Bump serialize-javascript and 10up-toolkit

[dependabot]

Removes serialize-javascript. It's no longer used after updating ancestor dependency 10up-toolkit. These dependencies need to be updated together.

Removes serialize-javascript

Updates 10up-toolkit from 6.5.1 to 7.0.0

Changelog

Sourced from 10up-toolkit's changelog.

7.0.0

Major Changes

• e40dc56: Support and default to Node 24

  Node 24 (current Active LTS) is now the version the toolkit is developed, tested and released against, and the minimum supported Node version is now 20. Node 16 and 18 are past end-of-life and have been dropped from the test matrix; CI now covers Node 20, 22 and 24.

  This is a breaking change only in the sense that engines no longer permits Node 16/18. No build, config or API behaviour has changed — see UPGRADING.md for details.

Minor Changes

• b08fb3b: Add WordPress Block Metadata Collections API support

  Integrate automatic generation of block metadata manifest files to improve block registration performance in WordPress 6.7+. When enabled, toolkit generates a PHP file (blocks-manifest.php) containing all block metadata from a single source, eliminating the need to read multiple block.json files at runtime.

  New Features:

  • Add useBlockManifest configuration option (boolean, default: false)
  • Add --block-manifest CLI flag for one-time manifest generation
  • Add BuildBlocksManifestPlugin webpack plugin that hooks into build completion
  • Automatic manifest regeneration in watch mode when blocks change

  Configuration:

  Enable via package.json:

  {
    "10up-toolkit": {
      "useBlockAssets": true,
      "useBlockManifest": true
    }
  }

  Or via CLI flag:

  10up-toolkit build --block-manifest
  10up-toolkit start --block-manifest
  10up-toolkit watch --block-manifest

  WordPress Integration:

  Register the collection and automatically register all blocks:

  $blocks_dir = get_template_directory() . '/dist/blocks';
  $manifest_path = get_template_directory() . '/dist/blocks-manifest.php';

... (truncated)

Commits

• 732fe15 chore: version packages (next)
• ffc048a chore: version packages (next) (next)
• 057cbcb fix: reconcile dependabot manifest with its lockfile and land the sharp bump
• 00b2f4e chore(deps): bump the npm_and_yarn group across 2 directories with 14 updates
• 796ab8a chore: version packages (next) (next)
• 29c7715 Merge branch 'develop' into feature/block-manifest-generation
• 1ae6f06 fix: strip react-refresh from linaria babel config on windows too
• e2014fc fix: back out sharp bump, it breaks npm ci on linux and windows
• 255421b fix: address security advisories filed since the original CVE sweep
• 6ad7211 fix: reconcile security branch with node 24 support on develop
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for 10up-toolkit since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.