[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime

[snyk-bot]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.8.3 to 7.14.6	39 versions ahead of your current version	2 months ago on 2021-06-14
@babel/plugin-transform-runtime from 7.11.0 to 7.14.5	21 versions ahead of your current version	2 months ago on 2021-06-09
@babel/preset-env from 7.8.4 to 7.14.7	33 versions ahead of your current version	a month ago on 2021-06-21
@babel/runtime from 7.11.2 to 7.14.6	20 versions ahead of your current version	2 months ago on 2021-06-14

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

• 7.14.6 - 2021-06-14
  

  v7.14.6 (2021-06-14)

  🐛 Bug Fix

  • babel-plugin-transform-spread
    • #13459 babel-plugin-transform-spread add missing argument in build calls (@ zxbodya)
    • #13439 Correctly transform spreads of arrays with holes (@ nicolo-ribaudo)
  • babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs
    • #13444 fix destructuring of empty string (@ lala7573)
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
    • #13429 fix: reference to class expression in private method (@ lala7573)
  • babel-parser
    • #13428 [ts] Support override modifiers for parameter properties (@ sosukesuzuki)
    • #13449 Disallow JSX tag forming after TS non-null assertion (@ JLHwung)

  🏠 Internal

  • #13423 Faster babel build (@ JLHwung)

  🏃‍♀️ Performance

  • babel-parser
    • #13453 Faster readRegexp (@ JLHwung)

  Committers: 5

  • Bogdan Savluk (@ zxbodya)
  • Huáng Jùnliàng (@ JLHwung)
  • Lively (@ lala7573)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Sosuke Suzuki (@ sosukesuzuki)
• 7.14.5 - 2021-06-09
  

  v7.14.5 (2021-06-09)

  Thanks @ Eyoatam, @ lightmare, @ ota-meshi, and @ tony-go for your first PRs!

  👓 Spec Compliance

  • babel-plugin-proposal-do-expressions, babel-traverse
    • #13122 fix: hoist variable declaration within do block (@ JLHwung)
  • babel-parser
    • #13409 Relax import assertion key-is-type constraint (@ JLHwung)

  🐛 Bug Fix

  • babel-parser
    • #13418 fix(parser): correctly parse record and tuple tokens (@ fedeci)
    • #13410 fix: throw when async() call param is object with assignement (@ tony-go)
    • #13396 Add support for d flag of regex literals in parser (@ ota-meshi)
  • babel-helpers
    • #13404 fix generate-helpers failing in URL-encoded path (@ lightmare)

  🏠 Internal

  • babel-helper-hoist-variables
    • #13442 Disallow dependency cycles (@ nicolo-ribaudo)
  • babel-parser
    • #13440 update test fixtures (@ JLHwung)
    • #13431 Reduce exprAllowed usage (@ JLHwung)
    • #13422 fix(@ babel/parser): fix tokenizer context update code (@ Eyoatam)
  • Other
    • #13420 chore: specify @ babel/eslint-parser deps (@ JLHwung)
  • Every package
    • #13363 chore: setup Yarn constraints (@ merceyz)

  🏃‍♀️ Performance

  • babel-parser
    • #13408 Use set in parser scope (@ JLHwung)
    • #13386 Faster checkReservedWord (@ JLHwung)
    • #13406 Back parser state exportedIdentifiers by set (@ JLHwung)

  Committers: 9

  • Daniel Tschinder (@ danez)
  • Eyoatam Tamirat (@ Eyoatam)
  • Federico Ciardi (@ fedeci)
  • Huáng Jùnliàng (@ JLHwung)
  • Kristoffer K. (@ merceyz)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Tony Gorez (@ tony-go)
  • Yosuke Ota (@ ota-meshi)
  • @ lightmare
• 7.14.3 - 2021-05-17
  

  v7.14.3 (2021-05-17)

  🐛 Bug Fix

  • babel-core
    • #13321 Pass assumptions set in presets to plugins (@ nicolo-ribaudo)
  • babel-parser
    • #13326 fix: preserve tokensLength in tryParse (@ JLHwung)
    • #13325 Parse let declarations whose id starts with \ (@ nicolo-ribaudo)
  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block
    • #13303 Don't duplicate the base class when using constantSuper (@ nicolo-ribaudo)

  🏠 Internal

  • Other
    • #13313 chore: add class-static-block test262 mapping (@ JLHwung)
  • babel-plugin-transform-block-scoping
    • #13304 Add test for fixed block scoping issue (@ nicolo-ribaudo)

  🔬 Output optimization

  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-static-block, babel-preset-env
    • #13297 Compile static blocks without the intermediate priv field step (@ nicolo-ribaudo)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Bogdan Savluk (@ zxbodya)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.14.2 - 2021-05-12
  

  v7.14.2 (2021-05-12)

  Thanks @ liuyenwei, @ quickgiant, @ serut, and @ trinangkur for your first PRs!

  🐛 Bug Fix

  • babel-node
    • #13295 Fix: Only create @ babel/node IPC channel when needed (@ quickgiant)
  • babel-parser
    • #13284 Parse attributes of import expression with estree plugin (@ sosukesuzuki)
    • #13261 Fix invalid identifier name on unfinished escape (@ JLHwung)
  • babel-types
    • #13275 Support objects from other contexts in t.valueToNode (@ nicolo-ribaudo)
  • Other
    • #13274 [eslint] Don't crash on multiple @ babel/parser copies (@ nicolo-ribaudo)
  • babel-generator
    • #13269 Print parentheses around identifier let where necessary (@ Zalathar)

  💅 Polish

  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
    • #13296 Better error for export * as ns without the correct plugin (@ JLHwung)

  📝 Documentation

  • #13253 [DOC] Add missing Monorepo configuration (@ serut)

  🏠 Internal

  • Other
    • #13289 Update lodash version for fixing security vulnerability (@ trinangkur)
  • babel-types
    • #13264 [babel-types] Update matchesPattern to account for this (@ liuyenwei)

  🏃‍♀️ Performance

  • babel-parser
    • #13262 Faster identifier tokenizing (@ JLHwung)
    • #13256 Refactor private name tokenizing (@ JLHwung)

  Committers: 9

  • Babel Bot (@ babel-bot)
  • Clark Jacobsohn (@ quickgiant)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • Sosuke Suzuki (@ sosukesuzuki)
  • Stuart Cook (@ Zalathar)
  • Trinangkur Chatterjee (@ trinangkur)
  • Yen-Wei Liu (@ liuyenwei)
  • @ serut
• 7.14.0 - 2021-04-29
  Read more
• 7.13.16 - 2021-04-20
  Read more
• 7.13.15 - 2021-04-08
• 7.13.14 - 2021-03-29
• 7.13.13 - 2021-03-26
• 7.13.10 - 2021-03-08
• 7.13.8 - 2021-02-26
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.10 - 2020-12-09
• 7.12.9 - 2020-11-24
• 7.12.8 - 2020-11-23
• 7.12.7 - 2020-11-20
• 7.12.3 - 2020-10-16
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.6 - 2020-09-03
• 7.11.5 - 2020-08-31
• 7.11.4 - 2020-08-20
• 7.11.1 - 2020-08-04
• 7.11.0 - 2020-07-30
• 7.10.5 - 2020-07-14
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.0 - 2020-03-20
• 7.8.7 - 2020-03-05
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30
• 7.8.3 - 2020-01-13

from @babel/core GitHub release notes

Package name: @babel/plugin-transform-runtime

• 7.14.5 - 2021-06-09
  Read more
• 7.14.3 - 2021-05-17
  

  v7.14.3 (2021-05-17)

  🐛 Bug Fix

  • babel-core
    • #13321 Pass assumptions set in presets to plugins (@ nicolo-ribaudo)
  • babel-parser
    • #13326 fix: preserve tokensLength in tryParse (@ JLHwung)
    • #13325 Parse let declarations whose id starts with \ (@ nicolo-ribaudo)
  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block
    • #13303 Don't duplicate the base class when using constantSuper (@ nicolo-ribaudo)

  🏠 Internal

  • Other
    • #13313 chore: add class-static-block test262 mapping (@ JLHwung)
  • babel-plugin-transform-block-scoping
    • #13304 Add test for fixed block scoping issue (@ nicolo-ribaudo)

  🔬 Output optimization

  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-class-static-block, babel-preset-env
    • #13297 Compile static blocks without the intermediate priv field step (@ nicolo-ribaudo)

  Committers: 4

  • Babel Bot (@ babel-bot)
  • Bogdan Savluk (@ zxbodya)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.14.2 - 2021-05-12
  Read more
• 7.13.15 - 2021-04-08
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.7 - 2021-02-24
• 7.13.6 - 2021-02-23
• 7.13.5 - 2021-02-23
• 7.13.4 - 2021-02-23
• 7.13.2 - 2021-02-23
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.15 - 2021-02-04
• 7.12.13 - 2021-02-03
• 7.12.10 - 2020-12-09
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30

from @babel/plugin-transform-runtime GitHub release notes

Package name: @babel/preset-env

• 7.14.7 - 2021-06-21
  Read more
• 7.14.5 - 2021-06-09
  Read more
• 7.14.4 - 2021-05-28
  Read more
• 7.14.2 - 2021-05-12
  Read more
• 7.14.1 - 2021-05-04
  Read more
• 7.14.0 - 2021-04-29
  Read more
• 7.13.15 - 2021-04-08
• 7.13.12 - 2021-03-22
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.5 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.11 - 2020-12-15
• 7.12.10 - 2020-12-09
• 7.12.7 - 2020-11-20
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.5 - 2020-08-31
• 7.11.0 - 2020-07-30
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.5 - 2020-04-07
• 7.9.0 - 2020-03-20
• 7.8.7 - 2020-03-05
• 7.8.6 - 2020-02-27
• 7.8.4 - 2020-01-30

from @babel/preset-env GitHub release notes

Package name: @babel/runtime

• 7.14.6 - 2021-06-14
  Read more
• 7.14.5 - 2021-06-09
  Read more
• 7.14.0 - 2021-04-29
  Read more
• 7.13.17 - 2021-04-20
  Read more
• 7.13.16 - 2021-04-20
  Read more
• 7.13.10 - 2021-03-08
• 7.13.9 - 2021-03-01
• 7.13.8 - 2021-02-26
• 7.13.7 - 2021-02-24
• 7.13.6 - 2021-02-23
• 7.13.4 - 2021-02-23
• 7.13.2 - 2021-02-23
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.18 - 2021-02-18
• 7.12.17 - 2021-02-18
• 7.12.13 - 2021-02-03
• 7.12.5 - 2020-11-03
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.2 - 2020-08-05

from @babel/runtime GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs