Skip to content

chore(deps): bump serialize-javascript and @iobroker/testing - #225

Merged
SentiQ merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f1f6a0381b
Sep 11, 2026
Merged

SentiQ merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-f1f6a0381b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bumps serialize-javascript to 7.1.1 and updates ancestor dependency @iobroker/testing. These dependencies need to be updated together.

Updates serialize-javascript from 6.0.2 to 7.1.1

Release notes

Sourced from serialize-javascript's releases.

v7.1.1

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.1.0...v7.1.1

v7.1.0

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.7...v7.1.0

v7.0.7

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.6...v7.0.7

v7.0.6

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.5...v7.0.6

v7.0.5

Fixes

  • Improve robustness and validation for array-like object serialization.
  • Fix an issue where certain object structures could lead to excessive CPU usage.

For more details, please see GHSA-qj8w-gfj5-8c6v.

v7.0.4

What's Changed

Full Changelog: yahoo/serialize-javascript@v7.0.3...v7.0.4

v7.0.3

  • fix(CVE-2020-7660): fix for RegExp.flags and Date.prototype.toISOString (#207) 2e609d0

... (truncated)

Commits
  • 8c8caa7 release: v7.1.1
  • ffda9f1 fix: fix XSS bypass via split </script payload across function bodies
  • 739145a release: v7.1.0
  • 57865ed feat: add Node.js 26 to test matrix
  • 01bec60 release: v7.0.7
  • 5009715 fix: reject spoofed RegExp objects with non-string source property
  • 153eb43 release: v7.0.6
  • a83d2cb fix: reject spoofed URL objects with non-string toString() result
  • 451af65 build(deps-dev): bump lodash from 4.17.23 to 4.18.1 (#215)
  • df3f1c1 release: v7.0.5
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.


Updates @iobroker/testing from 5.3.0 to 6.2.1

Release notes

Sourced from @​iobroker/testing's releases.

Release v6.2.1

Release v6.2.0

Release v6.1.0

  • (@​GermanBluefox) The test harness now captures the log output of the adapter under test. It can be checked with the new methods harness.getLogs(), harness.hasLog() and harness.clearLogs()
  • (@​GermanBluefox) BREAKING: harness.changeAdapterConfig() now automatically encrypts the native properties that are listed in the instance object's encryptedNative. Tests that encrypted such values themselves must pass them in plain text now
  • (@​GermanBluefox) Added harness.getAdapterConfig(), which reads the instance object and decrypts the encryptedNative properties
  • (@​GermanBluefox) Added harness.encryptValue() and harness.decryptValue() for manual encryption/decryption
  • (@​copilot) The integration test directory is now cleaned up automatically when the requested js-controller version differs from the one installed by the previous run

Release v6.0.0

  • (@​krobipd) Fixed: a command that cannot be spawned (missing executable, missing cwd) no longer terminates the whole test process with an unhandled 'error' event - executeCommand now resolves with the error instead
  • (@​mcm1957) Add validation to fail if a "prepare" script is defined in the "scripts" section of package.json
  • (@​GermanBluefox) Breaking: Dropped support for Node.js 18 and 20
Changelog

Sourced from @​iobroker/testing's changelog.

6.2.1 (2026-09-10)

6.1.0 (2026-09-06)

  • (@​GermanBluefox) The test harness now captures the log output of the adapter under test. It can be checked with the new methods harness.getLogs(), harness.hasLog() and harness.clearLogs()
  • (@​GermanBluefox) BREAKING: harness.changeAdapterConfig() now automatically encrypts the native properties that are listed in the instance object's encryptedNative. Tests that encrypted such values themselves must pass them in plain text now
  • (@​GermanBluefox) Added harness.getAdapterConfig(), which reads the instance object and decrypts the encryptedNative properties
  • (@​GermanBluefox) Added harness.encryptValue() and harness.decryptValue() for manual encryption/decryption
  • (@​copilot) The integration test directory is now cleaned up automatically when the requested js-controller version differs from the one installed by the previous run

6.0.0 (2026-09-05)

  • (@​krobipd) Fixed: a command that cannot be spawned (missing executable, missing cwd) no longer terminates the whole test process with an unhandled 'error' event - executeCommand now resolves with the error instead
  • (@​mcm1957) Add validation to fail if a "prepare" script is defined in the "scripts" section of package.json
  • (@​GermanBluefox) Breaking: Dropped support for Node.js 18 and 20
Commits
  • b289358 chore: release v6.2.1
  • ec729f5 Increased timeout for downloading schema to 10seconds
  • a9a3250 chore: release v6.2.0
  • 2561808 Added the check of JSON config files
  • bf64fea Added the check of JSON config files
  • dcd528c chore: release v6.1.0
  • f38d257 The test harness now captures the log output of the adapter under test. It ca...
  • 741d258 Added harness.encryptValue() and harness.decryptValue() for manual encryp...
  • 355bf24 feat: clear test directory when the js-controller version changes
  • bd2cc9e chore: release v6.0.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.1.1 and updates ancestor dependency [@iobroker/testing](https://github.com/ioBroker/testing). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.1.1
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.1.1)

Updates `@iobroker/testing` from 5.3.0 to 6.2.1
- [Release notes](https://github.com/ioBroker/testing/releases)
- [Changelog](https://github.com/ioBroker/testing/blob/master/CHANGELOG.md)
- [Commits](ioBroker/testing@v5.3.0...v6.2.1)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.1.1
  dependency-type: indirect
- dependency-name: "@iobroker/testing"
  dependency-version: 6.2.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 11, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): serialize-javascript, @iobroker/testing
  • Update type: unknown (raw: (empty))
  • Dependency type: development
  • Previous version:
  • New version:

@SentiQ
SentiQ merged commit 20e409b into main Sep 11, 2026
13 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-f1f6a0381b branch September 11, 2026 08:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant