opossum [Snyk] Upgrade: @babel/core, @babel/preset-env

[Snyk] Upgrade: @babel/core, @babel/preset-env

Open lholmquist opened this issue 1 year ago • 1 comments

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together. :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/corefrom 7.22.9 to 7.23.2	9 versions ahead of your current version	a month agoon 2023-10-12
@babel/preset-envfrom 7.22.9 to 7.23.2	5 versions ahead of your current version	a month agoon 2023-10-11

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	465/1000 Why? CVSS 9.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

7.23.2 - 2023-10-12
v@babel/[email protected]
7.23.0 - 2023-09-25
v7.23.0 (2023-09-25)

Thanks @ lorenzoferre and @ RajShukla1 for your first PRs!

🚀 New Feature
- babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
  - #15870 Support transforming import source for wasm (@ nicolo-ribaudo)
- babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #15878 Implement import defer proposal transform support (@ nicolo-ribaudo)
- babel-generator, babel-parser, babel-types
  - #15845 Implement import defer parsing support (@ nicolo-ribaudo)
  - #15829 Add parsing support for the "source phase imports" proposal (@ nicolo-ribaudo)
- babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
  - #15682 Add createImportExpressions parser option (@ JLHwung)
- babel-standalone
  - #15671 Pass through nonce to the transformed script element (@ JLHwung)
- babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
  - #15751 Add support for optional chain in assignments (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #15895 Implement the "decorator metadata" proposal (@ nicolo-ribaudo)
- babel-traverse, babel-types
  - #15893 Add t.buildUndefinedNode (@ liuxingbaoyu)
- babel-preset-typescript
  - #15913 Add rewriteImportExtensions option to TS preset (@ nicolo-ribaudo)
- babel-parser
  - #15896 Allow TS tuples to have both labeled and unlabeled elements (@ yukukotani)
🐛 Bug Fix
- babel-plugin-transform-block-scoping
  - #15962 fix: transform-block-scoping captures the variables of the method in the loop (@ liuxingbaoyu)
💅 Polish
- babel-traverse
  - #15797 Expand evaluation of global built-ins in @ babel/traverse (@ lorenzoferre)
- babel-plugin-proposal-explicit-resource-management
  - #15985 Improve source maps for blocks with using declarations (@ nicolo-ribaudo)
🔬 Output optimization
- babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
  - #15984 Inline exports.XXX = update in simple variable declarations (@ nicolo-ribaudo)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Lorenzo Ferretti (@ lorenzoferre)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Raj Pawan Shukla (@ RajShukla1)
- Yuku Kotani (@ yukukotani)
- @ liuxingbaoyu
7.22.20 - 2023-09-16
v7.22.20 (2023-09-16)

🏠 Internal
- babel-helper-validator-identifier
  - #15973 Remove special-casing of U+200C and U+200D (@ nicolo-ribaudo)
- babel-plugin-transform-dotall-regex
  - #15974 Update Unicode test fixtures (@ JLHwung)
↩️ Revert
- babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
  - #15979 Revert "Improve output when wrapping functions" (@ jjonescz)
Committers: 3
- Huáng Jùnliàng (@ JLHwung)
- Jan Jones (@ jjonescz)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.22.19 - 2023-09-14
v7.22.19 (2023-09-14)

Re-published 7.22.18, due to a releasing error.
7.22.18 - 2023-09-14
v7.22.18 (2023-09-14)

NOTE: This release had a publishing problem -- it has been re-published as 7.22.19.

Thanks @ dhlolo for your first PR!

🐛 Bug Fix
- babel-helper-validator-identifier
  - #15957 Update identifier name definitions to Unicode 15.1 (@ JLHwung)
- babel-helper-module-transforms, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  - #15898 Fix transform of named import with shadowed namespace import (@ dhlolo)
↩️ Revert
- #15965 Revert Node.js 20.6.0 bug workaround (@ nicolo-ribaudo)
Committers: 3
- Huáng Jùnliàng (@ JLHwung)
- Int (@ dhlolo)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.22.17 - 2023-09-08
v7.22.17 (2023-09-08)

Thanks @ jordanbtucker for your first PR!

🐛 Bug Fix
- babel-core
  - #15947 Fix compatibility with Node.js 20.6 (@ nicolo-ribaudo)
- babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
  - #15941 Fix compiling duplicate ns imports to lazy CommonJS (@ nicolo-ribaudo)
- babel-types
  - #15920 Make ClassDeclaration["id"] optional in babel-types (@ jordanbtucker)
🔬 Output optimization
- babel-helper-remap-async-to-generator, babel-helper-wrap-function, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-function-sent, babel-plugin-transform-async-generator-functions, babel-plugin-transform-async-to-generator, babel-plugin-transform-block-scoping, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-preset-env
  - #15922 Improve output when wrapping functions (e.g. async functions) (@ liuxingbaoyu)
Committers: 3
- Jordan Tucker (@ jordanbtucker)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12