[Snyk] Upgrade @babel/core from 7.1.0 to 7.24.3 #244

mjperrins · 2024-04-16T16:46:07Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @babel/core from 7.1.0 to 7.24.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 134 versions ahead of your current version.
The recommended version was released a month ago, on 2024-03-20.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	786/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

7.24.3 - 2024-03-20
v7.24.3 (2024-03-20)

Thanks @ ota-meshi for your first PR!

🐛 Bug Fix
- babel-helper-module-imports
  - #16370 fix: do not inject the same imported identifier multiple times (@ ota-meshi)
Committers: 2
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Yosuke Ota (@ ota-meshi)
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.0 - 2024-02-28
v7.24.0 (2024-02-28)

Thanks @ ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

🚀 New Feature
- babel-standalone
  - #11696 Export babel tooling packages in @ babel/standalone (@ ajihyf)
- babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  - #16267 Implement noUninitializedPrivateFieldAccess assumption (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16242 Support decorator 2023-11 normative updates (@ JLHwung)
- babel-preset-flow
  - #16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@ nicolo-ribaudo)
  - #16284 Add experimental_useHermesParser option in preset-flow (@ liuxingbaoyu)
- babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  - #16172 Add transform support for JSON modules imports (@ nicolo-ribaudo)
- babel-plugin-transform-runtime
  - #16241 Add back moduleName option to @ babel/plugin-transform-runtime (@ nicolo-ribaudo)
- babel-parser, babel-types
  - #16277 Allow import attributes for TSImportType (@ sosukesuzuki)
🐛 Bug Fix
- babel-plugin-proposal-do-expressions, babel-traverse
  - #16305 fix: avoid popContext on unvisited node paths (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  - #16312 Fix class private properties when privateFieldsAsSymbols (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  - #16307 Fix the support of arguments in private get/set method (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16281 Fix evaluation order of decorators with cached receiver (@ nicolo-ribaudo)
  - #16279 Fix decorator this memoization (@ JLHwung)
  - #16266 Preserve static on decorated private accessor (@ nicolo-ribaudo)
  - #16258 fix: handle decorated async private method and generator (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  - #16275 Fix class private properties when privateFieldsAsProperties (@ liuxingbaoyu)
- babel-helpers
  - #16268 Do not consider arguments in a helper as a global reference (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16270 Handle symbol key class elements decoration (@ JLHwung)
  - #16265 Do not define access.get for public setter decorators (@ nicolo-ribaudo)
💅 Polish
- babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  - #12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-transform-fixture-test-runner
  - #16278 Continue writing output.js when exec.js throws (@ liuxingbaoyu)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16306 Avoid intermediate functions for private accessors with decs (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16294 More aggressively inline decorators in the static block (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-private-methods
  - #16283 Do not use classPrivateMethodGet (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16280 Reduce element decorator temp variables (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16261 Do not use descriptors for private class elements (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16263 Reduce helper size for decorator 2023-11 (@ liuxingbaoyu)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- SUZUKI Sosuke (@ sosukesuzuki)
- Yarden Shoham (@ yardenshoham)
- @ liuxingbaoyu
- flyafly (@ ajihyf)
7.23.9 - 2024-01-25
Read more
7.23.7 - 2023-12-29
v7.23.7 (2023-12-29)

🐛 Bug Fix
- babel-traverse
  - #16191 fix: Crash when removing without Program (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-decorators
  - #16180 fix: Class decorator ctx.kind is wrong (@ liuxingbaoyu)
- babel-plugin-proposal-decorators
  - #16170 Fix decorator initProto usage in derived classes (@ JLHwung)
- babel-core
  - #16167 Avoid unpreventable unhandledRejection events (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-create-class-features-plugin
  - #16186 chore: Update deps (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16177 Merge decorators into class features (@ JLHwung)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.8 - 2021-07-20
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.10 - 2021-03-08
7.13.8 - 2021-02-26
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.3 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06
7.7.0 - 2019-11-05
7.6.4 - 2019-10-10
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.4 - 2019-07-09
7.5.0 - 2019-07-04
7.4.5 - 2019-05-21
7.4.4 - 2019-04-26
7.4.3 - 2019-04-02
7.4.0 - 2019-03-19
7.3.4 - 2019-02-25
7.3.3 - 2019-02-15
7.2.2 - 2018-12-15
7.2.0 - 2018-12-03
7.1.6 - 2018-11-13
7.1.5 - 2018-11-06
7.1.2 - 2018-09-28
7.1.1 - 2018-09-28
7.1.0 - 2018-09-17

from @babel/core GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/core from 7.1.0 to 7.24.3. See this package in npm: https://www.npmjs.com/package/@babel/core See this project in Snyk: https://app.snyk.io/org/mjperrins/project/83889b79-fc32-45c4-8cf0-733b4bcef039?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade @babel/core from 7.1.0 to 7.24.3 #244

[Snyk] Upgrade @babel/core from 7.1.0 to 7.24.3 #244

Uh oh!

mjperrins commented Apr 16, 2024

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7

v7.23.7 (2023-12-29)

🐛 Bug Fix

🏠 Internal

Committers: 4

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[Snyk] Upgrade @babel/core from 7.1.0 to 7.24.3 #244

Are you sure you want to change the base?

[Snyk] Upgrade @babel/core from 7.1.0 to 7.24.3 #244

Uh oh!

Conversation

mjperrins commented Apr 16, 2024

Snyk has created this PR to upgrade @babel/core from 7.1.0 to 7.24.3.

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7

v7.23.7 (2023-12-29)

🐛 Bug Fix

🏠 Internal

Committers: 4

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants