fix(deps): update all non-major dependencies

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/parser (source)	^7.23.3 -> ^7.24.5
@babel/types (source)	^7.23.3 -> ^7.24.5
@iconify-json/carbon	^1.1.21 -> ^1.1.33
@rollup/pluginutils (source)	^5.0.5 -> ^5.1.0
@sxzz/eslint-config	^3.7.4 -> ^3.11.0
@sxzz/prettier-config	^2.0.0 -> ^2.0.2
@types/node (source)	^20.9.2 -> ^20.12.12
@types/react (source)	^18.2.37 -> ^18.3.2
@unocss/reset	^0.57.6 -> ^0.60.2
@vitejs/plugin-vue (source)	^5.0.2 -> ^5.0.4
@vue/runtime-core (source)	^3.3.8 -> ^3.4.27
@vueuse/core (source)	^10.6.1 -> ^10.9.0
bumpp	^9.2.0 -> ^9.4.1
eslint (source)	^8.54.0 -> ^8.57.0
magic-string	^0.30.5 -> ^0.30.10
pnpm (source)	8.10.5 -> 8.15.8
prettier (source)	^3.1.0 -> ^3.2.5
tsup (source)	^8.0.1 -> ^8.0.2
tsx	^4.1.4 -> ^4.10.4
typescript (source)	^5.2.2 -> ^5.4.5
unocss	^0.57.6 -> ^0.60.2
unplugin	^1.5.1 -> ^1.10.1
unplugin-auto-import	^0.16.7 -> ^0.17.6
unplugin-vue-components	^0.25.2 -> ^0.27.0
vite (source)	^5.0.4 -> ^5.2.11
vitest (source)	^1.0.4 -> ^1.6.0
vue (source)	^3.3.8 -> ^3.4.27
vue-tsc (source)	^2.0.3 -> ^2.0.19

---

Release Notes

babel/babel (@​babel/parser)

v7.24.5

Compare Source

v7.24.5 (2024-04-29)

Thanks @​romgrk and @​sossost for your first PRs!

:bug: Bug Fix

• babel-plugin-transform-classes, babel-traverse
  • #​16377 fix: TypeScript annotation affects output (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #​16440 Fix suppressed error order (@​sossost)
  • #​16408 Await nullish async disposable (@​JLHwung)

:nail_care: Polish

• babel-parser
  • #​16407 Recover from exported using declaration (@​JLHwung)

:house: Internal

• Other
  • #​16414 Relax ESLint peerDependency constraint to allow v9 (@​liuxingbaoyu)
• babel-parser
  • #​16425 Improve @babel/parser AST types (@​nicolo-ribaudo)
  • #​16417 Always pass type argument to .startNode (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  • #​16439 Make NodePath<T | U> distributive (@​nicolo-ribaudo)
• babel-plugin-proposal-partial-application, babel-types
  • #​16421 Remove JSXNamespacedName from valid CallExpression args (@​nicolo-ribaudo)
• babel-plugin-transform-class-properties, babel-preset-env
  • #​16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@​nicolo-ribaudo)

:running_woman: Performance

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​16357 Performance: improve objectWithoutPropertiesLoose on V8 (@​romgrk)

Committers: 6

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Rom Grk (@​romgrk)
• @​liuxingbaoyu
• ynnsuis (@​sossost)

v7.24.4

Compare Source

v7.24.4 (2024-04-03)

Thanks @​Dunqing, @​luiscubal, and @​samualtnorman for your first PRs!

:eyeglasses: Spec Compliance

• babel-parser
  • #​16403 Forbid initializerless using (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • #​16388 Ensure decorators are callable (@​JLHwung)

:bug: Bug Fix

• babel-generator
  • #​16402 fix: Correctly prints { [key in Bar]? } (@​liuxingbaoyu)
  • #​16394 fix: Correctly generate TSMappedType (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
  • #​16390 Create bugfix plugin for classes in computed keys in Firefox (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16387 fix: support mutated outer decorated class binding (@​JLHwung)
  • #​16385 fix: Decorators when super() exists and protoInit is not needed (@​liuxingbaoyu)
• babel-plugin-transform-block-scoping
  • #​16384 fix: Transform scoping for for X in loop (@​liuxingbaoyu)
  • #​16368 fix: Capture let when the for body is not a block (@​liuxingbaoyu)
• babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
  • #​16363 Fix incorrect function hoisting in some case statements (@​luiscubal)

Committers: 7

• Babel Bot (@​babel-bot)
• Dunqing (@​Dunqing)
• Huáng Jùnliàng (@​JLHwung)
• Luís Reis (@​luiscubal)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Samual Norman (@​samualtnorman)
• @​liuxingbaoyu

v7.24.1

Compare Source

v7.24.1 (2024-03-19)

:bug: Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16350 Fix decorated class computed keys ordering (@​JLHwung)
  • #​16344 Fix decorated class static field private access (@​JLHwung)
• babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  • #​16329 Respect moduleName for @babel/runtime/regenerator imports (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  • #​16331 Fix decorator memoiser binding kind (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  • #​16325 Fix decorator evaluation private environment (@​JLHwung)

:memo: Documentation

• #​16319 Update SECURITY.md (@​nicolo-ribaudo)

:house: Internal

• babel-code-frame, babel-highlight
  • #​16359 Replace chalk with picocolors (@​nicolo-ribaudo)
• babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  • #​16352 Run Babel transform tests on old node if possible (@​JLHwung)
• babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  • #​16349 Support merging imports in import injector (@​nicolo-ribaudo)
• Other
  • #​16332 Test Babel 7 plugins compatibility with Babel 8 core (@​nicolo-ribaudo)

:microscope: Output optimization

• babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  • #​16345 Optimize the use of assertThisInitialized after super() (@​liuxingbaoyu)
• babel-plugin-transform-class-properties, babel-plugin-transform-classes
  • #​16343 Use simpler assertThisInitialized more often (@​liuxingbaoyu)
• babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  • #​16342 Consider well-known and registered symbols as literals (@​nicolo-ribaudo)
• babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  • #​16326 Reduce the use of class names (@​liuxingbaoyu)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

v7.24.0

Compare Source

v7.24.0 (2024-02-28)

Thanks @​ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

:rocket: New Feature

• babel-standalone
  • #​11696 Export babel tooling packages in @babel/standalone (@​ajihyf)
• babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  • #​16267 Implement noUninitializedPrivateFieldAccess assumption (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16242 Support decorator 2023-11 normative updates (@​JLHwung)
• babel-preset-flow
  • #​16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@​nicolo-ribaudo)
  • #​16284 Add experimental_useHermesParser option in preset-flow (@​liuxingbaoyu)
• babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  • #​16172 Add transform support for JSON modules imports (@​nicolo-ribaudo)
• babel-plugin-transform-runtime
  • #​16241 Add back moduleName option to @babel/plugin-transform-runtime (@​nicolo-ribaudo)
• babel-parser, babel-types
  • #​16277 Allow import attributes for TSImportType (@​sosukesuzuki)

:bug: Bug Fix

• babel-plugin-proposal-do-expressions, babel-traverse
  • #​16305 fix: avoid popContext on unvisited node paths (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  • #​16312 Fix class private properties when privateFieldsAsSymbols (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  • #​16307 Fix the support of arguments in private get/set method (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  • #​16287 Reduce decorator static property size (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16281 Fix evaluation order of decorators with cached receiver (@​nicolo-ribaudo)
  • #​16279 Fix decorator this memoization (@​JLHwung)
  • #​16266 Preserve static on decorated private accessor (@​nicolo-ribaudo)
  • #​16258 fix: handle decorated async private method and generator (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  • #​16275 Fix class private properties when privateFieldsAsProperties (@​liuxingbaoyu)
• babel-helpers
  • #​16268 Do not consider arguments in a helper as a global reference (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-proposal-decorators
  • #​16270 Handle symbol key class elements decoration (@​JLHwung)
  • #​16265 Do not define access.get for public setter decorators (@​nicolo-ribaudo)

:nail_care: Polish

• babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  • #​12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@​nicolo-ribaudo)

:house: Internal

• babel-helper-transform-fixture-test-runner
  • #​16278 Continue writing output.js when exec.js throws (@​liuxingbaoyu)

:microscope: Output optimization

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16306 Avoid intermediate functions for private accessors with decs (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  • #​16294 More aggressively inline decorators in the static block (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-private-methods
  • #​16283 Do not use classPrivateMethodGet (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  • #​16287 Reduce decorator static property size (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  • #​16280 Reduce element decorator temp variables (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16261 Do not use descriptors for private class elements (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-proposal-decorators
  • #​16263 Reduce helper size for decorator 2023-11 (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• SUZUKI Sosuke (@​sosukesuzuki)
• Yarden Shoham (@​yardenshoham)
• @​liuxingbaoyu
• flyafly (@​ajihyf)

v7.23.9

Compare Source

v7.23.9 (2024-01-25)

