[Snyk] Upgrade: @babel/cli, @babel/core #354

AnushaSalian · 2024-01-26T19:48:27Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/cli from 7.20.7 to 7.23.4	14 versions ahead of your current version	2 months ago on 2023-11-20
@babel/core from 7.20.12 to 7.23.7	30 versions ahead of your current version	a month ago on 2023-12-29

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	572/1000 Why? Proof of Concept exploit, CVSS 9.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/cli

7.23.4 - 2023-11-20
v7.23.4 (2023-11-20)

🐛 Bug Fix
- babel-generator
  - #16104 fix: Pure comments missing parentheses (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.0 - 2023-09-25
v7.23.0 (2023-09-25)

Thanks @ lorenzoferre and @ RajShukla1 for your first PRs!

🚀 New Feature
- babel-plugin-proposal-import-wasm-source, babel-plugin-syntax-import-source, babel-plugin-transform-dynamic-import
  - #15870 Support transforming import source for wasm (@ nicolo-ribaudo)
- babel-helper-module-transforms, babel-helpers, babel-plugin-proposal-import-defer, babel-plugin-syntax-import-defer, babel-plugin-transform-modules-commonjs, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone
  - #15878 Implement import defer proposal transform support (@ nicolo-ribaudo)
- babel-generator, babel-parser, babel-types
  - #15845 Implement import defer parsing support (@ nicolo-ribaudo)
  - #15829 Add parsing support for the "source phase imports" proposal (@ nicolo-ribaudo)
- babel-generator, babel-helper-module-transforms, babel-parser, babel-plugin-transform-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-traverse, babel-types
  - #15682 Add createImportExpressions parser option (@ JLHwung)
- babel-standalone
  - #15671 Pass through nonce to the transformed script element (@ JLHwung)
- babel-helper-function-name, babel-helper-member-expression-to-functions, babel-helpers, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-syntax-optional-chaining-assign, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
  - #15751 Add support for optional chain in assignments (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #15895 Implement the "decorator metadata" proposal (@ nicolo-ribaudo)
- babel-traverse, babel-types
  - #15893 Add t.buildUndefinedNode (@ liuxingbaoyu)
- babel-preset-typescript
  - #15913 Add rewriteImportExtensions option to TS preset (@ nicolo-ribaudo)
- babel-parser
  - #15896 Allow TS tuples to have both labeled and unlabeled elements (@ yukukotani)
🐛 Bug Fix
- babel-plugin-transform-block-scoping
  - #15962 fix: transform-block-scoping captures the variables of the method in the loop (@ liuxingbaoyu)
💅 Polish
- babel-traverse
  - #15797 Expand evaluation of global built-ins in @ babel/traverse (@ lorenzoferre)
- babel-plugin-proposal-explicit-resource-management
  - #15985 Improve source maps for blocks with using declarations (@ nicolo-ribaudo)
🔬 Output optimization
- babel-core, babel-helper-module-transforms, babel-plugin-transform-async-to-generator, babel-plugin-transform-classes, babel-plugin-transform-dynamic-import, babel-plugin-transform-function-name, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd, babel-plugin-transform-parameters, babel-plugin-transform-react-constant-elements, babel-plugin-transform-react-inline-elements, babel-plugin-transform-runtime, babel-plugin-transform-typescript, babel-preset-env
  - #15984 Inline exports.XXX = update in simple variable declarations (@ nicolo-ribaudo)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Lorenzo Ferretti (@ lorenzoferre)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Raj Pawan Shukla (@ RajShukla1)
- Yuku Kotani (@ yukukotani)
- @ liuxingbaoyu
7.22.15 - 2023-09-04
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.21.5 - 2023-04-28
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.0 - 2023-02-20
7.20.7 - 2022-12-22

from @babel/cli GitHub release notes

Package name: @babel/core

7.23.7 - 2023-12-29
v7.23.7 (2023-12-29)

🐛 Bug Fix
- babel-traverse
  - #16191 fix: Crash when removing without Program (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-decorators
  - #16180 fix: Class decorator ctx.kind is wrong (@ liuxingbaoyu)
- babel-plugin-proposal-decorators
  - #16170 Fix decorator initProto usage in derived classes (@ JLHwung)
- babel-core
  - #16167 Avoid unpreventable unhandledRejection events (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-create-class-features-plugin
  - #16186 chore: Update deps (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16177 Merge decorators into class features (@ JLHwung)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.6 - 2023-12-11
v7.23.6 (2023-12-11)

Thanks @ martinez-hugo and @ odinho for your first pull requests!

