[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime #304

snyk-bot · 2021-09-02T20:50:30Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/core from 7.8.3 to 7.15.0	41 versions ahead of your current version	a month ago on 2021-08-04
@babel/plugin-transform-runtime from 7.11.0 to 7.15.0	22 versions ahead of your current version	a month ago on 2021-08-04
@babel/preset-env from 7.8.4 to 7.15.0	36 versions ahead of your current version	a month ago on 2021-08-04
@babel/runtime from 7.11.2 to 7.15.3	22 versions ahead of your current version	23 days ago on 2021-08-11

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/core

7.15.0 - 2021-08-04
v7.15.0 (2021-08-04)

Thanks @ a-tarasyuk and @ gausie for your first PRs!

👓 Spec Compliance
- babel-parser
  - #13523 feat(ts): raise error for abstract property with initializer (@ fedeci)
🚀 New Feature
- babel-parser
  - #13229 Add attachComment parser option to disable comment attachment (@ JLHwung)
- babel-standalone
  - #13476 standalone: update preset-stage-* (@ sosukesuzuki)
  - #13555 feat: support hack pipeline in @ babel/standalone (@ JLHwung)
- babel-parser, babel-preset-env
  - #13387 Enable top-level await parsing by default (@ nicolo-ribaudo)
- babel-plugin-transform-typescript, babel-preset-typescript
  - #13324 Support TypeScript const enums (@ nicolo-ribaudo)
- babel-plugin-transform-typescript
  - #13528 feat(typescript): implement namespace alias (@ colinaaa)
- babel-core, babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
  - #13290 feat: add noIncompleteNsImportDetection assumption to plugin-transform-modules-commonjs (@ fedeci)
- babel-plugin-transform-react-display-name
  - #13501 Add display name after create context (@ JLHwung)
- babel-parser, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator
  - #13416 Hack-pipe proposal with % topic token (@ js-choi)
- babel-generator, babel-parser, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator, babel-traverse, babel-types
  - #13191 Add support for the "Hack" pipeline proposal (@ js-choi)
- babel-plugin-transform-runtime
  - #13398 Expose @ babel/eslint-parser/experimental-worker (@ nicolo-ribaudo)
- babel-compat-data, babel-helper-compilation-targets, babel-preset-env
  - #13448 Add support for rhino as a compilation target (@ gausie)
- babel-compat-data, babel-parser, babel-preset-env
  - #13554 Enable ergonomic brand checks (#priv in) by default (@ nicolo-ribaudo)
🐛 Bug Fix
- babel-parser, babel-plugin-transform-typescript
  - #13513 [ts] support optional chain call with generic (@ lala7573)
- babel-plugin-transform-typescript
  - #13605 Handle typescript function overloading in a default export (@ tony-go)
- babel-parser
  - #13536 Fix %== parsing in hack pipes (@ nicolo-ribaudo)
  - #13426 parser: Fix Hack/smart-pipe error positions (@ js-choi)
  - #13622 fix(ts): raise error for export default interface {} (@ a-tarasyuk)
📝 Documentation
- #13607 chore(doc): add jest specific pckg command (@ tony-go)
Committers: 10
- Federico Ciardi (@ fedeci)
- Huáng Jùnliàng (@ JLHwung)
- J. S. Choi (@ js-choi)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Oleksandr T. (@ a-tarasyuk)
- Samuel Gaus (@ gausie)
- Sosuke Suzuki (@ sosukesuzuki)
- Tony Gorez (@ tony-go)
- Yeonju Hwang (@ lala7573)
- 王清雨 (@ colinaaa)
7.14.8 - 2021-07-20
v7.14.8 (2021-07-20)

Thanks @ colinaaa, @ jaeseokk and @ nme077 for your first PRs!

👓 Spec Compliance
- babel-helper-create-class-features-plugin, babel-plugin-proposal-class-static-block, babel-plugin-transform-new-target
  - #13560 fix(class-properties): replace new.target in static properties with undefined (@ colinaaa)
- babel-parser
  - #13088 Fix await binding error within static block (@ JLHwung)
  - #13531 fix: disallow computed async/get/set keyword (@ JLHwung)
- babel-helper-module-transforms, babel-helper-simple-access, babel-plugin-transform-modules-commonjs
  - #13258 Fix const violations in ESM imports when transformed to CJS (@ overlookmotel)
🐛 Bug Fix
- babel-parser
  - #13575 Update babel-parser.d.ts (@ sosukesuzuki)
  - #13548 Fix parser strictMode option (@ overlookmotel)
  - #13573 Fix issue to allow module block in member expression (@ nme077)
  - #13521 Overhaul comment attachment (@ JLHwung)
  - #13534 Async do expression should start at async (@ JLHwung)
- babel-plugin-transform-arrow-functions, babel-traverse
  - #12344 Fix arrow transformation when arguments is defined as variable (@ snitin315)
- babel-traverse
  - #13527 fix: accept duplicated import/variable in different module (@ colinaaa)
- babel-types
  - #13525 fix(babel-types): accept UnaryExpression in TSLiteralType (@ colinaaa)
  - #13500 Add typeParameters to tagged template visitor keys (@ JLHwung)
💅 Polish
- babel-core
  - #13515 Fix config validation message typo (@ jaeseokk)
- babel-cli
  - #13508 fix: sync default_extensions to babel-cli usage (@ JLHwung)
📝 Documentation
- #13562 Fix make generate-standalone -> make build-standalone (@ sosukesuzuki)
🏠 Internal
- babel-helpers
  - #13522 minor improvement to gulp generate-runtime-helpers error message (@ lightmare)
🏃‍♀️ Performance
- babel-parser
  - #13521 Overhaul comment attachment (@ JLHwung)
Committers: 12
- Babel Bot (@ babel-bot)
- Bogdan Savluk (@ zxbodya)
- Federico Ciardi (@ fedeci)
- Huáng Jùnliàng (@ JLHwung)
- Jaeseok Kang (@ jaeseokk)
- Mickey Rose (@ lightmare)
- Nicholas Eveland (@ nme077)
- Nitin Kumar (@ snitin315)
- Sosuke Suzuki (@ sosukesuzuki)
- Tony Gorez (@ tony-go)
- @ overlookmotel
- 王清雨 (@ colinaaa)
7.14.6 - 2021-06-14
v7.14.6 (2021-06-14)

🐛 Bug Fix
- babel-plugin-transform-spread
  - #13459 babel-plugin-transform-spread add missing argument in build calls (@ zxbodya)
  - #13439 Correctly transform spreads of arrays with holes (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-transform-destructuring, babel-plugin-transform-modules-commonjs
  - #13444 fix destructuring of empty string (@ lala7573)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
  - #13429 fix: reference to class expression in private method (@ lala7573)
- babel-parser
  - #13428 [ts] Support override modifiers for parameter properties (@ sosukesuzuki)
  - #13449 Disallow JSX tag forming after TS non-null assertion (@ JLHwung)
🏠 Internal
- #13423 Faster babel build (@ JLHwung)
🏃‍♀️ Performance
- babel-parser
  - #13453 Faster readRegexp (@ JLHwung)
Committers: 5
- Bogdan Savluk (@ zxbodya)
- Huáng Jùnliàng (@ JLHwung)
- Lively (@ lala7573)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sosuke Suzuki (@ sosukesuzuki)
7.14.5 - 2021-06-09
Read more
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.15 - 2021-04-08
7.13.14 - 2021-03-29
7.13.13 - 2021-03-26
7.13.10 - 2021-03-08
7.13.8 - 2021-02-26
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.9 - 2020-11-24
7.12.8 - 2020-11-23
7.12.7 - 2020-11-20
7.12.3 - 2020-10-16
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.1 - 2020-08-04
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13

from @babel/core GitHub release notes

Package name: @babel/plugin-transform-runtime

7.15.0 - 2021-08-04
Read more
7.14.5 - 2021-06-09
Read more
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.13.15 - 2021-04-08
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.7 - 2021-02-24
7.13.6 - 2021-02-23
7.13.5 - 2021-02-23
7.13.4 - 2021-02-23
7.13.2 - 2021-02-23
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.15 - 2021-02-04
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30

from @babel/plugin-transform-runtime GitHub release notes

Package name: @babel/preset-env

7.15.0 - 2021-08-04
Read more
7.14.9 - 2021-08-01
Read more
7.14.8 - 2021-07-20
Read more
7.14.7 - 2021-06-21
Read more
7.14.5 - 2021-06-09
Read more
7.14.4 - 2021-05-28
Read more
7.14.2 - 2021-05-12
7.14.1 - 2021-05-04
7.14.0 - 2021-04-29
7.13.15 - 2021-04-08
7.13.12 - 2021-03-22
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.5 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30

from @babel/preset-env GitHub release notes

Package name: @babel/runtime

7.15.3 - 2021-08-11
Read more
7.14.8 - 2021-07-20
Read more
7.14.6 - 2021-06-14
Read more
7.14.5 - 2021-06-09
Read more
7.14.0 - 2021-04-29
7.13.17 - 2021-04-20
7.13.16 - 2021-04-20
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.7 - 2021-02-24
7.13.6 - 2021-02-23
7.13.4 - 2021-02-23
7.13.2 - 2021-02-23
7.13.1 - 2021-02-23
7.13.0 - 2021-02-22
7.12.18 - 2021-02-18
7.12.17 - 2021-02-18
7.12.13 - 2021-02-03
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.2 - 2020-08-05

from @babel/runtime GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/core from 7.8.3 to 7.15.0. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/plugin-transform-runtime from 7.11.0 to 7.15.0. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-runtime - @babel/preset-env from 7.8.4 to 7.15.0. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - @babel/runtime from 7.11.2 to 7.15.3. See this package in npm: https://www.npmjs.com/package/@babel/runtime See this project in Snyk: https://app.snyk.io/org/bvbvyoy-9ml/project/1940504b-9e5e-4261-94b5-f5a0d6fe90d1?utm_source=github&utm_medium=upgrade-pr

This was referenced Sep 2, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #306

Open

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #310

Open

snyk-bot mentioned this pull request Sep 14, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #315

Open

This was referenced Sep 22, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #321

Open

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #325

Open

snyk-bot mentioned this pull request Oct 5, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #338

Open

This was referenced Oct 13, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #345

Open

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.0 #349

Open

snyk-bot mentioned this pull request Nov 4, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.4 #356

Open

snyk-bot mentioned this pull request Nov 16, 2021

[Snyk] Upgrade linkinator from 2.2.2 to 2.14.4 #361

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime #304

[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime #304

snyk-bot commented Sep 2, 2021

v7.15.0 (2021-08-04)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

📝 Documentation

Committers: 10

v7.14.8 (2021-07-20)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

Committers: 12

v7.14.6 (2021-06-14)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 5

[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime #304

Are you sure you want to change the base?

[Snyk] Upgrade: @babel/core, @babel/plugin-transform-runtime, @babel/preset-env, @babel/runtime #304

Conversation

snyk-bot commented Sep 2, 2021

Snyk has created this PR to upgrade multiple dependencies.

v7.15.0 (2021-08-04)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

📝 Documentation

Committers: 10

v7.14.8 (2021-07-20)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

Committers: 12

v7.14.6 (2021-06-14)

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 5