Skip to content
This repository was archived by the owner on Sep 11, 2023. It is now read-only.

[Snyk] Upgrade: @babel/parser, @babel/traverse, @babel/types #59

Open
snyk-bot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade: @babel/parser, @babel/traverse, @babel/types #59

snyk-bot wants to merge 1 commit into from

Conversation

@snyk-bot
Copy link
Contributor

@snyk-bot snyk-bot commented May 15, 2021

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
@babel/parser
from 7.12.11 to 7.13.16		 14 versions ahead of your current version 25 days ago
on 2021-04-20
@babel/traverse
from 7.12.12 to 7.13.17		 6 versions ahead of your current version 24 days ago
on 2021-04-20
@babel/types
from 7.12.12 to 7.13.17		 8 versions ahead of your current version 24 days ago
on 2021-04-20

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Command Injection
SNYK-JS-LODASH-1040724		 467/1000
Why? Proof of Concept exploit, CVSS 7.2		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 467/1000
Why? Proof of Concept exploit, CVSS 7.2		 Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @babel/parser
  • 7.13.16 - 2021-04-20

    v7.13.16 (2021-04-20)

    Thanks @ codyatwork and @ nwalters512 for your first PRs!

    👓 Spec Compliance

    • babel-parser
      • #13143 fix: raise SyntaxError for declare before getter/setter (@ fedeci)

    🐛 Bug Fix

    • babel-helpers, babel-plugin-transform-modules-commonjs, babel-plugin-transform-regenerator, babel-plugin-transform-spread, babel-preset-env, babel-runtime-corejs2, babel-runtime
    • babel-helper-compilation-targets
    • babel-generator

    📝 Documentation

    🏠 Internal

    • babel-helper-bindify-decorators, babel-helper-explode-class
      • #13160 Archive helper-explode-class and helper-bindify-decorators (@ JLHwung)
    • Other
    • babel-helper-call-delegate
    • babel-helper-hoist-variables, babel-plugin-transform-block-scoping
    • babel-cli, babel-core, babel-generator, babel-plugin-transform-function-name, babel-register, babel-types

    Committers: 7

  • 7.13.15 - 2021-04-08

    v7.13.15 (2021-04-08)

    👓 Spec Compliance

    • babel-parser
      • #13099 fix: raise SyntaxError for unparenthesized assert and assign (@ fedeci)
      • #13049 fix: the LHS in for-of loop should not start with let (@ JLHwung)

    🐛 Bug Fix

    • babel-parser
      • #13101 fix(ts): allow trailing comma after rest parameter in TSDeclareFunction (@ fedeci)
    • babel-plugin-proposal-do-expressions, babel-traverse
    • Other
      • #13106 fix: do not filter report from functions within class elements (@ JLHwung)
    • babel-compat-data, babel-preset-env

    💅 Polish

    📝 Documentation

    🏠 Internal

    • babel-plugin-transform-regenerator, babel-standalone
    • babel-helper-transform-fixture-test-runner

    🏃‍♀️ Performance

    Committers: 5

  • 7.13.13 - 2021-03-26

    v7.13.13 (2021-03-26)

    👓 Spec Compliance

    🐛 Bug Fix

    • babel-core
    • babel-core, babel-preset-env
    • babel-plugin-transform-react-constant-elements
      • #13054 fix: constant variables only enable constant react elements (@ cgood92)
    • babel-types
    • babel-node
    • babel-parser

    💅 Polish

    • babel-cli, babel-core

    🏠 Internal

    🏃‍♀️ Performance

    Committers: 8

  • 7.13.12 - 2021-03-22

    v7.13.12 (2021-03-22)

    Thanks @ hajnalbendeguz for your first PR!

    🐛 Bug Fix

    • babel-standalone
    • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-optional-chaining, babel-preset-env
      • #13009 Implement @ babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining (@ JLHwung)
    • babel-types
      • #12971 fix: do not throw when creating type annotation based on bigint (@ JLHwung)
    • babel-compat-data, babel-preset-env

    💅 Polish

    • babel-plugin-transform-react-jsx

    🏠 Internal

    Committers: 6

  • 7.13.11 - 2021-03-15

    v7.13.11 (2021-03-15)

    👓 Spec Compliance

    • babel-parser, babel-plugin-proposal-class-static-block

    🐛 Bug Fix

    • babel-compat-data
    • babel-parser
    • babel-compat-data, babel-helper-compilation-targets

    🔬 Output optimization

    • babel-helper-create-class-features-plugin, babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env

    Committers: 3

  • 7.13.10 - 2021-03-08
    Read more
  • 7.13.9 - 2021-03-01
    Read more
  • 7.13.4 - 2021-02-23
  • 7.13.0 - 2021-02-22
  • 7.12.17 - 2021-02-18
  • 7.12.16 - 2021-02-11
  • 7.12.15 - 2021-02-04
  • 7.12.14 - 2021-02-03
  • 7.12.13 - 2021-02-03
  • 7.12.11 - 2020-12-15
from @babel/parser GitHub release notes
Package name: @babel/traverse from @babel/traverse GitHub release notes
Package name: @babel/types from @babel/types GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@snyk-bot
fix: upgrade multiple dependencies with Snyk
2b889f2 
Snyk has created this PR to upgrade:
  - @babel/parser from 7.12.11 to 7.13.16.
    See this package in npm: https://www.npmjs.com/package/@babel/parser
  - @babel/traverse from 7.12.12 to 7.13.17.
    See this package in npm: https://www.npmjs.com/package/@babel/traverse
  - @babel/types from 7.12.12 to 7.13.17.
    See this package in npm: https://www.npmjs.com/package/@babel/types

See this project in Snyk:
https://app.snyk.io/org/snyk/project/4d567ff4-11c8-43ef-aaed-37085d12ee89?utm_source=github&utm_medium=upgrade-pr
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

1 more reviewer

@thisislawatts thisislawatts thisislawatts approved these changes

Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@snyk-bot @thisislawatts