👓 Spec Compliance
- babel-generator, babel-parser, babel-types
  - #16154 Remove TSPropertySignature.initializer (@ fisker)
- babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-types
  - #16139 Apply toPropertyKey on decorator context name (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16166 fix: Correctly indenting when retainLines is enabled (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-explicit-resource-management
  - #16150 using: Allow looking up Symbol.dispose on a function (@ odinho)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16161 Ensure the [[@@ toPrimitive]] call of a decorated class member key is invoked once (@ JLHwung)
  - #16148 Support named evaluation for decorated anonymous class exp (@ JLHwung)
- babel-plugin-transform-for-of, babel-preset-env
  - #16011 fix: for of with iterableIsArray and shadowing variable (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16144 Set function name for decorated private non-field elements (@ JLHwung)
- babel-plugin-transform-typescript
  - #16137 Fix references to enum values with merging (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  - #16159 Reuse computed key memoiser (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators
  - #16160 Optimize decorator helper size (@ liuxingbaoyu)
Committers: 7
- Babel Bot (@ babel-bot)
- Hugo Martinez (@ martinez-hugo)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Odin Hørthe-Omdal Urdland (@ odinho)
- @ liuxingbaoyu
- fisker Cheung (@ fisker)
7.23.5 - 2023-11-29
v7.23.5 (2023-11-29)

👓 Spec Compliance
- babel-plugin-proposal-decorators
  - #16138 Class binding is in TDZ during decorators initialization (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16132 Allow addInitializer in field decorator context (@ JLHwung)
🐛 Bug Fix
- babel-traverse, babel-types
  - #16131 Do not remove bindings when removing assignment expression path (@ nicolo-ribaudo)
- babel-plugin-transform-classes
  - #16135 Require class properties transform when compiling class with private fields (@ nicolo-ribaudo)
- babel-generator
  - #16122 fix: Missing parentheses after line break (@ liuxingbaoyu)
- babel-helpers
  - #16130 Fix helpers internal fns names conflict resolution (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties, babel-plugin-transform-typescript
  - #16123 Simplify class fields injetion after super() (@ nicolo-ribaudo)
- babel-generator, babel-plugin-transform-modules-commonjs, babel-plugin-transform-parameters, babel-plugin-transform-typescript, babel-traverse
  - #16110 fix: Unexpected duplication of comments (@ liuxingbaoyu)
- babel-eslint-plugin
  - #16023 Add @ babel/eslint-plugin/no-undef to fix no-undef with accessor props (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helpers
  - #16129 Optimize decorator helper size (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.3 - 2023-11-09
Read more
7.23.2 - 2023-10-12
v@babel/[email protected]
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04

from @babel/core GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/cli from 7.20.7 to 7.23.4. See this package in npm: https://www.npmjs.com/package/@babel/cli - @babel/core from 7.20.12 to 7.23.7. See this package in npm: https://www.npmjs.com/package/@babel/core See this project in Snyk: https://app.snyk.io/org/anushasalian/project/e53fa273-8fc4-48d3-8bdf-56886cf7f09b?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @babel/cli, @babel/core #354

[Snyk] Upgrade: @babel/cli, @babel/core #354

AnushaSalian commented Jan 26, 2024

v7.23.4 (2023-11-20)

🐛 Bug Fix

Committers: 4

v7.23.0 (2023-09-25)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 7

v7.23.7 (2023-12-29)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.23.6 (2023-12-11)

👓 Spec Compliance

🐛 Bug Fix

🔬 Output optimization

Committers: 7

v7.23.5 (2023-11-29)

👓 Spec Compliance

🐛 Bug Fix

🔬 Output optimization

Committers: 4

[Snyk] Upgrade: @babel/cli, @babel/core #354

Are you sure you want to change the base?

[Snyk] Upgrade: @babel/cli, @babel/core #354

Conversation

AnushaSalian commented Jan 26, 2024

Snyk has created this PR to upgrade multiple dependencies.

v7.23.4 (2023-11-20)

🐛 Bug Fix

Committers: 4

v7.23.0 (2023-09-25)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 7

v7.23.7 (2023-12-29)

🐛 Bug Fix

🏠 Internal

Committers: 4

v7.23.6 (2023-12-11)

👓 Spec Compliance

🐛 Bug Fix

🔬 Output optimization

Committers: 7

v7.23.5 (2023-11-29)

👓 Spec Compliance

🐛 Bug Fix

🔬 Output optimization

Committers: 4