[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime #133
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @babel/core from 7.8.3 to 7.17.0.
See this package in npm: https://www.npmjs.com/package/@babel/core
- @babel/plugin-transform-runtime from 7.11.0 to 7.17.0.
See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-runtime
- @babel/preset-env from 7.8.4 to 7.16.11.
See this package in npm: https://www.npmjs.com/package/@babel/preset-env
- @babel/runtime from 7.11.2 to 7.17.0.
See this package in npm: https://www.npmjs.com/package/@babel/runtime
See this project in Snyk:
https://app.snyk.io/org/bram00767/project/4d23c36f-b856-479c-91e2-6eda8638a73e?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
from 7.8.3 to 7.17.0
on 2022-02-02
from 7.11.0 to 7.17.0
on 2022-02-02
from 7.8.4 to 7.16.11
on 2022-01-20
from 7.11.2 to 7.17.0
on 2022-02-02
The recommended version fixes:
SNYK-JS-BROWSERSLIST-1090194
Why? Proof of Concept exploit, CVSS 5.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: @babel/core
-
7.17.0 - 2022-02-02
- #14065 Allow plugins/presets to indicate external dependencies (@ nicolo-ribaudo)
- #14174 Expose
- #13973 proposal-pipe: Add support for
- #13940 Add new method to check if node is null or not (@ danez)
- #13931 Parse destructuring private fields (@ JLHwung)
- #14004 Add new decorators transform (@ pzuraq)
- #13681 Add the
- #14125 Add transform support for the "regexp unicode sets" proposal (@ nicolo-ribaudo)
- #14086 Add parser support for the "regexp unicode sets" proposal (@ nicolo-ribaudo)
- #14087 Expose
- #14145 Reinterpret << when parsing TS type arguments (@ JLHwung)
- #14187 Normalize absolute paths on Windows (@ atti187)
- #14223 Remove Babel 6 from SECURITY.md (@ nicolo-ribaudo)
- #14201 Fuzz test location-related parser options (@ tolmasky)
- #14208 Update compat data (specifically for rhino 1.7.14) (@ phulin)
- Other
- #14190 chore: run tscheck on babel 8 breaking test (@ JLHwung)
- #14209 Switch to
- Chris Garrett (@ pzuraq)
- Daniel Tschinder (@ danez)
- Francisco Ryan Tolmasky I (@ tolmasky)
- Huáng Jùnliàng (@ JLHwung)
- J. S. Choi (@ js-choi)
- Justin Ridgewell (@ jridgewell)
- Mattias Ekstrand (@ atti187)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Patrick Hulin (@ phulin)
- @ overlookmotel
-
7.16.12 - 2022-01-22
- #14192 Avoid dynamic import when it's not needed (@ nicolo-ribaudo)
- #14194 fix: incorrect
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
-
7.16.10 - 2022-01-19
- #14165 Avoid infinite loop when highlighting an empty input (@ blankPen)
- #14164 Handle logical assignment in super property transforms (@ magic-akari)
- #14162 Fix the transform of
- #14110 Respect
- #14153 Disable "Reentrant plugin detected" error in async mode (@ nicolo-ribaudo)
- #14157 Remove workaround for
- #14130 Improve errors location tracking (@ tolmasky)
- #14169 Skip class fields transform when not necessary for private methods (@ nicolo-ribaudo)
- 1o57 (@ blankPen)
- Francisco Ryan Tolmasky I (@ tolmasky)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- magic-akari (@ magic-akari)
-
7.16.7 - 2021-12-31
- #14049 fix: check preceding line break before exclamation (@ JLHwung)
- #14081 Import the correct
- #14072 Fix derived classes in Chrome <= 36 (@ nicolo-ribaudo)
- #14047 Fix unicode handling in generated function names (@ The-x-Theorist)
- #14067 Allow
- Endrit Bajo (@ exb)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sneh Khatri (@ The-x-Theorist)
-
7.16.5 - 2021-12-13
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.5 - 2021-09-04
-
7.15.4 - 2021-09-02
-
7.15.0 - 2021-08-04
-
7.14.8 - 2021-07-20
-
7.14.6 - 2021-06-14
-
7.14.5 - 2021-06-09
-
7.14.3 - 2021-05-17
-
7.14.2 - 2021-05-12
-
7.14.0 - 2021-04-29
-
7.13.16 - 2021-04-20
-
7.13.15 - 2021-04-08
-
7.13.14 - 2021-03-29
-
7.13.13 - 2021-03-26
-
7.13.10 - 2021-03-08
-
7.13.8 - 2021-02-26
-
7.13.1 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.16 - 2021-02-11
-
7.12.13 - 2021-02-03
-
7.12.10 - 2020-12-09
-
7.12.9 - 2020-11-24
-
7.12.8 - 2020-11-23
-
7.12.7 - 2020-11-20
-
7.12.3 - 2020-10-16
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.6 - 2020-09-03
-
7.11.5 - 2020-08-31
-
7.11.4 - 2020-08-20
-
7.11.1 - 2020-08-04
-
7.11.0 - 2020-07-30
-
7.10.5 - 2020-07-14
-
7.10.4 - 2020-06-30
-
7.10.3 - 2020-06-19
-
7.10.2 - 2020-05-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.6 - 2020-04-29
-
7.9.0 - 2020-03-20
-
7.8.7 - 2020-03-05
-
7.8.6 - 2020-02-27
-
7.8.4 - 2020-01-30
-
7.8.3 - 2020-01-13
from @babel/core GitHub release notesv7.17.0 (2022-02-02)
Thanks @ atti187 and @ phulin for your first PRs!
🚀 New Feature
babel-cli,babel-corebabel-core,babel-parser,babel-traverse.indexon Position to internally track nodes location (@ tolmasky)babel-generator,babel-parser,babel-plugin-proposal-pipeline-operator,babel-plugin-syntax-pipeline-operator^^and@@topics (@ js-choi)babel-traversebabel-generator,babel-parser,babel-plugin-syntax-destructuring-private,babel-standalonebabel-helper-create-class-features-plugin,babel-helpers,babel-plugin-proposal-decorators,babel-plugin-syntax-decorators,babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime,babel-standalone,babel-typesbabel-generator,babel-parser,babel-traverse,babel-typesdecoratorsAutoAccessorsparser plugin (@ pzuraq)babel-core,babel-helper-create-regexp-features-plugin,babel-plugin-proposal-unicode-sets-regex,babel-plugin-syntax-unicode-sets-regex,babel-plugin-transform-dotall-regexbabel-parserbabel-register@ babel/register/experimental-worker(@ nicolo-ribaudo)🐛 Bug Fix
babel-parserbabel-plugin-transform-runtime📝 Documentation
🏠 Internal
babel-helper-fixtures,babel-parserbabel-compat-data🏃♀️ Performance
babel-cli,babel-core@ ampproject/remappingto merge source maps (@ jridgewell)Committers: 10
v7.16.12 (2022-01-22)
🐛 Bug Fix
babel-corebabel-parserinparsing in arrow ConciseBody (@ JLHwung)Committers: 2
v7.16.10 (2022-01-19)
Thanks @ blankPen for your first PR!
🐛 Bug Fix
babel-highlightbabel-traversesuper.foo--/super[foo]--(and prefix) (@ magic-akari)babel-corepackage.json#exportswhen resolving plugins (@ nicolo-ribaudo)🏠 Internal
babel-plugin-transform-runtime_typeofin runtime build script (@ nicolo-ribaudo)babel-parser🔬 Output optimization
babel-helper-create-class-features-plugin,babel-preset-envCommitters: 5
v7.16.7 (2021-12-31)
Thanks @ exb for your first PR!
👓 Spec Compliance
babel-parser🐛 Bug Fix
babel-plugin-transform-runtime,babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime./typeof.jshelper in@ babel/runtime(@ exb)babel-helpersbabel-helper-function-name,babel-plugin-transform-function-name💅 Polish
babel-core$schemaproperty in json config files (@ The-x-Theorist)Committers: 4
Read more
Package name: @babel/plugin-transform-runtime
-
7.17.0 - 2022-02-02
- #14065 Allow plugins/presets to indicate external dependencies (@ nicolo-ribaudo)
- #14174 Expose
- #13973 proposal-pipe: Add support for
- #13940 Add new method to check if node is null or not (@ danez)
- #13931 Parse destructuring private fields (@ JLHwung)
- #14004 Add new decorators transform (@ pzuraq)
- #13681 Add the
- #14125 Add transform support for the "regexp unicode sets" proposal (@ nicolo-ribaudo)
- #14086 Add parser support for the "regexp unicode sets" proposal (@ nicolo-ribaudo)
- #14087 Expose
- #14145 Reinterpret << when parsing TS type arguments (@ JLHwung)
- #14187 Normalize absolute paths on Windows (@ atti187)
- #14223 Remove Babel 6 from SECURITY.md (@ nicolo-ribaudo)
- #14201 Fuzz test location-related parser options (@ tolmasky)
- #14208 Update compat data (specifically for rhino 1.7.14) (@ phulin)
- Other
- #14190 chore: run tscheck on babel 8 breaking test (@ JLHwung)
- #14209 Switch to
- Chris Garrett (@ pzuraq)
- Daniel Tschinder (@ danez)
- Francisco Ryan Tolmasky I (@ tolmasky)
- Huáng Jùnliàng (@ JLHwung)
- J. S. Choi (@ js-choi)
- Justin Ridgewell (@ jridgewell)
- Mattias Ekstrand (@ atti187)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Patrick Hulin (@ phulin)
- @ overlookmotel
-
7.16.10 - 2022-01-19
-
7.16.8 - 2022-01-10
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.4 - 2021-11-16
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.0 - 2021-08-04
-
7.14.5 - 2021-06-09
-
7.14.3 - 2021-05-17
-
7.14.2 - 2021-05-12
-
7.13.15 - 2021-04-08
-
7.13.10 - 2021-03-08
-
7.13.9 - 2021-03-01
-
7.13.8 - 2021-02-26
-
7.13.7 - 2021-02-24
-
7.13.6 - 2021-02-23
-
7.13.5 - 2021-02-23
-
7.13.4 - 2021-02-23
-
7.13.2 - 2021-02-23
-
7.13.1 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.15 - 2021-02-04
-
7.12.13 - 2021-02-03
-
7.12.10 - 2020-12-09
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.5 - 2020-08-31
-
7.11.0 - 2020-07-30
from @babel/plugin-transform-runtime GitHub release notesv7.17.0 (2022-02-02)
Thanks @ atti187 and @ phulin for your first PRs!
🚀 New Feature
babel-cli,babel-corebabel-core,babel-parser,babel-traverse.indexon Position to internally track nodes location (@ tolmasky)babel-generator,babel-parser,babel-plugin-proposal-pipeline-operator,babel-plugin-syntax-pipeline-operator^^and@@topics (@ js-choi)babel-traversebabel-generator,babel-parser,babel-plugin-syntax-destructuring-private,babel-standalonebabel-helper-create-class-features-plugin,babel-helpers,babel-plugin-proposal-decorators,babel-plugin-syntax-decorators,babel-runtime-corejs2,babel-runtime-corejs3,babel-runtime,babel-standalone,babel-typesbabel-generator,babel-parser,babel-traverse,babel-typesdecoratorsAutoAccessorsparser plugin (@ pzuraq)babel-core,babel-helper-create-regexp-features-plugin,babel-plugin-proposal-unicode-sets-regex,babel-plugin-syntax-unicode-sets-regex,babel-plugin-transform-dotall-regexbabel-parserbabel-register@ babel/register/experimental-worker(@ nicolo-ribaudo)🐛 Bug Fix
babel-parserbabel-plugin-transform-runtime📝 Documentation
🏠 Internal
babel-helper-fixtures,babel-parserbabel-compat-data🏃♀️ Performance
babel-cli,babel-core@ ampproject/remappingto merge source maps (@ jridgewell)Committers: 10
Read more
Package name: @babel/preset-env
-
7.16.11 - 2022-01-20
-
7.16.10 - 2022-01-19
-
7.16.8 - 2022-01-10
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.4 - 2021-11-16
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.6 - 2021-09-09
-
7.15.4 - 2021-09-02
-
7.15.0 - 2021-08-04
-
7.14.9 - 2021-08-01
-
7.14.8 - 2021-07-20
-
7.14.7 - 2021-06-21
-
7.14.5 - 2021-06-09
-
7.14.4 - 2021-05-28
-
7.14.2 - 2021-05-12
-
7.14.1 - 2021-05-04
-
7.14.0 - 2021-04-29
-
7.13.15 - 2021-04-08
-
7.13.12 - 2021-03-22
-
7.13.10 - 2021-03-08
-
7.13.9 - 2021-03-01
-
7.13.8 - 2021-02-26
-
7.13.5 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.16 - 2021-02-11
-
7.12.13 - 2021-02-03
-
7.12.11 - 2020-12-15
-
7.12.10 - 2020-12-09
-
7.12.7 - 2020-11-20
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.5 - 2020-08-31
-
7.11.0 - 2020-07-30
-
7.10.4 - 2020-06-30
-
7.10.3 - 2020-06-19
-
7.10.2 - 2020-05-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.6 - 2020-04-29
-
7.9.5 - 2020-04-07
-
7.9.0 - 2020-03-20
-
7.8.7 - 2020-03-05
-
7.8.6 - 2020-02-27
-
7.8.4 - 2020-01-30
from @babel/preset-env GitHub release notesRead more
Read more
Package name: @babel/runtime
-
7.17.0 - 2022-02-02
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.3 - 2021-11-09
-
7.16.0 - 2021-10-29
-
7.15.4 - 2021-09-02
-
7.15.3 - 2021-08-11
-
7.14.8 - 2021-07-20
-
7.14.6 - 2021-06-14
-
7.14.5 - 2021-06-09
-
7.14.0 - 2021-04-29
-
7.13.17 - 2021-04-20
-
7.13.16 - 2021-04-20
-
7.13.10 - 2021-03-08
-
7.13.9 - 2021-03-01
-
7.13.8 - 2021-02-26
-
7.13.7 - 2021-02-24
-
7.13.6 - 2021-02-23
-
7.13.4 - 2021-02-23
-
7.13.2 - 2021-02-23
-
7.13.1 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.18 - 2021-02-18
-
7.12.17 - 2021-02-18
-
7.12.13 - 2021-02-03
-
7.12.5 - 2020-11-03
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.2 - 2020-08-05
from @babel/runtime GitHub release notesRead more
Read more
Read more
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs