chore(deps): update dependency serialize-javascript to v7.1.1

[thomhurst]

This PR contains the following updates:

Package	Type	Update	Change
serialize-javascript	resolutions	patch	7.1.0 → 7.1.1

---

Release Notes

yahoo/serialize-javascript (serialize-javascript)

v7.1.1

Compare Source

What's Changed

• fix: fix XSS bypass via split </script payload across function bodies by @​okuryu in #​226
• release: v7.1.1 by @​okuryu in #​227

Full Changelog: yahoo/serialize-javascript@v7.1.0...v7.1.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-08-29T14:13:11.639034Z	103e8eb	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 753593a9-ed1a-4f75-b08e-ad20a4cf1277

📥 Commits

Reviewing files that changed from the base of the PR and between cfa2815 and 103e8eb.

⛔ Files ignored due to path filters (1)

• docs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• docs/package.json

Included review availability: Your plan provides up to 8 included reviews per hour; 7 remain after this review.

---

📝 Walkthrough

Walkthrough

The documentation package updates the resolved serialize-javascript dependency from 7.1.0 to 7.1.1.

Changes

Dependency Resolution

Layer / File(s)	Summary
Update serialize-javascript resolution docs/package.json	The resolved version changes from 7.1.0 to 7.1.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 103e8

The PR updates the documentation site's resolved serialize-javascript version from 7.1.0 to 7.1.1, which includes an XSS bypass fix; no actionable merge-blocking risk remains after normal checks.

Poem

A rabbit checks the package line
7.1.1 now looks fine
One small version hops ahead
No broken burrows lie ahead
The docs package rests in bed

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the dependency update from serialize-javascript to version 7.1.1.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch renovate/serialize-javascript-7.x

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Greptile Summary

This PR updates the docs site’s serialize-javascript resolution from 7.1.0 to 7.1.1, incorporating the upstream XSS fix.

• Updates the pinned resolution in docs/package.json.
• Refreshes the Yarn lockfile version, tarball URL, and integrity hash.

Confidence Score: 5/5

The PR appears safe to merge with no actionable correctness, build, or security regressions identified.

The package resolution and Yarn lockfile remain synchronized, and the updated dependency is compatible with the docs build’s Node 24 environment and existing consumers.

Important Files Changed

Filename	Overview
docs/package.json	Updates the serialize-javascript resolution to 7.1.1; the new version is compatible with the docs site’s declared Node runtime.
docs/yarn.lock	Consistently updates the coalesced serialize-javascript lock entry, resolved package URL, and integrity hash.

_{Reviews (1): Last reviewed commit: "chore(deps): update dependency serialize..." | Re-trigger Greptile}