal (316245e)
  • function call (313e497)
  • function literal (63b92ea)
  • postfix operator (82e8ebd)
  • rest parameter (fbc5ecf)
  • string literal (a9d0dde)
  • unary arithmetic operator (0b50880, 212ce46)
• 3.15.1 - 2022-02-07
  

  Features

  • collapse global assignments (5c863b7)
  • speed up max_line_len & preserve_line (371d259)
  • support custom indentation (e4a91a8)
  • improve compression of conditional return chains (d7eb80b, aad5d6e)

  Bug Fixes

  • arguments object (77552d9)
  • class literal (e7d6dd2)
  • compound assignment operator (0a5a1f3)
  • default parameter (67438f3, 9a91a7a, d338e45)
  • destructuring syntax (67438f3)
  • function literal (3693bde)
  • global constant property (6fb7de7)
  • lexical declaration (18f0045, 28943bc, b106cd9)
  • logical assignment operator (0a5a1f3)
  • template literal (371d259)
  • var statement (8ceb4b0, fa30960)
• 3.15.0 - 2022-01-25
  Read more
• 3.14.5 - 2021-12-13
  

  Features

  • improve general performance (b079910, 033d8d9, bc27966, 57a9519)
• 3.14.4 - 2021-11-30
  Read more
• 3.14.3 - 2021-11-01
  

  Features

  • eliminate extraneous label on loops (436a293)
  • improve compression of template literals (f766bab, 0b2573c)

  Bug Fixes

  • await operator (eb93d92, a841d45)
  • class literal (c8b0f68)
  • default parameter (940887f)
  • destructuring syntax (a0250ec)
  • function call (87b9916)
  • let keyword (2580162)
  • rest parameter (55418fd)
  • string concatenation (03aec89)
• 3.14.2 - 2021-09-07
  Read more
• 3.14.1 - 2021-07-27
  

  Bug Fixes

  • assignment operator (6a3fe9d)
  • destructuring syntax (9b82f9b)
  • function literal (657d525)
• 3.14.0 - 2021-07-22
• 3.13.10 - 2021-06-27
• 3.13.9 - 2021-06-04
• 3.13.8 - 2021-05-26
• 3.13.7 - 2021-05-18
• 3.13.6 - 2021-05-10
• 3.13.5 - 2021-04-29
• 3.13.4 - 2021-04-12
• 3.13.3 - 2021-03-28
• 3.13.2 - 2021-03-21
• 3.13.1 - 2021-03-12
• 3.13.0 - 2021-03-01
• 3.12.8 - 2021-02-13
• 3.12.7 - 2021-02-06
• 3.12.6 - 2021-01-31
• 3.12.5 - 2021-01-19
• 3.12.4 - 2021-01-01
• 3.12.3 - 2020-12-22
• 3.12.2 - 2020-12-16
• 3.12.1 - 2020-11-30
• 3.12.0 - 2020-11-22
• 3.11.6 - 2020-11-14
• 3.11.5 - 2020-11-03

from uglify-js GitHub release notes

Commit messages

Package name: uglify-js

• 4a44d95 v3.15.4
• 3671894 rename reserved keyword `await` (#5413)
• 21bd4c4 fix corner cases in `collapse_vars` & `hoist_vars` (#5412)
• 998c979 fix corner case in `inline` (#5410)
• ccd77d7 fix corner case in `reduce_vars` (#5408)
• d75a946 fix corner case in `reduce_vars` (#5406)
• 696a20f patch `export default` within sandbox correctly (#5404)
• 224c91b fix corner case in `inline` (#5402)
• 8065e27 patch `export default` within sandbox correctly (#5400)
• 584e253 enahnce `collapse_vars` (#5398)
• fb5e08e fix corner case in `collapse_vars` (#5397)
• e3d328f fix corner case in `collapse_vars` (#5395)
• 8922f08 fix corner cases in `keep_fnames` (#5393)
• 15a4074 fix corner case in `unused` (#5392)
• c624b43 fix corner case in `collapse_vars` (#5390)
• a8e040b fix corner case in `properties` (#5388)
• 5e30f3a fix corner case in `inline` (#5386)
• 46570a4 fix corner case in `side_effects` (#5383)
• 01b8407 fix corner case in `evaluate` (#5381)
• 7aba2dc v3.15.3
• 12a6728 fix corner case in `hoist_vars` (#5379)
• 042c228 fix corner case in `inline` (#5377)
• e2b0081 fix corner cases in `inline` (#5375)
• 104d385 fix corner case in `ie` (#5372)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs