BLAKE3 hashing for JavaScript: native Node bindings (where available) and WebAssembly
Bumps [terser](https://github.com/terser/terser) from 4.6.2 to 4.8.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/terser/terser/blob/master/CHANGELOG.md">terser's changelog</a>.</em></p> <blockquote> <h2>v4.8.1 (backport)</h2> <ul> <li>Security fix for RegExps that should not be evaluated (regexp DDOS)</li> </ul> <h2>v4.8.0</h2> <ul> <li>Support for numeric separators (<code>million = 1_000_000</code>) was added.</li> <li>Assigning properties to a class is now assumed to be pure.</li> <li>Fixed bug where <code>yield</code> wasn't considered a valid property key in generators.</li> </ul> <h2>v4.7.0</h2> <ul> <li>A bug was fixed where an arrow function would have the wrong size</li> <li><code>arguments</code> object is now considered safe to retrieve properties from (useful for <code>length</code>, or <code>0</code>) even when <code>pure_getters</code> is not set.</li> <li>Fixed erroneous <code>const</code> declarations without value (which is invalid) in some corner cases when using <code>collapse_vars</code>.</li> </ul> <h2>v4.6.13</h2> <ul> <li>Fixed issue where ES5 object properties were being turned into ES6 object properties due to more lax unicode rules.</li> <li>Fixed parsing of BigInt with lowercase <code>e</code> in them.</li> </ul> <h2>v4.6.12</h2> <ul> <li>Fixed subtree comparison code, making it see that <code>[1,[2, 3]]</code> is different from <code>[1, 2, [3]]</code></li> <li>Printing of unicode identifiers has been improved</li> </ul> <h2>v4.6.11</h2> <ul> <li>Read unused classes' properties and method keys, to figure out if they use other variables.</li> <li>Prevent inlining into block scopes when there are name collisions</li> <li>Functions are no longer inlined into parameter defaults, because they live in their own special scope.</li> <li>When inlining identity functions, take into account the fact they may be used to drop <code>this</code> in function calls.</li> <li>Nullish coalescing operator (<code>x ?? y</code>), plus basic optimization for it.</li> <li>Template literals in binary expressions such as <code>+</code> have been further optimized</li> </ul> <h2>v4.6.10</h2> <ul> <li>Do not use reduce_vars when classes are present</li> </ul> <h2>v4.6.9</h2> <ul> <li>Check if block scopes actually exist in blocks</li> </ul> <h2>v4.6.8</h2> <ul> <li>Take into account "executed bits" of classes like static properties or computed keys, when checking if a class evaluation might throw or have side effects.</li> </ul> <h2>v4.6.7</h2> <ul> <li>Some new performance gains through a <code>AST_Node.size()</code> method which measures a node's source code length without printing it to a string first.</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/terser/terser/commits">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/connor4312/blake3/network/alerts). </details>
This issue appears to be discussing a feature request or bug report related to the repository. Based on the content, it seems to be resolved. The issue was opened by dependabot[bot] and has received 1 comments.