Skip to content

[Snyk] Upgrade: @babel/cli, @babel/core, @babel/node, @babel/preset-env #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade: @babel/cli, @babel/core, @babel/node, @babel/preset-env #2

wants to merge 1 commit into from

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Mar 25, 2022

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
@babel/cli
from 7.14.8 to 7.17.6		 8 versions ahead of your current version a month ago
on 2022-02-21
@babel/core
from 7.14.8 to 7.17.5		 14 versions ahead of your current version a month ago
on 2022-02-17
@babel/node
from 7.14.7 to 7.16.8		 7 versions ahead of your current version 2 months ago
on 2022-01-10
@babel/preset-env
from 7.14.8 to 7.16.11		 12 versions ahead of your current version 2 months ago
on 2022-01-20

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-UNSETVALUE-2400660		 375/1000
Why? CVSS 7.5		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @babel/cli
  • 7.17.6 - 2022-02-21

    v7.17.6 (2022-02-21)

    Thanks @ devsnek for your first PR!

    👓 Spec Compliance

    • babel-helper-module-transforms
      • #14287 Make module namespace sort compare function consistent (@ devsnek)

    🐛 Bug Fix

    • babel-cli

    🔬 Output optimization

    • babel-plugin-transform-react-constant-elements
    • babel-plugin-proposal-pipeline-operator, babel-standalone
    • babel-helper-create-class-features-plugin, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-preset-env

    Committers: 4

  • 7.17.3 - 2022-02-15

    v7.17.3 (2022-02-15)

    Thanks @ zhangenming for your first PR!

    🐛 Bug Fix

    • babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
      • #14271 jsx-development: do not emit this within ts module block (@ JLHwung)
    • babel-plugin-transform-destructuring

    🏠 Internal

    • babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner

    🔬 Output optimization

    • babel-plugin-proposal-class-properties, babel-plugin-proposal-class-static-block, babel-plugin-proposal-decorators, babel-plugin-proposal-private-methods, babel-plugin-proposal-private-property-in-object, babel-plugin-transform-new-target, babel-plugin-transform-parameters, babel-traverse

    Committers: 7

  • 7.17.0 - 2022-02-02

    v7.17.0 (2022-02-02)

    Thanks @ atti187 and @ phulin for your first PRs!

    🚀 New Feature

    • babel-cli, babel-core
    • babel-core, babel-parser, babel-traverse
      • #14174 Expose .index on Position to internally track nodes location (@ tolmasky)
    • babel-generator, babel-parser, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator
    • babel-traverse
      • #13940 Add new method to check if node is null or not (@ danez)
    • babel-generator, babel-parser, babel-plugin-syntax-destructuring-private, babel-standalone
    • babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-syntax-decorators, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime, babel-standalone, babel-types
    • babel-generator, babel-parser, babel-traverse, babel-types
    • babel-core, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-unicode-sets-regex, babel-plugin-syntax-unicode-sets-regex, babel-plugin-transform-dotall-regex
    • babel-parser
    • babel-register

    🐛 Bug Fix

    • babel-parser
    • babel-plugin-transform-runtime

    📝 Documentation

    🏠 Internal

    • babel-helper-fixtures, babel-parser
    • babel-compat-data
      • #14208 Update compat data (specifically for rhino 1.7.14) (@ phulin)
    • Other

    🏃‍♀️ Performance

    • babel-cli, babel-core

    Committers: 10

  • 7.16.8 - 2022-01-10
  • 7.16.7 - 2021-12-31
  • 7.16.0 - 2021-10-29
  • 7.15.7 - 2021-09-17
  • 7.15.4 - 2021-09-02
  • 7.14.8 - 2021-07-20
from @babel/cli GitHub release notes
Package name: @babel/core from @babel/core GitHub release notes
Package name: @babel/node
  • 7.16.8 - 2022-01-10
  • 7.16.7 - 2021-12-31
  • 7.16.5 - 2021-12-13
  • 7.16.0 - 2021-10-29
  • 7.15.8 - 2021-10-06
  • 7.15.4 - 2021-09-02
  • 7.14.9 - 2021-08-01
  • 7.14.7 - 2021-06-21
from @babel/node GitHub release notes
Package name: @babel/preset-env
  • 7.16.11 - 2022-01-20
  • 7.16.10 - 2022-01-19
  • 7.16.8 - 2022-01-10
  • 7.16.7 - 2021-12-31
  • 7.16.5 - 2021-12-13
  • 7.16.4 - 2021-11-16
  • 7.16.0 - 2021-10-29
  • 7.15.8 - 2021-10-06
  • 7.15.6 - 2021-09-09
  • 7.15.4 - 2021-09-02
  • 7.15.0 - 2021-08-04
  • 7.14.9 - 2021-08-01
  • 7.14.8 - 2021-07-20
from @babel/preset-env GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@snyk-bot
fix: upgrade multiple dependencies with Snyk
c7a2ea2 
Snyk has created this PR to upgrade:
  - @babel/cli from 7.14.8 to 7.17.6.
    See this package in npm: https://www.npmjs.com/package/@babel/cli
  - @babel/core from 7.14.8 to 7.17.5.
    See this package in npm: https://www.npmjs.com/package/@babel/core
  - @babel/node from 7.14.7 to 7.16.8.
    See this package in npm: https://www.npmjs.com/package/@babel/node
  - @babel/preset-env from 7.14.8 to 7.16.11.
    See this package in npm: https://www.npmjs.com/package/@babel/preset-env

See this project in Snyk:
https://app.snyk.io/org/14103144arjun/project/0a34a5f6-0d51-43f3-b5b8-13d5e540d7f1?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@snyk-bot