Skip to content

chore(deps): bump safe-stable-stringify from 2.3.1 to 2.5.0 - #1326

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/safe-stable-stringify-2.5.0
Open

chore(deps): bump safe-stable-stringify from 2.3.1 to 2.5.0#1326
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/safe-stable-stringify-2.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bumps safe-stable-stringify from 2.3.1 to 2.5.0.

Release notes

Sourced from safe-stable-stringify's releases.

v2.5.0

  • Accept Array#sort(comparator) comparator method as deterministic option value to use that comparator for sorting object keys.
import { configure } from 'safe-stable-stringify'
const object = {
a: 1,
b: 2,
c: 3,
}
const stringify = configure({
deterministic: (a, b) => b.localeCompare(a)
})
stringify(object)
// '{"c": 3,"b":2,"a":1}'

  • Very minor performance optimization.

Thanks to @​flobernd, @​cesco69 and @​prisis to contribute to this release!

v2.4.3

  • Fixed toJSON function receiving array keys as number instead of string
  • Fixed replacer function receiving array keys as number instead of string
  • Fixed replacer function not being called for TypedArray entries
  • Improved performance to escape long strings that contain characters that need escaping

v2.4.2

  • Improved ESM TypeScript types.
  • More precise TypeScript replacer type.

v2.4.1

  • More precise TypeScript types. The return type is now either string, undefined or string | undefined depending on the input.

v2.4.0

  • Added strict option to verify that the passed in objects are fully compatible with JSON without removing information. If not, an error is thrown.
  • Fixed TypeScript definition for ESM code bases
Changelog

Sourced from safe-stable-stringify's changelog.

v2.5.0

  • Accept Array#sort(comparator) comparator method as deterministic option value to use that comparator for sorting object keys.
import { configure } from 'safe-stable-stringify'
const object = {
a: 1,
b: 2,
c: 3,
}
const stringify = configure({
deterministic: (a, b) => b.localeCompare(a)
})
stringify(object)
// '{"c":3,"b":2,"a":1}'

  • Very minor performance optimization.

Thanks to @​flobernd, @​cesco69 and @​prisis to contribute to this release!

v2.4.3

  • Fixed toJSON function receiving array keys as number instead of string
  • Fixed replacer function receiving array keys as number instead of string
  • Fixed replacer function not being called for TypedArray entries
  • Improved performance to escape long strings that contain characters that need escaping

v2.4.2

  • Improved ESM TypeScript types.
  • More precise TypeScript replacer type.

v2.4.1

  • More precise TypeScript types. The return type is now either string, undefined or string | undefined depending on the input.

v2.4.0

  • Added strict option to verify that the passed in objects are fully compatible with JSON without removing information. If not, an error is thrown.
  • Fixed TypeScript definition for ESM code bases
Commits
  • a850d28 v2.5.0
  • ff9126d doc: update CHANGELOG.md for v2.5.0
  • d2e996d refactor: reduce code size and improve performance
  • 3e16978 ci: test Node.js v22 instead of v21
  • 38afd20 doc: add comparator description
  • 9a988d0 feat: accept comparator function as deterministic option (#49)
  • 7b7ec1b Update index.js
  • 46f2449 bench: fix array creation in benchmark
  • 9244319 ci: add Node.js 20.x and 21.x to the tests
  • 752b9e9 test: fix test suite for Node.js <= 11
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 14, 2026 13:32
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 14, 2026

@claude claude Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM — routine minor version bump of a small dependency (safe-stable-stringify 2.3.1 → 2.5.0).

Extended reasoning...

Overview

This PR only touches package.json and package-lock.json, bumping safe-stable-stringify from 2.3.1 to 2.5.0 (a minor version bump within the existing ^2.3.1 semver range). No application source files are changed.

Security risks

None identified. safe-stable-stringify is a small, widely-used JSON serialization utility with no known CVEs in this range. The changelog between 2.3.1 and 2.5.0 lists only bug fixes (array/replacer key typing, TypedArray handling) and a new opt-in comparator option for the deterministic config — no breaking changes and nothing that expands attack surface.

Level of scrutiny

Low. This is a mechanical dependency-lock update generated by Dependabot with no code changes to review, following an established, low-risk pattern already used repeatedly in this repo's recent commit history.

Other factors

The lockfile diff is consistent with the version bump (updated version/integrity hash in both the flat and nested lockfile entries). No outstanding review comments exist on this PR.

@coveralls

coveralls commented Aug 14, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 32263640280

Coverage decreased (-0.005%) to 81.175%

Details

  • Coverage decreased (-0.005%) from the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 13123
Covered Lines: 11077
Line Coverage: 84.41%
Relevant Branches: 7801
Covered Branches: 5908
Branch Coverage: 75.73%
Branches in Coverage %: Yes
Coverage Strength: 598.09 hits per line

💛 - Coveralls

Bumps [safe-stable-stringify](https://github.com/BridgeAR/safe-stable-stringify) from 2.3.1 to 2.5.0.
- [Release notes](https://github.com/BridgeAR/safe-stable-stringify/releases)
- [Changelog](https://github.com/BridgeAR/safe-stable-stringify/blob/main/CHANGELOG.md)
- [Commits](BridgeAR/safe-stable-stringify@v2.3.1...v2.5.0)

---
updated-dependencies:
- dependency-name: safe-stable-stringify
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/safe-stable-stringify-2.5.0 branch from 3a706ef to 2d15d66 Compare August 19, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant