chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/compat-data	^7.16.0 -> ^7.18.5
@babel/core (source)	^7.16.0 -> ^7.18.5
@babel/helper-compilation-targets	^7.16.0 -> ^7.18.2
@babel/helper-module-imports (source)	^7.16.0 -> ^7.16.7
@babel/plugin-proposal-class-properties (source)	^7.16.0 -> ^7.17.12
@babel/plugin-proposal-decorators (source)	^7.16.0 -> ^7.18.2
@babel/plugin-proposal-nullish-coalescing-operator (source)	^7.16.0 -> ^7.17.12
@babel/plugin-proposal-optional-chaining (source)	^7.16.0 -> ^7.17.12
@babel/plugin-proposal-private-methods (source)	^7.16.0 -> ^7.17.12
@babel/plugin-transform-runtime (source)	^7.16.0 -> ^7.18.5
@babel/preset-env (source)	^7.16.0 -> ^7.18.2
@babel/runtime (source)	^7.16.0 -> ^7.18.3
@ls-lint/ls-lint	^1.10.0 -> ^1.11.2
@nuxt/opencollective	^0.3.2 -> ^0.3.3
@rollup/plugin-alias	^3.1.8 -> ^3.1.9
@rollup/plugin-commonjs	^21.0.1 -> ^21.1.0
@rollup/plugin-node-resolve	^13.0.6 -> ^13.3.0
@rollup/plugin-replace	^3.0.0 -> ^3.1.0
@types/babel__core	7.1.16 -> 7.1.19
@types/html-minifier	4.0.1 -> 4.0.2
@types/node	14.17.32 -> 14.18.21
@types/optimize-css-assets-webpack-plugin	5.0.4 -> 5.0.5
@types/pug	2.0.5 -> 2.0.6
@types/sass-loader	8.0.2 -> 8.0.3
@types/webpack	4.41.31 -> 4.41.32
@types/webpack-hot-middleware	2.25.5 -> 2.25.6
@vue/server-test-utils	^1.2.1 -> ^1.3.0
@vue/test-utils	^1.2.2 -> ^1.3.0
babel-loader	^8.2.3 -> ^8.2.5
caniuse-lite	^1.0.30001275 -> ^1.0.30001358
chokidar	^3.5.2 -> ^3.5.3
chrome-launcher	^0.14.2 -> ^0.15.1
core-js-compat	^3.19.1 -> ^3.23.2
defu	^5.0.0 -> ^5.0.1
destr	^1.1.0 -> ^1.1.1
esbuild	^0.13.12 -> ^0.14.47
express (source)	^4.17.1 -> ^4.18.1
finalhandler	^1.1.2 -> ^1.2.0
fs-extra	^10.0.0 -> ^10.1.0
glob	^7.2.0 -> ^7.2.3
got	^11.8.2 -> ^11.8.5
ignore	^5.1.9 -> ^5.2.0
ip	^1.1.5 -> ^1.1.8
jiti	^1.12.9 -> ^1.14.0
jsdom	^18.0.1 -> ^18.1.1
launch-editor-middleware	^2.2.1 -> ^2.4.0
minimist	^1.2.5 -> ^1.2.6
node-fetch	^2.6.6 -> ^2.6.7
node-html-parser	^5.1.0 -> ^5.3.3
postcss-preset-env	^6.7.0 -> ^6.7.1
rc9	^1.2.0 -> ^1.2.2
rollup (source)	2.59.0 -> 2.75.7
rollup-plugin-esbuild	^4.6.0 -> ^4.9.1
rollup-plugin-license	^2.6.0 -> ^2.8.1
sass	^1.43.4 -> ^1.53.0
semver	^7.3.5 -> ^7.3.7
serve-static	^1.14.1 -> ^1.15.0
signal-exit	^3.0.5 -> ^3.0.7
sort-package-json	^1.52.0 -> ^1.57.0
std-env	^3.0.1 -> ^3.1.1
style-resources-loader	^1.4.1 -> ^1.5.0
typescript (source)	~4.4 -> ~4.7
ufo	^0.7.9 -> ^0.8.4
vue-router	^3.5.3 -> ^3.5.4
watchpack	^2.2.0 -> ^2.4.0
webpack-dev-middleware	^5.2.1 -> ^5.3.3

---

Release Notes

babel/babel

v7.18.5

Compare Source

🐛 Bug Fix

• babel-plugin-transform-new-target
  • #​14611 fix: new.target with shadowed class name (@​liuxingbaoyu)
• babel-plugin-transform-modules-systemjs
  • #​14655 Fix named destructuring exports (@​underfin)

📝 Documentation

• #​14332 docs: eslint-parser requireConfigFile behaviour (@​JLHwung)
• #​14619 Move v7 prereleases changelog to a separate file (@​nicolo-ribaudo)

🏠 Internal

• babel-traverse
  • #​14649 Rely on the call stack to clean up cache in _guessExecutionStatusRelativeTo (@​nicolo-ribaudo)
• babel-core
  • #​14641 Change limit of source map 3MB (@​vasicvuk)
• Other
  • #​14627 Speedup e2e test on github (@​liuxingbaoyu)
  • #​14248 chore: automate compat-data update (@​tony-go)
• babel-parser
  • #​14592 feat: Automatically generate test results that do not exist (@​liuxingbaoyu)

🏃‍♀️ Performance

• babel-traverse
  • #​14617 Fix _guessExecutionStatusRelativeToDifferentFunctions perf (@​liuxingbaoyu)

v7.17.10

Compare Source

🐛 Bug Fix

• babel-cli, babel-core, babel-generator, babel-helper-transform-fixture-test-runner
  • #​14479 [cli] Avoid SourceMapGenerator for simple map concatenation (@​jridgewell)

💅 Polish

• babel-cli, babel-core, babel-generator, babel-helper-fixtures, babel-helper-transform-fixture-test-runner
  • #​14506 Do not add sourcemap markings for indentation (@​jridgewell)
• babel-plugin-proposal-pipeline-operator, babel-traverse
  • #​14424 Update detection of pure nodes (Scope#isPure) (@​JLHwung)

🏠 Internal

• babel-core
  • #​14493 Remove git.io shortlinks from repo (@​Andoryuuta)
• Other
  • #​14462 fix: build standalone on windows (@​liuxingbaoyu)

🏃‍♀️ Performance

• babel-cli, babel-core, babel-generator
  • #​14497 Switch to @jridgewell/gen-mapping for sourcemap generation (@​jridgewell)

v7.17.7

Compare Source

👓 Spec Compliance

• babel-generator, babel-parser
  • #​14135 [tsx] raise error on single arrow type argument without comma (@​ozanhonamlioglu)

🐛 Bug Fix

• babel-helper-compilation-targets
  • #​14294 Avoid resolveTargets call if browsers is an empty array (@​dev-itsheng)
• babel-helper-module-transforms, babel-helper-simple-access, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-umd
  • #​14341 Fix update expression for exported bigints (@​magic-akari)
• babel-parser
  • #​14344 Allow variable and function with the same name in static blocks (@​Yokubjon-J)
  • #​14327 Remove length restriction from JSX entities, and ignore Object.prototype (@​nicolo-ribaudo)
  • #​14293 fix(ts): skip func-type param start on parsing (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators
  • #​14335 Fix static/proto initializers when there aren't class fields (@​JLHwung)
  • #​14334 fix: push newClass only when class is decorated (@​JLHwung)
• babel-generator
  • #​14309 Fix import type/typeof printing with no specifiers (@​The-x-Theorist)
• babel-helper-module-transforms, babel-plugin-transform-modules-commonjs
  • #​14313 Fix duplicate exports initialization with many exports (@​nicolo-ribaudo)
• babel-helper-member-expression-to-functions, babel-plugin-proposal-class-properties, babel-plugin-proposal-private-methods, babel-plugin-transform-classes, babel-plugin-transform-object-super
  • #​14311 fix: support bigints in update expressions for private fields (@​magic-akari)
• babel-register
  • #​14303 Fix babel register cache invalidation (@​cha0s)

💅 Polish

• babel-parser
  • #​14338 Report single error for invalid num seps in unicode escapes (@​nicolo-ribaudo)

🏠 Internal

• babel-generator, babel-parser
  • #​14320 Type-safe ParseErrors (@​tolmasky)
• babel-plugin-transform-destructuring
  • #​14236 Improve transform-destructuring typings (@​JLHwung)
• Other
  • #​14180 Convert ESLint plugins to CommonJS (@​nicolo-ribaudo)

v7.17.0

Compare Source

🚀 New Feature

• babel-cli, babel-core
  • #​14065 Allow plugins/presets to indicate external dependencies (@​nicolo-ribaudo)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov-commenter]

Codecov Report

Merging #10013 (ade2512) into dev (97983b7) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##              dev   #10013   +/-   ##
=======================================
  Coverage   65.15%   65.15%           
=======================================
  Files          94       94           
  Lines        4155     4155           
  Branches     1172     1172           
=======================================
  Hits         2707     2707           
  Misses       1169     1169           
  Partials      279      279           

Flag	Coverage Δ
unittests	65.15% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 97983b7...ade2512. Read the comment docs.

[gustawdaniel]

This is a long dependencies chain, but in @nuxt/webpack we require webpck@^4.46.0 instead 5, which requires postcss-url@8.0.0 instead 10,of that requires mkdirp@0.5.5 instead 1.0.4 that require minimist@1.2.5 instead of being free of this vulnerable dependency.

[pi0]

instead of being free of this vulnerable dependency.

And ironically that deep dependency is not even vulnerable for Nuxt 2 users as only used for build :D