[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.5 #1727

mdfkbtc · 2024-06-13T21:06:03Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @babel/preset-env from 7.5.0 to 7.24.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 106 versions ahead of your current version.
The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	786	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	786	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	786	Proof of Concept

Release notes

Package name: @babel/preset-env

7.24.5 - 2024-04-29
v7.24.5 (2024-04-29)

Thanks @ romgrk and @ sossost for your first PRs!

🐛 Bug Fix
- babel-plugin-transform-classes, babel-traverse
  - #16377 fix: TypeScript annotation affects output (@ liuxingbaoyu)
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16440 Fix suppressed error order (@ sossost)
  - #16408 Await nullish async disposable (@ JLHwung)
💅 Polish
- babel-parser
  - #16407 Recover from exported using declaration (@ JLHwung)
🏠 Internal
- Other
  - #16414 Relax ESLint peerDependency constraint to allow v9 (@ liuxingbaoyu)
- babel-parser
  - #16425 Improve @ babel/parser AST types (@ nicolo-ribaudo)
  - #16417 Always pass type argument to .startNode (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  - #16439 Make NodePath<T | U> distributive (@ nicolo-ribaudo)
- babel-plugin-proposal-partial-application, babel-types
  - #16421 Remove JSXNamespacedName from valid CallExpression args (@ nicolo-ribaudo)
- babel-plugin-transform-class-properties, babel-preset-env
  - #16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-helpers, babel-preset-env, babel-runtime-corejs3
  - #16357 Performance: improve objectWithoutPropertiesLoose on V8 (@ romgrk)
Committers: 6
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Rom Grk (@ romgrk)
- @ liuxingbaoyu
- ynnsuis (@ sossost)
7.24.4 - 2024-04-03
v7.24.4 (2024-04-03)

Thanks @ Dunqing, @ luiscubal, and @ samualtnorman for your first PRs!

👓 Spec Compliance
- babel-parser
  - #16403 Forbid initializerless using (@ JLHwung)
- babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  - #16388 Ensure decorators are callable (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16402 fix: Correctly prints { [key in Bar]? } (@ liuxingbaoyu)
  - #16394 fix: Correctly generate TSMappedType (@ liuxingbaoyu)
- babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
  - #16390 Create bugfix plugin for classes in computed keys in Firefox (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16387 fix: support mutated outer decorated class binding (@ JLHwung)
  - #16385 fix: Decorators when super() exists and protoInit is not needed (@ liuxingbaoyu)
- babel-plugin-transform-block-scoping
  - #16384 fix: Transform scoping for for X in loop (@ liuxingbaoyu)
  - #16368 fix: Capture let when the for body is not a block (@ liuxingbaoyu)
- babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
  - #16363 Fix incorrect function hoisting in some case statements (@ luiscubal)
Committers: 7
- Babel Bot (@ babel-bot)
- Dunqing (@ Dunqing)
- Huáng Jùnliàng (@ JLHwung)
- Luís Reis (@ luiscubal)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Samual Norman (@ samualtnorman)
- @ liuxingbaoyu
7.24.3 - 2024-03-20
v7.24.3 (2024-03-20)

Thanks @ ota-meshi for your first PR!

🐛 Bug Fix
- babel-helper-module-imports
  - #16370 fix: do not inject the same imported identifier multiple times (@ ota-meshi)
Committers: 2
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Yosuke Ota (@ ota-meshi)
7.24.1 - 2024-03-19
v7.24.1 (2024-03-19)

🐛 Bug Fix
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16350 Fix decorated class computed keys ordering (@ JLHwung)
  - #16344 Fix decorated class static field private access (@ JLHwung)
- babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  - #16329 Respect moduleName for @ babel/runtime/regenerator imports (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16331 Fix decorator memoiser binding kind (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16325 Fix decorator evaluation private environment (@ JLHwung)
📝 Documentation
- #16319 Update SECURITY.md (@ nicolo-ribaudo)
🏠 Internal
- babel-code-frame, babel-highlight
  - #16359 Replace chalk with picocolors (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  - #16352 Run Babel transform tests on old node if possible (@ JLHwung)
- babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  - #16349 Support merging imports in import injector (@ nicolo-ribaudo)
- Other
  - #16332 Test Babel 7 plugins compatibility with Babel 8 core (@ nicolo-ribaudo)
🔬 Output optimization
- babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  - #16345 Optimize the use of assertThisInitialized after super() (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16343 Use simpler assertThisInitialized more often (@ liuxingbaoyu)
- babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  - #16342 Consider well-known and registered symbols as literals (@ nicolo-ribaudo)
- babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #16326 Reduce the use of class names (@ liuxingbaoyu)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.0 - 2024-02-28
v7.24.0 (2024-02-28)

Thanks @ ajihyf for your first PR!

Release post with summary and highlights: https://babeljs.io/7.24.0

🚀 New Feature
- babel-standalone
  - #11696 Export babel tooling packages in @ babel/standalone (@ ajihyf)
- babel-core, babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-class-properties
  - #16267 Implement noUninitializedPrivateFieldAccess assumption (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-decorators, babel-plugin-transform-class-properties, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16242 Support decorator 2023-11 normative updates (@ JLHwung)
- babel-preset-flow
  - #16309 [babel 7] Allow setting ignoreExtensions in Flow preset (@ nicolo-ribaudo)
  - #16284 Add experimental_useHermesParser option in preset-flow (@ liuxingbaoyu)
- babel-helper-import-to-platform-api, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-standalone
  - #16172 Add transform support for JSON modules imports (@ nicolo-ribaudo)
- babel-plugin-transform-runtime
  - #16241 Add back moduleName option to @ babel/plugin-transform-runtime (@ nicolo-ribaudo)
- babel-parser, babel-types
  - #16277 Allow import attributes for TSImportType (@ sosukesuzuki)
🐛 Bug Fix
- babel-plugin-proposal-do-expressions, babel-traverse
  - #16305 fix: avoid popContext on unvisited node paths (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object
  - #16312 Fix class private properties when privateFieldsAsSymbols (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-transform-private-methods
  - #16307 Fix the support of arguments in private get/set method (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16281 Fix evaluation order of decorators with cached receiver (@ nicolo-ribaudo)
  - #16279 Fix decorator this memoization (@ JLHwung)
  - #16266 Preserve static on decorated private accessor (@ nicolo-ribaudo)
  - #16258 fix: handle decorated async private method and generator (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-preset-env
  - #16275 Fix class private properties when privateFieldsAsProperties (@ liuxingbaoyu)
- babel-helpers
  - #16268 Do not consider arguments in a helper as a global reference (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16270 Handle symbol key class elements decoration (@ JLHwung)
  - #16265 Do not define access.get for public setter decorators (@ nicolo-ribaudo)
💅 Polish
- babel-core, babel-helper-create-class-features-plugin, babel-preset-env
  - #12428 Suggest using BABEL_SHOW_CONFIG_FOR for config problems (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-transform-fixture-test-runner
  - #16278 Continue writing output.js when exec.js throws (@ liuxingbaoyu)
🔬 Output optimization
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16306 Avoid intermediate functions for private accessors with decs (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  - #16294 More aggressively inline decorators in the static block (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-transform-private-methods
  - #16283 Do not use classPrivateMethodGet (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helpers, babel-plugin-proposal-decorators
  - #16287 Reduce decorator static property size (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  - #16280 Reduce element decorator temp variables (@ JLHwung)
- babel-helper-create-class-features-plugin, babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-optional-chaining-assign, babel-plugin-transform-class-properties, babel-plugin-transform-class-static-block, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16261 Do not use descriptors for private class elements (@ nicolo-ribaudo)
- babel-helpers, babel-plugin-proposal-decorators
  - #16263 Reduce helper size for decorator 2023-11 (@ liuxingbaoyu)
Committers: 7
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- SUZUKI Sosuke (@ sosukesuzuki)
- Yarden Shoham (@ yardenshoham)
- @ liuxingbaoyu
- flyafly (@ ajihyf)
7.23.9 - 2024-01-25
7.23.8 - 2024-01-08
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.22.20 - 2023-09-16
7.22.15 - 2023-09-04
7.22.14 - 2023-08-30
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.2 - 2023-05-26
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.20.2 - 2022-11-04
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.16.11 - 2022-01-20
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.6 - 2021-09-09
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28
7.14.2 - 2021-05-12
7.14.1 - 2021-05-04
7.14.0 - 2021-04-29
7.13.15 - 2021-04-08
7.13.12 - 2021-03-22
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.5 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.2 - 2020-01-12
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.6 - 2019-12-07
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.1 - 2019-11-05
7.7.0 - 2019-11-05
7.6.3 - 2019-10-08
7.6.2 - 2019-09-23
7.6.0 - 2019-09-06
7.5.5 - 2019-07-17
7.5.4 - 2019-07-09
7.5.3 - 2019-07-09
7.5.2 - 2019-07-08
7.5.0 - 2019-07-04

from @babel/preset-env GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @babel/preset-env from 7.5.0 to 7.24.5. See this package in npm: @babel/preset-env See this project in Snyk: https://app.snyk.io/org/mdfkbtc/project/a2088718-36c2-4867-a45b-42143012aac0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.5 #1727

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.5 #1727

mdfkbtc commented Jun 13, 2024

v7.24.5 (2024-04-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v7.24.4 (2024-04-03)

👓 Spec Compliance

🐛 Bug Fix

Committers: 7

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.5 #1727

Are you sure you want to change the base?

[Snyk] Upgrade @babel/preset-env from 7.5.0 to 7.24.5 #1727

Conversation

mdfkbtc commented Jun 13, 2024

Snyk has created this PR to upgrade @babel/preset-env from 7.5.0 to 7.24.5.

Issues fixed by the recommended upgrade:

v7.24.5 (2024-04-29)

🐛 Bug Fix

💅 Polish

🏠 Internal

🏃‍♀️ Performance

Committers: 6

v7.24.4 (2024-04-03)

👓 Spec Compliance

🐛 Bug Fix

Committers: 7

v7.24.3 (2024-03-20)

🐛 Bug Fix

Committers: 2

v7.24.1 (2024-03-19)

🐛 Bug Fix

📝 Documentation

🏠 Internal

🔬 Output optimization

Committers: 4

v7.24.0 (2024-02-28)

🚀 New Feature

🐛 Bug Fix

💅 Polish

🏠 Internal

🔬 Output optimization

Committers: 7