[Snyk] Upgrade: @babel/core, @babel/preset-env #5

Laurry-gee · 2023-09-02T19:20:48Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.16.12 to 7.22.10	43 versions ahead of your current version	a month ago on 2023-08-07
@babel/preset-env from 7.16.11 to 7.22.10	28 versions ahead of your current version	a month ago on 2023-08-07

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

7.22.10 - 2023-08-07
v7.22.10 (2023-08-07)

Thanks @ DimitriPapadopoulos, @ FabianWarnecke, @ JoshuaKGoldberg, and @ YYvanYang for your first pull requests!

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #15799 [ts] Strip type-only namespaces (@ nicolo-ribaudo)
  - #15798 [ts] Fix compiling extended exported nested namespace (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
  - #15701 Memoize class binding when compiling private methods and static elements (@ JLHwung)
💅 Polish
- babel-cli
  - #15824 Add meta object to @ babel/eslint-plugin (@ JLHwung)
- babel-traverse, babel-types
  - #15661 Improve the type definition of path.isX (@ liuxingbaoyu)
- babel-generator, babel-types
  - #15776 improve SourceLocation typing (@ JLHwung)
🏠 Internal
- Other
  - #15818 build: generate flow typings in prepublish job (@ JLHwung)
  - #15777 chore: bump dev dependencies and remove .eslintignore (@ JLHwung)
- babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  - #15794 Enable @ typescript-eslint/no-redundant-type-constituents rule (@ JLHwung)
- babel-helper-compilation-targets
  - #15811 Remove @ babel/core peerDep from helper-compilation-targets (@ nicolo-ribaudo)
- babel-parser
  - #15793 Use const enum in babel-parser (@ JLHwung)
- babel-plugin-transform-runtime, babel-traverse, babel-types
  - #15716 chore: Use typescript-eslint@v6 with reworked configs (@ JoshuaKGoldberg)
🔬 Output optimization
- babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator
  - #15746 Reduce transform-block-scoping loops output size (@ liuxingbaoyu)
Committers: 9
- Babel Bot (@ babel-bot)
- Dimitri Papadopoulos Orfanos (@ DimitriPapadopoulos)
- Huáng Jùnliàng (@ JLHwung)
- Josh Goldberg ✨ (@ JoshuaKGoldberg)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tianlan Zhou (@ SuperSodaSea)
- @ FabianWarnecke
- @ YYvanYang
- @ liuxingbaoyu
7.22.9 - 2023-07-12
v7.22.9 (2023-07-12)

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #15774 fix: Infinity in enums (@ liuxingbaoyu)
- babel-helper-module-transforms, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-helper-wrap-function
  - #15771 Simplify helper dependencies (@ JLHwung)
💅 Polish
- babel-generator
  - #15757 recordAndTupleSyntaxType defaults to "hash" (@ coderaiser)
🏠 Internal
- #15748 Migrate to eslint.config.js (@ JLHwung)
- #15758 Use Prettier 3 stable (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
- coderaiser (@ coderaiser)
7.22.8 - 2023-07-06
v7.22.8 (2023-07-06)

This release reverts a commit that caused all new angular installations to fail: angular/angular-cli#25496

↩️ Revert
- babel-core, babel-traverse
  - #15754 Revert "Use NodePath#hub as part of the paths cache key" (@ nicolo-ribaudo)
Committers: 1
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.22.7 - 2023-07-06
v7.22.7 (2023-07-06)

🐛 Bug Fix
- babel-generator
  - #15719 fix: Avoid internally generating negative source maps columns (@ liuxingbaoyu)
- babel-core, babel-traverse
  - #15725 Use NodePath#hub as part of the paths cache key (@ nicolo-ribaudo)
- Other
  - #15747 fix: export meta from eslint-parser/experimental-worker (@ JLHwung)
🏠 Internal
- babel-core, babel-traverse
  - #15702 Refactor visitors merging (@ nullableVoidPtr)
Committers: 4
- Avery (@ nullableVoidPtr)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.22.6 - 2023-07-04
v7.22.6 (2023-07-04)

🐛 Bug Fix
- babel-compat-data, babel-helper-compilation-targets, babel-preset-env
  - #15727 Add opera mobile compat data (@ JLHwung)
- babel-plugin-transform-optional-chaining
  - #15739 Fix transform of delete a?.b in function params (@ nicolo-ribaudo)
- babel-helper-split-export-declaration, babel-plugin-transform-modules-commonjs
  - #15736 fix: Default export for duplicate names (@ liuxingbaoyu)
- babel-compat-data, babel-preset-env
  - #15726 update compat-data sources (@ JLHwung)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3, babel-runtime
  - #15705 Fix handling of sync error in @@ asyncDispose (@ nicolo-ribaudo)
- babel-standalone
  - #15707 fix: Support transforming Explicit Resource Management in stage-2 (@ liuxingbaoyu)
- babel-core
  - #15626 fix: Works correctly with --frozen-intrinsics (@ liuxingbaoyu)
🏠 Internal
- babel-helper-create-class-features-plugin, babel-plugin-transform-classes
  - #15700 Minor class transform cleanups (@ JLHwung)
🔬 Output optimization
- babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-class-properties, babel-plugin-transform-optional-chaining, babel-plugin-transform-typescript
  - #15740 Compress output for optional chain with multiple ?. (@ nicolo-ribaudo)
- babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-traverse
  - #15741 Inject tmp vars in the params list of IIFEs when possible (@ nicolo-ribaudo)
Committers: 5
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Joe Maffei (@ joemaffei)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.22.5 - 2023-06-08
v7.22.5 (2023-06-08)

