[Snyk] Upgrade: @babel/generator, @babel/plugin-proposal-class-properties, @babel/plugin-proposal-object-rest-spread, @babel/preset-env, @babel/preset-react #9

snyk-bot · 2022-01-19T05:05:39Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on
@babel/generator from 7.7.2 to 7.16.5	46 versions ahead of your current version	a month ago on 2021-12-13
@babel/plugin-proposal-class-properties from 7.7.0 to 7.16.5	11 versions ahead of your current version	a month ago on 2021-12-13
@babel/plugin-proposal-object-rest-spread from 7.6.2 to 7.16.5	23 versions ahead of your current version	a month ago on 2021-12-13
@babel/preset-env from 7.7.1 to 7.16.5	50 versions ahead of your current version	a month ago on 2021-12-13
@babel/preset-react from 7.7.0 to 7.16.5	18 versions ahead of your current version	a month ago on 2021-12-13

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @babel/generator

7.16.5 - 2021-12-13
v7.16.5 (2021-12-13)

Thanks @ chimurai and @ krosenberg for your first PRs!

👓 Spec Compliance
- babel-cli, babel-core, babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-proposal-decorators, babel-plugin-transform-classes, babel-plugin-transform-jscript, babel-plugin-transform-parameters, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  - #12115 Mark class prototype as read-only (@ wentout)
🐛 Bug Fix
- babel-plugin-transform-parameters
  - #14032 Fix: default rest argument array elements as undefined (@ The-x-Theorist)
- babel-plugin-transform-arrow-functions, babel-traverse
  - #14036 Don't resolve shadowed arguments variables from functions (@ The-x-Theorist)
- babel-parser
  - #14039 maintain estree string literal shape when cloned (@ JLHwung)
- babel-traverse
  - #14016 Fix duplicate declaration error on ambient class declarations (@ The-x-Theorist)
- babel-generator
  - #14014 Support flow function type annotation with no parent (@ krosenberg)
- babel-plugin-transform-react-jsx
  - #14012 Fix JSX pragma anywhere in comment (@ The-x-Theorist)
- babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-replace-supers, babel-plugin-transform-classes, babel-traverse
  - #14005 Fix handling of this&co in computed keys in arrows transform (@ nicolo-ribaudo)
💅 Polish
- babel-parser
  - #13968 Recover from shorthand assign exprs (@ JLHwung)
  - #13975 fix: update UnexpectedPrivateField error message (@ JLHwung)
📝 Documentation
- Many packages
  - #14006 Regenerate monorepo READMEs (@ nicolo-ribaudo)
🏠 Internal
- Every package
  - #13966 Run tests in a native Node.js ESM environment (@ nicolo-ribaudo)
- babel-parser
  - #13982 Extend hasPlugin to accept plugin-configuration array pairs (@ js-choi)
- babel-helpers
  - #13996 Don't use ESM for required files in @ babel/helpers tests (@ nicolo-ribaudo)
- babel-plugin-proposal-object-rest-spread, babel-traverse
  - #13948 Convert proposal-object-rest-spread to TS (@ JLHwung)
- babel-parser, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-optional-chaining, babel-preset-react, babel-preset-typescript
  - #13978 Only bundle the release build, and don't import src in tests (@ nicolo-ribaudo)
- Other
  - #13976 Fail CI when @ babel/runtime ESM tests fail (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-parser
  - #13919 Improve template tokenizing (@ JLHwung)
🔬 Output optimization
- babel-helpers, babel-plugin-proposal-async-generator-functions, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime
  - #13837 minify helpers-generated.ts (@ lightmare)
Committers: 10
- Babel Bot (@ babel-bot)
- Bogdan Savluk (@ zxbodya)
- Huáng Jùnliàng (@ JLHwung)
- J. S. Choi (@ js-choi)
- Kyle Rosenberg (@ krosenberg)
- Mickey Rose (@ lightmare)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sneh Khatri (@ The-x-Theorist)
- @ chimurai
- wentout (@ wentout)
7.16.0 - 2021-10-29
v7.16.0 (2021-10-30)

