chore(deps-dev): bump terser-webpack-plugin from 5.3.16 to 5.4.0

[dependabot]

Bumps terser-webpack-plugin from 5.3.16 to 5.4.0.

Release notes

Sourced from terser-webpack-plugin's releases.

v5.4.0

5.4.0 (2026-03-10)

Features

• added ability to minimize JSON using jsonMinify (#657) (29ac915)

v5.3.17

5.3.17 (2026-03-03)

Bug Fixes

• update serialize-javascript (37c490c)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.4.0 (2026-03-10)

Features

• added ability to minimizer JSON using jsonMinify (#657) (29ac915)

5.3.17 (2026-03-03)

Bug Fixes

• update serialize-javascript (37c490c)

Commits

• 543da6e chore(release): 5.4.0
• 29ac915 feat: added ability to minimizer JSON using jsonMinify (#657)
• e505dee fix: align with code
• 6f911ff chore(release): 5.3.17
• 37c490c fix: update serialize-javascript
• 207764f chore: deps update (#652)
• a85ab47 chore(deps-dev): bump ajv from 6.12.6 to 6.14.0 (#648)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

Greptile Summary

Bumps terser-webpack-plugin from 5.3.16 to 5.4.0 in the controller-ext build toolchain. This is a dev-only dependency used for minifying the Chrome extension bundle; no runtime or application code is affected. The intermediate 5.3.17 patch updated serialize-javascript (a supply-chain fix), and 5.4.0 then removed serialize-javascript as a direct dependency entirely while adding optional JSON minification support.

Confidence Score: 5/5

Safe to merge — dev-only dependency bump with no runtime impact.

Only devDependencies in the extension build toolchain are changed. No application logic, runtime code, or APIs are touched. The new version is a minor bump with a supply-chain patch (serialize-javascript removal) and an additive feature (jsonMinify) that the codebase does not use.

No files require special attention.

Important Files Changed

Filename	Overview
apps/controller-ext/package.json	Version constraint for terser-webpack-plugin updated from ^5.3.11 to ^5.4.0 (devDependency only)
bun.lock	Lockfile updated to resolve terser-webpack-plugin@5.4.0; serialize-javascript dropped from its direct deps; webpack retains its own pinned terser-webpack-plugin@5.3.16 via the webpack/terser-webpack-plugin alias

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[controller-ext build] --> B[webpack]
    B --> C["terser-webpack-plugin@5.4.0 (upgraded)"]
    B --> D["webpack/terser-webpack-plugin@5.3.16 (internal peer)"]
    C --> E["terser@5.46.0"]
    C --> F["jest-worker"]
    C --> G["schema-utils"]
    style C fill:#22c55e,color:#fff
    style D fill:#94a3b8,color:#fff

Loading

_{Reviews (1): Last reviewed commit: "chore(deps-dev): bump terser-webpack-plu..." | Re-trigger Greptile}