[Snyk] Upgrade: , #166

tiff-es · 2024-06-10T20:04:51Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@babel/core
from 7.4.5 to 7.24.5 | 124 versions ahead of your current version | a month ago
on 2024-04-29
@babel/preset-env
from 7.4.5 to 7.24.5 | 107 versions ahead of your current version | a month ago
on 2024-04-29

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372	Proof of Concept
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	372	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	372	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	372	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	372	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	372	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-6139239	372	Proof of Concept
Code Injection SNYK-JS-LODASH-1040724	372	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-450202	372	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372	Proof of Concept
Prototype Pollution SNYK-JS-JSON5-3182856	372	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	372	Proof of Concept

Release notes

Package name: @babel/core

7.24.5 - 2024-04-29
v7.24.5 (2024-04-29)

Thanks @ romgrk and @ sossost for your first PRs!

🐛 Bug Fix
- babel-plugin-transform-classes, babel-traverse
  - #16377 fix: TypeScript annotation affects output (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16440 Fix suppressed error order (@ sossost)
  - #16408 Await nullish async disposable (@ JLHwung)
💅 Polish
- babel-parser
  - #16407 Recover from exported using declaration (@ JLHwung)
🏠 Internal
- Other
  - #16414 Relax ESLint peerDependency constraint to allow v9 (@ liuxingbaoyu)
- babel-parser
  - #16425 Improve @ babel/parser AST types (@ nicolo-ribaudo)
  - #16417 Always pass type argument to .startNode (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  - #16439 Make NodePath<T | U> distributive (@ nicolo-ribaudo)
- babel-plugin-proposal-partial-application, babel-types
  - #16421 Remove JSXNamespacedName from valid CallExpression args (@ nicolo-ribaudo)
- babel-plugin-transform-class-properties, babel-preset-env
  - #16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-helpers, babel-preset-env, babel-runtime-corejs3
  - #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Rom Grk (@ romgrk)
- @ liuxingbaoyu
- ynnsuis (@ sossost)
7.24.4 - 2024-04-03
v7.24.4 (2024-04-03)

Thanks @ Dunqing, @ luiscubal, and @ samualtnorman for your first PRs!

👓 Spec Compliance
- babel-parser
  - #16403 Forbid initializerless using (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16388 Ensure decorators are callable (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16402 fix: Correctly prints { [key in Bar]? } (@ liuxingbaoyu)
  - #16394 fix: Correctly generate TSMappedType (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
  - #16390 Create bugfix plugin for classes in computed keys in Firefox (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16387 fix: support mutated outer decorated class binding (@ JLHwung)
  - #16385 fix: Decorators when super() exists and protoInit is not needed (@ liuxingbaoyu)
- babel-plugin-transform-block-scoping
  - #16384 fix: Transform scoping for for X in loop (@ liuxingbaoyu)
  - #16368 fix: Capture let when the for body is not a block (@ liuxingbaoyu)
- babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
  - #16363 Fix incorrect function hoisting in some case statements (@ luiscubal)
Committers: 7
- Babel Bot (@ babel-bot)
- Dunqing (@ Dunqing)
- Huáng Jùnliàng (@ JLHwung)
- Luís Reis (@ luiscubal)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Samual Norman (@ samualtnorman)
- @ liuxingbaoyu
7.24.3 - 2024-03-20
v7.24.3 (2024-03-20)

Thanks @ ota-meshi for your first PR!

🐛 Bug Fix
- babel-helper-module-imports
  - #16370 fix: do not inject the same imported identifier multiple times (@ ota-meshi)
Committers: 2
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Yosuke Ota (@ ota-meshi)
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.0 - 2024-02-28
v7.24.0 (2024-02-28)

Thanks @ ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

🚀 New Feature
- babel-standalone
  - #11696 Export babel tooling packages in @ babel/standalone (@ ajihyf)
- babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  - #16267 Implement noUninitializedPrivateFieldAccess assumption (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16242 Support decorator 2023-11 normative updates (@ JLHwung)
- babel-preset-flow
  - #16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@ nicolo-ribaudo)
  - #16284 Add experimental_useHermesParser option in preset-flow (@ liuxingbaoyu)
- babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  - #16172 Add transform support for JSON modules imports (@ nicolo-ribaudo)
- babel-plugin-transform-runtime
  - #16241 Add back moduleName option to @ babel/plugin-transform-runtime (@ nicolo-ribaudo)
- babel-parser, babel-types
  - #16277 Allow import attributes for TSImportType (@ sosukesuzuki)
🐛 Bug Fix
- babel-plugin-proposal-do-expressions, babel-traverse
  - #16305 fix: avoid popContext on unvisited node paths (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  - #16312 Fix class private properties when privateFieldsAsSymbols (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  - #16307 Fix the support of arguments in private get/set method (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16281 Fix evaluation order of decorators with cached receiver (@ nicolo-ribaudo)
  - #16279 Fix decorator this memoization (@ JLHwung)
  - #16266 Preserve static on decorated private accessor (@ nicolo-ribaudo)
  - #16258 fix: handle decorated async private method and generator (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  - #16275 Fix class private properties when privateFieldsAsProperties (@ liuxingbaoyu)
- babel-helpers
  - #16268 Do not consider arguments in a helper as a global reference (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16270 Handle symbol key class elements decoration (@ JLHwung)
  - #16265 Do not define access.get for public setter decorators (@ nicolo-ribaudo)
💅 Polish
- babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  - #12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-transform-fixture-test-runner
  - #16278 Continue writing output.js when exec.js throws (@ liuxingbaoyu)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16306 Avoid intermediate functions for private accessors with decs (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16294 More aggressively inline decorators in the static block (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-private-methods
  - #16283 Do not use classPrivateMethodGet (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16280 Reduce element decorator temp variables (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16261 Do not use descriptors for private class elements (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16263 Reduce helper size for decorator 2023-11 (@ liuxingbaoyu)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- SUZUKI Sosuke (@ sosukesuzuki)
- Yarden Shoham (@ yardenshoham)
- @ liuxingbaoyu
- flyafly (@ ajihyf)
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.8 - 2021-07-20
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.10 - 2021-03-08
7.13.8 - 2021-02-26
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.3 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.4 - 2019-10-10
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.4 - 2019-07-09
7.5.0 - 2019-07-04
7.4.5 - 2019-05-21

from @babel/core GitHub release notes

Package name: @babel/preset-env

7.24.5 - 2024-04-29
v7.24.5 (2024-04-29)

Thanks @ romgrk and @ sossost for your first PRs!

🐛 Bug Fix
- babel-plugin-transform-classes, babel-traverse
  - #16377 fix: TypeScript annotation affects output (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16440 Fix suppressed error order (@ sossost)
  - #16408 Await nullish async disposable (@ JLHwung)
💅 Polish
- babel-parser
  - #16407 Recover from exported using declaration (@ JLHwung)
🏠 Internal
- Other
  - #16414 Relax ESLint peerDependency constraint to allow v9 (@ liuxingbaoyu)
- babel-parser
  - #16425 Improve @ babel/parser AST types (@ nicolo-ribaudo)
  - #16417 Always pass type argument to .startNode (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  - #16439 Make NodePath<T | U> distributive (@ nicolo-ribaudo)
- babel-plugin-proposal-partial-application, babel-types
  - #16421 Remove JSXNamespacedName from valid CallExpression args (@ nicolo-ribaudo)
- babel-plugin-transform-class-properties, babel-preset-env
  - #16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-helpers, babel-preset-env, babel-runtime-corejs3
  - #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Rom Grk (@ romgrk)
- @ liuxingbaoyu
- ynnsuis (@ sossost)
7.24.4 - 2024-04-03
v7.24.4 (2024-04-03)

Thanks @ Dunqing, @ luiscubal, and @ samualtnorman for your first PRs!

👓 Spec Compliance
- babel-parser
  - #16403 Forbid initializerless using (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16388 Ensure decorators are callable (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16402 fix: Correctly prints { [key in Bar]? } (@ liuxingbaoyu)
  - #16394 fix: Correctly generate TSMappedType (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
  - #16390 Create bugfix plugin for classes in computed keys in Firefox (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16387 fix: support mutated outer decorated class binding (@ JLHwung)
  - #16385 fix: Decorators when super() exists and protoInit is not needed (@ liuxingbaoyu)
- babel-plugin-transform-block-scoping
  - #16384 fix: Transform scoping for for X in loop (@ liuxingbaoyu)
  - #16368 fix: Capture let when the for body is not a block (@ liuxingbaoyu)
- babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
  - #16363 Fix incorrect function hoisting in some case statements (@ luiscubal)
Committers: 7
- Babel Bot (@ babel-bot)
- Dunqing (@ Dunqing)
- Huáng Jùnliàng (@ JLHwung)
- Luís Reis (@ luiscubal)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Samual Norman (@ samualtnorman)
- @ liuxingbaoyu
7.24.3 - 2024-03-20
v7.24.3 (2024-03-20)

Thanks @ ota-meshi for your first PR!

🐛 Bug Fix
- babel-helper-module-imports
  - #16370 fix: do not inject the same imported identifier multiple times (@ ota-meshi)
Committers: 2
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Yosuke Ota (@ ota-meshi)
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.0 - 2024-02-28
v7.24.0 (2024-02-28)

Thanks @ ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

🚀 New Feature
- babel-standalone
  - #11696 Export babel tooling packages in @ babel/standalone (@ ajihyf)
- babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  - #16267 Implement noUninitializedPrivateFieldAcc...

Snyk has created this PR to upgrade: - @babel/core from 7.4.5 to 7.24.5. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/preset-env from 7.4.5 to 7.24.5. See this package in npm: https://www.npmjs.com/package/@babel/preset-env See this project in Snyk: https://app.snyk.io/org/boostinwrx/project/23c0dcef-aee8-45c9-a230-40b3f4488fe4?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade: , #166

Are you sure you want to change the base?

[Snyk] Upgrade: , #166

Conversation

tiff-es commented Jun 10, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

v7.24.5 (2024-04-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v7.24.4 (2024-04-03)

👓 Spec Compliance

🐛 Bug Fix

Committers: 7

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7

v7.24.5 (2024-04-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v7.24.4 (2024-04-03)

👓 Spec Compliance

🐛 Bug Fix

Committers: 7

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature