[mridang]

Bumps the npm-security-updates group with 5 updates in the / directory:

Package	From	To
@rollup/plugin-terser	0.4.4	1.0.2
jest-junit	16.0.0	17.0.0
serialize-javascript	6.0.2	7.1.4
terser	5.44.1	5.51.2
uuid	8.3.2	14.0.3

Updates @rollup/plugin-terser from 0.4.4 to 1.0.2

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @rollup/plugin-terser since your current version.

Updates jest-junit from 16.0.0 to 17.0.0

Release notes

Sourced from jest-junit's releases.

v17.0.0

Upgrade uuid package to latest - jest-community/jest-junit#284

Commits

• 20d8f14 v17.0.0
• c91dd20 Merge pull request #284 from palmerj3/upgrade-uuid-14
• 8ff39ee Upgrade uuid to 14.0.0
• e866b5f Add CODEOWNERS
• 33a5a8b Merge pull request #278 from jest-community/update-ci-versions
• f33e1f2 Update to Jest 30.2.0 and regenerate snapshots
• 81c9775 NPM audit fix
• 50e2666 Convert from yarn to npm
• b4a7e14 Add snapshot update command to CLAUDE.md
• b56a503 Simplify CI to test only Jest 30.x
• Additional commits viewable in compare view

Updates serialize-javascript from 6.0.2 to 7.1.4

Release notes

Sourced from serialize-javascript's releases.

v7.1.4

What's Changed

• Fix methods containing nested functions and arrows by @Shubham-Padkonde in yahoo/serialize-javascript#231
• docs: add SECURITY.md by @redonkulus in yahoo/serialize-javascript#237
• release: v7.1.4 by @redonkulus in yahoo/serialize-javascript#238

Note on method serialization

Concise methods ({ m() {} }), including async, generator and computed-key methods, are now serialized correctly when their bodies contain a nested arrow function or function declaration. Previously these were emitted unchanged, producing invalid output that failed to deserialize (#118). Class expressions continue to be emitted as-is.

Reporting security issues

This repo now has a security policy. Please report vulnerabilities privately through GitHub's private vulnerability reporting rather than public issues.

Full Changelog: yahoo/serialize-javascript@v7.1.3...v7.1.4

Commits

• 05c5ceb release: v7.1.4 (#238)
• fdb853d Fix methods containing nested functions and arrows (#231)
• f7dfeae docs: add SECURITY.md pointing to private vulnerability reporting (#237)
• 4d36b82 release: v7.1.3 (#236)
• 45e5397 fix: ignore functions without mutating input objects (#233)
• e978a1b fix: serialize Dates with expanded ISO years (#232)
• 2864b3c fix: escape `</script` at the end of a serialized function body (#235)
• 6a73fa1 release: v7.1.2
• 2bdbaaf Merge commit from fork
• 8c8caa7 release: v7.1.1
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for serialize-javascript since your current version.

Updates terser from 5.44.1 to 5.51.2

Commits

• 317f449 5.51.2
• de65694 update changelog
• 053a8f3 roll back previous fix for ambiguously scoped default args
• c2bd471 5.51.1
• 791888f update changelog
• 49168cd fix transforms inside dynamic `import()` arguments. Closes #1723
• b629819 5.51.0
• e215a08 update changelog
• 18db852 pin (deoptimize) functions that use argnames scope in an ambiguous way. Closes #1478
• 9fc8a85 fix nullish coalescing operator being considered boolean
• Additional commits viewable in compare view

Updates uuid from 8.3.2 to 14.0.3

Release notes

Sourced from uuid's releases.

v14.0.3

14.0.3 (2026-10-09)

Bug Fixes

• fix CITGM #1154 (#981) (b44f159)

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

• v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
• v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
• v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

• add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

• rerelease to fix provenance. (49ccb35)

v12.0.1

12.0.1 (2026-04-29)

Bug Fixes

• backport fix for GHSA-w5hq-g745-h8pq (3d61d6a)

v11.1.1

11.1.1 (2026-04-29)

Bug Fixes

• backport GHSA-w5hq-g745-h8pq fix (32389c8)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

• backport fix for GHSA-w5hq-g745-h8pq (9d27ddf)

Commits

• 993ff7b chore(main): release 14.0.3 (#982)
• f7d19b9 chore: update workflow actions (#983)
• b44f159 fix: fix CITGM #1154 (#981)
• dd8c173 chore: update deps (#975)
• fd59f02 chore(main): release 14.0.2 (#967)
• f3c564e docs: point the Node support permalink at the CI version matrix (#974)
• b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
• 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
• ea83515 docs: cleanup API summary (#968)
• ac36860 chore: pin `publint` version in CI (#966)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.