From 7105478b995500cfed8b8a15e1ce3ab61fd999df Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 23 Sep 2026 22:33:03 +0000
Subject: [PATCH] fix: update dependency serialize-javascript to v7 [security]

---
 packages/react/package.json | 2 +-
 yarn.lock                   | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/packages/react/package.json b/packages/react/package.json
index 3f0dd0698..a67b3f9f2 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -38,7 +38,7 @@
     "pathifist": "^1.0.0",
     "prop-types": "^15.7.2",
     "react-refresh": "^0.11.0",
-    "serialize-javascript": "^6.0.0"
+    "serialize-javascript": "^7.0.0"
   },
   "peerDependencies": {
     "react": "^16.8.0 || ^17.0.0",
diff --git a/yarn.lock b/yarn.lock
index 0370d3f97..6696c4c70 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11703,6 +11703,11 @@ serialize-javascript@^6.0.0:
   dependencies:
     randombytes "^2.1.0"
 
+serialize-javascript@^7.0.0:
+  version "7.1.2"
+  resolved "https://registry.yarnpkg.com/serialize-javascript/-/serialize-javascript-7.1.2.tgz#0161010a0815dd7b7e011cbc5a3644850b8c2289"
+  integrity sha512-GL2BWwVa6JydKO6l/ljVgjAZF4QJ3S7dWDWi53s5GZT8PJzD2fNxi67HANQGKAqPrwEpL5ba7gUBGi0Ls/sEoQ==
+
 serve-static@1.14.2:
   version "1.14.2"
   resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.14.2.tgz#722d6294b1d62626d41b43a013ece4598d292bfa"