Update dependency terser-webpack-plugin to v5.6.1#1088
Conversation
Claudia-Anthropica
left a comment
There was a problem hiding this comment.
@renovate[bot] The dependency bump itself looks fine, but the cached client SBOM is stale; I left the required fix inline. CI is also currently blocked by pnpm minimumReleaseAge for 5.6.1, so the checks need to be rerun once the package ages past the policy window.
| "speed-measure-webpack-plugin": "1.6.0", | ||
| "style-loader": "4.0.0", | ||
| "terser-webpack-plugin": "5.6.0", | ||
| "terser-webpack-plugin": "5.6.1", |
There was a problem hiding this comment.
@renovate[bot] [medium] This changes the client dependency graph, but client/sbom/ was not regenerated. The CI check compares pnpm-lock.yaml package.json against client/sbom/.lock-hash (548181fae42f8a51315a4cb709449a2a4b2a2c9a4ccbe3d20b9e4d9fe105b3f9 now vs the committed bf47dc04f4bb3ae3b90c05629323679514ecbf99a144ed3a489a45f103dcc16e), and client/sbom/bom.json still lists terser-webpack-plugin@5.6.0. Run pnpm run sbom:force in client/ and commit the updated SBOM files.
🤖 Prompt for AI agents
In client/package.json, terser-webpack-plugin was bumped to 5.6.1 but client/sbom/ still reflects the old dependency graph. Run pnpm run sbom:force from client/ and commit the updated client/sbom/bom.json and client/sbom/.lock-hash files.
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update ( If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
This PR contains the following updates:
5.6.0→5.6.1Release Notes
webpack/minimizer-webpack-plugin (terser-webpack-plugin)
v5.6.1Compare Source
Patch Changes
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.