:bug: Bug Fix

• babel-helper-transform-fixture-test-runner, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-preset-env
  • #​16225 fix: systemjs re-traverses helpers (@​liuxingbaoyu)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16226 Improve decorated private method check (@​JLHwung)
• babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-runtime, babel-preset-env
  • #​16224 Properly sort core-js@3 imports (@​nicolo-ribaudo)
• babel-traverse
  • #​15383 fix: Don't throw in getTypeAnnotation when using TS+inference (@​liuxingbaoyu)
• Other
  • #​16210 [eslint] Fix no-use-before-define for class ref in fields (@​nicolo-ribaudo)

:house: Internal

• babel-core, babel-parser, babel-template
  • #​16222 Migrate eslint-parser to cts (@​liuxingbaoyu)
• babel-types
  • #​16213 Remove @babel/types props that are not produced by the parser (@​liuxingbaoyu)

:running_woman: Performance

• babel-parser
  • #​16072 perf: Improve parser performance for typescript (@​liuxingbaoyu)

:microscope: Output optimization

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-new-target, babel-plugin-transform-parameters, babel-plugin-transform-private-methods, babel-preset-env
  • #​16218 Improve temporary variables for decorators (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​15959 Improve output of using (@​liuxingbaoyu)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

v7.23.6

Compare Source

v7.23.6 (2023-12-11)

Thanks @​martinez-hugo and @​odinho for your first pull requests!

:eyeglasses: Spec Compliance

• babel-generator, babel-parser, babel-types
  • #​16154 Remove TSPropertySignature.initializer (@​fisker)
• babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-types
  • #​16139 Apply toPropertyKey on decorator context name (@​JLHwung)

:bug: Bug Fix

• babel-generator
  • #​16166 fix: Correctly indenting when retainLines is enabled (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-explicit-resource-management
  • #​16150 using: Allow looking up Symbol.dispose on a function (@​odinho)
• babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  • #​16161 Ensure the [[@​@​toPrimitive]] call of a decorated class member key is invoked once (@​JLHwung)
  • #​16148 Support named evaluation for decorated anonymous class exp (@​JLHwung)
• babel-plugin-transform-for-of, babel-preset-env
  • #​16011 fix: for of with iterableIsArray and shadowing variable (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16144 Set function name for decorated private non-field elements (@​JLHwung)
• babel-plugin-transform-typescript
  • #​16137 Fix references to enum values with merging (@​nicolo-ribaudo)

:microscope: Output optimization

• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • #​16159 Reuse computed key memoiser (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators
  • #​16160 Optimize decorator helper size (@​liuxingbaoyu)

Committers: 7

• Babel Bot (@​babel-bot)
• Hugo Martinez (@​martinez-hugo)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Odin Hørthe-Omdal Urdland (@​odinho)
• @​liuxingbaoyu
• fisker Cheung (@​fisker)

v7.23.5

Compare Source

v7.23.5 (2023-11-29)

:eyeglasses: Spec Compliance

• babel-plugin-proposal-decorators
  • #​16138 Class binding is in TDZ during decorators initialization (@​nicolo-ribaudo)
• babel-helpers, babel-plugin-proposal-decorators
  • #​16132 Allow addInitializer in field decorator context (@​JLHwung)

:bug: Bug Fix

• babel-traverse, babel-types
  • #​16131 Do not remove bindings when removing assignment expression path (@​nicolo-ribaudo)
• babel-plugin-transform-classes
  • #​16135 Require class properties transform when compiling class with private fields (@​nicolo-ribaudo)
• babel-generator
  • #​16122 fix: Missing parentheses after line break (@​liuxingbaoyu)
• babel-helpers
  • #​16130 Fix helpers internal fns names conflict resolution (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties, babel-plugin-transform-typescript
  • #​16123 Simplify class fields injetion after super() (@​nicolo-ribaudo)
• babel-generator, babel-plugin-transform-modules-commonjs, babel-plugin-transform-parameters, babel-plugin-transform-typescript, babel-traverse
  • #​16110 fix: Unexpected duplication of comments (@​liuxingbaoyu)
• babel-eslint-plugin
  • #​16023 Add @babel/eslint-plugin/no-undef to fix no-undef with accessor props (@​nicolo-ribaudo)

:microscope: Output optimization

• babel-helpers
  • #​16129 Optimize decorator helper size (@​liuxingbaoyu)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

v7.23.4

Compare Source

v7.23.4 (2023-11-20)

:bug: Bug Fix

• babel-generator
  • #​16104 fix: Pure comments missing parentheses (@​liuxingbaoyu)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

babel/babel (@​babel/types)

v7.24.5

Compare Source

:bug: Bug Fix

• babel-plugin-transform-classes, babel-traverse
  • #​16377 fix: TypeScript annotation affects output (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #​16440 Fix suppressed error order (@​sossost)
  • #​16408 Await nullish async disposable (@​JLHwung)

:nail_care: Polish

• babel-parser
  • #​16407 Recover from exported using declaration (@​JLHwung)

:house: Internal

• Other
  • #​16414 Relax ESLint peerDependency constraint to allow v9 (@​liuxingbaoyu)
• babel-parser
  • #​16425 Improve @babel/parser AST types (@​nicolo-ribaudo)
  • #​16417 Always pass type argument to .startNode (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  • #​16439 Make NodePath<T | U> distributive (@​nicolo-ribaudo)
• babel-plugin-proposal-partial-application, babel-types
  • #​16421 Remove JSXNamespacedName from valid CallExpression args (@​nicolo-ribaudo)
• babel-plugin-transform-class-properties, babel-preset-env
  • #​16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@​nicolo-ribaudo)

:running_woman: Performance

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​16357 Performance: improve objectWithoutPropertiesLoose on V8 (@​romgrk)

v7.24.0

Compare Source

:rocket: New Feature

• babel-standalone
  • #​11696 Export babel tooling packages in @babel/standalone (@​ajihyf)
• babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  • #​16267 Implement noUninitializedPrivateFieldAccess assumption (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16242 Support decorator 2023-11 normative updates (@​JLHwung)
• babel-preset-flow

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[stackblitz[bot]]

Run & review this pull request in StackBlitz Codeflow.

[socket-security[bot]]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
Install scripts	npm/[email protected]	Install script: postinstall Source: node -e "try{require('./scripts/postinstall.js')}catch(e){}"	playground/package.json pnpm-lock.yaml

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/[email protected]

[socket-security[bot]]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@iconify-json/[email protected]	None	+1	1.07 MB	cyberalien
npm/@rollup/[email protected]	None	+3	223 kB	shellscape
npm/@sxzz/[email protected]	environment Transitive: eval, filesystem, shell, unsafe	+199	34 MB	sxzz
npm/@sxzz/[email protected]	None	0	3.18 kB	sxzz
npm/@types/[email protected]	None	+1	2.13 MB	types
npm/@types/[email protected]	None	+2	1.66 MB	types
npm/@unocss/[email protected]	None	0	43.9 kB	unocss-bot
npm/@vitejs/[email protected]	environment	0	185 kB	vitebot
npm/@vue/[email protected]	environment	+2	1.08 MB	yyx990803
npm/@vueuse/[email protected]	environment, network Transitive: filesystem	+4	1.95 MB	antfu
npm/[email protected]	environment, filesystem, unsafe Transitive: network, shell	+77	7.79 MB	antfu
npm/[email protected]	environment, filesystem Transitive: eval, shell, unsafe	+96	10.7 MB	eslintbot
npm/[email protected]	None	+1	498 kB	antfu
npm/[email protected]	environment, filesystem, unsafe	0	8.39 MB	prettier-bot
npm/[email protected]	environment, eval, filesystem Transitive: network, shell, unsafe	+83	7 MB	egoist
npm/[email protected]	Transitive: environment, filesystem, network, shell, unsafe	+3	648 kB	hirokiosame
npm/[email protected]	None	0	32.4 MB	typescript-bot
npm/[email protected]	Transitive: environment, filesystem, network, shell, unsafe	+107	11.8 MB	unocss-bot
npm/[email protected]	filesystem Transitive: environment	+15	1.92 MB	antfu
npm/[email protected]	environment, filesystem	+33	2.47 MB	antfu
npm/[email protected]	filesystem Transitive: environment	+17	1.2 MB	antfu
npm/[email protected]	environment, eval, filesystem, network, shell, unsafe	+7	6.38 MB	vitebot
npm/[email protected]	environment, eval Transitive: filesystem, shell, unsafe	+60	5.3 MB	vitestbot
npm/[email protected]	Transitive: environment, eval	+21	3.41 MB	johnsoncodehk
npm/[email protected]	environment, eval Transitive: filesystem, unsafe	+13	8.93 MB	yyx990803

🚮 Removed packages: npm/@babel/[email protected], npm/@babel/[email protected], npm/@iconify-json/[email protected], npm/@rollup/[email protected], npm/@sxzz/[email protected], npm/@sxzz/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@unocss/[email protected], npm/@vitejs/[email protected], npm/@vue/[email protected], npm/@vueuse/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