👓 Spec Compliance
- babel-helpers, babel-plugin-proposal-async-generator-functions, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #13824 Await promises from sync iterators with for-await (@ nicolo-ribaudo)
🚀 New Feature
- babel-generator, babel-parser, babel-plugin-transform-typescript, babel-types
  - #13802 Support TypeScript 4.5 type-only import/export specifiers (@ sosukesuzuki)
- babel-parser
  - #13887 feat: support startColumn option (@ JLHwung)
- babel-helper-fixtures, babel-helper-transform-fixture-test-runner, babel-parser, babel-plugin-syntax-typescript, babel-preset-typescript
  - #13838 Handle .mts and .cts files in @ babel/preset-typescript (@ nicolo-ribaudo)
- Other
  - #13782 Add ESLint 8 support to @ babel/eslint-parser (@ nicolo-ribaudo)
- babel-generator, babel-parser, babel-plugin-proposal-pipeline-operator, babel-plugin-syntax-pipeline-operator
  - #13749 Caret topic (pipe operator) (@ js-choi)
- babel-compat-data, babel-generator, babel-parser, babel-preset-env, babel-types
  - #13713 Enable class static blocks by default (@ sosukesuzuki)
- babel-helper-skip-transparent-expression-wrappers, babel-plugin-proposal-optional-chaining
  - #13687 add skipTransparentExprWrapperNodes helper (@ lightmare)
- babel-traverse, babel-types
  - #13666 Add aliases for Standardized, TypeScript, and Flow (@ jridgewell)
🐛 Bug Fix
- babel-parser, babel-plugin-transform-typescript
  - #13876 [ts] Support private methods overloads (@ nicolo-ribaudo)
- babel-plugin-transform-typescript
  - #13865 fix: allow enum member without initializer after non-literal member (@ lightmare)
- babel-core, babel-helper-create-class-features-plugin, babel-plugin-transform-typescript
  - #13854 Don't transform declare class in plugin-proposal-class-properties (@ forivall)
- babel-compat-data, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-transform-react-constant-elements, babel-preset-env, babel-traverse
  - #13842 Implement @ babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression (@ JLHwung)
- babel-plugin-proposal-async-generator-functions, babel-traverse
  - #13813 Restore traversal context after enter / traverse (@ JLHwung)
- babel-traverse, babel-types
  - #13832 Mark static block as FunctionParent (@ JLHwung)
- babel-generator
  - #13825 Fix missing inner comments in function expressions (@ overlookmotel)
🏠 Internal
- Every package
  - #13772 Use workspace:^ to specify @ babel/ dependencies (@ nicolo-ribaudo)
- Other
  - #13856 Update to Yarn 3.1 (@ nicolo-ribaudo)
  - #13867 Test on Node.js 17 (@ nicolo-ribaudo)
- babel-helper-fixtures, babel-plugin-proposal-class-properties, babel-plugin-transform-runtime, babel-preset-react
  - #13858 Force loading plugins/presets from the monorepo in tests (@ nicolo-ribaudo)
- babel-types
  - #13844 [ts] precise return type on createTypeAnnotationBasedOnTypeof (babel-types) (@ lightmare)
- babel-helpers
  - #13841 minor: remove ineffectual helper names filter (@ lightmare)
- babel-core, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx, babel-types
  - #13820 Improve transform-react-jsx typings (@ JLHwung)
🏃‍♀️ Performance
- babel-types
  - #13843 Simplify (transpiled) babel-types builder wrappers (@ lightmare)
Committers: 9
- Babel Bot (@ babel-bot)
- Emily Marigold Klassen (@ forivall)
- Huáng Jùnliàng (@ JLHwung)
- J. S. Choi (@ js-choi)
- Justin Ridgewell (@ jridgewell)
- Mickey Rose (@ lightmare)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sosuke Suzuki (@ sosukesuzuki)
- @ overlookmotel
7.15.8 - 2021-10-06
Read more
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17
7.14.2 - 2021-05-12
7.14.1 - 2021-05-04
7.14.0 - 2021-04-29
7.13.16 - 2021-04-20
7.13.9 - 2021-03-01
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.15 - 2021-02-04
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.6 - 2020-09-03
7.11.5 - 2020-08-31
7.11.4 - 2020-08-20
7.11.0 - 2020-07-30
7.10.5 - 2020-07-14
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.4 - 2020-03-24
7.9.3 - 2020-03-22
7.9.0 - 2020-03-20
7.8.8 - 2020-03-12
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.4 - 2019-11-22
7.7.2 - 2019-11-06

from @babel/generator GitHub release notes

Package name: @babel/plugin-proposal-class-properties

7.16.5 - 2021-12-13
Read more
7.16.0 - 2021-10-29
Read more
7.14.5 - 2021-06-09
7.13.0 - 2021-02-22
7.12.13 - 2021-02-03
7.12.1 - 2020-10-15
7.10.4 - 2020-06-30
7.10.1 - 2020-05-27
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.4 - 2019-11-22
7.7.0 - 2019-11-05

from @babel/plugin-proposal-class-properties GitHub release notes

Package name: @babel/plugin-proposal-object-rest-spread

7.16.5 - 2021-12-13
Read more
7.16.0 - 2021-10-29
Read more
7.15.6 - 2021-09-09
Read more
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28
7.14.2 - 2021-05-12
7.13.8 - 2021-02-26
7.13.0 - 2021-02-22
7.12.13 - 2021-02-03
7.12.1 - 2020-10-15
7.11.0 - 2020-07-30
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.4 - 2019-11-22
7.6.2 - 2019-09-23

from @babel/plugin-proposal-object-rest-spread GitHub release notes

Package name: @babel/preset-env

7.16.5 - 2021-12-13
Read more
7.16.4 - 2021-11-16
v7.16.4 (2021-11-16)

👓 Spec Compliance
- babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  - #13961 Wait the correct number of ticks on nested await (@ nicolo-ribaudo)
- babel-parser
  - #13929 Refactor bindingProperty parsing (@ JLHwung)
🐛 Bug Fix
- babel-parser
  - #13957 Add assertions to ExportNamedDeclaration without from (@ sosukesuzuki)
  - #13951 Throw on duplicate __proto__ props followed by assignment (@ The-x-Theorist)
- babel-plugin-proposal-async-generator-functions, babel-plugin-proposal-decorators, babel-plugin-transform-runtime, babel-preset-env
  - #12827 Add file extension when using absoluteRuntime (@ mbehzad)
💅 Polish
- babel-parser
  - #13960 Always expose expressionValue in DirectiveLiteral nodes (@ tolmasky)
Committers: 7
- Babel Bot (@ babel-bot)
- Francisco Ryan Tolmasky I (@ tolmasky)
- Huáng Jùnliàng (@ JLHwung)
- M Behzad (@ mbehzad)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- Sneh Khatri (@ The-x-Theorist)
- Sosuke Suzuki (@ sosukesuzuki)
7.16.0 - 2021-10-29
Read more
7.15.8 - 2021-10-06
Read more
7.15.6 - 2021-09-09
Read more
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28
7.14.2 - 2021-05-12
7.14.1 - 2021-05-04
7.14.0 - 2021-04-29
7.13.15 - 2021-04-08
7.13.12 - 2021-03-22
7.13.10 - 2021-03-08
7.13.9 - 2021-03-01
7.13.8 - 2021-02-26
7.13.5 - 2021-02-23
7.13.0 - 2021-02-22
7.12.17 - 2021-02-18
7.12.16 - 2021-02-11
7.12.13 - 2021-02-03
7.12.11 - 2020-12-15
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.1 - 2020-10-15
7.12.0 - 2020-10-14
7.11.5 - 2020-08-31
7.11.0 - 2020-07-30
7.10.4 - 2020-06-30
7.10.3 - 2020-06-19
7.10.2 - 2020-05-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.6 - 2020-04-29
7.9.5 - 2020-04-07
7.9.0 - 2020-03-20
7.8.7 - 2020-03-05
7.8.6 - 2020-02-27
7.8.4 - 2020-01-30
7.8.3 - 2020-01-13
7.8.2 - 2020-01-12
7.8.0 - 2020-01-12
7.7.7 - 2019-12-19
7.7.6 - 2019-12-07
7.7.5 - 2019-12-06
7.7.4 - 2019-11-22
7.7.1 - 2019-11-05

from @babel/preset-env GitHub release notes

Package name: @babel/preset-react

7.16.5 - 2021-12-13
Read more
7.16.0 - 2021-10-29
Read more
7.14.5 - 2021-06-09
7.13.13 - 2021-03-26
7.12.13 - 2021-02-03
7.12.10 - 2020-12-09
7.12.7 - 2020-11-20
7.12.5 - 2020-11-03
7.12.1 - 2020-10-15
7.10.4 - 2020-06-30
7.10.1 - 2020-05-27
7.10.0 - 2020-05-26
7.9.4 - 2020-03-24
7.9.1 - 2020-03-20
7.9.0 - 2020-03-20
7.8.3 - 2020-01-13
7.8.0 - 2020-01-12
7.7.4 - 2019-11-22
7.7.0 - 2019-11-05

from @babel/preset-react GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/generator from 7.7.2 to 7.16.5. See this package in npm: https://www.npmjs.com/package/@babel/generator - @babel/plugin-proposal-class-properties from 7.7.0 to 7.16.5. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-class-properties - @babel/plugin-proposal-object-rest-spread from 7.6.2 to 7.16.5. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-object-rest-spread - @babel/preset-env from 7.7.1 to 7.16.5. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - @babel/preset-react from 7.7.0 to 7.16.5. See this package in npm: https://www.npmjs.com/package/@babel/preset-react See this project in Snyk: https://app.snyk.io/org/knuthartmark/project/2fdde9fc-47ab-4eaa-a0e7-aaa5c6c16ea5?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: @babel/generator, @babel/plugin-proposal-class-properties, @babel/plugin-proposal-object-rest-spread, @babel/preset-env, @babel/preset-react #9

[Snyk] Upgrade: @babel/generator, @babel/plugin-proposal-class-properties, @babel/plugin-proposal-object-rest-spread, @babel/preset-env, @babel/preset-react #9

snyk-bot commented Jan 19, 2022

v7.16.5 (2021-12-13)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 10

v7.16.0 (2021-10-30)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 9

v7.16.4 (2021-11-16)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 7

[Snyk] Upgrade: @babel/generator, @babel/plugin-proposal-class-properties, @babel/plugin-proposal-object-rest-spread, @babel/preset-env, @babel/preset-react #9

Are you sure you want to change the base?

[Snyk] Upgrade: @babel/generator, @babel/plugin-proposal-class-properties, @babel/plugin-proposal-object-rest-spread, @babel/preset-env, @babel/preset-react #9

Conversation

snyk-bot commented Jan 19, 2022

Snyk has created this PR to upgrade multiple dependencies.

v7.16.5 (2021-12-13)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

📝 Documentation

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 10

v7.16.0 (2021-10-30)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

Committers: 9

v7.16.4 (2021-11-16)

👓 Spec Compliance

🐛 Bug Fix

💅 Polish

Committers: 7