🐛 Bug Fix
- babel-preset-env, babel-standalone
  - #15675 Fix using syntax-unicode-sets-regex in standalone (@ nicolo-ribaudo)
💅 Polish
- babel-core
  - #15683 Suggest -transform- when resolving missing plugins (@ nicolo-ribaudo)
Committers: 4
- Avery (@ nullableVoidPtr)
- Babel Bot (@ babel-bot)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22

from @babel/core GitHub release notes

Package name: @babel/preset-env

7.22.10 - 2023-08-07
v7.22.10 (2023-08-07)

Thanks @ DimitriPapadopoulos, @ FabianWarnecke, @ JoshuaKGoldberg, and @ YYvanYang for your first pull requests!

🐛 Bug Fix
- babel-plugin-transform-typescript
  - #15799 [ts] Strip type-only namespaces (@ nicolo-ribaudo)
  - #15798 [ts] Fix compiling extended exported nested namespace (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-private-methods, babel-preset-env
  - #15701 Memoize class binding when compiling private methods and static elements (@ JLHwung)
💅 Polish
- babel-cli
  - #15824 Add meta object to @ babel/eslint-plugin (@ JLHwung)
- babel-traverse, babel-types
  - #15661 Improve the type definition of path.isX (@ liuxingbaoyu)
- babel-generator, babel-types
  - #15776 improve SourceLocation typing (@ JLHwung)
🏠 Internal
- Other
  - #15818 build: generate flow typings in prepublish job (@ JLHwung)
  - #15777 chore: bump dev dependencies and remove .eslintignore (@ JLHwung)
- babel-cli, babel-core, babel-generator, babel-helper-builder-react-jsx, babel-preset-env, babel-standalone
  - #15794 Enable @ typescript-eslint/no-redundant-type-constituents rule (@ JLHwung)
- babel-helper-compilation-targets
  - #15811 Remove @ babel/core peerDep from helper-compilation-targets (@ nicolo-ribaudo)
- babel-parser
  - #15793 Use const enum in babel-parser (@ JLHwung)
- babel-plugin-transform-runtime, babel-traverse, babel-types
  - #15716 chore: Use typescript-eslint@v6 with reworked configs (@ JoshuaKGoldberg)
🔬 Output optimization
- babel-plugin-transform-block-scoping, babel-plugin-transform-parameters, babel-plugin-transform-regenerator
  - #15746 Reduce transform-block-scoping loops output size (@ liuxingbaoyu)
Committers: 9
- Babel Bot (@ babel-bot)
- Dimitri Papadopoulos Orfanos (@ DimitriPapadopoulos)
- Huáng Jùnliàng (@ JLHwung)
- Josh Goldberg ✨ (@ JoshuaKGoldberg)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Tianlan Zhou (@ SuperSodaSea)
- @ FabianWarnecke
- @ YYvanYang
- @ liuxingbaoyu
7.22.9 - 2023-07-12
Read more
7.22.7 - 2023-07-06
Read more
7.22.6 - 2023-07-04
Read more
7.22.5 - 2023-06-08
Read more
7.22.4 - 2023-05-29
Read more
7.22.2 - 2023-05-26
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.20.2 - 2022-11-04
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.16.11 - 2022-01-20

from @babel/preset-env GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/core from 7.16.12 to 7.22.10. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/preset-env from 7.16.11 to 7.22.10. See this package in npm: https://www.npmjs.com/package/@babel/preset-env See this project in Snyk: https://app.snyk.io/org/laurry-gee/project/307db23d-6dfc-4f9b-a192-dfaf5196f931?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @babel/core, @babel/preset-env #5

[Snyk] Upgrade: @babel/core, @babel/preset-env #5

Laurry-gee commented Sep 2, 2023

v7.22.10 (2023-08-07)

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

v7.22.9 (2023-07-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.22.8 (2023-07-06)

↩️ Revert

Committers: 1

v7.22.7 (2023-07-06)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.22.6 (2023-07-04)

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 5

v7.22.5 (2023-06-08)

🐛 Bug Fix

💅 Polish

Committers: 4

v7.22.10 (2023-08-07)

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

[Snyk] Upgrade: @babel/core, @babel/preset-env #5

Are you sure you want to change the base?

[Snyk] Upgrade: @babel/core, @babel/preset-env #5

Conversation

Laurry-gee commented Sep 2, 2023

Snyk has created this PR to upgrade multiple dependencies.

v7.22.10 (2023-08-07)

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9

v7.22.9 (2023-07-12)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.22.8 (2023-07-06)

↩️ Revert

Committers: 1

v7.22.7 (2023-07-06)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.22.6 (2023-07-04)

🐛 Bug Fix

🏠 Internal

🔬 Output optimization

Committers: 5

v7.22.5 (2023-06-08)

🐛 Bug Fix

💅 Polish

Committers: 4

v7.22.10 (2023-08-07)

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 9