parse-server icon indicating copy to clipboard operation
parse-server copied to clipboard

refactor: Upgrade @babel/eslint-parser from 7.21.8 to 7.24.1

Open parseplatformorg opened this issue 1 year ago • 2 comments
trafficstars

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @babel/eslint-parser from 7.21.8 to 7.24.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 11 versions ahead of your current version.
  • The recommended version was released a month ago, on 2024-03-19.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @babel/eslint-parser
  • 7.24.1 - 2024-03-19

    v7.24.1 (2024-03-19)

    🐛 Bug Fix

    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
    • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties

    📝 Documentation

    🏠 Internal

    • babel-code-frame, babel-highlight
    • babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
    • babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
    • Other

    🔬 Output optimization

    • babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
    • babel-plugin-transform-class-properties, babel-plugin-transform-classes
    • babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
    • babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env

    Committers: 4

  • 7.23.10 - 2024-01-31

    v7.23.10 (2024-01-31)

    🐛 Bug Fix

    • Other
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators

    Committers: 3

  • 7.23.9 - 2024-01-25

    v7.23.9 (2024-01-25)

    🐛 Bug Fix

    • babel-helper-transform-fixture-test-runner, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-preset-env
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-preset-env
    • babel-traverse
    • Other

    🏠 Internal

    🏃‍♀️ Performance

    🔬 Output optimization

    • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-parameters, babel-plugin-transform-private-methods, babel-preset-env
    • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

    Committers: 4

  • 7.23.3 - 2023-11-09
  • 7.22.15 - 2023-09-04
  • 7.22.11 - 2023-08-24
  • 7.22.10 - 2023-08-07
  • 7.22.9 - 2023-07-12
  • 7.22.7 - 2023-07-06
  • 7.22.6 - 2023-07-04
  • 7.22.5 - 2023-06-08
  • 7.21.8 - 2023-05-02
from @babel/eslint-parser GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

parseplatformorg avatar Apr 18 '24 16:04 parseplatformorg

I will reformat the title to use the proper commit message syntax.

Thanks for opening this pull request!

  • ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.

@mtrezza on alpha we are already on "@babel/eslint-parser": "7.25.8" , i'll close this

Moumouls avatar Oct 23 '24 17:10 Moumouls