[Snyk] Upgrade uglify-js from 3.14.2 to 3.15.4

[snyk-bot]

Snyk has created this PR to upgrade uglify-js from 3.14.2 to 3.15.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-04-09.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	479/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: uglify-js

• 3.15.4 - 2022-04-09
  

  Features

  • ensure keep_fnames on function literals assigned to variables (8922f08)
  • workaround quirk on Chrome v100 (3671894)

  Bug Fixes

  • class literal (a8e040b, c624b43)
  • comma operator (8922f08)
  • default parameter (ccd77d7)
  • destructuring syntax (d75a946)
  • for...in loop (01b8407)
  • function literal (998c979)
  • labeled statement (224c91b)
  • object method (a8e040b)
  • rest parameter (15a4074)
  • spread syntax (46570a4)
  • var statement (fb5e08e, 21bd4c4)
  • yield keyword (5e30f3a)
• 3.15.3 - 2022-03-10
  

  Features

  • improve compress efficiency (fdbbef2)

  Bug Fixes

  • arguments object (104d385)
  • eval() function (e2b0081)
  • var statement (042c228, 12a6728)
• 3.15.2 - 2022-02-26
  

  Features

  • improve compress efficiency (b6c72c8)
  • generalise optimisation on conditional branches (6d0bb58, a14555a, d5afe16)
  • extend nullish comparison truncation (9686379)
  • minimise mangle entropy (a7d0616)
  • trim return from discarded calls (dd3b81d)

  Bug Fixes

  • class literal (316245e)
  • function call (313e497)
  • function literal (63b92ea)
  • postfix operator (82e8ebd)
  • rest parameter (fbc5ecf)
  • string literal (a9d0dde)
  • unary arithmetic operator (0b50880, 212ce46)
• 3.15.1 - 2022-02-07
  

  Features

  • collapse global assignments (5c863b7)
  • speed up max_line_len & preserve_line (371d259)
  • support custom indentation (e4a91a8)
  • improve compression of conditional return chains (d7eb80b, aad5d6e)

  Bug Fixes

  • arguments object (77552d9)
  • class literal (e7d6dd2)
  • compound assignment operator (0a5a1f3)
  • default parameter (67438f3, 9a91a7a, d338e45)
  • destructuring syntax (67438f3)
  • function literal (3693bde)
  • global constant property (6fb7de7)
  • lexical declaration (18f0045, 28943bc, b106cd9)
  • logical assignment operator (0a5a1f3)
  • template literal (371d259)
  • var statement (8ceb4b0, fa30960)
• 3.15.0 - 2022-01-25
  Read more
• 3.14.5 - 2021-12-13
  

  Features

  • improve general performance (b079910, 033d8d9, bc27966, 57a9519)
• 3.14.4 - 2021-11-30
  Read more
• 3.14.3 - 2021-11-01
  

  Features

  • eliminate extraneous label on loops (436a293)
  • improve compression of template literals (f766bab, 0b2573c)

  Bug Fixes

  • await operator (eb93d92, a841d45)
  • class literal (c8b0f68)
  • default parameter (940887f)
  • destructuring syntax (a0250ec)
  • function call (87b9916)
  • let keyword (2580162)
  • rest parameter (55418fd)
  • string concatenation (03aec89)
• 3.14.2 - 2021-09-07
  Read more

from uglify-js GitHub release notes

Commit messages

Package name: uglify-js

• 4a44d95 v3.15.4
• 3671894 rename reserved keyword `await` (#5413)
• 21bd4c4 fix corner cases in `collapse_vars` & `hoist_vars` (#5412)
• 998c979 fix corner case in `inline` (#5410)
• ccd77d7 fix corner case in `reduce_vars` (#5408)
• d75a946 fix corner case in `reduce_vars` (#5406)
• 696a20f patch `export default` within sandbox correctly (#5404)
• 224c91b fix corner case in `inline` (#5402)
• 8065e27 patch `export default` within sandbox correctly (#5400)
• 584e253 enahnce `collapse_vars` (#5398)
• fb5e08e fix corner case in `collapse_vars` (#5397)
• e3d328f fix corner case in `collapse_vars` (#5395)
• 8922f08 fix corner cases in `keep_fnames` (#5393)
• 15a4074 fix corner case in `unused` (#5392)
• c624b43 fix corner case in `collapse_vars` (#5390)
• a8e040b fix corner case in `properties` (#5388)
• 5e30f3a fix corner case in `inline` (#5386)
• 46570a4 fix corner case in `side_effects` (#5383)
• 01b8407 fix corner case in `evaluate` (#5381)
• 7aba2dc v3.15.3
• 12a6728 fix corner case in `hoist_vars` (#5379)
• 042c228 fix corner case in `inline` (#5377)
• e2b0081 fix corner cases in `inline` (#5375)
• 104d385 fix corner case in `ie` (#5372)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
27de2500-c8d2-11ec-9fd6-198f89c19ee5